last executing test programs: 21.589784711s ago: executing program 1 (id=1847): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x5, 0x2a40}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe"], 0x3e) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x100}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0xff01, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x207) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) 21.268791135s ago: executing program 1 (id=1858): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000007, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='@&\'&::\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x4}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000007, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='@&\'&::\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x2, 0x1ff, 0x4}) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) (async) 21.142651328s ago: executing program 1 (id=1863): mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, 0x0, 0x2000008, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x2}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x1000, 0x2, 0x1c}, @fda={0x66646185, 0x2, 0x0, 0x1c}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}], 0x69, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) 21.066597368s ago: executing program 1 (id=1866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x22822400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffed4, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 21.001981979s ago: executing program 1 (id=1867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008aec1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1900, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x247, 0x0, 0x7}]}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000b80)={'\x00', 0x8411}) (async) ioctl$TUNSETOFFLOAD(r11, 0x400454c9, 0x9) (async) ioctl$TUNATTACHFILTER(r11, 0x400454cc, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 20.845876782s ago: executing program 1 (id=1869): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f0000000740)={0xf}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x28a, 0x0, 0x3}]}) (async) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x28a, 0x0, 0x3}]}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 9.140987961s ago: executing program 0 (id=1897): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 9.136612541s ago: executing program 2 (id=1898): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141680, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141680, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x6e0}]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x1, 0xeeee8000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) write$selinux_user(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r6, &(0x7f0000000340)=""/72, 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r8, 0x40045568, 0x1c) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, &(0x7f0000000500)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r11, 0x80605414, &(0x7f0000000500)) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000480)={"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"}) (async) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000480)={"b2d0154aed3b04cbcd01519f1d4dff66c22c7dfb2e92d07c525b3d148f1411a9cd646324ee78851f9ac19a63af963acae6f4f05afd33a80f2927132eff73afdf6abbcccb8884a179e6a3212efa115d51e9bce4b1acb5937169fc876b67e945c0bf1ac71d81e0ba7c26e65d9ecae673a54d71bd5cf919e04ebd7638f20921f2021f9b3d694f8256127bef079b941afc03870b2bc3101402b700a0dbe2f122c615d5f9df24f1ae694cdb4b59c9aa17fb4b6e1ed380ef110f95bb21eb86cee7af52f0cc97f0f9cd42c16fe2870ff41a18a134a83edcad294c47839500bf31f05839cbd5252a4033e2ff4ddcb061a12362e4a9d6e4b62839d41e083106f23e9a10909cc4d9801443383a103fcb5929692ce940ab201e01a663a437c4408da6036e5720c9b50fb44c7864252a5fec3b743241f14855890bf5dc95dcd044bece5b027073deaadf5817e8bac72c3b002c3ab2e3244661bf7d2f780983ced43f9d16729284eced0ae077a77cad74503ec95ced7256474a4a1b2cf759cbcc6738576c32bbf5fa39fe6f562a28a216582fe2e3ecd4a0371900ea627df02220d58c92d6b3cf1d269eb232171b7af4a488ac33cef8d5aafc07965a2e726de067f5cf634212af872b5564e7c5b894c026474e59e4e6a244d6f48feaee74893ed4533c3c78572948d908383a742e4b65450e02a17fb40de651396a436b5b18001229be3c3cf456429a63dfeffcd45f6e8027d3921a9816079b5a2a78abe6e08af88da16b16104454ce4f46c5f21f3aa793b805e890b769ec314dc724f6788012aa560c4083bc392a9377dd244f10f6c3b1ce27499d98a8d3d0b2630ca81be53d04bdc9a0e6d364b43a914ffa81fb450ad46df28d9c7d34be01e81b9cb1f4f9d7ea88df52db06bad6ba6c39c2a04b911a652f17cf923618b0e65436321866544fb64558a291c2568f6d03a2858bdb6393434ed09eef289c8b02d74a67c58884767c10ef95798fb8f07219887614ab99533d05bfb6d6e85f2044874f7dc713760bf81951704ce7053e813f43114101f079466fe857387bde34739d184c3d2c2eec4027002468948907c6762a19adb8376359dcd4d538886375161a53f0fe928f805a07f6bb426d88e39f8b54f7ba6d56c2110782bc84b845ec93aafc701139a2d0a853eaf640ca833f125b8efa06f6c65cc20bf730a367660f0f49a017f96d1828caa40dc2592e346cac51c6a644e32b24095ee633cdcf1410d45992f55d2632094b6114f5fbf39dfe74119c671515192437d7c454851cf7032c43772e9f3628625f23fd72d102aaf75bc6ac4e1ad22d808bb671925575e79df12c81d2fd955e326783ebe61081ad89790cb8c20f4135f8c6bad94c83ebe6ff3abc35b46e6d7665ba765d2ce892de5a5a42f6a6a8f0b58d6328fb345c20873d588229a68e3123104fd202bf0a0899"}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000200000001000000000000000b000000070000b29ba2"]) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES32=r12]) (async) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES32=r12]) 9.125434301s ago: executing program 3 (id=1899): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000020c0)={0x50, 0x0, r2, {0x7, 0x2b, 0x1, 0x42000, 0x3, 0x3, 0x2, 0x41e41697, 0x0, 0x0, 0x20, 0x6}}, 0x50) ioctl$BLKRRPART(r0, 0x125f, 0x0) 7.457921396s ago: executing program 0 (id=1900): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f00000002c0)=@other={'decodes', ' ', 'io'}, 0xb) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) 7.457712336s ago: executing program 2 (id=1901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000540)=[@dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x26, 0x700000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000380)=[@increfs_done, @register_looper, @release], 0x0, 0x0, 0x0}) 7.457495896s ago: executing program 3 (id=1902): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKROSET(r2, 0x125d, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0xdddd1000, 0x58, &(0x7f00000003c0)=""/88}, {0x2000, 0x8a, &(0x7f0000000840)=""/138}]}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001540), 0x40900, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 5.784220012s ago: executing program 0 (id=1903): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x66, 0x1, [0x2, 0xffffffff, 0x9, 0x2, 0x5a], [0x5, 0x8, 0x200, 0x7, 0x0, 0xffffffff, 0x10001, 0x0, 0x10001, 0x100000001, 0x80000000, 0xfffffffffffffff7, 0x3, 0x7fffffff, 0x8, 0x4, 0x4, 0x4, 0x7ff, 0x5, 0x4, 0x1ff, 0x1, 0x0, 0xfffffffffffffff7, 0x2, 0xd80, 0xc205, 0xd98, 0x2, 0x803, 0x6, 0x3, 0x8000000000000001, 0x7fff, 0xf, 0x9, 0x4, 0x6, 0x0, 0x4, 0x1, 0x8000000000000001, 0x81, 0x0, 0x27a, 0x8, 0x35b7aea6, 0x70b, 0x8312, 0x7fff, 0xc50, 0x10000, 0x6, 0x1, 0x68e8, 0x8, 0x6, 0x9, 0x0, 0x4, 0x3, 0xd, 0x86d5, 0x742, 0x8, 0x9, 0x100000000, 0xdc0, 0x5, 0x7ff, 0x10, 0x80, 0x6, 0x4, 0x7, 0x4, 0x4, 0x100000000, 0x5, 0x82, 0x7, 0x4, 0x10000000, 0x8000, 0xfffffffffffffff9, 0x0, 0x4db2, 0x5, 0xa, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7f, 0x0, 0x9, 0xb6, 0x0, 0xe, 0xff, 0x1, 0x8, 0x8, 0x4, 0x1, 0x6, 0x5, 0x7, 0x2, 0x8, 0x1, 0x3, 0x100000001, 0x6, 0x1, 0x7, 0x9, 0x33, 0xc]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000004c0)={r2, 0x3, 0x0, [0x2, 0x9, 0x3, 0xffffffff00000001, 0x400], [0x1, 0x5c2f, 0x5, 0x80000001, 0x8715, 0xa057, 0x7, 0x7, 0x5, 0x1, 0x92f, 0x5, 0x7, 0x200, 0xf, 0x4000000000, 0x0, 0x3, 0x4d00000000, 0xc0c0, 0x1, 0x7, 0x4, 0x3, 0x80, 0x3, 0x2, 0xfffffffffffffffe, 0x2, 0x4374, 0x9, 0x6, 0x100000001, 0x0, 0x1, 0x8000, 0x100000001, 0x9, 0x2, 0x10, 0xaaf3, 0x5, 0xffffffffffffffff, 0x5, 0xfff, 0x4, 0x40, 0x80000001, 0x618, 0x4, 0x4, 0x7, 0x1ff, 0xffffffffffffffff, 0x3, 0x2, 0x200, 0x0, 0x40, 0x4, 0x8000000000000001, 0x40, 0x9, 0xe622, 0x8, 0x1, 0x1000, 0x5, 0x6, 0x8, 0x4, 0x8ec, 0x1, 0x6, 0x2, 0x4, 0x7, 0x8, 0x40, 0x74a3, 0x1000, 0x6459, 0x5, 0x0, 0x4, 0x7fffffff, 0x3, 0x2, 0x7, 0x50000, 0x4, 0xefc, 0x1, 0xffffffffffffffff, 0x8001, 0x7, 0x7, 0x1, 0x7ff, 0x0, 0x5, 0x4, 0x5, 0x200, 0x3, 0x6, 0xa, 0x9, 0x9, 0x3, 0xfdae, 0x2, 0x3, 0x5, 0x8001, 0x5, 0x8000000000000000, 0xe778, 0x3, 0xffffffffffffffff, 0x9]}) (async, rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000900)) (rerun: 64) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000940)={0xeeee8000, 0x110000}) (async) write$tcp_mem(r0, &(0x7f0000000980)={0x9, 0x20, 0x0, 0x20, 0x4}, 0x48) (async, rerun: 64) write(r0, &(0x7f0000000a00)="dabe4ca52297fc33055369799c577cfc2efcaaad63b7283982344f6e88081defb7b099efc24039ce3be0c0bcd377bde80a976389286fb92866e993f36cf8825fb7c871e1a012cd2e42b887137e9773aa08f240d70d98b1", 0x57) (rerun: 64) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000e80)={0x0, 0x1, 0x1, 0x18, 0x132, &(0x7f0000000a80)="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"}) (async) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001000)={0x1, 0x3, 0x1000, 0xd0, &(0x7f0000000ec0)="3b521c4f3b883340c959ca25b9ef97c06914d1fea0df9d3d9ba57aa2637311d19edf06d113d6e924a863e0415227eb7ce980981fed74c4d20b94d033c425f62efbc6fa42cae5fa5c302e8a2fc58aaca8e1fb96b07411951ce16362b90be3b610fb4d736eea8b7cf25aee8de21df9cba3a1cd668fbe0ad6c466d8704fe3bbf114ac311171ec11bde9362ca19a5f0f730897329f8ea2c19a30deaaae089d5985b2c580ead51e1c904849551c0468eafdccfc832dabd7820ee24fe31a970ecbd96d3b1a0fb7d2fd812e1ebdabbe31fe4429", 0x2a, 0x0, &(0x7f0000000fc0)="2d8a6dc20696710789e06e4b3c7ab67fbe31e1d4715c944a639725224ab563d1c33293ad95c6f561d483"}) (async) write(r1, &(0x7f0000001080)="3c71b20e059b84fa28c6e01adc03e019665d2ac3b27ce79801c2e172869eeac3f63e5617edd5450c35215c994a49161de5b171dac278fc0d2ec4c008885b4083109c271e02ac9976f4d590baecf9ff1a61ed5fbcf4b4d9", 0x57) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000001100)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000001340)=r3) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000001380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000015c0)={[0x3338, 0x3ff, 0x6, 0x4, 0xfffffffffffffff8, 0x5c3, 0x4, 0x10, 0x81, 0x4, 0x0, 0x0, 0x401, 0xe, 0x7, 0x1], 0x8080000, 0x2144d0}) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/82}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000001780)=0x1) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000017c0)={0x34, 0x6, 0x0, {0x1, 0x3, 0xb, 0x0, '}[{[{--%!\x8c:'}}, 0x34) (async) ioctl$TIOCCBRK(r1, 0x5428) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async, rerun: 64) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async, rerun: 64) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000001800)=0x1ff) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001840), 0x400000, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000001880)={0xfffffffffffffffd, 0x9}) write(r5, &(0x7f00000018c0)="156bb228f093a091943d9c624918fa7e096800d2dfd12cc58326225ca923c4a419666e6c79a12b231289f9847ba8e4576b61163b042cf30bf5766957f81220413222ed905fc2666005a1ea5e5757f83b", 0x50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000001940)={0x5, 0x9, 0x40, 0x6, 0x5}) 5.779576802s ago: executing program 2 (id=1904): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x26) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x30) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800007, 0x2010, r3, 0xba5b000) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800002, 0x10, r7, 0xedcb0000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='syz1\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000540)={0x2020}, 0x2020) 5.737945752s ago: executing program 3 (id=1905): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r0, &(0x7f0000001600)="d93f", 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001640)={0x2020}, 0x1f47) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT=0x0]) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x40, 0x6, 0xe}) 3.96500889s ago: executing program 0 (id=1906): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x290500, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/rcu_normal', 0x42, 0x164) read$FUSE(r2, &(0x7f0000000dc0)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x26, 0x0, 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01ecdb40ea00000085050000000000002d00000000000000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000d80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000d40)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x48c03, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r1, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f5f7521480ed9bb21e3aad8044a0229fe79b5ebce0ec53ff51b7bb71c7ef63354a141a1175a5d73838de92212b50415851acc8cffa6d14d4982b957e8021f5eb8afd1a57f8fd33be3a7829ac14e2d19e069c73f6ff392d38c0174e2891c6c0ae8df5338d8", 0x96) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 3.96060824s ago: executing program 2 (id=1907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r1) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r1, 0xff07, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x10000000000032}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0xffffffffffffff44, 0x0, 0x0}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000000068020000000000000500", @ANYRES32=r4, @ANYRESOCT]) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000100)={0x8001, 0x400, 0x40, &(0x7f0000000600)=[0x1000, 0x2, 0x15, 0x4, 0x80000000, 0x5, 0x101, 0xffffffff, 0x5, 0x8, 0x1, 0xa7e, 0x6, 0x7fff, 0x6, 0x2, 0xe317, 0xffffffff00000000, 0x10001, 0x4, 0x8, 0x3, 0x62, 0xd, 0x5, 0xffff000000000000, 0x6, 0x4, 0xa, 0x7, 0xa, 0x34d4, 0x3, 0x4, 0x18ba, 0x4d20, 0x100, 0xffffffffffa2f8f9, 0x7fffffff, 0x348e4674, 0x6, 0x800, 0x3c31, 0x1400000000000000, 0x7fffffffffffffff, 0x68, 0x0, 0x1, 0x1, 0x3155c00000, 0x5, 0x4, 0x401, 0x28, 0x2, 0x7ff, 0x20, 0x9, 0x3, 0x7fffffffffffffff, 0x6, 0x3ef, 0x4, 0xb137, 0xd1a, 0x2, 0x14, 0x7f, 0xf, 0x6, 0x8, 0xffffffff80000000, 0xe, 0x2000000, 0x101, 0x1, 0x0, 0x6618, 0x2, 0xfffffffffffffffd, 0x9, 0x28b1000000000000, 0xc2, 0x201, 0x1d06, 0x5820, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x5, 0x0, 0x1, 0x1666, 0xfcd0, 0x3, 0x8, 0x7fffffff, 0x4, 0x0, 0x7fffffff, 0x9, 0x6, 0x1000000000000000, 0x9e, 0x1000, 0x2, 0x1000, 0x7, 0x7fffffffffffffff, 0x7, 0x7, 0x9, 0x8, 0x0, 0x2, 0x1, 0x5, 0x9d, 0x3, 0x3ff, 0x5, 0x3ff, 0x2, 0x5, 0x165fdfbc, 0x6, 0xa69]}) 3.95992419s ago: executing program 3 (id=1908): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={0x2}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1.98198663s ago: executing program 0 (id=1909): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) 1.98019464s ago: executing program 2 (id=1910): ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000040)={0x371005887e298091, 0x3}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2011, &(0x7f0000000000/0x2000)=nil}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 1.96160273s ago: executing program 3 (id=1911): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x1000, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000100)) read$FUSE(r1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000005, 0x10010, r0, 0xf890000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r3) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x0, 'blkio'}]}, 0x7) 5.59102ms ago: executing program 0 (id=1912): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2"}, 0x2c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.06275ms ago: executing program 2 (id=1913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xd000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xdddd1000, 0x0, 0x0, 0x0, 0x6d, 0x7}, {0x5002, 0xd000, 0x0, 0x6, 0x4, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100004, 0x0, 0xf}, {0x0, 0xffff1000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x3000, 0xeeee8000, 0x0, 0xfe, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x9}, {0x100000, 0x0, 0x9, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x6000}, {0x1, 0xfffe}, 0x20040021, 0x0, 0x4000, 0x0, 0xfffffffffffffffc, 0x0, 0xeeef0000, [0x0, 0x0, 0x0, 0x3]}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1914): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f0000000040)) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000140)={&(0x7f00000000c0)=""/81, 0x51}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000240)={0x8, 0x5, {0x100000000, @struct={0x2, 0x5}, 0x0, 0x2, 0x6, 0x2078, 0x3, 0x8, 0x8, @struct={0xfffffffb, 0x769c}, 0xff07, 0x7, [0x4, 0xffff, 0x80000001, 0x7, 0x7ff, 0x5]}, {0x5, @struct={0x8001, 0x30}, 0x0, 0x8000, 0x0, 0xffff, 0xfffffffffffffffa, 0x5, 0xe0, @usage=0x3, 0x10001, 0x1407, [0x8, 0x0, 0x8, 0x1000, 0x6, 0x9]}, {0xc3a, @struct={0x7f, 0x6}, 0x0, 0x1, 0x1, 0x4, 0x1, 0xa4000000000000, 0xc, @usage, 0x80000000, 0x8, [0x101, 0x2f, 0x3, 0x40, 0x81, 0x1]}, {0x6, 0x5, 0x8}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000640)={r3, 0x5, 0x8000000000000001, 0x1}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000a40)=0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001c40)={0x70, 0x0, &(0x7f0000001b40)=[@acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001a80)={@fda={0x66646185, 0x1, 0x2, 0x3c}, @flat=@weak_binder={0x77622a85, 0x100b, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000a80)=""/4096, 0x1000, 0x0, 0xf}}, &(0x7f0000001b00)={0x0, 0x20, 0x38}}, 0x400}, @clear_death={0x400c630f, 0x3}], 0x63, 0x0, &(0x7f0000001bc0)="6d4905b50c2175bb4e1546dbd77453bd12695183817cc29c9211a69dde5c9904ccdd1332e1e7e96da058e872a1459f0c4dee40b99e87367b540849a602359b13a7f5be371645680d0412c2c9f6ba7c47b3dc3aeaba854cf2e94eec9f1482507ce78ec6"}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000001c80)={0x1, r1}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001cc0)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000001d00)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000001d40)={0x2, 0x0, @ioapic={0x4000, 0xd84, 0x1, 0x8, 0x0, [{0x8, 0x8, 0x2, '\x00', 0x5}, {0x0, 0x7, 0xc, '\x00', 0x4}, {0xf, 0x0, 0x1, '\x00', 0x10}, {0x5e, 0x9, 0x3, '\x00', 0x9}, {0x49, 0x3, 0x6, '\x00', 0x3}, {0x4, 0x8, 0xe, '\x00', 0x9}, {0xb, 0x0, 0x7, '\x00', 0xe}, {0xc, 0x6, 0x5, '\x00', 0xd}, {0x40, 0x9, 0x14}, {0x4, 0x8, 0xa7, '\x00', 0x9}, {0xbb, 0x2, 0x0, '\x00', 0x80}, {0xde, 0x0, 0x8, '\x00', 0x3}, {0x6, 0x9, 0xff, '\x00', 0xf}, {0x4, 0x4, 0xa, '\x00', 0xba}, {0x9, 0x8, 0x3, '\x00', 0x9}, {0x8, 0x8, 0xff, '\x00', 0x4}, {0x8, 0x81, 0x4, '\x00', 0xff}, {0x3, 0xe, 0x0, '\x00', 0xff}, {0xb7, 0x59, 0x7, '\x00', 0x73}, {0x8, 0x3, 0x1, '\x00', 0x1}, {0xe0, 0x10, 0xad, '\x00', 0x4}, {0x6, 0xd, 0x1, '\x00', 0x10}, {0x10, 0x9, 0x3, '\x00', 0x8}, {0xd, 0x0, 0x8}]}}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000001f80)) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000001fc0)={0xa, 0xc, 0x101}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000002000)=0x1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000002040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002200)={0x10, 0x0, &(0x7f00000020c0)=[@clear_death={0x400c630f, 0x2}], 0xc7, 0x0, &(0x7f0000002100)="db4715a20fb01746dc38f1f44c254aa527720a03a3521db8190d9d9cd0e1f003eba1d358393ab09ec6652479e427526476fa235fa5e38b0f2aab070d0fa87d2b2720b97e2856dc6ce6b6a221d93293219bf54c0c43a78290ccc69184d60d2965852de4f5d543375e42c9d5076ed8d7c8ce7a8e6018c6ae77630edf4f1724af78b93aa30f087f7d8345c152450f05b939045a05ed32281579349a2e9cde03b273ae976a8744cb942e856117e5622f40017d33c2b30067e3cfc5c4dc21306a38f7e4c29749f282a4"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000002240)) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000002280)={'veth0_virt_wifi\x00', 0x200}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000002480)={0x2, 0x0, &(0x7f00000022c0)=""/57, &(0x7f0000002300)=""/114, &(0x7f0000002380)=""/249, 0x6000}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000024c0)) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000002500)={0x79, 0x0, 0xb5b}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f0000002580)) kernel console output (not intermixed with test programs): cess permissive=1 [ 17.300148][ T36] audit: type=1400 audit(1750388515.690:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 25.250991][ T36] audit: type=1400 audit(1750388523.660:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.252517][ T282] cgroup: Unknown subsys name 'net' [ 25.273658][ T36] audit: type=1400 audit(1750388523.660:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.301428][ T36] audit: type=1400 audit(1750388523.690:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.301713][ T282] cgroup: Unknown subsys name 'devices' [ 25.471019][ T282] cgroup: Unknown subsys name 'hugetlb' [ 25.476779][ T282] cgroup: Unknown subsys name 'rlimit' [ 25.633298][ T36] audit: type=1400 audit(1750388524.040:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.656876][ T36] audit: type=1400 audit(1750388524.040:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.663946][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.681896][ T36] audit: type=1400 audit(1750388524.040:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.703473][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.713533][ T36] audit: type=1400 audit(1750388524.100:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.747713][ T36] audit: type=1400 audit(1750388524.100:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.773386][ T36] audit: type=1400 audit(1750388524.110:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.799853][ T36] audit: type=1400 audit(1750388524.110:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.632663][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.639814][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.646910][ T289] bridge_slave_0: entered allmulticast mode [ 26.653452][ T289] bridge_slave_0: entered promiscuous mode [ 26.661380][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.668822][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.675892][ T289] bridge_slave_1: entered allmulticast mode [ 26.682348][ T289] bridge_slave_1: entered promiscuous mode [ 26.703667][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.710762][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.717842][ T290] bridge_slave_0: entered allmulticast mode [ 26.724444][ T290] bridge_slave_0: entered promiscuous mode [ 26.731821][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.739196][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.746271][ T290] bridge_slave_1: entered allmulticast mode [ 26.752706][ T290] bridge_slave_1: entered promiscuous mode [ 26.825854][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.833023][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.840288][ T292] bridge_slave_0: entered allmulticast mode [ 26.846555][ T292] bridge_slave_0: entered promiscuous mode [ 26.852982][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.860094][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.867178][ T292] bridge_slave_1: entered allmulticast mode [ 26.873594][ T292] bridge_slave_1: entered promiscuous mode [ 26.883004][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.890107][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.897201][ T291] bridge_slave_0: entered allmulticast mode [ 26.903580][ T291] bridge_slave_0: entered promiscuous mode [ 26.920149][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.927229][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.934377][ T291] bridge_slave_1: entered allmulticast mode [ 26.940700][ T291] bridge_slave_1: entered promiscuous mode [ 27.044197][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.051383][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.058794][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.065952][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.119288][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.126373][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.133715][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.140783][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.156486][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.163586][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.170883][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.177928][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.200213][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.207327][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.214696][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.221779][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.260896][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.268224][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.276092][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.283411][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.290990][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.298318][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.305703][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.313070][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.331137][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.338202][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.347961][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.355056][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.368821][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.375881][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.389357][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.396432][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.408757][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.415840][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.431080][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.438147][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.446197][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.453281][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.461245][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468363][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.520747][ T289] veth0_vlan: entered promiscuous mode [ 27.538131][ T291] veth0_vlan: entered promiscuous mode [ 27.549425][ T289] veth1_macvtap: entered promiscuous mode [ 27.562006][ T290] veth0_vlan: entered promiscuous mode [ 27.586471][ T292] veth0_vlan: entered promiscuous mode [ 27.595812][ T291] veth1_macvtap: entered promiscuous mode [ 27.607090][ T290] veth1_macvtap: entered promiscuous mode [ 27.637631][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.663721][ T292] veth1_macvtap: entered promiscuous mode [ 27.702493][ T310] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 59) [ 27.702531][ T310] rust_binder: Error while translating object. [ 27.719899][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.734932][ T310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.761631][ T310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.798499][ T310] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 27.807980][ T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 27.816330][ T310] rust_binder: Read failure Err(EFAULT) in pid:2 [ 28.004672][ T349] binder: Unknown parameter 'nXI' [ 28.040852][ T345] input: syz0 as /devices/virtual/input/input4 [ 28.134759][ T354] serio: Serial port ttynull [ 28.195150][ T355] input: syz0 as /devices/virtual/input/input5 [ 28.225684][ T358] rust_binder: Read failure Err(EAGAIN) in pid:13 [ 28.256740][ T359] binder: Bad value for 'defcontext' [ 28.296866][ T365] rust_binder: Write failure EFAULT in pid:16 [ 28.327273][ T371] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 28.343869][ T371] SELinux: failed to load policy [ 28.414167][ T376] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 88) [ 28.414196][ T376] rust_binder: Error while translating object. [ 28.428813][ T376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.436592][ T376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 28.544983][ T386] rust_binder: Write failure EINVAL in pid:22 [ 28.730014][ T403] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 28.742043][ T399] tun0: tun_chr_ioctl cmd 1074025676 [ 28.783394][ T399] tun0: owner set to 0 [ 28.809540][ T408] rust_binder: Write failure EFAULT in pid:27 [ 28.943549][ T411] input: syz1 as /devices/virtual/input/input9 [ 29.030540][ T418] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.067249][ T418] rust_binder: Error in use_page_slow: ESRCH [ 29.079649][ T418] rust_binder: use_range failure ESRCH [ 29.096058][ T418] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 29.105108][ T418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.114539][ T418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:33 [ 29.492049][ T453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 29.496904][ T454] rust_binder: Error in use_page_slow: ESRCH [ 29.516242][ T454] rust_binder: use_range failure ESRCH [ 29.522893][ T454] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 29.532564][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.546966][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:47 [ 29.568417][ T455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 29.715327][ T466] rust_binder: Error while translating object. [ 29.734059][ T466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.747396][ T466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 29.819166][ T470] SELinux: policydb string length 1048584 does not match expected length 8 [ 29.844483][ T470] SELinux: failed to load policy [ 29.863209][ T469] rust_binder: Write failure EFAULT in pid:25 [ 30.344570][ T493] ======================================================= [ 30.344570][ T493] WARNING: The mand mount option has been deprecated and [ 30.344570][ T493] and is ignored by this kernel. Remove the mand [ 30.344570][ T493] option from the mount to silence this warning. [ 30.344570][ T493] ======================================================= [ 30.395486][ T490] binder: Unknown parameter 'non' [ 30.403489][ T496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.403527][ T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 30.423712][ T496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.434611][ T496] rust_binder: Read failure Err(EFAULT) in pid:47 [ 30.461156][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 30.461177][ T36] audit: type=1400 audit(1750388528.870:157): avc: denied { ioctl } for pid=499 comm="syz.1.63" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.544112][ T36] audit: type=1400 audit(1750388528.950:158): avc: denied { remount } for pid=508 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.565861][ T511] rust_binder: inc_ref_done called when no active inc_refs [ 30.577476][ T507] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 30.596455][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 30.615234][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:38 [ 30.643530][ T36] audit: type=1400 audit(1750388529.050:159): avc: denied { read } for pid=521 comm="syz.2.70" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.645875][ T514] SELinux: Context o}xd is not valid (left unmapped). [ 30.668125][ T36] audit: type=1400 audit(1750388529.050:160): avc: denied { open } for pid=521 comm="syz.2.70" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 30.688797][ T522] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 30.778552][ T529] rust_binder: Write failure EFAULT in pid:58 [ 30.848859][ T540] input: syz1 as /devices/virtual/input/input11 [ 30.916001][ T542] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.916028][ T542] rust_binder: Read failure Err(EFAULT) in pid:66 [ 30.926788][ T542] rust_binder: Error while translating object. [ 30.933522][ T542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.939806][ T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:66 [ 31.017195][ T36] audit: type=1326 audit(1750388529.420:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.029871][ T553] binder: Unknown parameter 'context' [ 31.049491][ T36] audit: type=1326 audit(1750388529.420:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.078625][ T36] audit: type=1326 audit(1750388529.430:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.101911][ T36] audit: type=1326 audit(1750388529.460:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.125103][ T36] audit: type=1326 audit(1750388529.460:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.148383][ T36] audit: type=1326 audit(1750388529.460:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=552 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0269b8e929 code=0x7ffc0000 [ 31.192892][ T560] binder: Bad value for 'max' [ 31.247091][ T564] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 31.280720][ T566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.281001][ T566] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 31.288934][ T562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.319534][ T568] rust_binder: Write failure EFAULT in pid:75 [ 31.380957][ T568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.628243][ T593] binder: Unknown parameter 'dont_hash' [ 31.673805][ T596] binder: Bad value for 'max' [ 31.802006][ T607] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.837389][ T607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 31.861885][ T607] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 31.870568][ T607] rust_binder: Write failure EINVAL in pid:89 [ 31.961719][ T613] kvm: kvm [612]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 32.090764][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 32.141643][ T622] binder: Unknown parameter 'smackfstransmute' [ 32.245335][ T632] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 32.252299][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.252698][ T632] binder: Unknown parameter 'smackfsroot' [ 32.389690][ T646] rust_binder: Error while translating object. [ 32.389721][ T646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.396025][ T646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 32.489745][ T651] binder: Unknown parameter '00000000000000000003' [ 32.669376][ T655] rust_binder: Error while translating object. [ 32.669416][ T655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.676167][ T655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:105 [ 32.783790][ T666] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 32.884546][ T668] rust_binder: Read failure Err(EAGAIN) in pid:72 [ 32.892920][ T668] random: crng reseeded on system resumption [ 32.927807][ T672] rust_binder: Write failure EFAULT in pid:107 [ 33.039070][ T676] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 33.052670][ T676] rust_binder: Write failure EINVAL in pid:119 [ 33.147334][ T683] rust_binder: Write failure EINVAL in pid:115 [ 33.562701][ T700] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 33.570159][ T700] rust_binder: Write failure EINVAL in pid:122 [ 33.603118][ T704] rust_binder: Write failure EINVAL in pid:84 [ 33.646951][ T706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 33.653353][ T703] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 33.662582][ T703] rust_binder: Error in use_page_slow: EBUSY [ 33.673052][ T703] rust_binder: use_range failure EBUSY [ 33.681852][ T703] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 33.687357][ T703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 33.695044][ T703] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 33.704435][ T703] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:124 [ 33.874698][ T713] rust_binder: Error while translating object. [ 33.883138][ T713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.889551][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:92 [ 33.909333][ T715] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.959755][ T722] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 33.966446][ T724] kvm: user requested TSC rate below hardware speed [ 33.976602][ T722] SELinux: failed to load policy [ 33.989888][ T722] binder: Unknown parameter 'stn;ats' [ 33.990289][ T724] __vm_enough_memory: pid: 724, comm: syz.0.136, bytes: 17592454483968 not enough memory for the allocation [ 34.013738][ T724] __vm_enough_memory: pid: 724, comm: syz.0.136, bytes: 17592454483968 not enough memory for the allocation [ 34.100833][ T733] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 34.108796][ T733] rust_binder: Write failure EINVAL in pid:126 [ 34.288326][ T634] Bluetooth: hci0: command 0x1003 tx timeout [ 34.288354][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.350514][ T742] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.769302][ T752] binder: Unknown parameter 'smackfsroot' [ 34.959365][ T766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.969701][ T765] kvm: apic: phys broadcast and lowest prio [ 34.986277][ T768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.993776][ T768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.318811][ T794] rust_binder: Write failure EINVAL in pid:143 [ 35.350716][ T796] SELinux: policydb string SE Linu does not match my string SE Linux [ 35.365420][ T796] SELinux: failed to load policy [ 35.371237][ T796] binder: Bad value for 'stats' [ 35.542406][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 35.542424][ T36] audit: type=1400 audit(1750388533.950:258): avc: denied { execute } for pid=798 comm="syz.0.160" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.592370][ T811] can0: slcan on ptm0. [ 35.612268][ T814] binder: Unknown parameter 'dont_hash' [ 35.620177][ T36] audit: type=1400 audit(1750388534.030:259): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 35.669527][ T36] audit: type=1326 audit(1750388534.030:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=810 comm="syz.1.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbde4b8e929 code=0x0 [ 35.730886][ T36] audit: type=1400 audit(1750388534.030:261): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1587 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.754477][ T826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.761624][ T826] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 35.790302][ T36] audit: type=1400 audit(1750388534.030:262): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1587 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.878479][ T815] can0 (unregistered): slcan off ptm0. [ 35.885095][ T36] audit: type=1400 audit(1750388534.030:263): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1587 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.930546][ T36] audit: type=1400 audit(1750388534.240:264): avc: denied { search } for pid=831 comm="sed" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.985299][ T845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 35.985565][ T845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.999013][ T36] audit: type=1400 audit(1750388534.240:265): avc: denied { read } for pid=831 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.049809][ T36] audit: type=1400 audit(1750388534.240:266): avc: denied { open } for pid=831 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.113185][ T36] audit: type=1400 audit(1750388534.240:267): avc: denied { getattr } for pid=831 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.177221][ T867] input: syz0 as /devices/virtual/input/input15 [ 36.185210][ T867] input: failed to attach handler leds to device input15, error: -6 [ 36.205107][ T867] rust_binder: Write failure EFAULT in pid:161 [ 36.257198][ T867] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 36.333885][ T882] rust_binder: Write failure EFAULT in pid:172 [ 36.362229][ T884] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 36.370070][ T884] rust_binder: Read failure Err(EFAULT) in pid:174 [ 36.385069][ T886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.424268][ T886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151 [ 36.446795][ T891] binder: Unknown parameter 'processor : 0 [ 36.446795][ T891] vendor_id : GenuineIntel [ 36.446795][ T891] cpu family : 6 [ 36.446795][ T891] model : 79 [ 36.446795][ T891] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 36.446795][ T891] stepping : 0 [ 36.446795][ T891] microcode : 0xffffffff [ 36.446795][ T891] cpu MHz : 2199.998 [ 36.446795][ T891] cache size : 56320 KB [ 36.446795][ T891] physical id : 0 [ 36.446795][ T891] siblings : 2 [ 36.446795][ T891] core id : 0 [ 36.446795][ T891] cpu cores : 1 [ 36.446795][ T891] apicid : 0 [ 36.446795][ T891] initial apicid : 0 [ 36.446795][ T891] fpu : yes [ 36.446795][ T891] fpu_exception : yes [ 36.446795][ T891] cpuid level : 13 [ 36.446795][ T891] wp : yes [ 36.446795][ T891] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 36.446795][ T891] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 36.509749][ T894] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 36.650236][ T894] rust_binder: Write failure EINVAL in pid:176 [ 36.727767][ T915] rust_binder: Write failure EINVAL in pid:132 [ 36.728027][ T916] rust_binder: Write failure EINVAL in pid:132 [ 36.793072][ T922] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 36.853865][ T931] binder: Bad value for 'max' [ 36.895219][ T936] kvm: kvm [935]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x3071ca54983652e6 [ 36.912189][ T938] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 36.961100][ T936] rust_binder: Write failure EFAULT in pid:183 [ 36.961269][ T936] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 36.967479][ T936] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 36.975426][ T936] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 37.004693][ T943] rust_binder: Error while translating object. [ 37.015341][ T943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.021817][ T943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:140 [ 37.072708][ T950] can0: slcan on ttyS3. [ 37.115890][ T956] rust_binder: Write failure EINVAL in pid:186 [ 37.116058][ T956] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 37.131139][ T956] rust_binder: Write failure EINVAL in pid:186 [ 37.146694][ T290] cgroup: fork rejected by pids controller in /syz0 [ 37.161688][ T950] can0 (unregistered): slcan off ttyS3. [ 37.213795][ T968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.213833][ T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 37.247714][ T305] bridge_slave_1: left allmulticast mode [ 37.281476][ T305] bridge_slave_1: left promiscuous mode [ 37.291628][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.321471][ T305] bridge_slave_0: left allmulticast mode [ 37.327178][ T305] bridge_slave_0: left promiscuous mode [ 37.352720][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.428033][ T987] ptm ptm33: ldisc open failed (-12), clearing slot 33 [ 37.560092][ T1001] kvm: kvm [1000]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xfffffffffffffff9 [ 37.586830][ T305] veth1_macvtap: left promiscuous mode [ 37.595441][ T305] veth0_vlan: left promiscuous mode [ 37.646285][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.653441][ T998] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.660646][ T998] bridge_slave_0: entered allmulticast mode [ 37.666985][ T998] bridge_slave_0: entered promiscuous mode [ 37.676442][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.684143][ T998] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.691322][ T998] bridge_slave_1: entered allmulticast mode [ 37.699041][ T998] bridge_slave_1: entered promiscuous mode [ 37.829063][ T45] hid (null): invalid report_size 60999 [ 37.836593][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.843730][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.851056][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.858101][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.866633][ T45] hid-generic 0004:0E5E:0511.0001: unexpected long global item [ 37.882714][ T45] hid-generic 0004:0E5E:0511.0001: probe with driver hid-generic failed with error -22 [ 37.884309][ T1019] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.910607][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.938856][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.945970][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.979070][ T998] veth0_vlan: entered promiscuous mode [ 37.994323][ T998] veth1_macvtap: entered promiscuous mode [ 38.035171][ T1024] rust_binder: Write failure EFAULT in pid:2 [ 38.277641][ T1045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 38.299446][ T1047] input: syz1 as /devices/virtual/input/input18 [ 38.321082][ T1049] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 38.358103][ T1051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 38.407768][ T1061] rust_binder: Write failure EINVAL in pid:156 [ 38.436554][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.463124][ T1068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.465380][ T1064] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.489539][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 38.524637][ T1068] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 38.525126][ T1072] binder: Bad value for 'stats' [ 38.748757][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.748786][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.755455][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.762120][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.769121][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.775727][ T1088] rust_binder: Write failure EINVAL in pid:209 [ 38.783027][ T1088] rust_binder: Write failure EINVAL in pid:209 [ 38.787574][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.797238][ T1088] rust_binder: Write failure EINVAL in pid:209 [ 38.804172][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.804195][ T1086] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.811483][ T1087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.817041][ T1086] rust_binder: Read failure Err(EFAULT) in pid:209 [ 38.857140][ T1095] rust_binder: Write failure EINVAL in pid:167 [ 39.008655][ T1109] input: syz0 as /devices/virtual/input/input20 [ 39.035102][ T1113] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.041811][ T1115] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.042005][ T1113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.071194][ T1119] input: syz0 as /devices/virtual/input/input21 [ 39.095951][ T1119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:186 [ 39.525681][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 39.525827][ T1157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 39.594242][ T1165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.604545][ T1165] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.692511][ T1180] rust_binder: Write failure EINVAL in pid:229 [ 39.701575][ T1180] rust_binder: Error while translating object. [ 39.707837][ T1180] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.715277][ T1180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:229 [ 39.764229][ T1182] binder: Unknown parameter 'maxv/net/tun' [ 39.787677][ T1187] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.832064][ T1193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 39.921352][ T1200] rust_binder: Write failure EFAULT in pid:190 [ 39.991626][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 39.997922][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:203 [ 40.023266][ T1208] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 40.045940][ T1208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 40.081816][ T1212] rust_binder: Error while translating object. [ 40.091088][ T1212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.097287][ T1212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 40.194153][ T1218] binder: Bad value for 'max' [ 40.194191][ T1217] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 40.195439][ T1221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 40.448346][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.484919][ T1243] binder: Bad value for 'max' [ 40.559385][ T1251] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 40.559407][ T1251] rust_binder: Error while translating object. [ 40.570365][ T1251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.576943][ T1251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 40.606787][ T1253] rust_binder: Write failure EFAULT in pid:20 [ 40.704330][ T36] kauditd_printk_skb: 96 callbacks suppressed [ 40.704350][ T36] audit: type=1400 audit(1750388539.110:364): avc: denied { write } for pid=1254 comm="syz.1.299" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.741313][ T36] audit: type=1400 audit(1750388539.150:365): avc: denied { ioctl } for pid=1254 comm="syz.1.299" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.796188][ T1259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.796641][ T1259] rust_binder: Error while translating object. [ 40.803290][ T1259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.809566][ T1259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 40.946201][ T36] audit: type=1400 audit(1750388539.350:366): avc: denied { load_policy } for pid=1273 comm="syz.1.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.946226][ T1275] SELinux: policydb magic number 0xb65 does not match expected magic number 0xf97cff8c [ 40.946252][ T1275] SELinux: failed to load policy [ 40.975400][ T36] audit: type=1400 audit(1750388539.360:367): avc: denied { execute } for pid=1273 comm="syz.1.305" path="/80/cgroup.stat" dev="tmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.079708][ T1281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 41.112035][ T1285] SELinux: failed to load policy [ 41.187739][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 41.187825][ T1290] rust_binder: Write failure EINVAL in pid:248 [ 41.202024][ T36] audit: type=1400 audit(1750388539.610:368): avc: denied { relabelfrom } for pid=1287 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.228461][ T36] audit: type=1400 audit(1750388539.610:369): avc: denied { relabelto } for pid=1287 comm="syz.3.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.311663][ T1304] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.395037][ T36] audit: type=1400 audit(1750388539.800:370): avc: denied { write } for pid=1315 comm="syz.1.318" name="pfkey" dev="proc" ino=4026532480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 41.443428][ T36] audit: type=1400 audit(1750388539.850:371): avc: denied { write } for pid=1318 comm="syz.3.320" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.531268][ T1323] kvm_intel: kvm [1322]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 41.901255][ T1354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 41.902277][ T1354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.922611][ T1354] rust_binder: Write failure EINVAL in pid:44 [ 41.989806][ T1356] binder: Unknown parameter 'dont_hash' [ 42.053682][ T36] audit: type=1400 audit(1750388540.460:372): avc: denied { map } for pid=1358 comm="syz.3.332" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.232102][ T1379] input: syz0 as /devices/virtual/input/input28 [ 42.235209][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 42.241756][ T1376] input: syz0 as /devices/virtual/input/input29 [ 42.258099][ T1379] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 42.258123][ T1379] rust_binder: Error while translating object. [ 42.270708][ T1382] rust_binder: Write failure EFAULT in pid:248 [ 42.277655][ T1379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.284282][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 42.294531][ T1376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.311052][ T1384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.554590][ T1407] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 42.598040][ T1414] rust_binder: Write failure EINVAL in pid:58 [ 42.603367][ T36] audit: type=1400 audit(1750388541.010:373): avc: denied { ioctl } for pid=1408 comm="syz.2.348" path="net:[4026532551]" dev="nsfs" ino=4026532551 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 42.845526][ T1432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.845559][ T1432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:264 [ 42.871795][ T1438] KVM: debugfs: duplicate directory 1438-6 [ 43.066463][ T1448] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 43.226986][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.249177][ T1461] binder: Bad value for 'max' [ 43.290535][ T1462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 43.403156][ T1464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 43.469666][ T1465] rust_binder: Write failure EINVAL in pid:86 [ 43.549932][ T1473] rust_binder: Write failure EINVAL in pid:279 [ 43.776563][ T1476] rust_binder: Write failure EFAULT in pid:267 [ 43.801763][ T10] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 43.816847][ T1478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 43.817628][ T10] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 44.121064][ T1488] rust_binder: Write failure EINVAL in pid:279 [ 44.267377][ T1501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 44.290374][ T1502] rust_binder: Write failure EFAULT in pid:276 [ 44.367657][ T1511] rust_binder: Got transaction with invalid offset. [ 44.378498][ T1511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.385163][ T1511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 44.561771][ T1525] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 44.621107][ T1527] input: syz1 as /devices/virtual/input/input30 [ 44.685731][ T1529] KVM: debugfs: duplicate directory 1529-4 [ 44.698760][ T1529] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 45.162156][ T1538] binder: Bad value for 'stats' [ 45.183967][ T1542] binder: Unknown parameter 'context' [ 45.206960][ T1545] rust_binder: Error while translating object. [ 45.206993][ T1545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.217088][ T1545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:106 [ 45.280572][ T1550] binder: Unknown parameter '' [ 45.389059][ T1554] deleting an unspecified loop device is not supported. [ 45.450567][ T1562] SELinux: security_context_str_to_sid () failed with errno=-22 [ 45.469053][ T1562] rust_binder: Write failure EINVAL in pid:112 [ 45.475688][ T1559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 45.484205][ T1559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:302 [ 45.499876][ T1559] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 45.513642][ T1559] rust_binder: Read failure Err(EFAULT) in pid:302 [ 45.649594][ T1571] rust_binder: Got transaction with invalid offset. [ 45.666385][ T1571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.675714][ T1573] binder: Bad value for 'stats' [ 45.675988][ T1571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 45.744125][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 45.744143][ T36] audit: type=1326 audit(1750388544.150:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1575 comm="syz.1.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbde4b8e929 code=0x0 [ 45.905375][ T1583] rust_binder: Write failure EINVAL in pid:300 [ 45.910171][ T36] audit: type=1400 audit(1750388544.310:387): avc: denied { execute } for pid=1582 comm="syz.2.405" path="/dev/binderfs/binder0" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.952638][ T1590] rust_binder: Write failure EFAULT in pid:304 [ 45.964846][ T36] audit: type=1400 audit(1750388544.330:388): avc: denied { associate } for pid=1585 comm="syz.2.408" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.005574][ T1594] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.005600][ T1594] rust_binder: Read failure Err(EFAULT) in pid:289 [ 46.056698][ T36] audit: type=1326 audit(1750388544.460:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1595 comm="syz.2.410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6eb318e929 code=0x0 [ 46.133852][ T36] audit: type=1326 audit(1750388544.540:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1603 comm="syz.0.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x0 [ 46.270904][ T1609] rust_binder: Write failure EINVAL in pid:120 [ 46.539012][ T1621] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 46.853174][ T1626] rust_binder: Write failure EINVAL in pid:292 [ 46.854149][ T1626] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 47.023106][ T1628] rust_binder: Error while translating object. [ 47.031325][ T1628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 47.037907][ T1628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:313 [ 47.082342][ T36] audit: type=1400 audit(1750388545.490:391): avc: denied { write } for pid=1633 comm="syz.0.420" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 47.144376][ T1639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:129 [ 47.220130][ T1645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 47.302642][ T1647] rust_binder: Write failure EINVAL in pid:131 [ 47.422804][ T1653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.429605][ T1653] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.488164][ T1655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.494860][ T1654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.513960][ T1658] rust_binder: Write failure EFAULT in pid:139 [ 47.515965][ T1659] binder: Unknown parameter 'max000@' [ 47.671433][ T1669] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.674306][ T1669] rust_binder: Error while translating object. [ 47.681134][ T1669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.687595][ T1669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 47.723784][ T1672] rust_binder: Error in use_page_slow: ESRCH [ 47.723803][ T1672] rust_binder: use_range failure ESRCH [ 47.731396][ T1672] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 47.737188][ T1672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.745361][ T1672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:295 [ 47.894137][ T1683] binder: Unknown parameter '' [ 47.912022][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.918589][ T1683] binder: Unknown parameter '' [ 47.919089][ T1687] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 47.928088][ T1683] binder: Unknown parameter '' [ 47.944471][ T1683] binder: Unknown parameter '' [ 47.955147][ T1683] binder: Unknown parameter '' [ 47.965897][ T1683] binder: Unknown parameter '' [ 47.968929][ T1687] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 47.976697][ T1683] binder: Unknown parameter '' [ 47.994495][ T1683] binder: Unknown parameter '' [ 47.999714][ T1683] binder: Unknown parameter '' [ 48.011365][ T1683] binder: Unknown parameter '' [ 48.024048][ T1683] binder: Unknown parameter '' [ 48.030243][ T1683] binder: Unknown parameter '' [ 48.030285][ T36] audit: type=1400 audit(1750388546.440:392): avc: denied { validate_trans } for pid=1696 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.035499][ T1683] binder: Unknown parameter '' [ 48.070406][ T1683] binder: Unknown parameter '' [ 48.075492][ T1683] binder: Unknown parameter '' [ 48.080809][ T1683] binder: Unknown parameter '' [ 48.085822][ T1683] binder: Unknown parameter '' [ 48.091372][ T1698] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 48.100484][ T1683] binder: Unknown parameter '' [ 48.105597][ T1683] binder: Unknown parameter '' [ 48.110877][ T1683] binder: Unknown parameter '' [ 48.115974][ T1683] binder: Unknown parameter '' [ 48.121371][ T1683] binder: Unknown parameter '' [ 48.126649][ T1683] binder: Unknown parameter '' [ 48.131428][ T1697] rust_binder: Error while translating object. [ 48.131556][ T1697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.132038][ T1683] binder: Unknown parameter '' [ 48.142197][ T1697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:325 [ 48.147996][ T1683] binder: Unknown parameter '' [ 48.169526][ T1683] binder: Unknown parameter '' [ 48.179376][ T1683] binder: Unknown parameter '' [ 48.187954][ T1683] binder: Unknown parameter '' [ 48.193855][ T36] audit: type=1400 audit(1750388546.590:393): avc: denied { compute_member } for pid=1703 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 48.219911][ T1683] binder: Unknown parameter '' [ 48.228527][ T1683] binder: Unknown parameter '' [ 48.243678][ T1683] binder: Unknown parameter '' [ 48.256312][ T1683] binder: Unknown parameter '' [ 48.278461][ T1683] binder: Unknown parameter '' [ 48.291821][ T1683] binder: Unknown parameter '' [ 48.307976][ T1683] binder: Unknown parameter '' [ 48.318737][ T1683] binder: Unknown parameter '' [ 48.342878][ T1683] binder: Unknown parameter '' [ 48.356810][ T1683] binder: Unknown parameter '' [ 48.370483][ T36] audit: type=1400 audit(1750388546.780:394): avc: denied { block_suspend } for pid=1717 comm="syz.2.439" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.394262][ T1718] rust_binder: Write failure EINVAL in pid:334 [ 48.394304][ T1718] rust_binder: Write failure EINVAL in pid:334 [ 48.394337][ T1683] binder: Unknown parameter '' [ 48.407560][ T1718] rust_binder: Write failure EINVAL in pid:334 [ 48.412125][ T1720] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 48.416135][ T1718] rust_binder: Write failure EINVAL in pid:334 [ 48.418988][ T1720] rust_binder: Error while translating object. [ 48.453021][ T1683] binder: Unknown parameter '' [ 48.471892][ T1683] binder: Unknown parameter '' [ 48.478052][ T1720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.478090][ T1720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:334 [ 48.493397][ T1683] binder: Unknown parameter '' [ 48.523612][ T1683] binder: Unknown parameter '' [ 48.530193][ T1683] binder: Unknown parameter '' [ 48.600596][ T1733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 48.600626][ T1733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:339 [ 48.626666][ T1733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.631737][ T1731] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 48.891853][ T36] audit: type=1400 audit(1750388547.300:395): avc: denied { map } for pid=1760 comm="syz.1.445" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 48.942117][ T1767] binder: Unknown parameter 'con' [ 48.984453][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:348 [ 48.985386][ T1768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 49.017908][ T1776] rust_binder: Write failure EINVAL in pid:350 [ 49.027632][ T1776] rust_binder: Write failure EINVAL in pid:350 [ 49.092420][ T1783] rust_binder: Failed copying remainder into alloc: EFAULT [ 49.098929][ T1783] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 49.106399][ T1783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.115119][ T1783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:352 [ 49.159529][ T1792] binder: Unknown parameter 'sta0-_l' [ 49.228215][ T1796] PM: Enabling pm_trace changes system date and time during resume. [ 49.228215][ T1796] PM: Correct system time has to be restored manually after resume. [ 49.277743][ T1800] rust_binder: Error while translating object. [ 49.277773][ T1800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.284112][ T1800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 49.296657][ T1800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.313976][ T1800] rust_binder: Write failure EINVAL in pid:316 [ 49.328689][ T1802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 49.334970][ T1802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:362 [ 49.344438][ T1802] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.353692][ T1802] rust_binder: Read failure Err(EFAULT) in pid:362 [ 49.386801][ T1807] rust_binder: Write failure EINVAL in pid:367 [ 49.393864][ T1807] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 49.400150][ T1807] rust_binder: Read failure Err(EFAULT) in pid:367 [ 49.408786][ T1807] rust_binder: Write failure EINVAL in pid:367 [ 49.422423][ T1807] kvm_intel: kvm [1806]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 49.484418][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 49.709076][ T1823] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 49.730757][ T1823] kvm: user requested TSC rate below hardware speed [ 49.826789][ T1830] input: syz0 as /devices/virtual/input/input33 [ 49.833382][ T1830] input: failed to attach handler leds to device input33, error: -6 [ 49.843498][ T1830] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 49.843522][ T1830] rust_binder: Error while translating object. [ 49.852806][ T1830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.859265][ T1830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 49.968357][ T1779] Bluetooth: hci0: command 0x1003 tx timeout [ 49.983680][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.144129][ T1839] input: syz0 as /devices/virtual/input/input34 [ 50.161478][ T1839] binder: Unknown parameter 'h' [ 50.184246][ T1844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.184575][ T1843] rust_binder: Error in use_page_slow: ESRCH [ 50.191128][ T1843] rust_binder: use_range failure ESRCH [ 50.197255][ T1843] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 50.202840][ T1843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 50.212670][ T1843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:157 [ 50.259505][ T1851] rust_binder: Write failure EFAULT in pid:165 [ 50.314045][ T1851] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.378741][ T1858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 50.646519][ T1868] SELinux: failed to load policy [ 50.662682][ T1868] rust_binder: Write failure EINVAL in pid:325 [ 50.681874][ T1875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.766909][ T1884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.782430][ T1884] rust_binder: Error while translating object. [ 50.789043][ T1884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.795248][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 50.846792][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 50.846813][ T36] audit: type=1326 audit(1750388549.250:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 50.849239][ T1888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.865014][ T1889] rust_binder: Error while translating object. [ 50.887708][ T1888] rust_binder: Write failure EINVAL in pid:189 [ 50.894991][ T36] audit: type=1326 audit(1750388549.250:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 50.901254][ T1888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 50.906400][ T36] audit: type=1326 audit(1750388549.250:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 50.940502][ T1889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 50.962138][ T1889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:328 [ 50.971574][ T36] audit: type=1326 audit(1750388549.250:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.004040][ T36] audit: type=1326 audit(1750388549.250:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.027367][ T36] audit: type=1326 audit(1750388549.260:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.050773][ T36] audit: type=1326 audit(1750388549.260:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.074112][ T36] audit: type=1326 audit(1750388549.260:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.097376][ T634] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 51.097402][ T36] audit: type=1326 audit(1750388549.260:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.127839][ T36] audit: type=1326 audit(1750388549.290:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1887 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05298e929 code=0x7ffc0000 [ 51.412511][ T1915] rust_binder: Write failure EFAULT in pid:194 [ 51.474025][ T1923] input: syz0 as /devices/virtual/input/input36 [ 51.489123][ T1923] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.515937][ T1925] rust_binder: Error while translating object. [ 51.522611][ T1925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 51.529045][ T1925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:403 [ 51.540272][ T1933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.551703][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 51.758844][ T1942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 51.769241][ T1942] rust_binder: Read failure Err(EFAULT) in pid:427 [ 52.352618][ T1963] binder: Unknown parameter 'context' [ 52.420905][ T1967] rust_binder: Error while translating object. [ 52.420935][ T1967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 52.432863][ T1971] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.435320][ T1967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423 [ 52.457255][ T1973] SELinux: security_context_str_to_sid () failed with errno=-22 [ 52.479511][ T1971] rust_binder: Error while translating object. [ 52.479564][ T1971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.486006][ T1971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 52.496706][ T1971] rust_binder: Error in use_page_slow: ESRCH [ 52.506332][ T1971] rust_binder: use_range failure ESRCH [ 52.512520][ T1971] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 52.518011][ T1971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.526093][ T1971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:203 [ 52.694402][ T1988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.712770][ T1990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.718573][ T1986] rust_binder: Read failure Err(EAGAIN) in pid:345 [ 52.726402][ T1988] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 52.753924][ T63] hid (null): report_id 0 is invalid [ 52.769581][ T63] hid (null): report_id 0 is invalid [ 52.776814][ T63] hid-generic 841E:0009:0005.0003: unknown main item tag 0x3 [ 52.784855][ T63] hid-generic 841E:0009:0005.0003: report_id 0 is invalid [ 52.785650][ T1994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 52.797511][ T63] hid-generic 841E:0009:0005.0003: item 0 0 1 8 parsing failed [ 52.818531][ T63] hid-generic 841E:0009:0005.0003: probe with driver hid-generic failed with error -22 [ 53.014245][ T2008] SELinux: ebitmap: truncated map [ 53.023146][ T2008] SELinux: failed to load policy [ 53.036619][ T2008] binder: Unknown parameter 'nXI' [ 53.072687][ T2016] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.072715][ T2016] rust_binder: Read failure Err(EFAULT) in pid:435 [ 53.111973][ T2021] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 53.288724][ T2031] binder: Unknown parameter 'dont_hash' [ 53.341884][ T2039] rust_binder: Write failure EINVAL in pid:440 [ 53.363743][ T2041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.370833][ T2041] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 53.377358][ T2041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 53.387131][ T2041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:442 [ 53.458663][ T2047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 53.468611][ T2047] rust_binder: Error while translating object. [ 53.477889][ T2047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.484482][ T2047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 53.528486][ T2053] binder: Unknown parameter '0000000000000000000300000000000000000004' [ 53.677606][ T2072] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 53.693522][ T2079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.693815][ T2079] rust_binder: Error in use_page_slow: ESRCH [ 53.703349][ T2072] SELinux: failed to load policy [ 53.714527][ T2079] rust_binder: use_range failure ESRCH [ 53.714558][ T2079] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 53.720334][ T2079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.722715][ T2072] binder: Unknown parameter 'context' [ 53.732448][ T2079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 53.815293][ T2083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.840379][ T2085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.847795][ T2085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.855246][ T2085] rust_binder: Write failure EINVAL in pid:457 [ 53.910813][ T2083] rust_binder: Error in use_page_slow: ESRCH [ 53.917652][ T2083] rust_binder: use_range failure ESRCH [ 53.919758][ T2095] random: crng reseeded on system resumption [ 53.927688][ T2089] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 53.952942][ T2083] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 53.952966][ T2083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.962024][ T2098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.962409][ T2083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:222 [ 54.073574][ T2121] kvm: kvm [2120]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 54.343882][ T2130] can0: slcan on ptm0. [ 54.358574][ T13] Bluetooth: hci0: Frame reassembly failed (-90) [ 54.372275][ T2130] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.470949][ T2141] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.470975][ T2141] rust_binder: Read failure Err(EFAULT) in pid:389 [ 54.491327][ T2149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:476 [ 54.646864][ T2161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.649164][ T2162] binder: Unknown parameter '0x00000000000000000x000000000000000018446744073709551615' [ 54.661914][ T2161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:391 [ 54.676026][ T2163] binder: Unknown parameter '0x00000000000000000x000000000000000018446744073709551615' [ 54.734482][ T2171] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 55.282727][ T2193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.472975][ T2199] binder: Unknown parameter 'processor : 0 [ 55.472975][ T2199] vendor_id : GenuineIntel [ 55.472975][ T2199] cpu family : 6 [ 55.472975][ T2199] model : 79 [ 55.472975][ T2199] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 55.472975][ T2199] stepping : 0 [ 55.472975][ T2199] microcode : 0xffffffff [ 55.472975][ T2199] cpu MHz : 2199.998 [ 55.472975][ T2199] cache size : 56320 KB [ 55.472975][ T2199] physical id : 0 [ 55.472975][ T2199] siblings : 2 [ 55.472975][ T2199] core id : 0 [ 55.472975][ T2199] cpu cores : 1 [ 55.472975][ T2199] apicid : 0 [ 55.472975][ T2199] initial apicid : 0 [ 55.472975][ T2199] fpu : yes [ 55.472975][ T2199] fpu_exception : yes [ 55.472975][ T2199] cpuid level : 13 [ 55.472975][ T2199] wp : yes [ 55.472975][ T2199] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 55.472975][ T2199] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 55.520913][ T2203] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 55.654162][ T2203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 55.662766][ T2203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:258 [ 55.776984][ T2214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.786593][ T2214] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.793099][ T2214] rust_binder: Read failure Err(EFAULT) in pid:269 [ 55.853038][ T2217] rust_binder: Write failure EINVAL in pid:406 [ 55.860762][ T2219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.003037][ T2230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.089547][ T2240] rust_binder: Error while translating object. [ 56.089581][ T2240] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 56.095872][ T2240] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:424 [ 56.368307][ T634] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.368367][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 56.452469][ T2129] can0 (unregistered): slcan off ptm0. [ 56.797081][ T2283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.797118][ T2283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:441 [ 56.827965][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 56.827987][ T36] audit: type=1400 audit(1750388555.230:469): avc: granted { setsecparam } for pid=2290 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 56.913030][ T2302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.913247][ T2302] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 56.928607][ T2297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.940323][ T2302] rust_binder: Read failure Err(EFAULT) in pid:497 [ 56.949065][ T2297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 56.963277][ T36] audit: type=1400 audit(1750388555.370:470): avc: denied { map } for pid=2307 comm="syz.3.606" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 57.059062][ T36] audit: type=1400 audit(1750388555.370:471): avc: denied { execute } for pid=2307 comm="syz.3.606" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 57.111539][ T2315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 57.111633][ T36] audit: type=1400 audit(1750388555.370:472): avc: denied { set_context_mgr } for pid=2307 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.174615][ T36] audit: type=1400 audit(1750388555.410:473): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.229470][ T36] audit: type=1400 audit(1750388555.410:474): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.304769][ T36] audit: type=1400 audit(1750388555.410:475): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.367830][ T36] audit: type=1400 audit(1750388555.410:476): avc: denied { ioctl } for pid=2296 comm="syz.2.604" path="/dev/binderfs/binder0" dev="binder" ino=44 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.435674][ T36] audit: type=1400 audit(1750388555.420:477): avc: denied { read write } for pid=2296 comm="syz.2.604" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 57.454651][ T2329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.692095][ T2332] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 57.692125][ T2332] rust_binder: Error while translating object. [ 57.714811][ T2332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.723991][ T2332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:473 [ 57.831754][ T2340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.094001][ T2354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.124571][ T2354] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 58.148402][ T2354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 58.175946][ T2352] kvm: Disabled LAPIC found during irq injection [ 58.183784][ T2354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:283 [ 58.344629][ T2352] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (274877906944 ns). Using initial count to start timer. [ 58.387697][ T2365] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.419346][ T2352] rust_binder: Write failure EFAULT in pid:512 [ 58.464434][ T2367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 58.465219][ T2367] rust_binder: Error in use_page_slow: ESRCH [ 58.489405][ T2367] rust_binder: use_range failure ESRCH [ 58.528875][ T2367] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 58.562129][ T2367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.578349][ T2367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:461 [ 58.737968][ T2374] rust_binder: Write failure EINVAL in pid:463 [ 58.885211][ T2380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.892216][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:515 [ 59.054870][ T2387] rust_binder: Error while translating object. [ 59.062567][ T2384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.074357][ T2387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 59.087613][ T2387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:466 [ 59.135278][ T2390] binder: Unknown parameter 'non' [ 59.331753][ T2397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 59.397891][ T2402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.443116][ T2402] rust_binder: Error while translating object. [ 59.460599][ T2402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 59.484224][ T2402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:523 [ 59.628810][ T2410] rust_binder: Write failure EFAULT in pid:473 [ 60.303714][ T2441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.310201][ T2443] binder: Unknown parameter 'coyBLV"i5ntext' [ 60.341061][ T2441] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 60.368311][ T2441] rust_binder: Write failure EINVAL in pid:538 [ 60.372996][ T2441] input: syz0 as /devices/virtual/input/input42 [ 60.396311][ T2441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.398164][ T2441] rust_binder: Error in use_page_slow: ESRCH [ 60.404694][ T2441] rust_binder: use_range failure ESRCH [ 60.410885][ T2441] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 60.416422][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.424644][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:538 [ 60.461718][ T2441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.881987][ T2462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.218509][ T2472] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.252650][ T2472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.278363][ T2472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 61.432132][ T2487] rust_binder: Write failure EFAULT in pid:550 [ 61.602902][ T306] bridge_slave_1: left allmulticast mode [ 61.623853][ T306] bridge_slave_1: left promiscuous mode [ 61.638477][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.660584][ T306] bridge_slave_0: left allmulticast mode [ 61.698357][ T306] bridge_slave_0: left promiscuous mode [ 61.712950][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.855769][ T306] veth1_macvtap: left promiscuous mode [ 61.861446][ T306] veth0_vlan: left promiscuous mode [ 61.903029][ T36] kauditd_printk_skb: 830 callbacks suppressed [ 61.903050][ T36] audit: type=1400 audit(1750388560.310:1306): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.000204][ T36] audit: type=1400 audit(1750388560.310:1307): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.115107][ T36] audit: type=1400 audit(1750388560.310:1308): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.218325][ T36] audit: type=1400 audit(1750388560.330:1309): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.246144][ T2506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.246179][ T2506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:493 [ 62.292537][ T36] audit: type=1400 audit(1750388560.330:1310): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.369923][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.401280][ T2500] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.411050][ T2515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.417956][ T2515] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 62.423759][ T2500] bridge_slave_0: entered allmulticast mode [ 62.434165][ T2515] audit: backlog limit exceeded [ 62.439264][ T2517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.445408][ T2515] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.460269][ T2500] bridge_slave_0: entered promiscuous mode [ 62.482397][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.511212][ T2500] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.520526][ T2515] binder: Unknown parameter 'context' [ 62.529614][ T2500] bridge_slave_1: entered allmulticast mode [ 62.548681][ T2519] rust_binder: Write failure EFAULT in pid:495 [ 62.548776][ T2500] bridge_slave_1: entered promiscuous mode [ 62.566405][ T2517] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.590629][ T2517] rust_binder: Error while translating object. [ 62.597135][ T2517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.627764][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 62.771594][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.787839][ T2500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.795219][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.802305][ T2500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.986160][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.019716][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.028651][ T2526] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.082700][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.089837][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.137373][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.144516][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.331993][ T2540] rust_binder: Error while translating object. [ 63.332046][ T2540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 63.370764][ T2540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:519 [ 63.438401][ T2543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.490827][ T2500] veth0_vlan: entered promiscuous mode [ 63.525662][ T2543] rust_binder: Error while translating object. [ 63.525692][ T2543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.540445][ T2546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.548542][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:571 [ 63.636814][ T2500] veth1_macvtap: entered promiscuous mode [ 63.701265][ T2554] binder: Binderfs stats mode cannot be changed during a remount [ 63.888516][ T2561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.902907][ T2561] rust_binder: Error while translating object. [ 63.917123][ T2561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.938380][ T2561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:577 [ 63.960336][ T2564] rust_binder: Write failure EFAULT in pid:577 [ 64.130201][ T2571] input: syz0 as /devices/virtual/input/input44 [ 64.194034][ T2571] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 64.203285][ T2571] rust_binder: Write failure EINVAL in pid:507 [ 64.775152][ T2597] syz.3.699: attempt to access beyond end of device [ 64.775152][ T2597] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 64.779089][ T2596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.821156][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 64.862519][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.119058][ T2596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.183749][ T2612] SELinux: failed to load policy [ 65.220044][ T2613] SELinux: failed to load policy [ 65.320401][ T2617] rust_binder: Write failure EINVAL in pid:19 [ 65.403286][ T306] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.438555][ T2626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.438589][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 65.562252][ T2628] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 65.598400][ T2628] SELinux: failed to load policy [ 65.634245][ T2633] rust_binder: Write failure EINVAL in pid:25 [ 65.785404][ T2637] input: syz1 as /devices/virtual/input/input45 [ 65.848755][ T2637] input: syz0 as /devices/virtual/input/input46 [ 66.129105][ T2651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.129807][ T2651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.148152][ T2653] rust_binder: Write failure EINVAL in pid:520 [ 66.688569][ T2676] tun0: tun_chr_ioctl cmd 1074025675 [ 66.709867][ T2676] tun0: persist disabled [ 66.756316][ T2676] rust_binder: Write failure EINVAL in pid:41 [ 66.895501][ T2680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.910198][ T36] kauditd_printk_skb: 986 callbacks suppressed [ 66.910219][ T36] audit: type=1400 audit(1750388565.320:2281): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.958086][ T2678] rust_binder: Error while translating object. [ 66.958129][ T2678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 66.976571][ T2678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:567 [ 66.998696][ T36] audit: type=1400 audit(1750388565.320:2282): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.018882][ T2683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.090828][ T2682] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 4096) [ 67.097314][ T2682] rust_binder: Error while translating object. [ 67.113135][ T36] audit: type=1400 audit(1750388565.320:2283): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.163265][ T2685] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 4096) [ 67.163295][ T2685] rust_binder: Error while translating object. [ 67.176972][ T2682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.184833][ T36] audit: type=1400 audit(1750388565.360:2284): avc: denied { map } for pid=2677 comm="syz.1.724" path="/dev/binderfs/binder0" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.228378][ T2685] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.228414][ T2685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 67.230797][ T2682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 67.259789][ T36] audit: type=1400 audit(1750388565.360:2285): avc: denied { read } for pid=2677 comm="syz.1.724" path="/dev/binderfs/binder0" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.338306][ T36] audit: type=1400 audit(1750388565.360:2286): avc: denied { ioctl } for pid=2677 comm="syz.1.724" path="/dev/binderfs/binder0" dev="binder" ino=50 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.404823][ T2695] rust_binder: Write failure EINVAL in pid:49 [ 67.408290][ T634] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.409516][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 67.415571][ T36] audit: type=1400 audit(1750388565.360:2287): avc: denied { call } for pid=2677 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.429908][ T2695] rust_binder: Error while translating object. [ 67.448387][ T2695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.454617][ T2695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 67.484280][ T36] audit: type=1400 audit(1750388565.400:2288): avc: denied { read } for pid=2681 comm="syz.3.725" name="binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.522421][ T36] audit: type=1400 audit(1750388565.400:2289): avc: denied { read open } for pid=2681 comm="syz.3.725" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.558748][ T36] audit: type=1400 audit(1750388565.410:2290): avc: denied { read write } for pid=2500 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.846648][ T2708] rust_binder: Failed copying remainder into alloc: EFAULT [ 67.846674][ T2708] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 67.868425][ T2708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.898312][ T2708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:576 [ 68.023435][ T2710] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 68.068300][ T2710] rust_binder: Error while translating object. [ 68.091805][ T2710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.109087][ T2710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 68.143891][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.162949][ T2714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.175986][ T2714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:593 [ 68.188399][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.228318][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.256160][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.267245][ T2721] rust_binder: Write failure EFAULT in pid:541 [ 68.273838][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.296427][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.308347][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.327510][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.346262][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.357281][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.365825][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.387718][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.418314][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.438344][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.454494][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.463621][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.479368][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.487037][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.495406][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.502916][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.512048][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.520229][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.530580][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.538025][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.545581][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.554329][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.561839][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.569407][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.576949][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.584430][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.592009][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.599472][ T45] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 68.609265][ T45] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.238889][ T2759] kvm: kvm [2758]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 69.277498][ T2755] fido_id[2755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.291273][ T2759] rust_binder: Error while translating object. [ 69.291324][ T2759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.297552][ T2759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:554 [ 69.909650][ T2781] rust_binder: Error while translating object. [ 69.909703][ T2781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.915922][ T2781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:591 [ 70.070968][ T2783] rust_binder: Write failure EFAULT in pid:595 [ 70.321427][ T2798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.397764][ T2803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 70.427632][ T2802] SELinux: unknown common r [ 70.451418][ T2804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:612 [ 70.470762][ T2802] SELinux: failed to load policy [ 70.513201][ T2802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:600 [ 70.649287][ T2810] binder: Unknown parameter '?"' [ 70.741938][ T2815] rust_binder: Error while translating object. [ 70.741980][ T2815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.749140][ T2815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 70.884913][ T2818] random: crng reseeded on system resumption [ 70.960787][ T2818] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 70.960817][ T2818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 70.978385][ T2818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:87 [ 71.397242][ T2830] rust_binder: Error while translating object. [ 71.425961][ T2830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 71.444393][ T2830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:603 [ 71.449824][ T2838] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.478583][ T2836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 71.509395][ T2837] binder: Unknown parameter '00000000000000000000000fvO8G7z]uY:gGsH2WJCBf{#ɭ0ή 8zXrքUrfjg'ށ}~~' [ 71.783689][ T2846] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 71.783724][ T2846] rust_binder: Error in use_page_slow: EBUSY [ 71.813135][ T2846] rust_binder: use_range failure EBUSY [ 71.821946][ T2846] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 71.827551][ T2846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 71.843092][ T2846] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 71.857322][ T2855] input: syz1 as /devices/virtual/input/input51 [ 71.876767][ T2846] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:573 [ 71.906690][ T1357] hid-generic C98F:0003:0000.0006: item fetching failed at offset 0/2 [ 71.925372][ T36] kauditd_printk_skb: 815 callbacks suppressed [ 71.925392][ T36] audit: type=1400 audit(1750388570.330:3106): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.927476][ T1357] hid-generic C98F:0003:0000.0006: probe with driver hid-generic failed with error -22 [ 71.932054][ T36] audit: type=1400 audit(1750388570.330:3107): avc: denied { read open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.036336][ T36] audit: type=1400 audit(1750388570.330:3108): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.104654][ T36] audit: type=1400 audit(1750388570.330:3109): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.140161][ T2860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:101 [ 72.168529][ T2862] kvm: Disabled LAPIC found during irq injection [ 72.204430][ T36] audit: type=1400 audit(1750388570.330:3110): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.286538][ T36] audit: type=1400 audit(1750388570.400:3111): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.356363][ T2865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 72.358598][ T36] audit: type=1400 audit(1750388570.400:3112): avc: denied { read open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.427013][ T36] audit: type=1400 audit(1750388570.400:3113): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.474411][ T36] audit: type=1400 audit(1750388570.400:3114): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.500485][ T36] audit: type=1400 audit(1750388570.400:3115): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.571782][ T2871] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 72.571811][ T2871] rust_binder: Error while translating object. [ 72.598368][ T2871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.604741][ T2871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 73.102703][ T2903] rust_binder: Write failure EINVAL in pid:617 [ 73.134935][ T2905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.179286][ T2905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.374872][ T2907] kvm: Disabled LAPIC found during irq injection [ 73.511689][ T2915] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.545237][ T2915] SELinux: failed to load policy [ 73.560692][ T2915] rust_binder: Error while translating object. [ 73.560742][ T2915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 73.566980][ T2915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113 [ 73.899470][ T2919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 74.396129][ T2951] rust_binder: Error while translating object. [ 74.419778][ T2948] kvm: Disabled LAPIC found during irq injection [ 74.428436][ T2951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 74.433717][ T2951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:630 [ 74.583599][ T2952] binder: Unknown parameter '' [ 74.669609][ T2959] syz.0.815: attempt to access beyond end of device [ 74.669609][ T2959] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 74.851123][ T2966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.852028][ T2963] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.890324][ T2963] rust_binder: Got transaction with invalid offset. [ 74.891199][ T2966] rust_binder: Got transaction with invalid offset. [ 74.896896][ T2963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.939553][ T2966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.984959][ T2963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 75.005296][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 75.157461][ T2975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.283941][ T2975] rust_binder: Error while translating object. [ 75.308738][ T2975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.314976][ T2975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 75.591030][ T2996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.612540][ T2994] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 75.690770][ T2996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.690833][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:647 [ 75.691637][ T2994] rust_binder: Error while translating object. [ 75.758446][ T2994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.769318][ T2994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 75.889726][ T3004] binder: Bad value for 'max' [ 76.117768][ T3013] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 76.197603][ T3016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.391491][ T3028] rust_binder: Failed copying remainder into alloc: EFAULT [ 76.391524][ T3028] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 76.414472][ T3028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 76.428354][ T3028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 76.505720][ T3031] rust_binder: Error while translating object. [ 76.515463][ T3031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 76.525297][ T3031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:137 [ 76.536685][ T3032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.718694][ T3034] random: crng reseeded on system resumption [ 76.930198][ T36] kauditd_printk_skb: 778 callbacks suppressed [ 76.930221][ T36] audit: type=1400 audit(1750388575.340:3894): avc: denied { read write } for pid=3041 comm="syz.0.840" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.973697][ T36] audit: type=1400 audit(1750388575.340:3895): avc: denied { read write open } for pid=3041 comm="syz.0.840" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.028348][ T36] audit: type=1400 audit(1750388575.430:3896): avc: denied { ioctl } for pid=3039 comm="syz.2.839" path="/dev/binderfs/binder0" dev="binder" ino=44 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.062964][ T36] audit: type=1400 audit(1750388575.440:3897): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.087125][ T36] audit: type=1400 audit(1750388575.440:3898): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.141270][ T36] audit: type=1400 audit(1750388575.440:3899): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.220476][ T36] audit: type=1400 audit(1750388575.470:3900): avc: denied { map } for pid=3039 comm="syz.2.839" path="/dev/binderfs/binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.251263][ T36] audit: type=1400 audit(1750388575.470:3901): avc: denied { read } for pid=3039 comm="syz.2.839" path="/dev/binderfs/binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.283164][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.298319][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.316164][ T3052] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 77.316191][ T3052] rust_binder: Error while translating object. [ 77.325204][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.334443][ T3057] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 77.339034][ T36] audit: type=1400 audit(1750388575.470:3902): avc: denied { ioctl } for pid=3039 comm="syz.2.839" path="/dev/binderfs/binder0" dev="binder" ino=44 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.341855][ T3052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.373304][ T36] audit: type=1400 audit(1750388575.470:3903): avc: denied { call } for pid=3039 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 77.374711][ T3052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:636 [ 77.382904][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.418643][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.426068][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.434596][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.442111][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.449585][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.457099][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.464649][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.472076][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.479551][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.486976][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.499709][ T31] hid-generic 009C:0008:0003.0007: unknown main item tag 0x0 [ 77.509063][ T31] hid-generic 009C:0008:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 77.707429][ T3063] fido_id[3063]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.726634][ T3069] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 77.730111][ T3069] rust_binder: Write failure EINVAL in pid:156 [ 77.858421][ T3073] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 77.897343][ T3073] rust_binder: Error while translating object. [ 77.918367][ T3073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.938290][ T3073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 77.951746][ T3078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.111029][ T3079] binder: Unknown parameter 'Wϫ/snd/timer' [ 78.164177][ T3079] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.349585][ T3099] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 78.349613][ T3099] rust_binder: Error while translating object. [ 78.388305][ T3099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.395675][ T3099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 78.538655][ T3101] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 78.644876][ T3111] input: syz0 as /devices/virtual/input/input56 [ 78.665580][ T3114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 78.665616][ T3114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:652 [ 78.680345][ T3115] rust_binder: Error while translating object. [ 78.689612][ T3114] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.708441][ T3114] rust_binder: Read failure Err(EFAULT) in pid:652 [ 78.716596][ T3115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.728590][ T3115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 78.766884][ T3111] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 79.009752][ T3124] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 79.104797][ T3131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.143622][ T3133] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 79.198339][ T3133] rust_binder: Read failure Err(EFAULT) in pid:659 [ 79.222276][ T3134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:680 [ 79.269524][ T3134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.354168][ T3134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.366180][ T3134] rust_binder: Write failure EINVAL in pid:680 [ 79.399801][ T3134] rust_binder: Write failure EINVAL in pid:680 [ 79.498158][ T3140] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 79.518335][ T3140] rust_binder: Error while translating object. [ 79.549356][ T3140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.577126][ T3140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:666 [ 79.832109][ T3153] SELinux: failed to load policy [ 79.849716][ T3153] rust_binder: Error in use_page_slow: ESRCH [ 79.849740][ T3153] rust_binder: use_range failure ESRCH [ 79.855783][ T3153] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 79.864255][ T3153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.878165][ T3153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 79.890734][ T3155] binder: Unknown parameter 'coyBLV"i5ntext' [ 79.911278][ T3156] rust_binder: Error in use_page_slow: ESRCH [ 79.911303][ T3156] rust_binder: use_range failure ESRCH [ 79.925222][ T3156] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 79.933998][ T3156] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.934722][ T3158] binder: Unknown parameter 'coyBLV"i5ntext' [ 79.951461][ T3156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 80.060556][ T3161] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.091075][ T3164] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 80.118329][ T3164] rust_binder: Write failure EINVAL in pid:665 [ 80.331369][ T3170] input: syz0 as /devices/virtual/input/input57 [ 80.548587][ T3177] binder: Unknown parameter 'm`x' [ 80.678275][ T3182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.679912][ T3179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.695288][ T3182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.742751][ T3179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.894857][ T3187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.010725][ T3190] rust_binder: Got transaction with invalid offset. [ 81.017253][ T3190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.039481][ T3190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 81.277389][ T3205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.379102][ T3210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.385634][ T3210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 81.702306][ T3216] rust_binder: Write failure EINVAL in pid:194 [ 81.808824][ T3220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:680 [ 81.943009][ T36] kauditd_printk_skb: 763 callbacks suppressed [ 81.943029][ T36] audit: type=1400 audit(1750388580.350:4667): avc: denied { mounton } for pid=3222 comm="syz.0.901" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.010409][ T3221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:693 [ 82.059475][ T36] audit: type=1400 audit(1750388580.390:4668): avc: denied { mount } for pid=3222 comm="syz.0.901" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 82.110617][ T36] audit: type=1400 audit(1750388580.410:4669): avc: denied { read write } for pid=3217 comm="syz.1.899" name="binder1" dev="binder" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.149608][ T36] audit: type=1400 audit(1750388580.410:4670): avc: denied { read write open } for pid=3217 comm="syz.1.899" path="/dev/binderfs/binder1" dev="binder" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.248789][ T36] audit: type=1400 audit(1750388580.410:4671): avc: denied { ioctl } for pid=3217 comm="syz.1.899" path="/dev/binderfs/binder1" dev="binder" ino=63 ioctlcmd=0x6205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.265673][ T3225] kvm: Disabled LAPIC found during irq injection [ 82.326954][ T36] audit: type=1400 audit(1750388580.420:4672): avc: denied { ioctl } for pid=3217 comm="syz.1.899" path="/dev/binderfs/binder1" dev="binder" ino=63 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.389386][ T36] audit: type=1400 audit(1750388580.420:4673): avc: denied { read } for pid=3217 comm="syz.1.899" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.389483][ T3225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (274877906944 ns). Using initial count to start timer. [ 82.488289][ T36] audit: type=1400 audit(1750388580.420:4674): avc: denied { read open } for pid=3217 comm="syz.1.899" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.492506][ T3236] rust_binder: Write failure EFAULT in pid:696 [ 82.540006][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.562032][ T36] audit: type=1400 audit(1750388580.420:4675): avc: denied { read write } for pid=2500 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.636280][ T3238] binder: Unknown parameter 'dont_hash' [ 82.769665][ T3245] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 82.951128][ T3255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.966330][ T3254] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 82.998361][ T3254] rust_binder: Write failure EINVAL in pid:690 [ 83.045156][ T3262] input: syz0 as /devices/virtual/input/input58 [ 83.060839][ T3262] input: failed to attach handler leds to device input58, error: -6 [ 83.093490][ T3260] binder: Bad value for 'max' [ 83.109881][ T3262] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 83.109908][ T3262] rust_binder: Error while translating object. [ 83.128842][ T3264] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.137025][ T3262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.145925][ T3264] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096) [ 83.155506][ T3262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 83.169575][ T3264] rust_binder: Error while translating object. [ 83.188330][ T3264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.204815][ T3264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:709 [ 83.359056][ T3273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.401042][ T3271] kvm: Disabled LAPIC found during irq injection [ 83.474414][ T3277] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 83.493934][ T3279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:711 [ 83.498813][ T3274] rust_binder: Write failure EINVAL in pid:206 [ 83.512654][ T3271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (55142785024 ns). Using initial count to start timer. [ 84.340276][ T3304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 84.489647][ T3313] binder: Unknown parameter 'statc' [ 84.519734][ T3310] kvm: Disabled LAPIC found during irq injection [ 84.567821][ T3310] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (55142785024 ns). Using initial count to start timer. [ 84.729859][ T3316] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 84.865540][ T3320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.905900][ T3320] rust_binder: Write failure EINVAL in pid:722 [ 84.919483][ T3322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 84.927103][ T3320] rust_binder: Failed to allocate buffer. len:4294966896, is_oneway:true [ 84.964668][ T3320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 84.995822][ T3320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:722 [ 85.152015][ T3333] rust_binder: Read failure Err(EAGAIN) in pid:220 [ 85.924007][ T3338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.644879][ T3360] kvm: Disabled LAPIC found during irq injection [ 86.727079][ T3360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2514866599 (321902924672 ns) > initial count (55142785024 ns). Using initial count to start timer. [ 86.965485][ T36] kauditd_printk_skb: 588 callbacks suppressed [ 86.965506][ T36] audit: type=1400 audit(1750388585.370:5253): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.034070][ T36] audit: type=1400 audit(1750388585.400:5254): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.099694][ T36] audit: type=1400 audit(1750388585.400:5255): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.163440][ T3372] rust_binder: Write failure EINVAL in pid:729 [ 87.176221][ T36] audit: type=1400 audit(1750388585.440:5256): avc: denied { read } for pid=3367 comm="syz.1.952" name="binder0" dev="binder" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.179847][ T3371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:737 [ 87.182580][ T36] audit: type=1400 audit(1750388585.440:5257): avc: denied { read open } for pid=3367 comm="syz.1.952" path="/dev/binderfs/binder0" dev="binder" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 87.182618][ T36] audit: type=1400 audit(1750388585.480:5258): avc: denied { read } for pid=3367 comm="syz.1.952" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.182646][ T36] audit: type=1400 audit(1750388585.480:5259): avc: denied { read open } for pid=3367 comm="syz.1.952" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.182676][ T36] audit: type=1400 audit(1750388585.490:5260): avc: denied { ioctl } for pid=3367 comm="syz.1.952" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.182704][ T36] audit: type=1400 audit(1750388585.490:5261): avc: denied { read } for pid=3367 comm="syz.1.952" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.260543][ T3355] rust_binder: Read failure Err(EFAULT) in pid:226 [ 87.332377][ T36] audit: type=1400 audit(1750388585.490:5262): avc: denied { read open } for pid=3367 comm="syz.1.952" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.382417][ T3371] rust_binder: Error while translating object. [ 87.382476][ T3371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.393404][ T3371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:737 [ 87.462377][ T3379] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.472288][ T3380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.474854][ T3377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:721 [ 87.565490][ T3379] kvm: kvm [3378]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 87.618898][ T3380] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 87.624485][ T3382] rust_binder: Write failure EINVAL in pid:229 [ 87.658364][ T3380] rust_binder: Write failure EINVAL in pid:733 [ 87.803011][ T3388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:724 [ 87.810599][ T3390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.822964][ T3387] rust_binder: Write failure EINVAL in pid:232 [ 87.827223][ T3388] rust_binder: Write failure EFAULT in pid:724 [ 88.025573][ T3393] kvm: Disabled LAPIC found during irq injection [ 88.189658][ T3396] binder: Unknown parameter ' : akcipher [ 88.189658][ T3396] [ 88.189658][ T3396] name : rfc4106(gcm(aes)) [ 88.189658][ T3396] driver : rfc4106-gcm-aesni-avx [ 88.189658][ T3396] module : kernel [ 88.189658][ T3396] priority : 500' [ 88.275334][ T3410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.336763][ T3413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.422907][ T3417] rust_binder: Write failure EINVAL in pid:732 [ 88.440726][ T3418] binder: Bad value for 'stats' [ 88.560429][ T3420] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 89.112550][ T3427] binder: Unknown parameter 'conte t184467440737095516150x0000000000000005' [ 89.218531][ T3432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.260958][ T3432] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 89.267446][ T3432] rust_binder: Error while translating object. [ 89.280763][ T3432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.286989][ T3432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:743 [ 89.581381][ T3450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.590658][ T3450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:745 [ 89.723686][ T3452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:748 [ 89.810353][ T3457] binder: Bad value for 'max' [ 89.820631][ T3456] rust_binder: Error in use_page_slow: ESRCH [ 89.820658][ T3456] rust_binder: use_range failure ESRCH [ 89.826696][ T3456] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 89.858058][ T3456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.879387][ T3456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:246 [ 90.066040][ T3467] binder: Unknown parameter 'sXaew]?sts' [ 90.082042][ T3468] SELinux: security_context_str_to_sid () failed with errno=-22 [ 90.110292][ T3470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.110768][ T3470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.441699][ T3489] SELinux: Context is not valid (left unmapped). [ 90.461705][ T3490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.596094][ T3496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.605896][ T3496] rust_binder: Write failure EINVAL in pid:765 [ 90.629140][ T3496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:765 [ 90.629990][ T3497] binder: Unknown parameter '/sys/power/disk' [ 90.732616][ T63] hid (null): unknown global tag 0x35 [ 90.738199][ T63] hid (null): unknown global tag 0xc [ 90.755760][ T3499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.789076][ T63] hid (null): global environment stack underflow [ 90.832105][ T63] hid-generic 0009:0005:0009.0008: unexpected long global item [ 90.846255][ T63] hid-generic 0009:0005:0009.0008: probe with driver hid-generic failed with error -22 [ 91.014263][ T3514] rust_binder: Error while translating object. [ 91.015450][ T3514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.038011][ T3514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 91.060784][ T3516] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 91.089524][ T3514] rust_binder: Write failure EINVAL in pid:262 [ 91.184468][ T3522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.204637][ T3522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:767 [ 91.336507][ T3625] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.377565][ T3626] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 135) [ 91.394300][ T3625] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 135) [ 91.429309][ T3626] rust_binder: Error while translating object. [ 91.450691][ T3625] rust_binder: Error while translating object. [ 91.458377][ T3626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.465684][ T3626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 91.466330][ T3625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.487906][ T3625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:768 [ 91.549478][ T12] bridge_slave_1: left allmulticast mode [ 91.581967][ T12] bridge_slave_1: left promiscuous mode [ 91.587677][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.629042][ T12] bridge_slave_0: left allmulticast mode [ 91.638284][ T12] bridge_slave_0: left promiscuous mode [ 91.644154][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.695491][ T3637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 91.774813][ T3642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.842307][ T12] veth1_macvtap: left promiscuous mode [ 91.882177][ T12] veth0_vlan: left promiscuous mode [ 91.900054][ T3645] rust_binder: Write failure EINVAL in pid:772 [ 91.969259][ T36] kauditd_printk_skb: 879 callbacks suppressed [ 91.969281][ T36] audit: type=1400 audit(1750388590.380:6142): avc: denied { read write } for pid=3641 comm="syz.1.1008" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.992913][ T3647] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 92.079746][ T36] audit: type=1400 audit(1750388590.380:6143): avc: denied { read write open } for pid=3641 comm="syz.1.1008" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.130885][ T36] audit: type=1400 audit(1750388590.390:6144): avc: denied { read write } for pid=3646 comm="syz.3.1010" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.193744][ T36] audit: type=1400 audit(1750388590.390:6145): avc: denied { read open } for pid=3646 comm="syz.3.1010" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.283290][ T36] audit: type=1400 audit(1750388590.400:6146): avc: denied { ioctl } for pid=3646 comm="syz.3.1010" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.303325][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.330468][ T3656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.341390][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.355711][ T3656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:776 [ 92.358059][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.367310][ T36] audit: type=1400 audit(1750388590.400:6147): avc: denied { remount } for pid=3646 comm="syz.3.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.374810][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.398609][ T36] audit: type=1400 audit(1750388590.420:6148): avc: denied { read } for pid=3650 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.402555][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.429397][ T36] audit: type=1400 audit(1750388590.420:6149): avc: denied { read open } for pid=3650 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.454940][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.467666][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.478532][ T3650] bridge_slave_0: entered allmulticast mode [ 92.483723][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.486256][ T3650] bridge_slave_0: entered promiscuous mode [ 92.500171][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.508871][ T36] audit: type=1400 audit(1750388590.430:6150): avc: denied { mounton } for pid=3650 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.531415][ T3660] rust_binder: Read failure Err(EAGAIN) in pid:775 [ 92.538483][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.539000][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.562958][ T36] audit: type=1400 audit(1750388590.430:6151): avc: denied { read } for pid=3641 comm="syz.1.1008" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.568347][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.585727][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.606118][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.610507][ T3650] bridge_slave_1: entered allmulticast mode [ 92.618376][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.625114][ T3650] bridge_slave_1: entered promiscuous mode [ 92.630062][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.644814][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.653317][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.662073][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.671192][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.679527][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.687086][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.696320][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.718320][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.725915][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.738305][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.749735][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.757425][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.758529][ T3664] input: syz1 as /devices/virtual/input/input59 [ 92.769180][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.782921][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.797617][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.805372][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.813098][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.820640][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.828369][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.835903][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.843395][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.851159][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.859722][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.867451][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.874926][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.882703][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.890158][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.897891][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.905386][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.913132][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.920609][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.929694][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.943583][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.951346][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.977544][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.987699][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 92.997217][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.009535][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.021763][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.029847][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.037548][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.053121][ T3675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.055295][ T3677] rust_binder: Write failure EINVAL in pid:780 [ 93.076771][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.100933][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.114540][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.118428][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.121652][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.129036][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.146996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.154124][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.173084][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.192803][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.213112][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.228300][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.235763][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.258898][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.266627][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.274106][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.288114][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.299041][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.306496][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.328319][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.335958][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.348184][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.356273][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.357450][ T3650] veth0_vlan: entered promiscuous mode [ 93.364743][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.379442][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.386881][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.396432][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.407505][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.415738][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.426539][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.434846][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.450222][ T3650] veth1_macvtap: entered promiscuous mode [ 93.465881][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.475016][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.483116][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.491559][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.499683][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.507273][ T63] hid-generic 03FF:000E:0007.0009: unknown main item tag 0x0 [ 93.518221][ T63] hid-generic 03FF:000E:0007.0009: hidraw0: HID v0.09 Device [syz1] on syz0 [ 93.574805][ T3695] binder: Bad value for 'max' [ 93.612956][ T3693] SELinux: policydb version 789 does not match my version range 15-33 [ 93.636891][ T3693] SELinux: failed to load policy [ 93.829554][ T3708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.842371][ T3706] rust_binder: Write failure EINVAL in pid:2 [ 93.844707][ T3708] rust_binder: Error while translating object. [ 93.875363][ T3708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.888943][ T3708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:795 [ 94.020019][ T3715] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 94.094055][ T3722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.141007][ T3722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.198123][ T3730] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 94.229244][ T3722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.231905][ T3722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.248370][ T3730] SELinux: failed to load policy [ 94.262859][ T3722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:800 [ 94.286016][ T3722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.321344][ T3722] rust_binder: Write failure EINVAL in pid:800 [ 94.539468][ T3747] rust_binder: Write failure EFAULT in pid:11 [ 94.640998][ T3749] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 94.869607][ T3759] fido_id[3759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 95.080592][ T3769] binder: Unknown parameter '0x00000000000000040x0000000000000004' [ 95.120040][ T3769] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 95.131835][ T3775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:814 [ 95.319951][ T3779] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 96.112192][ T3811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.154830][ T3811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:812 [ 96.182311][ T3811] rust_binder: Error while translating object. [ 96.208501][ T3811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.218319][ T3811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:812 [ 96.985403][ T36] kauditd_printk_skb: 981 callbacks suppressed [ 96.985426][ T36] audit: type=1400 audit(1750388595.390:7133): avc: denied { read write } for pid=3873 comm="syz.1.1078" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 97.070828][ T36] audit: type=1400 audit(1750388595.410:7134): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.095691][ T36] audit: type=1400 audit(1750388595.430:7135): avc: denied { read write } for pid=3873 comm="syz.1.1078" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 97.128742][ T36] audit: type=1400 audit(1750388595.440:7136): avc: denied { read write } for pid=3873 comm="syz.1.1078" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 97.183729][ T36] audit: type=1400 audit(1750388595.460:7137): avc: denied { read } for pid=3875 comm="syz.0.1079" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 97.210982][ T36] audit: type=1400 audit(1750388595.460:7138): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 97.237950][ T36] audit: type=1400 audit(1750388595.470:7139): avc: denied { read } for pid=3875 comm="syz.0.1079" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 97.267862][ T36] audit: type=1400 audit(1750388595.480:7140): avc: denied { read } for pid=3877 comm="syz.3.1080" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 97.292849][ T36] audit: type=1400 audit(1750388595.480:7141): avc: denied { read } for pid=3875 comm="syz.0.1079" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 97.318007][ T36] audit: type=1400 audit(1750388595.480:7142): avc: denied { read append } for pid=3877 comm="syz.3.1080" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 97.882508][ T3954] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 98.853161][ T4073] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 98.863488][ T4073] pim6reg0: linktype set to 769 [ 99.297278][ T4138] tap0: tun_chr_ioctl cmd 1074025678 [ 99.302720][ T4138] tap0: group set to 0 [ 99.527814][ T46] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.537417][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.554860][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.569467][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.586211][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.594348][ T4170] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.601843][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.613505][ T4170] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.620304][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.627224][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.634035][ T4170] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.641203][ T4170] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.649273][ T4168] Bluetooth: hci1: Frame reassembly failed (-84) [ 99.655721][ T4167] Bluetooth: hci1: Frame reassembly failed (-84) [ 101.248336][ T634] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.255059][ T1779] Bluetooth: hci0: command 0x1003 tx timeout [ 101.568766][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 101.575036][ T634] Bluetooth: hci1: command 0x1003 tx timeout [ 101.766202][ T4317] kernel profiling enabled (shift: 8) [ 101.989729][ T36] kauditd_printk_skb: 751 callbacks suppressed [ 101.989749][ T36] audit: type=1400 audit(1750388600.400:7894): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.027560][ T36] audit: type=1400 audit(1750388600.420:7895): avc: denied { read } for pid=4344 comm="syz.2.1253" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 102.087848][ T36] audit: type=1400 audit(1750388600.420:7896): avc: denied { read write } for pid=4344 comm="syz.2.1253" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 102.128897][ T36] audit: type=1400 audit(1750388600.420:7897): avc: denied { read write } for pid=4344 comm="syz.2.1253" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 102.154137][ T36] audit: type=1400 audit(1750388600.420:7898): avc: denied { read } for pid=4344 comm="syz.2.1253" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 102.178338][ T36] audit: type=1400 audit(1750388600.420:7899): avc: denied { read write } for pid=4344 comm="syz.2.1253" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 102.228352][ T36] audit: type=1400 audit(1750388600.460:7900): avc: denied { read append } for pid=4346 comm="syz.0.1252" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 102.259287][ T36] audit: type=1400 audit(1750388600.460:7901): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.284344][ T36] audit: type=1400 audit(1750388600.460:7902): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 102.310725][ T36] audit: type=1400 audit(1750388600.490:7903): avc: denied { read write } for pid=3650 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 103.606157][ T4524] serio: Serial port ttynull [ 106.998609][ T36] kauditd_printk_skb: 907 callbacks suppressed [ 106.998628][ T36] audit: type=1400 audit(1750388605.410:8811): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.028983][ T36] audit: type=1400 audit(1750388605.410:8812): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.054429][ T36] audit: type=1400 audit(1750388605.410:8813): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.084748][ T36] audit: type=1400 audit(1750388605.410:8814): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.109363][ T36] audit: type=1400 audit(1750388605.410:8815): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.122541][ T4850] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.133962][ T36] audit: type=1400 audit(1750388605.410:8816): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.142287][ T4850] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 107.169167][ T36] audit: type=1400 audit(1750388605.410:8817): avc: denied { read append } for pid=4848 comm="syz.3.1433" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 107.175305][ T4850] audit: backlog limit exceeded [ 107.201512][ T4859] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 107.805177][ T4916] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.822159][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.818304][ T634] Bluetooth: hci0: command 0x1003 tx timeout [ 109.818326][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.009415][ T36] kauditd_printk_skb: 885 callbacks suppressed [ 112.009434][ T36] audit: type=1400 audit(1750388610.420:9703): avc: denied { mounton } for pid=5286 comm="syz.2.1593" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 112.078213][ T36] audit: type=1400 audit(1750388610.450:9704): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.146710][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.158314][ T5296] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.161928][ T36] audit: type=1400 audit(1750388610.460:9705): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.224207][ T36] audit: type=1400 audit(1750388610.470:9706): avc: denied { read write } for pid=5290 comm="syz.2.1596" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 112.278202][ T36] audit: type=1400 audit(1750388610.480:9707): avc: denied { read } for pid=5290 comm="syz.2.1596" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 112.318284][ T36] audit: type=1400 audit(1750388610.490:9708): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.368271][ T36] audit: type=1400 audit(1750388610.490:9709): avc: denied { read } for pid=5292 comm="syz.3.1595" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 112.410730][ T36] audit: type=1400 audit(1750388610.530:9710): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.467092][ T36] audit: type=1400 audit(1750388610.540:9711): avc: denied { read } for pid=5295 comm="syz.2.1597" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 112.516560][ T36] audit: type=1400 audit(1750388610.540:9712): avc: denied { read } for pid=5295 comm="syz.2.1597" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 113.294536][ T5401] ptm ptm33: ldisc open failed (-12), clearing slot 33 [ 114.208307][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.404301][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.448371][ T634] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.568012][ T5666] cgroup: fork rejected by pids controller in /syz3 [ 117.036689][ T36] kauditd_printk_skb: 1047 callbacks suppressed [ 117.036707][ T36] audit: type=1400 audit(1750388615.440:10760): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.067552][ T36] audit: type=1400 audit(1750388615.450:10761): avc: denied { read } for pid=5751 comm="syz.1.1755" name="binder0" dev="binder" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 117.097918][ T36] audit: type=1400 audit(1750388615.460:10762): avc: denied { read } for pid=5750 comm="syz.0.1754" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 117.138193][ T36] audit: type=1400 audit(1750388615.460:10763): avc: denied { read } for pid=5750 comm="syz.0.1754" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 117.171260][ T36] audit: type=1400 audit(1750388615.470:10764): avc: denied { read } for pid=5750 comm="syz.0.1754" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 117.194785][ T3650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.194845][ T5756] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.205936][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.209890][ T36] audit: type=1400 audit(1750388615.470:10765): avc: denied { read } for pid=5751 comm="syz.1.1755" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 117.216782][ T3650] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 120.215372][ T5959] syz.2.1828: attempt to access beyond end of device [ 120.215372][ T5959] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 120.249689][ T5962] tap0: tun_chr_ioctl cmd 1074812118 [ 121.233916][ T6072] cgroup: fork rejected by pids controller in /syz1 [ 121.334901][ T2533] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.355479][ T634] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 121.429790][ T46] bridge_slave_1: left allmulticast mode [ 121.435556][ T46] bridge_slave_1: left promiscuous mode [ 121.445901][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.463054][ T46] bridge_slave_0: left allmulticast mode [ 121.473669][ T46] bridge_slave_0: left promiscuous mode [ 121.483795][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.640979][ T46] veth1_macvtap: left promiscuous mode [ 121.646566][ T46] veth0_vlan: left promiscuous mode [ 122.055152][ T36] kauditd_printk_skb: 549 callbacks suppressed [ 122.055170][ T36] audit: type=1400 audit(1750388620.460:11292): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.451082][ T36] audit: type=1400 audit(1750388620.860:11293): avc: denied { execmem } for pid=6087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.488314][ T36] audit: type=1400 audit(1750388620.860:11294): avc: denied { read } for pid=6088 comm="syz.0.1871" name="binder1" dev="binder" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 122.512258][ T36] audit: type=1400 audit(1750388620.880:11295): avc: denied { read write } for pid=6090 comm="syz.3.1872" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 122.536628][ T36] audit: type=1400 audit(1750388620.890:11296): avc: denied { read } for pid=6090 comm="syz.3.1872" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.559604][ T36] audit: type=1400 audit(1750388620.890:11297): avc: denied { read write } for pid=3650 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.583838][ T36] audit: type=1400 audit(1750388620.890:11298): avc: denied { read } for pid=6090 comm="syz.3.1872" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.606645][ T36] audit: type=1400 audit(1750388620.890:11299): avc: denied { read } for pid=6090 comm="syz.3.1872" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 122.629453][ T36] audit: type=1400 audit(1750388620.890:11300): avc: denied { read } for pid=6090 comm="syz.3.1872" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 122.652500][ T36] audit: type=1400 audit(1750388620.890:11301): avc: denied { read } for pid=6090 comm="syz.3.1872" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 123.408462][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.408488][ T634] Bluetooth: hci0: command 0x1003 tx timeout [ 123.820378][ T6103] binfmt_misc: register: failed to install interpreter file ./file0 [ 125.808409][ T634] Bluetooth: hci0: command 0x1003 tx timeout [ 125.808409][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.657078][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 127.657098][ T36] audit: type=1400 audit(1750388626.060:11357): avc: denied { execmem } for pid=6129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 127.689313][ T36] audit: type=1400 audit(1750388626.100:11358): avc: denied { read } for pid=6131 comm="syz.3.1887" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 127.721511][ T36] audit: type=1400 audit(1750388626.100:11359): avc: denied { read write } for pid=6130 comm="syz.0.1885" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 127.746077][ T36] audit: type=1400 audit(1750388626.100:11360): avc: denied { read write } for pid=6133 comm="syz.2.1886" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 127.778376][ T36] audit: type=1400 audit(1750388626.100:11361): avc: denied { read } for pid=6133 comm="syz.2.1886" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 127.801618][ T36] audit: type=1400 audit(1750388626.110:11362): avc: denied { read } for pid=6133 comm="syz.2.1886" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 127.824415][ T36] audit: type=1400 audit(1750388626.110:11363): avc: denied { read } for pid=6133 comm="syz.2.1886" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 127.847807][ T36] audit: type=1400 audit(1750388626.120:11364): avc: denied { read } for pid=6131 comm="syz.3.1887" name="binder1" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 127.870632][ T36] audit: type=1400 audit(1750388626.120:11365): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.894766][ T36] audit: type=1400 audit(1750388626.130:11366): avc: denied { read write } for pid=6131 comm="syz.3.1887" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 133.133652][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 133.133672][ T36] audit: type=1400 audit(1750388631.540:11472): avc: denied { execmem } for pid=6172 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 133.169990][ T36] audit: type=1400 audit(1750388631.550:11473): avc: denied { append } for pid=6174 comm="syz.3.1899" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 133.193937][ T36] audit: type=1400 audit(1750388631.580:11474): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.198794][ T6176] tun0: tun_chr_ioctl cmd 1074025675 [ 133.218126][ T36] audit: type=1400 audit(1750388631.580:11475): avc: denied { read write } for pid=6173 comm="syz.0.1897" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 133.224716][ T6176] tun0: persist disabled [ 133.246808][ T36] audit: type=1400 audit(1750388631.580:11476): avc: denied { read append } for pid=6175 comm="syz.2.1898" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 133.278341][ T36] audit: type=1400 audit(1750388631.580:11477): avc: denied { read append } for pid=6175 comm="syz.2.1898" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 133.301897][ T36] audit: type=1400 audit(1750388631.600:11478): avc: denied { read } for pid=6175 comm="syz.2.1898" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 133.337492][ T36] audit: type=1400 audit(1750388631.600:11479): avc: denied { read } for pid=6175 comm="syz.2.1898" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 133.360299][ T36] audit: type=1400 audit(1750388631.680:11480): avc: denied { read } for pid=6175 comm="syz.2.1898" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 133.383217][ T36] audit: type=1400 audit(1750388631.680:11481): avc: denied { read } for pid=6175 comm="syz.2.1898" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.308140][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 138.308160][ T36] audit: type=1400 audit(1750388636.710:11518): avc: denied { execmem } for pid=6201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 138.358278][ T36] audit: type=1400 audit(1750388636.740:11519): avc: denied { read append } for pid=6202 comm="syz.0.1906" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 138.388367][ T36] audit: type=1400 audit(1750388636.740:11520): avc: denied { read } for pid=6202 comm="syz.0.1906" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.411668][ T36] audit: type=1400 audit(1750388636.740:11521): avc: denied { read append } for pid=6202 comm="syz.0.1906" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=0 [ 138.438147][ T36] audit: type=1400 audit(1750388636.740:11522): avc: denied { read } for pid=6203 comm="syz.2.1907" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.461133][ T36] audit: type=1400 audit(1750388636.740:11523): avc: denied { read } for pid=6202 comm="syz.0.1906" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.484022][ T36] audit: type=1400 audit(1750388636.750:11524): avc: denied { read } for pid=6202 comm="syz.0.1906" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 138.506821][ T36] audit: type=1400 audit(1750388636.750:11525): avc: denied { read } for pid=6204 comm="syz.3.1908" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.535090][ T36] audit: type=1400 audit(1750388636.750:11526): avc: denied { read } for pid=6204 comm="syz.3.1908" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.558031][ T36] audit: type=1400 audit(1750388636.760:11527): avc: denied { read write } for pid=3650 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.361378][ T46] bridge_slave_1: left allmulticast mode [ 142.367082][ T46] bridge_slave_1: left promiscuous mode [ 142.388397][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.408745][ T46] bridge_slave_0: left allmulticast mode [ 142.414524][ T46] bridge_slave_0: left promiscuous mode [ 142.428351][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.560835][ T46] veth1_macvtap: left promiscuous mode [ 142.566427][ T46] veth0_vlan: left promiscuous mode [ 142.840891][ T46] bridge_slave_1: left allmulticast mode [ 142.846563][ T46] bridge_slave_1: left promiscuous mode [ 142.852230][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.859877][ T46] bridge_slave_0: left allmulticast mode [ 142.865526][ T46] bridge_slave_0: left promiscuous mode [ 142.871190][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.879058][ T46] bridge_slave_1: left allmulticast mode [ 142.884697][ T46] bridge_slave_1: left promiscuous mode [ 142.890388][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.897935][ T46] bridge_slave_0: left allmulticast mode [ 142.903697][ T46] bridge_slave_0: left promiscuous mode [ 142.909330][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.092106][ T46] veth1_macvtap: left promiscuous mode [ 143.097686][ T46] veth0_vlan: left promiscuous mode [ 143.103221][ T46] veth1_macvtap: left promiscuous mode [ 143.110361][ T46] veth0_vlan: left promiscuous mode