last executing test programs: 2m25.847736627s ago: executing program 3 (id=32): prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141442, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) read(r3, 0x0, 0x0) mmap$binder(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x11, r3, 0x800000000008) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x805, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m24.959560901s ago: executing program 3 (id=50): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) 2m24.952609751s ago: executing program 3 (id=51): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000040), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='dont_harh,\x00']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 2m24.803840143s ago: executing program 3 (id=53): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2m24.802942593s ago: executing program 3 (id=55): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xb0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac1"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80003ff) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000280)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x40, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x1}, @exit_looper, @acquire_done, @release={0x40046306, 0x3}, @clear_death], 0x24, 0x0, &(0x7f0000000140)="dddadd18cb86cd9648179630c41d23173a5f81fe8e3591fd50c409d3e3f3ac88e6fe3b79"}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r4, &(0x7f00000000c0)="e383ad0e4a", 0x5) read(r4, 0x0, 0x5d) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x4, 0xfffffffffffffffc, 0x8001}) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m23.865114968s ago: executing program 3 (id=70): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (rerun: 32) 2m8.584180264s ago: executing program 32 (id=70): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (rerun: 32) 2m7.860993566s ago: executing program 4 (id=261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x4, 0x0, 0x9105, 0x6, 0x0, 0x800, 0x2, 0x0, 0x1, 0x63b6, 0x6, 0x0, 0x2], 0xdddd0000, 0x70006}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000003c0)={0x2, 0x988, 0x0, &(0x7f0000000240)="dc6fd06d857dc9f276e6", 0x0, 0xfffffffffffffed3}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x3, 0x3a, '.^', 0x3a, '&]!/', 0x3a, './cgroup'}, 0x2e) ioctl$int_in(r5, 0x5421, &(0x7f0000000480)=0x410) ioctl$AUTOFS_IOC_FAIL(r4, 0xae03, 0xffffffffffffffff) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0xa6, 0x3, 0xf9, '\x00', 0x7fffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, &(0x7f00000001c0)=""/59, &(0x7f0000000300)=""/157, &(0x7f0000000480)=""/142, 0xffff1000}) read(r7, &(0x7f00000005c0)=""/81, 0x51) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000003b000000000000000300008005000000"]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r12, 0x8010743f, &(0x7f0000000100)) 2m7.679711918s ago: executing program 4 (id=274): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r2, 0x2000) 2m7.516314371s ago: executing program 4 (id=278): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000480), 0xa0e00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r0, 0x2000) write(r0, &(0x7f0000000000)="bcfd4029d4ebf6206b109c04a341ff1e117b17c5706e3b4706536d9f56321e79213b21bf7dd3d82514", 0x29) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x183b42, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x103143, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) write$cgroup_subtree(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="2b63707561636374204f6eb1f75f7072696f202d626c6b696f202d64657669636573202b72646d61202d6e65745f7072696f202d726c696d6974202b72646d61202b6e65745f7072696f202d6e657420"], 0x50) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000440)={0x10000, 0x80, 0x1c0, &(0x7f0000000040)=[0x1000, 0xfff, 0xffffffffffff592d, 0x8, 0x1, 0x4, 0x8, 0x4, 0x4, 0x5, 0x1, 0x6, 0xfffffffffffffff3, 0xb, 0x91e8, 0x8af, 0x200, 0x8, 0x8, 0x7, 0x8, 0x5, 0x9, 0x76e, 0xff, 0x2, 0x10, 0x9, 0x81, 0x800, 0x9, 0x70, 0x10000, 0x6, 0x7, 0xa1, 0x400, 0x3, 0x2, 0x5, 0x800, 0x5, 0x7, 0x81, 0x7fff, 0x80, 0x6eae8def, 0x1, 0x3ff, 0xfffffffffffffffd, 0x1, 0x80, 0x7, 0x8, 0xb, 0xc3, 0x2, 0xff, 0xffffffffffffff3c, 0x80, 0xffffffffffffffff, 0xb, 0x9, 0x1b1, 0x6, 0x0, 0x8001, 0x2, 0xffffffffffffffff, 0x5, 0x3, 0x6, 0x3, 0x3ff, 0x8, 0x0, 0x1, 0xb4f, 0x4, 0x8000, 0x368, 0x819, 0x401, 0xff4, 0xfffffffeffffffff, 0x101, 0x10000, 0x10000, 0x3, 0x9, 0x6, 0x3, 0x6, 0x7, 0x7, 0x8, 0x7, 0x9, 0xffffffff, 0x8, 0x1000, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x8, 0x8, 0x8000000000000000, 0x1, 0xfffffffffffffff8, 0x7, 0xfff, 0x200, 0x9, 0x7, 0x6, 0x3, 0x0, 0x9, 0x13, 0xfffffffffffffff1, 0x2dea, 0xd05, 0x5, 0x4, 0x8, 0x5, 0x4]}) 2m7.025715179s ago: executing program 4 (id=287): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d618ebeba7c79c521e730303030303031373737373737373737372c00"]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002240), 0x201d00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000021c0)={0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r5, &(0x7f00000000c0)=r3, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r3, 0x12) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe4, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "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"}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000000)={{0x80a0000, 0x1, 0x9, 0x4, 0x7, 0x2, 0x4, 0x69, 0x4, 0x6, 0x6, 0xc7}, {0x2, 0x1000, 0x1e, 0xb, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5, 0xfe, 0x5}, {0x5000, 0xffff1000, 0x4, 0x7f, 0x2, 0x1, 0x6, 0x3, 0x1, 0xf, 0x3, 0x8}, {0xeeef0000, 0xeeeed000, 0xc, 0x81, 0xa, 0x6, 0x40, 0x1, 0x3, 0x8, 0x5, 0x6}, {0x1000, 0xffff1000, 0xa, 0xd, 0x0, 0x5, 0x1, 0x7, 0x8, 0x5e, 0xb7, 0x6}, {0x0, 0x5000, 0x9, 0x4, 0x9, 0x3, 0x7, 0xe, 0x5, 0x2, 0x2, 0x5}, {0x10000, 0x0, 0xf, 0xa6, 0xd1, 0x2, 0x4, 0xdc, 0x3, 0x8, 0xd2, 0xff}, {0x5000, 0x10000, 0xc, 0xd, 0x5b, 0x3, 0x8, 0x8, 0x33, 0x6, 0x7f, 0x2}, {0x8000000, 0x80}, {0x1, 0xa00}, 0x40000033, 0x0, 0xf000, 0x20, 0xe, 0x8401, 0xd000, [0xfc, 0x8, 0x8, 0x40]}) 1m51.875395632s ago: executing program 33 (id=287): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d618ebeba7c79c521e730303030303031373737373737373737372c00"]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002240), 0x201d00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = getpid() r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000021c0)={0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r5, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r5, &(0x7f00000000c0)=r3, 0x12) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r3, 0x12) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x1, 0x5, 0xb, 0x0, 0xffffffff, 0x6, 0x6, 0x9, 0x8, 0x8, 0x6, 0x2, 0x0, 0x6, 0x6, 0xe4, 0x1, 0x29, 0x0, '\x00', 0x10, 0x6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc49127a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000000)={{0x80a0000, 0x1, 0x9, 0x4, 0x7, 0x2, 0x4, 0x69, 0x4, 0x6, 0x6, 0xc7}, {0x2, 0x1000, 0x1e, 0xb, 0x8, 0x5, 0x1, 0x9, 0x0, 0x5, 0xfe, 0x5}, {0x5000, 0xffff1000, 0x4, 0x7f, 0x2, 0x1, 0x6, 0x3, 0x1, 0xf, 0x3, 0x8}, {0xeeef0000, 0xeeeed000, 0xc, 0x81, 0xa, 0x6, 0x40, 0x1, 0x3, 0x8, 0x5, 0x6}, {0x1000, 0xffff1000, 0xa, 0xd, 0x0, 0x5, 0x1, 0x7, 0x8, 0x5e, 0xb7, 0x6}, {0x0, 0x5000, 0x9, 0x4, 0x9, 0x3, 0x7, 0xe, 0x5, 0x2, 0x2, 0x5}, {0x10000, 0x0, 0xf, 0xa6, 0xd1, 0x2, 0x4, 0xdc, 0x3, 0x8, 0xd2, 0xff}, {0x5000, 0x10000, 0xc, 0xd, 0x5b, 0x3, 0x8, 0x8, 0x33, 0x6, 0x7f, 0x2}, {0x8000000, 0x80}, {0x1, 0xa00}, 0x40000033, 0x0, 0xf000, 0x20, 0xe, 0x8401, 0xd000, [0xfc, 0x8, 0x8, 0x40]}) 1m25.731531848s ago: executing program 2 (id=813): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x41, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 1m25.676774479s ago: executing program 2 (id=814): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) write(r0, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f5f7521480ed9bb21e3aad8044a0229fe79b5ebce0ec53ff51b7bb71c7ef63354a141a1175a5d73838de92212b50415851acc8cffa6d14d4982b957e8021f5eb8afd1a57f8fd33be3a7829ac14e2d19e069c73f6ff392d38c0174e2891c6c0ae8df5338d8", 0x96) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x5, 0x0, 0x0, @msi={0x6fb4}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffff7}]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x51, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadceccdc25a601a2cd1e7062b09bb6ea48827be39d2349145944e8856b2483d21e4521e01b2b9881182e3f23"}) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) read$FUSE(r1, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 1m25.228414216s ago: executing program 2 (id=819): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xbdf, 0x38, 0x3, 0x3}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x7e) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000000c0)=0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x1) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x0, 'rlimit'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'memory'}]}, 0x1f) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000180)) r2 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r2, 0x7d849000) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x10000, 0x104) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x428100, 0x89) unlinkat(r4, &(0x7f00000002c0)='./file0\x00', 0x200) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000340)=0x1) unlinkat(r1, &(0x7f0000000380)='./file0\x00', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) mkdirat(r0, &(0x7f00000003c0)='./file0\x00', 0x2) r7 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x40400, 0x10) unlinkat(r7, &(0x7f0000000440)='./file0\x00', 0x200) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f00000004c0)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000500)={0x9a, 0xfc3, 0xb5, 0x10}) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$cgroup_subtree(r7, &(0x7f0000000540)={[{0x2b, 'pids'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x0, 'net'}]}, 0x15) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000580)={0x8, 0x40, 0xb, 0x101}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f00000005c0)={{0x0, 0x3, 0x4, 0x200, 0x8, 0x7, 0x3, 0x6, 0xfffffffb, 0xe, 0x3, 0x7, 0xfe4, 0x4, 0xff}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_ro(r7, &(0x7f0000000680)='blkio.throttle.io_serviced\x00', 0x0, 0x0) 1m25.083477298s ago: executing program 2 (id=822): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x110b}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000240000040000000003f20000000000005a2d021022be1cda0fcbc4d676cd33bbd75db2aea5db12c5792f1ce00f81ffa34ec92a35ab065179846102fa17b8f43a5bb63fa2c02b623868ab7a1c7a8d4800afba9c1e0cb09c7d1f3a49455167a2495a4373e810c3c9910d001a0228a4ef59b9032ab62a83856ce67f68b3399c158ef9f3f6dd19ace36dfda9725909b2139146bcbba397c77deece93a2f1e76d6aa1faebf3fe7d8e83bb0aaa1a363edb627516479aaaaa3f751bbb47ffbfe0000000"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder1\x00', 0x800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x511000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffd) write(r4, &(0x7f00000002c0)="da8f02fec0d9f5dadd9f2f9f74555a4cbad1ba858999a970bc811193acd28f0879985ae5f640eb5e4dff0a0a04d23973d257ac0a2fee5cbe7f1630d311f3991ca1117f0cb25973da8b1b366310bda10a095685c22937dc3f80a0ab3a8dd7fe8ae5512405aa966211791d385cd96ac50bffd0fe8b364deb091872592e", 0x7c) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edffcd0000000000ffddaa5bff"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f0000000340)=[{0x400, 0x6a, 0x1, 0x2}, {0xc2, 0x9, 0x3, 0x9}, {0x0, 0x3, 0x8, 0x6}, {0x40, 0x1, 0x5, 0x8}, {0xe372, 0x52, 0x4, 0x1000}]}) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)=0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r7, 0x5000aea5, &(0x7f0000000080)=ANY=[]) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x2000001, 0xfffffffffffffffc, 0x0, 0xfffffffffffff43b, 0x0, 0x9, 0xffc, 0x100000000, 0x0, 0x3fffffffffffff, 0x1, 0x3, 0xb, 0x0, 0x8c], 0x0, 0x240140}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r9, 0xffffffffffffffff, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) write(r10, &(0x7f0000000080)="1a", 0x1) 1m24.819186782s ago: executing program 2 (id=826): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x3, 0xfffffffffffffffa}}, 0x28) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (rerun: 32) 1m24.563507165s ago: executing program 2 (id=830): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0xff03, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) close(0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 1m9.559741166s ago: executing program 34 (id=830): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0xff03, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) close(0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 22.209928295s ago: executing program 5 (id=1588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r1, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz1\x00', {}, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xfde7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc658, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8161, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x7ff, 0xcf12, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x1, 0x40, 0x0, 0xffff0d42, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x5, 0x0, 0x2, 0x4e, 0x0, 0x0, 0xd84c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xb77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0417, 0x0, 0x3dd55859, 0x0, 0x0, 0x4b8, 0x0, 0x800, 0x0, 0x46, 0x0, 0x288, 0xd54b, 0x0, 0x0, 0x20, 0x9, 0x20000000, 0x7], [0x6, 0x0, 0x0, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x4, 0x3, 0x7, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x99, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0xc, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x32ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffefff01, 0x0, 0x1000], [0x5, 0x0, 0xd7, 0x0, 0x1, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x800, 0x8, 0x0, 0x8, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6168, 0x0, 0x9, 0x1a, 0x921, 0x0, 0x0, 0x0, 0x3ff, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57e, 0x37a9, 0x0, 0x3, 0x3]}, 0x45c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000340)='nl80211\x00\xfd\"0\xcc\xd2W\x84Pb\xd7\x87,h\xce\x98\xec\xc2oe\x85\xfd/\xff\xc1\x80u\xd63\xeb\n\x8d~\xc9\x11\xe1\xcf\xf6l\x82Q\x1b\xd9Py\xfe=\xb60\x11\xdd\xae\xbd~\xc51\x1a\xb7\x81#`\x81\xf3\xefE\x06F\vy\v\xe32\x01\xc3K\x1f\xe7u\xa5T@G\xda\x1c\xd7\xb5\xe8\\\xd5z\x7f\xc8Y1\xa9\x9a\xa4\x0e\x9d\x83AVJ@\x99\xbcAx\xff\xbfZ\x17\x9c\x00_\xbb\x19\xb9O\\\xd8ujf|)H\xf6>1i') ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0xc, 0x65, 0x7, 0x7, 0x1, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xdddd0000, 0x8, 0x8, 0xff, 0x4, 0x85, 0xe, 0x0, 0x3c, 0x7d}, {0x3000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x80}, {0x10000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x6}, {0x6000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x138, 0x8000000000b, 0xf801, 0xd5dcf004, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x10001, 0x280, 0x40, &(0x7f0000000580)=[0x6c7, 0x200, 0x1, 0x7, 0x2, 0x1, 0x400, 0x8001, 0x5, 0x5, 0x8, 0x0, 0xffab, 0x8, 0x492, 0x5, 0x3ff, 0x7f, 0x6, 0xf, 0x81, 0x3, 0x2, 0x4, 0xff, 0x4, 0x4, 0x9, 0x0, 0x3, 0xffff, 0x3, 0x480000000003, 0x6, 0x4dcd, 0x5, 0x100, 0x4, 0x4, 0x2000000000006fc, 0x568b, 0x1, 0x2, 0x1, 0x7, 0xffffffffffff8000, 0xffffffffffff826b, 0xffffffffffff998c, 0x5, 0xece2, 0x80000000, 0x1, 0x3, 0x5, 0x2, 0xa35, 0xe, 0x0, 0x70, 0x7ff, 0x2, 0x3, 0x3, 0x9, 0xb, 0x6, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x80, 0x3, 0x8, 0xe82, 0x4, 0x6, 0xf, 0x200, 0x101, 0x9, 0x0, 0x9, 0x4, 0x8, 0xc, 0x5, 0xc, 0x0, 0x2, 0xfff, 0x7f, 0xb, 0xe63, 0x4, 0x1, 0x8, 0xb, 0x7, 0x1c1e, 0x3, 0x100, 0x0, 0x400, 0xe, 0x80000001, 0x2, 0x3, 0x2, 0x5, 0x8, 0x0, 0x5, 0x3, 0x8000000000000000, 0x7, 0x1000, 0x6, 0x4, 0x4, 0x5, 0x0, 0x1000, 0x10000, 0x8, 0x10000, 0x401, 0xd8d2219, 0x760]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x3c, 0x6}, {0x6}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 21.27099511s ago: executing program 5 (id=1620): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae1060238c6ebf2a309079606000000000000167eaa250489f09e7c133beb717a0e137489ab04"], 0x5c) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x143202, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffffeffffffff7fb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$UHID_INPUT(r1, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0x1006) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x7fffffff, 0x858f, 0x1, 0x9, 0x2}) write$vga_arbiter(r7, &(0x7f00000000c0)=@target={'target ', {'PCI:', '14', ':', '15', ':', '19', '.', '1e'}}, 0x17) mmap$binder(&(0x7f00008b8000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x7) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd, 0x13, r4, 0x4758d000) 21.191164071s ago: executing program 5 (id=1625): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40087705, 0x7) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) 21.136683122s ago: executing program 5 (id=1627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1000001, 0x10, r1, 0x1adf4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x1, 0x0) write$uinput_user_dev(r2, &(0x7f00000002c0)={'syz0\x00', {0x7ff, 0x6, 0x4, 0x9}, 0x48, [0xf03b, 0x4, 0x6b54ba5b, 0x8, 0x7ff, 0x19, 0x401, 0x6, 0x8, 0x5, 0x7, 0x7, 0x3, 0x8, 0x0, 0x43a, 0x400, 0x1, 0x6, 0x9, 0x9, 0x730, 0xfffff000, 0x61, 0x4, 0x80000000, 0x1, 0x1, 0x9, 0x1, 0x1c0, 0xfff, 0x8, 0x864c, 0x2, 0x5, 0x400, 0x17cbc6a7, 0xfc3, 0x7, 0x1, 0x6, 0x400, 0x80, 0x81, 0xf3, 0x8d, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x100, 0x7f, 0x200, 0x0, 0x6, 0xfffffb81, 0x2, 0xaeb80000, 0x507440df, 0x8, 0x147, 0x1], [0x401, 0x800, 0x5, 0x3ff, 0x2, 0x0, 0x1ff, 0x8, 0x7, 0x80000001, 0x4, 0x200, 0x7ffc, 0x9, 0xfffffffe, 0x0, 0x3, 0x8, 0x1, 0x40, 0x1, 0x5, 0x9, 0x8, 0x4, 0x80000000, 0x1ff, 0x60, 0x1, 0x5, 0x9, 0x10000, 0x1, 0xc, 0x8000, 0x92, 0x10000, 0x101, 0x0, 0x7ff, 0x2cf, 0x8d9, 0x9, 0x3, 0x2, 0x7, 0x1, 0x37, 0xffffffff, 0x6, 0x8cbb2a9, 0xfffffff5, 0x1, 0x40000004, 0x9, 0x2, 0xfffffff7, 0xfff, 0x3, 0x4, 0x7, 0x10, 0x6, 0x7f], [0xff, 0xcd98, 0x2, 0xb2, 0x6, 0x12, 0x45a, 0x6, 0x9, 0xffffffff, 0x50b, 0x8001, 0x9257, 0x80000000, 0x7fff, 0x2, 0xffff0001, 0x1000, 0x5, 0x2, 0x7, 0x1, 0x6, 0x2, 0x8, 0x9, 0x4, 0x7, 0xff, 0x2, 0x284, 0x8, 0x7, 0x1, 0x9, 0x7f, 0xf17, 0x8, 0x6, 0x8000, 0x9, 0x30000, 0x8, 0x8, 0x6, 0x1, 0xdde9, 0x6, 0x401, 0x7fff, 0x0, 0x7, 0x4, 0x0, 0x3, 0x1, 0xc8, 0x0, 0x4, 0x80, 0x8, 0x2, 0x24d4, 0x2], [0xffff4d44, 0x0, 0x8, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x1, 0x1, 0x7, 0x4, 0x6, 0xff, 0x5, 0x40, 0xc0, 0x4, 0x1, 0x0, 0x6, 0x3, 0xfffffffc, 0xb3, 0xfffffff7, 0x101, 0x3, 0x1, 0x4000081, 0x1, 0x400, 0x4, 0xfeb, 0xf3e, 0x4, 0xa, 0x8, 0x400, 0x87e9, 0x6, 0x9a2b, 0x2, 0x6000, 0xddc4, 0x0, 0x40, 0x1, 0x3, 0x4, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x4, 0x9, 0x9, 0x0, 0x6, 0x8, 0x7ff, 0x8d, 0x7, 0x10]}, 0x45c) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8650) 21.066412573s ago: executing program 5 (id=1629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x2}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x9}}, 0x30) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x400000200000000, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x3, 0x0, 0x3, 0x9, 0x100000000000, 0x7fffffff], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x4056000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0xfe, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x1, 0xb, 0x6, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000, 0xfffc}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000002c0)={{0x1, 0x8080000, 0x8, 0x9, 0xf9, 0x3, 0xdc, 0x0, 0x0, 0x8, 0x1, 0x10}, {0x5000, 0xeeee6000, 0x8, 0x3, 0x3, 0x94, 0x9, 0x3, 0x0, 0xfb, 0x2, 0x3}, {0xd000, 0x0, 0x3, 0xc, 0x9, 0xb0, 0xf, 0xfb, 0x9, 0x8, 0x3, 0x8}, {0x2000, 0x10000, 0xd, 0x9, 0xc, 0x10, 0x2, 0x9, 0x9, 0x0, 0x5, 0x9}, {0x3000, 0x80a0000, 0x10, 0x3, 0xd, 0x2, 0x5, 0x7f, 0x2, 0x3e, 0x72, 0x4}, {0x0, 0x8080000, 0x8, 0x40, 0x5, 0x6, 0x9, 0x7, 0xec, 0x9, 0x2, 0x4}, {0x8080000, 0x2, 0xa, 0x40, 0xfb, 0xc, 0xa, 0x6b, 0x0, 0x4, 0x1, 0x5}, {0x2000, 0xdddd1000, 0x3, 0x0, 0x4, 0xf6, 0x8, 0x5, 0x0, 0x86, 0x4, 0x36}, {0xeeef0000}, {0x8080000, 0x5}, 0x10000, 0x0, 0x5000, 0x30, 0xf, 0x2900, 0xf000, [0x49, 0xe, 0x1, 0xbd]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000003, 0x10010, r3, 0xf369c000) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r11, 0x4068aea3, &(0x7f0000000d40)={0xdb}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x3}, @increfs={0x40046304, 0x1}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x46, 0x0, &(0x7f0000000140)="9585c9d37cf564fd1e09f1d004988e04e5d825bc426b32f1df138bdc278a58ad159cfc2f79955107357e6aec635a5b693bd295db5708e5372ca1addd060fac6e9793248166bb"}) 20.871773436s ago: executing program 5 (id=1636): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000580001c0"]) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 9.110985798s ago: executing program 0 (id=1675): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 9.067828359s ago: executing program 1 (id=1676): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffb, 0x400, 0x6, 0x6, 0xffffffff, 0x0, 0xc6da, 0x2, 0x1ff, 0x0, 0x7ff, 0x4, 0x5, 0x8, 0x6, 0x35], 0x4, 0x1}) 9.061835709s ago: executing program 6 (id=1677): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x100000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) close(r1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x100000}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x14, 0x0, 0x1, 0xfffffffc}, {0x6}]}) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) 7.487765894s ago: executing program 0 (id=1678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000093c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000009400)={0x20000000, 0x0, {0x0, 0xfffe, 0x9, {0x0, 0x200}, {}, @const={0x81, {0x5, 0x2004, 0x3, 0x6}}}, {0x57, 0x8, 0x0, {0xfff9, 0x2}, {0x2, 0x82}, @rumble}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) write$cgroup_type(r4, &(0x7f0000000280), 0x9) read(r4, &(0x7f00000001c0)=""/109, 0x6d) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x46) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x7) syz_clone(0x80000000, &(0x7f0000000580)="fe714acb6804b120e784b673f85e5445c6196c88124c46a4a953d69c1ff272893b4190693474f58298c1af644e2ba9b136bb2377efc243b2", 0x38, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="eeac6f7f1e3bb07ab0d466ee7da5655c087c9d91412f9d59d5a2516087f85ee373641c713481e6337e81e78892285e421178a4249ec494ca") ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000500)={{0x4, 0x1, 0x81}, 'syz0\x00', 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x68, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @release, @acquire_done={0x40106309, 0x2}], 0xd7, 0x0, &(0x7f00000003c0)="3a6eeeade2706b13d4cfdc700a410a52612d95ff8c357fbb7c20ecd7934d97a561f30af5875218a3b5d4b1be7450f58911a3c02882ddbaecf927bce25195d5d779c5da56abdbed45f4dd1170778e957c682472a72281f2c1808c7f1d736deacb0ad7a3869ea7e941d7eba0a6792cb84685723d77260c9aa1aabd9f6f391da198975da7519766478de0ea5f4ad83992b873471ebdeaa99a7a73178cd2c010da87c702a7dac958c0582bc720fffdeccc5144afa3e474e60ac3513057fad2998c330d0717c280249db8bffbb933f83ac4ab3f48a419d1f5a3"}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 7.484588094s ago: executing program 1 (id=1679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0x1, 0x0, &(0x7f0000000140)="f3"}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0xffdd) (async) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[], 0xffdd) prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007c0b0000000000020004100000000000"]) close(r0) (async) close(r0) 7.484191274s ago: executing program 6 (id=1680): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{}, {0x7ffffffffffffff}, 0x0, 0x3}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xec000, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 64) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (rerun: 64) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000480000000000000006"]) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000005cbb93765a0200c5d15b"]) (async) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_clone(0x23a40080, 0x0, 0x38, 0x0, 0x0, 0x0) (async, rerun: 32) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x4000000) (rerun: 32) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 32) ioctl$BLKRRPART(r1, 0x125f, 0x0) 5.719805301s ago: executing program 0 (id=1681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x401, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x200, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) 5.719141941s ago: executing program 1 (id=1682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007980), 0xe0040, 0x0) read(r2, 0x0, 0x12) (async) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) close(r3) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) r8 = openat$cgroup(r7, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.718974311s ago: executing program 6 (id=1683): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000069020000000000000000000000f6"]) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, r2, 0x8bb2a000) 3.942572899s ago: executing program 0 (id=1684): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESHEX]) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x4000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x482000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000000000005f0b00000000000024d6000800000000d70200000000000000000000000000009c0800000000000093000000000000007f020000000000000300000000000000221001c0000000000500000000000000c4030000000000000101000000000a625384bf0000"]) (async) r9 = openat$cgroup_procs(r8, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) openat$cgroup_freezer_state(r8, &(0x7f0000000200), 0x2, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r12, 0x0) (async) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r12, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x0) 3.938662569s ago: executing program 1 (id=1685): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x20e02, 0x0) write(r0, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f", 0x32) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000"]) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.937909029s ago: executing program 6 (id=1686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)=""/71) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x400}], 0x4e, 0x0, &(0x7f0000000280)="2734f8e59f0dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d902919b5bc0f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7122d2729933e63d78255"}) 1.987908149s ago: executing program 0 (id=1687): openat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x40) (async) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{}]}) 1.987345519s ago: executing program 1 (id=1688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) (async) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) (async) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) write$selinux_create(r4, 0x0, 0x1f00) read(r3, &(0x7f00000027c0)=""/62, 0x3e) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r3]) 1.987127099s ago: executing program 6 (id=1689): mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000102, 0x0, 0x8000000000000002}]}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 13.43369ms ago: executing program 0 (id=1690): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x81007702, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=':-]\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/149) 12.85086ms ago: executing program 1 (id=1691): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x3eba4ced}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x121002, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x1}, @dead_binder_done], 0x14, 0x0, &(0x7f00000001c0)="f7aff9735ef95e7bfd78a9dde85e6775e90e4451"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad, 0x5372, &(0x7f0000000240)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000000280)=0x1) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000002c0)={0xdb9}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000, 0x4, &(0x7f0000000300)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000340)={[0x2, 0x5, 0x6, 0x5, 0xb, 0x5ae, 0x181, 0xffffffff, 0xa1cb, 0xe, 0xc11f, 0x7, 0x8, 0x7fffffff, 0x401, 0x7], 0x4000, 0x12000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x8) ioctl$KDDISABIO(r1, 0x4b37) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000400)=@arm64={0x7, 0x4, 0x79, '\x00', 0x5}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xb, 0x1, &(0x7f0000000440)) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000004c0)={r2, 0x6, 0x1, 0x3}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000500)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000580)={0xce, 0x0, r0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000600)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000800)) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000880)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000900)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x3, &(0x7f0000000940)=0x1) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000980)={0x0, 0x0, {0x1a, 0x16, 0x14, 0x1b, 0x4, 0x2, 0x4, 0x14e, 0xffffffffffffffff}}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prctl$PR_GET_TSC(0x19, &(0x7f00000009c0)) 0s ago: executing program 6 (id=1692): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffff8, 0x6, 0x200000000000000, 0x5, 0x3, 0x0, 0x10000, 0xa3f]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009d02"]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. [ 24.782521][ T36] audit: type=1400 audit(1750397368.570:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.784606][ T281] cgroup: Unknown subsys name 'net' [ 24.805266][ T36] audit: type=1400 audit(1750397368.570:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.832932][ T36] audit: type=1400 audit(1750397368.600:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.833130][ T281] cgroup: Unknown subsys name 'devices' [ 25.012902][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.018959][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.170849][ T36] audit: type=1400 audit(1750397368.960:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.194383][ T36] audit: type=1400 audit(1750397368.960:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.198712][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.219539][ T36] audit: type=1400 audit(1750397368.960:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.251238][ T36] audit: type=1400 audit(1750397369.010:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.260529][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.277070][ T36] audit: type=1400 audit(1750397369.010:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.311839][ T36] audit: type=1400 audit(1750397369.040:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.337606][ T36] audit: type=1400 audit(1750397369.040:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.104734][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.111850][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.118914][ T290] bridge_slave_0: entered allmulticast mode [ 26.125250][ T290] bridge_slave_0: entered promiscuous mode [ 26.131746][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.138863][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.146190][ T290] bridge_slave_1: entered allmulticast mode [ 26.152552][ T290] bridge_slave_1: entered promiscuous mode [ 26.201780][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.208949][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.216169][ T289] bridge_slave_0: entered allmulticast mode [ 26.222546][ T289] bridge_slave_0: entered promiscuous mode [ 26.236216][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.243382][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.250607][ T289] bridge_slave_1: entered allmulticast mode [ 26.257405][ T289] bridge_slave_1: entered promiscuous mode [ 26.288933][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.296022][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.303138][ T291] bridge_slave_0: entered allmulticast mode [ 26.309449][ T291] bridge_slave_0: entered promiscuous mode [ 26.315694][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.322788][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.329846][ T288] bridge_slave_0: entered allmulticast mode [ 26.336321][ T288] bridge_slave_0: entered promiscuous mode [ 26.342887][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.350115][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.357323][ T288] bridge_slave_1: entered allmulticast mode [ 26.363531][ T288] bridge_slave_1: entered promiscuous mode [ 26.369814][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.376953][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.384240][ T291] bridge_slave_1: entered allmulticast mode [ 26.390964][ T291] bridge_slave_1: entered promiscuous mode [ 26.536578][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.543664][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.551192][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.558302][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.577761][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.584861][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.592246][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.599389][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.612876][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.619946][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.627369][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.634422][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.643248][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.650407][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.657841][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.664905][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.717595][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.726082][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.733492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.741517][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.749098][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.756740][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.764116][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.785818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.792875][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.800534][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.807676][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.815417][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.822573][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.830612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.837751][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.845820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.852893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.882869][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.890033][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.899701][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.906774][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.943406][ T289] veth0_vlan: entered promiscuous mode [ 26.954276][ T288] veth0_vlan: entered promiscuous mode [ 26.965503][ T290] veth0_vlan: entered promiscuous mode [ 26.987314][ T289] veth1_macvtap: entered promiscuous mode [ 26.995481][ T288] veth1_macvtap: entered promiscuous mode [ 27.005288][ T290] veth1_macvtap: entered promiscuous mode [ 27.037009][ T291] veth0_vlan: entered promiscuous mode [ 27.058950][ T291] veth1_macvtap: entered promiscuous mode [ 27.078413][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.127839][ T311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.163013][ T321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.164210][ T321] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 27.169793][ T321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 27.179598][ T321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:2 [ 27.199094][ T324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.273942][ T331] SELinux: security_context_str_to_sid (unc'–îned_u) failed with errno=-22 [ 27.329122][ T332] SELinux: Context À²oýú}¨ xd is not valid (left unmapped). [ 27.700573][ T345] binder: Bad value for 'max' [ 27.705945][ T347] binder: Bad value for 'max' [ 27.770113][ T352] rust_binder: Write failure EINVAL in pid:8 [ 28.024805][ T363] ======================================================= [ 28.024805][ T363] WARNING: The mand mount option has been deprecated and [ 28.024805][ T363] and is ignored by this kernel. Remove the mand [ 28.024805][ T363] option from the mount to silence this warning. [ 28.024805][ T363] ======================================================= [ 28.211905][ T369] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.212319][ T368] rust_binder: Error while translating object. [ 28.219025][ T368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 28.225283][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:32 [ 28.306536][ T373] binder: Bad value for 'stats' [ 28.492379][ T381] rust_binder: Write failure EFAULT in pid:16 [ 28.935214][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.948964][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.950544][ T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 28.958222][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.975304][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.982893][ T66] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.991783][ T66] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 29.270447][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.288869][ T413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 29.300904][ T419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.311387][ T419] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 29.383716][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 29.392706][ T429] rust_binder: Error while translating object. [ 29.409945][ T429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.420260][ T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 29.580632][ T441] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 29.602181][ T441] binder: Unknown parameter 'fowner<00000000000000000000' [ 29.679702][ T446] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 29.730856][ T447] rust_binder: Write failure EINVAL in pid:38 [ 29.838100][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 29.838130][ T36] audit: type=1400 audit(1750397373.620:148): avc: denied { append } for pid=450 comm="syz.0.44" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.096065][ T36] audit: type=1400 audit(1750397373.880:149): avc: denied { write } for pid=465 comm="syz.0.48" name="pfkey" dev="proc" ino=4026532546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.152201][ T468] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 30.187041][ T472] binder: Unknown parameter 'dont_harh' [ 30.248014][ T475] input: syz1 as /devices/virtual/input/input5 [ 30.260136][ T475] input: failed to attach handler leds to device input5, error: -6 [ 30.302707][ T479] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.318593][ T36] audit: type=1400 audit(1750397374.100:150): avc: denied { append } for pid=480 comm="syz.0.54" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 30.375172][ T484] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.378660][ T484] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 30.454780][ T36] audit: type=1400 audit(1750397374.240:151): avc: denied { map } for pid=480 comm="syz.0.54" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 30.570413][ T490] rust_binder: Write failure EFAULT in pid:43 [ 30.642597][ T496] SELinux: policydb version -91767419 does not match my version range 15-33 [ 30.644292][ T36] audit: type=1400 audit(1750397374.430:152): avc: denied { load_policy } for pid=495 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 30.658047][ T496] SELinux: failed to load policy [ 30.712525][ T498] binder: Unknown parameter 'audit' [ 30.744093][ T502] binder: Unknown parameter 's[ats' [ 30.881111][ T36] audit: type=1400 audit(1750397374.670:153): avc: denied { attach_queue } for pid=503 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.076295][ T36] audit: type=1400 audit(1750397374.860:154): avc: denied { read } for pid=514 comm="syz.0.67" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 31.115428][ T36] audit: type=1326 audit(1750397374.900:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f058e929 code=0x7ffc0000 [ 31.119756][ T518] input: syz1 as /devices/virtual/input/input6 [ 31.139325][ T36] audit: type=1326 audit(1750397374.900:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f058e929 code=0x7ffc0000 [ 31.139362][ T36] audit: type=1326 audit(1750397374.900:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=517 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1f058e929 code=0x7ffc0000 [ 31.194191][ T519] binder: Unknown parameter 'l†-' [ 31.200863][ T317] udevd[317]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 31.663719][ T533] binder: Bad value for 'max' [ 31.703046][ T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.703080][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 31.735853][ T539] input: syz0 as /devices/virtual/input/input7 [ 31.754978][ T539] input: failed to attach handler leds to device input7, error: -6 [ 31.990839][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 31.990976][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.128509][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 32.166476][ T561] rust_binder: Error while translating object. [ 32.187347][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.204118][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 32.312174][ T564] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 32.340459][ T564] SELinux: failed to load policy [ 32.372510][ T564] rust_binder: Write failure EINVAL in pid:99 [ 32.474236][ T566] binder: Unknown parameter '0x0000000000000007' [ 32.641220][ T568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.641729][ T568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.676322][ T568] serio: Serial port ttynull [ 32.726596][ T568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 32.786322][ T571] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.808652][ T571] rust_binder: Read failure Err(EFAULT) in pid:106 [ 32.987534][ T578] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 33.049456][ T584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.049528][ T584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.140697][ T573] rust_binder: Read failure Err(EFAULT) in pid:108 [ 33.322245][ T596] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 33.638184][ T619] binder: Unknown parameter 'ax' [ 33.751284][ T633] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 33.753736][ T628] SELinux: security_context_str_to_sid (sytem_uÝGй,Z‘Õ< >Páÿœ'•) failed with errno=-22 [ 33.840433][ T639] rust_binder: Got transaction with invalid offset. [ 33.840483][ T639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.847483][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 34.263230][ T655] random: crng reseeded on system resumption [ 34.324818][ T661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.324854][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:136 [ 34.336752][ T661] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.346441][ T661] rust_binder: Read failure Err(EFAULT) in pid:136 [ 34.614885][ T668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 34.817549][ T674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 34.872567][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 34.872587][ T36] audit: type=1326 audit(1750397378.660:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=677 comm="syz.0.116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1f058e929 code=0x0 [ 35.201147][ T36] audit: type=1400 audit(1750397378.990:206): avc: denied { setattr } for pid=290 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.224989][ T36] audit: type=1400 audit(1750397379.010:207): avc: denied { append } for pid=685 comm="syz.2.119" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.251428][ T36] audit: type=1400 audit(1750397379.040:208): avc: denied { map } for pid=685 comm="syz.2.119" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.275393][ T36] audit: type=1400 audit(1750397379.040:209): avc: denied { read } for pid=685 comm="syz.2.119" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 35.310381][ T36] audit: type=1400 audit(1750397379.090:210): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.360393][ T36] audit: type=1400 audit(1750397379.090:211): avc: denied { open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.366601][ T690] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 35.384637][ T690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:118 [ 35.410390][ T36] audit: type=1400 audit(1750397379.090:212): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.449156][ T36] audit: type=1400 audit(1750397379.100:213): avc: denied { read } for pid=687 comm="syz.2.120" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.472129][ T36] audit: type=1400 audit(1750397379.100:214): avc: denied { open } for pid=687 comm="syz.2.120" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.526185][ T694] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 35.526212][ T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.526264][ T693] rust_binder: Error while translating object. [ 35.545051][ T693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.550399][ T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:121 [ 35.551662][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 35.576977][ T693] rust_binder: Write failure EFAULT in pid:121 [ 35.632891][ T697] rust_binder: Write failure EFAULT in pid:125 [ 35.931458][ T716] rust_binder: Write failure EFAULT in pid:159 [ 35.956500][ T712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.974362][ T719] rust_binder: Write failure EINVAL in pid:136 [ 35.983655][ T713] rust_binder: Error while translating object. [ 35.990507][ T712] rust_binder: Error while translating object. [ 35.996832][ T712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.000466][ T713] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.030500][ T712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60 [ 36.033171][ T713] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60 [ 36.074849][ T725] rust_binder: Write failure EFAULT in pid:138 [ 36.226471][ T735] block device autoloading is deprecated and will be removed. [ 36.267324][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 36.267324][ T735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 36.681715][ T772] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 36.702495][ T772] rust_binder: Error while translating object. [ 36.731210][ T772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.737619][ T772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 36.776467][ T774] binder: Unknown parameter 'defcontext01777777777777777777777' [ 36.801145][ T767] rust_binder: Error in use_page_slow: ESRCH [ 36.801171][ T767] rust_binder: use_range failure ESRCH [ 36.832886][ T767] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 36.840374][ T767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 36.880406][ T767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:77 [ 36.920218][ T778] SELinux: Context system_u: is not valid (left unmapped). [ 37.009630][ T778] rust_binder: Read failure Err(EAGAIN) in pid:160 [ 37.121337][ T784] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 37.342858][ T809] rust_binder: Write failure EINVAL in pid:192 [ 37.561381][ T815] kvm_intel: kvm [814]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 37.603296][ T815] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.603319][ T815] rust_binder: Read failure Err(EFAULT) in pid:172 [ 37.666751][ T818] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 37.684190][ T818] rust_binder: Error while translating object. [ 37.706803][ T818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.726363][ T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 37.750495][ T821] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 37.914983][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 38.020806][ T837] rust_binder: Error while translating object. [ 38.040172][ T837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 38.047856][ T842] random: crng reseeded on system resumption [ 38.070524][ T837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:93 [ 38.181200][ T842] input: syz0 as /devices/virtual/input/input11 [ 38.518777][ T868] rust_binder: Error while translating object. [ 38.518833][ T868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 38.528974][ T868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:211 [ 38.687305][ T877] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 38.736366][ T877] rust_binder: Write failure EINVAL in pid:195 [ 38.736434][ T874] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 38.757231][ T874] rust_binder: Write failure EINVAL in pid:195 [ 38.848893][ T880] SELinux: policydb version 70853003 does not match my version range 15-33 [ 38.874486][ T880] SELinux: failed to load policy [ 38.890492][ T879] SELinux: policydb version 70853003 does not match my version range 15-33 [ 38.910103][ T879] SELinux: failed to load policy [ 38.967148][ T888] binder: Unknown parameter '00000000000000000000004' [ 39.134167][ T898] binder: Unknown parameter 'sec' [ 39.190120][ T904] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.190625][ T904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 39.197588][ T904] rust_binder: Error while translating object. [ 39.209931][ T904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.216674][ T904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:211 [ 39.249463][ T907] syz.2.183 (907) used obsolete PPPIOCDETACH ioctl [ 39.880037][ T923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 39.880073][ T923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:234 [ 39.889841][ T923] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 39.899555][ T923] rust_binder: Read failure Err(EFAULT) in pid:234 [ 39.940291][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 39.940310][ T36] audit: type=1326 audit(1750397383.720:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.2.191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadf178e929 code=0x0 [ 39.991832][ T928] input: syz1 as /devices/virtual/input/input12 [ 39.998318][ T928] input: failed to attach handler leds to device input12, error: -6 [ 40.047593][ T930] random: crng reseeded on system resumption [ 40.167598][ T932] rust_binder: Write failure EINVAL in pid:240 [ 40.167784][ T932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 40.449154][ T36] audit: type=1400 audit(1750397384.230:279): avc: denied { execute } for pid=936 comm="syz.0.196" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.508493][ T939] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.649326][ T944] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.659166][ T944] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.686910][ T949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.688224][ T949] rust_binder: Error while translating object. [ 40.695094][ T949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 40.701781][ T949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:257 [ 40.859497][ T956] rust_binder: Error while translating object. [ 40.871649][ T956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 40.877942][ T956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:262 [ 40.919211][ T961] rust_binder: Read failure Err(EAGAIN) in pid:233 [ 40.977570][ T967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:237 [ 41.010886][ T36] audit: type=1400 audit(1750397384.790:280): avc: denied { sys_module } for pid=964 comm="syz.0.207" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.049978][ T965] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 41.062976][ T965] SELinux: failed to load policy [ 41.118449][ T36] audit: type=1400 audit(1750397384.900:281): avc: denied { read } for pid=969 comm="syz.2.209" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.808836][ T979] rust_binder: Write failure EINVAL in pid:270 [ 42.008982][ T986] SELinux: failed to load policy [ 42.256153][ T996] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 42.264854][ T996] rust_binder: Write failure EINVAL in pid:250 [ 42.362365][ T1012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.397052][ T1012] rust_binder: Error in use_page_slow: ESRCH [ 42.397802][ T1014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.407430][ T1012] rust_binder: use_range failure ESRCH [ 42.419818][ T1012] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 42.425652][ T1014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 42.425821][ T1012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.453685][ T1018] rust_binder: Error in use_page_slow: ESRCH [ 42.463166][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:288 [ 42.470012][ T1018] rust_binder: use_range failure ESRCH [ 42.486255][ T1018] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 42.492969][ T1018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.501418][ T1018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:288 [ 42.562235][ T308] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.595237][ T308] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.598437][ T1026] random: crng reseeded on system resumption [ 42.620383][ T36] audit: type=1400 audit(1750397386.380:282): avc: denied { append } for pid=1025 comm="syz.1.229" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.700825][ T1029] binder: Unknown parameter 'xt' [ 42.712406][ T36] audit: type=1400 audit(1750397386.500:283): avc: denied { ioctl } for pid=1025 comm="syz.1.229" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.738990][ T1026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 42.739025][ T1026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:110 [ 42.765200][ T1026] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 42.775360][ T1026] rust_binder: Read failure Err(EFAULT) in pid:110 [ 42.951607][ T1042] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 42.958259][ T1042] rust_binder: Error while translating object. [ 42.979095][ T1042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.993869][ T1042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 43.027425][ T1051] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 18446744073709551507) [ 43.039720][ T1051] rust_binder: Error while translating object. [ 43.052288][ T1051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.059035][ T1051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 43.233754][ T1065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.243423][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:118 [ 43.261967][ T1065] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.272481][ T1067] binder: Bad value for 'max' [ 43.286256][ T1065] rust_binder: Read failure Err(EFAULT) in pid:118 [ 43.346530][ T1072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.365498][ T1072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.429915][ T36] audit: type=1400 audit(1750397387.210:284): avc: denied { append } for pid=1078 comm="syz.1.246" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.463572][ T36] audit: type=1400 audit(1750397387.220:285): avc: denied { write } for pid=1078 comm="syz.1.246" name="pfkey" dev="proc" ino=4026532610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.629225][ T36] audit: type=1400 audit(1750397387.400:286): avc: denied { map } for pid=1082 comm="syz.2.247" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.680963][ T36] audit: type=1400 audit(1750397387.400:287): avc: denied { execute } for pid=1082 comm="syz.2.247" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.741405][ T1089] input: syz1 as /devices/virtual/input/input13 [ 44.006618][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.014700][ T1098] rust_binder: Error while translating object. [ 44.014745][ T1098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.017395][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.021385][ T1098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 44.430881][ T1101] rust_binder: Write failure EFAULT in pid:322 [ 44.600277][ T60] Bluetooth: hci1: Frame reassembly failed (-84) [ 44.818316][ T1110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 44.818353][ T1110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:327 [ 44.828447][ T1110] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.837905][ T1110] rust_binder: Read failure Err(EFAULT) in pid:327 [ 45.461311][ T1116] can0: slcan on ptm2. [ 45.472316][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 45.472332][ T36] audit: type=1400 audit(1750397389.260:291): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 45.505114][ T36] audit: type=1400 audit(1750397389.260:292): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.550373][ T36] audit: type=1400 audit(1750397389.260:293): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2350 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.574554][ T36] audit: type=1400 audit(1750397389.260:294): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2350 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.610117][ T36] audit: type=1400 audit(1750397389.260:295): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2350 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.646481][ T36] audit: type=1400 audit(1750397389.330:296): avc: denied { read } for pid=1121 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.674254][ T36] audit: type=1400 audit(1750397389.330:297): avc: denied { open } for pid=1121 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.702091][ T36] audit: type=1400 audit(1750397389.330:298): avc: denied { getattr } for pid=1121 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.747470][ T36] audit: type=1400 audit(1750397389.530:299): avc: denied { write } for pid=1120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.778454][ T36] audit: type=1400 audit(1750397389.530:300): avc: denied { add_name } for pid=1120 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.805704][ T1116] can0 (unregistered): slcan off ptm2. [ 46.070431][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.076735][ T1105] Bluetooth: hci0: command 0x1003 tx timeout [ 46.630395][ T328] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 46.693447][ T1158] SELinux: unknown common r [ 46.698321][ T1158] SELinux: failed to load policy [ 46.762812][ T1165] rust_binder: Error while translating object. [ 46.762842][ T1165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.769160][ T1165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 46.791874][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.808474][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.815576][ T1159] bridge_slave_0: entered allmulticast mode [ 46.822265][ T1159] bridge_slave_0: entered promiscuous mode [ 46.828977][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.836223][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.843664][ T1159] bridge_slave_1: entered allmulticast mode [ 46.850104][ T1159] bridge_slave_1: entered promiscuous mode [ 46.885124][ T60] bridge_slave_1: left allmulticast mode [ 46.890936][ T60] bridge_slave_1: left promiscuous mode [ 46.896817][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.904624][ T60] bridge_slave_0: left allmulticast mode [ 46.910773][ T60] bridge_slave_0: left promiscuous mode [ 46.916674][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.921799][ T1176] rust_binder: Failed to allocate buffer. len:16871133749825724720, is_oneway:true [ 46.990639][ T1179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.001096][ T1179] rust_binder: Write failure EINVAL in pid:138 [ 47.009804][ T60] veth1_macvtap: left promiscuous mode [ 47.014244][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.016205][ T60] veth0_vlan: left promiscuous mode [ 47.022128][ T1178] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 47.043335][ T1178] binder: Bad value for 'stats' [ 47.112428][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.119766][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.127456][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.134866][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.158396][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.166201][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.182145][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.189410][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.200607][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.208189][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.232397][ T1159] veth0_vlan: entered promiscuous mode [ 47.243431][ T1159] veth1_macvtap: entered promiscuous mode [ 47.537998][ T1204] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 47.553689][ T1204] rust_binder: Write failure EFAULT in pid:315 [ 47.841520][ T1216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.847817][ T1216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:324 [ 47.862801][ T1216] binder: Bad value for 'max' [ 47.974898][ T1225] rust_binder: Write failure EINVAL in pid:141 [ 47.985253][ T1227] rust_binder: Write failure EFAULT in pid:143 [ 47.991890][ T1227] rust_binder: Write failure EINVAL in pid:143 [ 48.033681][ T1233] SELinux: truncated policydb string identifier [ 48.046554][ T1233] SELinux: failed to load policy [ 48.060922][ T1233] rust_binder: Write failure EINVAL in pid:147 [ 48.069247][ T1236] rust_binder: Write failure EFAULT in pid:355 [ 48.180858][ T1238] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 48.194605][ T1238] rust_binder: Write failure EINVAL in pid:326 [ 48.194689][ T1239] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 48.208687][ T1239] rust_binder: Write failure EINVAL in pid:326 [ 48.209015][ T1238] binder: Bad value for 'stats' [ 48.274860][ T1245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.275107][ T1245] rust_binder: Error while translating object. [ 48.301222][ T1245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 48.307521][ T1245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:331 [ 48.333383][ T1250] rust_binder: inc_ref_done called when no active inc_refs [ 48.469649][ T1260] SELinux: policydb version -845211227 does not match my version range 15-33 [ 48.488637][ T1260] SELinux: failed to load policy [ 48.860906][ T1278] random: crng reseeded on system resumption [ 48.923287][ T1278] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 48.932614][ T1278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:362 [ 49.030437][ T1105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.046111][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 49.104878][ T1290] input: syz1 as /devices/virtual/input/input16 [ 49.154783][ T1292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.154863][ T1292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.202632][ T1290] binder: Unknown parameter ' ' [ 49.228537][ T1299] rust_binder: Write failure EFAULT in pid:370 [ 49.229838][ T1289] binder: Unknown parameter ' ' [ 49.490923][ T1310] rust_binder: Error in use_page_slow: ESRCH [ 49.490940][ T1310] rust_binder: use_range failure ESRCH [ 49.500991][ T1310] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 49.506599][ T1310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 49.525507][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 49.535358][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 49.702582][ T1321] rust_binder: Got transaction with invalid offset. [ 49.711936][ T1321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.718680][ T1321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:368 [ 49.848038][ T1327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 49.858363][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.178777][ T1341] rust_binder: Write failure EINVAL in pid:387 [ 50.178962][ T1341] rust_binder: Write failure EINVAL in pid:387 [ 50.408413][ T1347] rust_binder: Error while translating object. [ 50.428462][ T1347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 50.435008][ T1347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:378 [ 50.624220][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 50.624240][ T36] audit: type=1400 audit(1750397394.410:334): avc: denied { write } for pid=1354 comm="syz.0.327" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 50.692878][ T1358] rust_binder: Write failure EINVAL in pid:174 [ 50.799780][ T1368] rust_binder: Write failure EINVAL in pid:400 [ 50.904771][ T1380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.912097][ T1380] rust_binder: Write failure EINVAL in pid:178 [ 50.950136][ T1386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.951794][ T36] audit: type=1326 audit(1750397394.740:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1383 comm="syz.0.336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1f058e929 code=0x0 [ 50.956764][ T1386] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 50.996938][ T1386] rust_binder: Write failure EINVAL in pid:180 [ 51.142349][ T1395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.149500][ T1395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 51.250474][ T1399] rust_binder: Write failure EINVAL in pid:411 [ 51.260070][ T1399] rust_binder: Error while translating object. [ 51.266535][ T1399] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 51.272938][ T1399] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:411 [ 51.298231][ T36] audit: type=1400 audit(1750397395.080:336): avc: granted { setsecparam } for pid=1400 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 51.327869][ T1401] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 51.327895][ T1401] rust_binder: Error while translating object. [ 51.340799][ T1401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.347521][ T1401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 51.374572][ T1405] rust_binder: Write failure EFAULT in pid:415 [ 51.407003][ T1407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:419 [ 51.475499][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.491505][ T1412] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 51.964913][ T1424] rust_binder: Write failure EFAULT in pid:399 [ 52.002402][ T1426] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 52.016875][ T1426] rust_binder: Write failure EINVAL in pid:402 [ 52.104206][ T36] audit: type=1400 audit(1750397395.890:337): avc: denied { map } for pid=1427 comm="syz.1.350" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 52.141401][ T1430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 52.141435][ T1430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:404 [ 52.164822][ T1430] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.199742][ T36] audit: type=1400 audit(1750397395.980:338): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.232990][ T1430] rust_binder: Write failure EINVAL in pid:404 [ 52.236377][ T36] audit: type=1400 audit(1750397395.980:339): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.278752][ T1159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.279607][ T36] audit: type=1400 audit(1750397395.980:340): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.295997][ T1159] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 52.310443][ T36] audit: type=1400 audit(1750397395.980:341): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.438738][ T1433] input: syz0 as /devices/virtual/input/input18 [ 52.790940][ T1437] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.822729][ T1441] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.913619][ T1446] random: crng reseeded on system resumption [ 53.115647][ T1446] Restarting kernel threads ... done. [ 53.180721][ T1452] binder: Bad value for 'max' [ 53.330754][ T1457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.482344][ T1463] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 53.510592][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 53.524670][ T1105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.654419][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 53.662358][ T1472] rust_binder: Error while translating object. [ 53.703216][ T1472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.728434][ T1472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 55.018347][ T1505] rust_binder: Error while translating object. [ 55.060114][ T1505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 55.070496][ T1505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:214 [ 55.630379][ T36] kauditd_printk_skb: 2518 callbacks suppressed [ 55.630398][ T36] audit: type=1400 audit(1750397399.410:2859): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.660008][ T1521] binder: Unknown parameter 'processor : 0 [ 55.660008][ T1521] vendor_id : GenuineIntel [ 55.660008][ T1521] cpu family : 6 [ 55.660008][ T1521] model : 79 [ 55.660008][ T1521] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 55.660008][ T1521] stepping : 0 [ 55.660008][ T1521] microcode : 0xffffffff [ 55.660008][ T1521] cpu MHz : 2199.998 [ 55.660008][ T1521] cache size : 56320 KB [ 55.660008][ T1521] physical id : 0 [ 55.660008][ T1521] siblings : 2 [ 55.660008][ T1521] core id : 0 [ 55.660008][ T1521] cpu cores : 1 [ 55.660008][ T1521] apicid : 0 [ 55.660008][ T1521] initial apicid : 0 [ 55.660008][ T1521] fpu : yes [ 55.660008][ T1521] fpu_exception : yes [ 55.660008][ T1521] cpuid level : 13 [ 55.660008][ T1521] wp : yes [ 55.660008][ T1521] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 55.660008][ T1521] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 55.753432][ T1523] binder: Unknown parameter 'dont_hash' [ 55.760464][ T1159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.889903][ T1527] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.894260][ T36] audit: type=1400 audit(1750397399.410:2860): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.903774][ T1527] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 55.910383][ T36] audit: type=1400 audit(1750397399.410:2861): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.942054][ T1532] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.969940][ T1528] audit: audit_backlog=65 > audit_backlog_limit=64 [ 55.988674][ T36] audit: type=1400 audit(1750397399.410:2862): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.989069][ T1528] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 56.370980][ T1537] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 56.379368][ T1537] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 56.505251][ T1549] binder: Bad value for 'max' [ 56.708404][ T1555] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 56.815155][ T1557] binder: Bad value for 'stats' [ 56.831360][ T1559] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 57.186684][ T1572] random: crng reseeded on system resumption [ 57.276026][ T1572] Unrecognized hibernate image header format! [ 57.302477][ T1572] PM: hibernation: Image mismatch: architecture specific data [ 57.334225][ T1578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:462 [ 57.335901][ T1577] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 57.357109][ T1577] rust_binder: Error in use_page_slow: EBUSY [ 57.395966][ T1577] rust_binder: use_range failure EBUSY [ 57.417168][ T1577] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 57.428899][ T1577] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 57.446651][ T1577] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 57.477004][ T1577] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:462 [ 57.482010][ T1580] rust_binder: Error while translating object. [ 57.536815][ T1580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 57.600422][ T1580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:459 [ 57.687535][ T1584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:465 [ 57.703447][ T1585] rust_binder: Write failure EFAULT in pid:247 [ 57.766412][ T1587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.920036][ T1587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.940312][ T1592] binder: Bad value for 'defcontext' [ 57.977717][ T1595] input: syz1 as /devices/virtual/input/input20 [ 58.068681][ T1595] SELinux: failed to load policy [ 58.079890][ T1597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.082083][ T1597] rust_binder: Error while translating object. [ 58.088610][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.127740][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 58.140894][ T1599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 58.170386][ T1597] rust_binder: Error while translating object. [ 58.179805][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.200398][ T1599] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.222402][ T1599] rust_binder: Read failure Err(EFAULT) in pid:470 [ 58.236941][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465 [ 58.440067][ T1610] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 58.541709][ T1615] binder: Unknown parameter 'fscontext?}' [ 58.645899][ T1617] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 58.645969][ T1617] rust_binder: Error while translating object. [ 58.678960][ T1617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.700371][ T1617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:476 [ 58.850230][ T1628] rust_binder: Error while translating object. [ 58.859783][ T1628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.867398][ T1628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 59.233706][ T1649] kernel profiling enabled (shift: 8) [ 59.476444][ T1664] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 59.546756][ T1666] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 246) [ 59.546781][ T1666] rust_binder: Error while translating object. [ 59.592041][ T1666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.623589][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 59.764007][ T1679] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 59.887957][ T1683] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 59.887980][ T1683] rust_binder: Error while translating object. [ 59.916602][ T1683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.931162][ T1683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:481 [ 60.047458][ T1693] rust_binder: Error while translating object. [ 60.087804][ T1693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 60.110395][ T1693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:483 [ 60.121469][ T1688] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 60.146476][ T1695] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 60.146501][ T1695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 60.165224][ T1695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:508 [ 60.640364][ T36] kauditd_printk_skb: 2841 callbacks suppressed [ 60.640384][ T36] audit: type=1400 audit(1750397404.420:5698): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.653872][ T1705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:490 [ 60.680142][ T36] audit: type=1400 audit(1750397404.420:5699): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.752777][ T1711] audit: audit_backlog=65 > audit_backlog_limit=64 [ 60.760490][ T1159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 60.764105][ T1711] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 60.767024][ T1159] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 60.782745][ T1711] audit: backlog limit exceeded [ 60.784964][ T36] audit: type=1400 audit(1750397404.420:5700): avc: denied { setattr } for pid=1159 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.813370][ T1159] audit: backlog limit exceeded [ 60.819158][ T1159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 60.939905][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:518 [ 61.179636][ T1725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.283575][ T1725] rust_binder: Write failure EFAULT in pid:494 [ 61.318965][ T1742] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 61.367578][ T1742] rust_binder: Write failure EINVAL in pid:301 [ 61.369439][ T1742] random: crng reseeded on system resumption [ 61.431335][ T1742] Unrecognized hibernate image header format! [ 61.450387][ T1742] PM: hibernation: Image mismatch: architecture specific data [ 61.481626][ T1746] rust_binder: Write failure EINVAL in pid:499 [ 61.808468][ T1760] rust_binder: Error in use_page_slow: ESRCH [ 61.808495][ T1760] rust_binder: use_range failure ESRCH [ 61.857786][ T1755] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 61.869156][ T1760] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 61.869177][ T1760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 61.910409][ T1760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:534 [ 62.147763][ T1766] binder: Unknown parameter 'dont_hash' [ 62.163540][ T1763] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 62.163577][ T1763] rust_binder: Error in use_page_slow: EBUSY [ 62.208526][ T1763] rust_binder: use_range failure EBUSY [ 62.222250][ T1763] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 62.244532][ T1763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 62.272015][ T1768] binder: Bad value for 'max' [ 62.284899][ T1763] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 62.289153][ T1763] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:538 [ 62.292041][ T1765] input: syz1 as /devices/virtual/input/input22 [ 62.351690][ T1765] input: failed to attach handler leds to device input22, error: -6 [ 62.619733][ T1778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 62.642266][ T1778] rust_binder: Read failure Err(EFAULT) in pid:306 [ 62.807192][ T1780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 63.135459][ T1799] rust_binder: Write failure EFAULT in pid:310 [ 63.472751][ T60] bridge_slave_1: left allmulticast mode [ 63.510165][ T60] bridge_slave_1: left promiscuous mode [ 63.540061][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.567155][ T60] bridge_slave_0: left allmulticast mode [ 63.580393][ T60] bridge_slave_0: left promiscuous mode [ 63.586172][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.730793][ T1820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.735620][ T1820] rust_binder: Error in use_page_slow: ESRCH [ 63.770678][ T1820] rust_binder: use_range failure ESRCH [ 63.776966][ T1820] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 63.796868][ T1820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.821511][ T1825] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 63.840470][ T1820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:528 [ 63.841158][ T60] veth1_macvtap: left promiscuous mode [ 63.862368][ T60] veth0_vlan: left promiscuous mode [ 63.910836][ T1827] rust_binder: Write failure EINVAL in pid:556 [ 64.029671][ T1829] tun0: tun_chr_ioctl cmd 1074025676 [ 64.050441][ T1829] tun0: owner set to 0 [ 64.104216][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.111325][ T1810] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.120415][ T1810] bridge_slave_0: entered allmulticast mode [ 64.126831][ T1810] bridge_slave_0: entered promiscuous mode [ 64.134479][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.141569][ T1810] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.148755][ T1810] bridge_slave_1: entered allmulticast mode [ 64.155472][ T1837] SELinux: security_context_str_to_sid () failed with errno=-22 [ 64.155471][ T1810] bridge_slave_1: entered promiscuous mode [ 64.225446][ T1839] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 64.256383][ T1842] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 64.280161][ T1842] rust_binder: Write failure EINVAL in pid:326 [ 64.531692][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.545103][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.573993][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.581082][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.680444][ T1810] veth0_vlan: entered promiscuous mode [ 64.726388][ T1810] veth1_macvtap: entered promiscuous mode [ 64.766372][ T1861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.115907][ T1874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.134798][ T1870] __vm_enough_memory: pid: 1870, comm: syz.2.495, bytes: 281474976845824 not enough memory for the allocation [ 65.186975][ T1877] rust_binder: Error while translating object. [ 65.187017][ T1877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.189232][ T1874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 65.194365][ T1877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 65.240471][ T1874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:548 [ 65.605605][ T1883] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 65.661581][ T36] kauditd_printk_skb: 2170 callbacks suppressed [ 65.661598][ T36] audit: type=1400 audit(1750397409.450:7830): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.703418][ T36] audit: type=1400 audit(1750397409.450:7831): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.749166][ T36] audit: type=1400 audit(1750397409.450:7832): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.816325][ T36] audit: type=1400 audit(1750397409.450:7833): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.842814][ T36] audit: type=1400 audit(1750397409.450:7834): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.889769][ T36] audit: type=1400 audit(1750397409.480:7835): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.965611][ T1898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:555 [ 65.978492][ T36] audit: type=1400 audit(1750397409.480:7836): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.020867][ T1902] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.020901][ T1902] rust_binder: Read failure Err(EFAULT) in pid:21 [ 66.021622][ T36] audit: type=1400 audit(1750397409.480:7837): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.062479][ T36] audit: type=1400 audit(1750397409.530:7838): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.088729][ T36] audit: type=1400 audit(1750397409.530:7839): avc: denied { ioctl } for pid=1869 comm="syz.2.495" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.643748][ T1922] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 66.669404][ T1922] rust_binder: Write failure EINVAL in pid:350 [ 66.694715][ T1924] binder: Unknown parameter 'fsuuid' [ 66.766977][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.769958][ T1929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 66.787115][ T1929] rust_binder: Error while translating object. [ 66.816874][ T1929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.830703][ T1929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 66.977455][ T1941] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.083193][ T1946] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.083215][ T1946] rust_binder: Read failure Err(EFAULT) in pid:568 [ 67.970491][ T1973] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.987948][ T1973] rust_binder: Read failure Err(EFAULT) in pid:582 [ 68.010879][ T1973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.190235][ T1977] rust_binder: Write failure EINVAL in pid:585 [ 68.521306][ T1996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:383 [ 68.560358][ T1994] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß €) failed with errno=-22 [ 68.790402][ T1105] Bluetooth: hci0: command 0x1003 tx timeout [ 68.796483][ T328] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.840076][ T2006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.258480][ T2033] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 69.458243][ T2036] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 69.458269][ T2036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 69.506272][ T2036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:608 [ 69.516689][ T2040] rust_binder: Write failure EFAULT in pid:408 [ 69.874544][ T2061] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 69.997063][ T2058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:42 [ 70.004733][ T2064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 70.150534][ T2077] binder: Unknown parameter 'nXI' [ 70.239713][ T2083] rust_binder: Write failure EINVAL in pid:425 [ 70.394831][ T2091] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.411261][ T2091] rust_binder: Failed to allocate buffer. len:4216, is_oneway:true [ 70.421355][ T2086] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 70.429292][ T2091] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 70.463265][ T2091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:625 [ 70.519774][ T2094] input: syz0 as /devices/virtual/input/input27 [ 70.565558][ T2096] rust_binder: Got transaction with invalid offset. [ 70.565619][ T2096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.572363][ T2096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 70.685211][ T36] kauditd_printk_skb: 959 callbacks suppressed [ 70.685229][ T36] audit: type=1400 audit(1750397414.470:8799): avc: denied { write } for pid=2100 comm="syz.0.566" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 70.795416][ T36] audit: type=1400 audit(1750397414.510:8800): avc: denied { write } for pid=2100 comm="syz.0.566" path="/dev/random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 70.806154][ T2103] tap0: tun_chr_ioctl cmd 2148553947 [ 70.860417][ T36] audit: type=1400 audit(1750397414.530:8801): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.873452][ T2109] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.886408][ T36] audit: type=1400 audit(1750397414.530:8802): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.920797][ T36] audit: type=1400 audit(1750397414.530:8803): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.923971][ T2104] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 70.999506][ T36] audit: type=1400 audit(1750397414.550:8804): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.038260][ T2110] kvm: user requested TSC rate below hardware speed [ 71.070795][ T36] audit: type=1400 audit(1750397414.550:8805): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.130389][ T36] audit: type=1400 audit(1750397414.550:8806): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.177088][ T36] audit: type=1400 audit(1750397414.570:8807): avc: denied { read } for pid=2102 comm="syz.1.565" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.262354][ T36] audit: type=1400 audit(1750397414.570:8808): avc: denied { read open } for pid=2102 comm="syz.1.565" path="/dev/binderfs/binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 71.354294][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 71.377315][ T2117] rust_binder: Write failure EINVAL in pid:52 [ 71.599864][ T2126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.621354][ T2128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.644973][ T2128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:58 [ 71.986685][ T2136] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.092138][ T2141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:632 [ 72.152786][ T2137] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 72.439336][ T2149] random: crng reseeded on system resumption [ 72.517545][ T2149] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 72.991875][ T2165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 73.372670][ T2182] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.391040][ T2185] input: syz1 as /devices/virtual/input/input28 [ 73.651305][ T2196] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.012335][ T2201] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 27) [ 74.018991][ T2201] rust_binder: Error while translating object. [ 74.034948][ T2204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.050748][ T2201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.063703][ T2204] rust_binder: Error while translating object. [ 74.075895][ T2201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 74.086544][ T2204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.127151][ T2204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 74.309182][ T2215] binder: Bad value for 'defcontext' [ 74.379678][ T2214] SELinux: policydb magic number 0x66667830 does not match expected magic number 0xf97cff8c [ 74.411809][ T2214] SELinux: failed to load policy [ 74.755129][ T2231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 74.755161][ T2231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:615 [ 74.921826][ T2233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.330944][ T2246] rust_binder: Write failure EINVAL in pid:457 [ 75.339635][ T2246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.363258][ T2250] binder: Binderfs stats mode cannot be changed during a remount [ 75.418221][ T2252] binder: Unknown parameter 'non' [ 75.522572][ T2258] kvm: Disabled LAPIC found during irq injection [ 75.537164][ T2257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.696154][ T36] kauditd_printk_skb: 733 callbacks suppressed [ 75.696174][ T36] audit: type=1400 audit(1750397419.480:9542): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.742427][ T36] audit: type=1400 audit(1750397419.480:9543): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.788704][ T36] audit: type=1400 audit(1750397419.480:9544): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.815493][ T36] audit: type=1400 audit(1750397419.530:9545): avc: denied { read } for pid=2265 comm="syz.0.621" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.857252][ T36] audit: type=1400 audit(1750397419.530:9546): avc: denied { read open } for pid=2265 comm="syz.0.621" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.906424][ T36] audit: type=1400 audit(1750397419.540:9547): avc: denied { ioctl } for pid=2265 comm="syz.0.621" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.931726][ T36] audit: type=1400 audit(1750397419.550:9548): avc: denied { read } for pid=2265 comm="syz.0.621" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.954749][ T36] audit: type=1400 audit(1750397419.560:9549): avc: denied { read open } for pid=2265 comm="syz.0.621" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.979855][ T36] audit: type=1400 audit(1750397419.560:9550): avc: denied { ioctl } for pid=2265 comm="syz.0.621" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.011870][ T2269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 76.052136][ T36] audit: type=1400 audit(1750397419.590:9551): avc: denied { read write } for pid=2265 comm="syz.0.621" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.145187][ T2277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:102 [ 76.267187][ T66] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 76.304782][ T66] hid-generic C98F:0003:0000.0003: unknown main item tag 0x0 [ 76.324020][ T66] hid-generic C98F:0003:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 76.480084][ T2292] fido_id[2292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.661037][ T2303] binder: Unknown parameter 'r‰²ó–Á"m1-X™ ¶9‚([1fy—XÃɤ:Ò ŒîÓ(ÍPù' [ 76.672280][ T2302] rust_binder: Write failure EINVAL in pid:464 [ 76.672701][ T2302] rust_binder: Write failure EFAULT in pid:464 [ 76.674827][ T2297] binder: Bad value for 'max' [ 76.880141][ T2315] random: crng reseeded on system resumption [ 76.912024][ T2318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.912426][ T2319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.920023][ T2318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 76.929451][ T2319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 76.966204][ T2322] rust_binder: Got transaction with invalid offset. [ 76.975564][ T2322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.979491][ T2315] input: syz0 as /devices/virtual/input/input30 [ 77.001768][ T2322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 77.073618][ T2315] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 4101) [ 77.118484][ T2315] rust_binder: Error while translating object. [ 77.130834][ T2315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.138266][ T2315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 77.159206][ T2329] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 77.205201][ T2331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:688 [ 77.329171][ T2337] rust_binder: Error while translating object. [ 77.338593][ T2337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.345281][ T2337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 77.391303][ T2334] rust_binder: Error while translating object. [ 77.413809][ T2334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.422892][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:640 [ 77.453359][ T2334] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.900878][ T2360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.935393][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:648 [ 78.360618][ T2378] rust_binder: Write failure EINVAL in pid:475 [ 78.567496][ T2386] input: syz0 as /devices/virtual/input/input32 [ 78.706703][ T2391] input: syz0 as /devices/virtual/input/input33 [ 78.753193][ T2391] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 78.753218][ T2391] rust_binder: Error while translating object. [ 78.764241][ T2391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.777001][ T2391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:477 [ 78.897718][ T2395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 79.011516][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.030092][ T2398] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 79.030123][ T2398] rust_binder: Error while translating object. [ 79.043405][ T2398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.049762][ T2398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:479 [ 79.144129][ T2398] block device autoloading is deprecated and will be removed. [ 79.153284][ T2406] rust_binder: Error while translating object. [ 79.166544][ T2406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.188812][ T2398] syz.1.665: attempt to access beyond end of device [ 79.188812][ T2398] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.190390][ T2406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:655 [ 79.279035][ T2415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.517593][ T2426] rust_binder: Write failure EFAULT in pid:134 [ 79.747960][ T2441] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 79.759545][ T2441] rust_binder: Error while translating object. [ 79.773042][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.790426][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 79.860842][ T2444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.401996][ T2472] rust_binder: Write failure EINVAL in pid:667 [ 80.529160][ T2474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 80.739089][ T36] kauditd_printk_skb: 1064 callbacks suppressed [ 80.739110][ T36] audit: type=1400 audit(1750397424.520:10616): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.810980][ T36] audit: type=1400 audit(1750397424.520:10617): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.853916][ T36] audit: type=1400 audit(1750397424.520:10618): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=467 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.900719][ T36] audit: type=1400 audit(1750397424.570:10619): avc: denied { read } for pid=2482 comm="syz.0.692" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.943482][ T36] audit: type=1400 audit(1750397424.570:10620): avc: denied { read open } for pid=2482 comm="syz.0.692" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.967322][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 80.975827][ T36] audit: type=1400 audit(1750397424.570:10621): avc: denied { ioctl } for pid=2482 comm="syz.0.692" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.001670][ T36] audit: type=1400 audit(1750397424.580:10622): avc: denied { read write } for pid=1810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.030374][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 81.032701][ T36] audit: type=1400 audit(1750397424.580:10623): avc: denied { read write open } for pid=1810 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.037594][ T328] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.092301][ T36] audit: type=1400 audit(1750397424.580:10624): avc: denied { ioctl } for pid=1810 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.095589][ T2497] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 81.118220][ T36] audit: type=1400 audit(1750397424.640:10625): avc: denied { read } for pid=2487 comm="syz.5.693" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.239996][ T2507] kvm: kvm [2506]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 81.841278][ T2538] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 81.841303][ T2538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 81.863739][ T2538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:497 [ 81.993607][ T2545] rust_binder: Write failure EFAULT in pid:501 [ 82.019282][ T2545] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 82.054547][ T2545] rust_binder: Write failure EINVAL in pid:501 [ 82.270761][ T2555] binder: Binderfs stats mode cannot be changed during a remount [ 82.542214][ T2579] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 82.550715][ T2579] rust_binder: Write failure EINVAL in pid:688 [ 82.555040][ T2580] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 82.569567][ T2580] rust_binder: Write failure EINVAL in pid:688 [ 82.703072][ T2590] rust_binder: Write failure EINVAL in pid:517 [ 82.719389][ T2592] binder: Unknown parameter 'dont_hash' [ 82.881029][ T2599] binder: Unknown parameter 'non' [ 82.894145][ T2598] rust_binder: Error while translating object. [ 82.894178][ T2598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 82.896990][ T2599] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 82.901689][ T2598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:520 [ 82.911933][ T2599] SELinux: failed to load policy [ 82.943601][ T2599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:700 [ 82.950475][ T328] Bluetooth: hci1: command 0x1003 tx timeout [ 82.950546][ T1105] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 83.371659][ T2618] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.396556][ T2627] rust_binder: Error while translating object. [ 83.396598][ T2627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.427820][ T2627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 83.439283][ T2618] rust_binder: Write failure EINVAL in pid:524 [ 83.459463][ T2629] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 83.466992][ T2629] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 83.478226][ T2629] rust_binder: Read failure Err(EFAULT) in pid:764 [ 83.599331][ T2640] rust_binder: Error while translating object. [ 83.610469][ T2640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 83.618014][ T2640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205 [ 83.685382][ T2645] binder: Unknown parameter 's' [ 83.889802][ T2651] rust_binder: Write failure EINVAL in pid:532 [ 83.946334][ T2658] rust_binder: got new transaction with bad transaction stack [ 83.960360][ T2658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 84.103665][ T2660] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 84.525206][ T2669] binder: Bad value for 'stats' [ 84.888774][ T2692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.011310][ T2697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:719 [ 85.161202][ T2702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225 [ 85.181907][ T2706] binder: Bad value for 'stats' [ 85.220741][ T2707] binder: Bad value for 'stats' [ 85.360027][ T2717] rust_binder: Got transaction with invalid offset. [ 85.360069][ T2717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.369770][ T2717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:550 [ 85.400587][ T2717] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.420179][ T2717] rust_binder: Read failure Err(EFAULT) in pid:550 [ 85.505162][ T2725] rust_binder: Write failure EINVAL in pid:727 [ 85.581980][ T2726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 85.622129][ T2725] rust_binder: Write failure EFAULT in pid:727 [ 85.625345][ T2725] rust_binder: Write failure EFAULT in pid:727 [ 85.742150][ T36] kauditd_printk_skb: 954 callbacks suppressed [ 85.742163][ T36] audit: type=1400 audit(1750397429.530:11580): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.780259][ T36] audit: type=1400 audit(1750397429.530:11581): avc: denied { read write open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.832829][ T36] audit: type=1400 audit(1750397429.530:11582): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.865284][ T36] audit: type=1400 audit(1750397429.570:11583): avc: denied { read } for pid=2734 comm="syz.2.772" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.888338][ T36] audit: type=1400 audit(1750397429.570:11584): avc: denied { read open } for pid=2734 comm="syz.2.772" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.942482][ T36] audit: type=1400 audit(1750397429.570:11585): avc: denied { ioctl } for pid=2734 comm="syz.2.772" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.967838][ T36] audit: type=1400 audit(1750397429.600:11586): avc: denied { read } for pid=2734 comm="syz.2.772" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 85.991255][ T36] audit: type=1400 audit(1750397429.600:11587): avc: denied { read open } for pid=2734 comm="syz.2.772" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.015567][ T36] audit: type=1400 audit(1750397429.600:11588): avc: denied { ioctl } for pid=2734 comm="syz.2.772" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 86.040686][ T36] audit: type=1400 audit(1750397429.600:11589): avc: denied { map } for pid=2731 comm="syz.1.771" path="/dev/binderfs/binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.261531][ T2740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.290942][ T2740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.310512][ T2740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 86.335369][ T2745] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 86.365232][ T2748] input: syz1 as /devices/virtual/input/input38 [ 86.373840][ T2745] rust_binder: Write failure EINVAL in pid:560 [ 86.400243][ T2748] SELinux: policydb string length -503316472 does not match expected length 8 [ 86.445609][ T2748] SELinux: failed to load policy [ 86.524509][ T2752] rust_binder: Write failure EFAULT in pid:563 [ 86.650732][ T2756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 86.811460][ T2765] syz.0.782: attempt to access beyond end of device [ 86.811460][ T2765] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.830529][ T2765] __vm_enough_memory: pid: 2765, comm: syz.0.782, bytes: 281474976845824 not enough memory for the allocation [ 86.970931][ T2769] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 86.984763][ T2769] rust_binder: Write failure EINVAL in pid:736 [ 87.549766][ T2788] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.030445][ T2812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.030796][ T2812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.057974][ T2815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:577 [ 88.155258][ T2818] rust_binder: Write failure EINVAL in pid:577 [ 88.204128][ T2822] binder: Unknown parameter 'fscontext?}' [ 88.208378][ T2808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:741 [ 88.234533][ T2808] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 88.251320][ T2808] rust_binder: Read failure Err(EFAULT) in pid:741 [ 88.280683][ T2822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.287921][ T2822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.370639][ T2830] binder: Unknown parameter 'mµ' [ 88.372993][ T2827] rust_binder: Failed copying remainder into alloc: EFAULT [ 88.382702][ T2827] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 88.391508][ T2827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 88.407216][ T2827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:261 [ 88.795470][ T2847] rust_binder: Write failure EINVAL in pid:265 [ 88.851644][ T2850] binder: Unknown parameter 'defcontext01777777777777777777777' [ 89.429299][ T2872] rust_binder: Got transaction with invalid offset. [ 89.429348][ T2872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.436910][ T2872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 89.502580][ T2874] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.525644][ T2874] rust_binder: Read failure Err(EFAULT) in pid:771 [ 89.625174][ T2874] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 90.097578][ T2886] binder: Unknown parameter 'ˆtûÿÿÿÿÿÿÿal' [ 90.413517][ T2913] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 90.413552][ T2913] rust_binder: Error while translating object. [ 90.454737][ T2913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.478056][ T2913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:777 [ 90.753522][ T36] kauditd_printk_skb: 885 callbacks suppressed [ 90.753541][ T36] audit: type=1400 audit(1750397434.540:12475): avc: denied { read write } for pid=2935 comm="syz.0.833" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 90.789835][ T2939] SELinux: security_context_str_to_sid () failed with errno=-22 [ 90.836322][ T36] audit: type=1400 audit(1750397434.540:12476): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.860027][ T36] audit: type=1400 audit(1750397434.540:12477): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.889498][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.900382][ T289] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 90.905977][ T36] audit: type=1400 audit(1750397434.540:12478): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.912441][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 90.933041][ T36] audit: type=1400 audit(1750397434.540:12479): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.963820][ T289] audit: backlog limit exceeded [ 90.971412][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 91.016857][ T2943] rust_binder: Write failure EINVAL in pid:857 [ 91.177605][ T2951] rust_binder: Write failure EFAULT in pid:609 [ 91.251659][ T2955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:611 [ 91.341376][ T2957] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 91.385584][ T2957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:613 [ 91.512111][ T2961] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 91.569060][ T2965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:616 [ 91.688488][ T2969] binder: Bad value for 'stats' [ 91.798057][ T2972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 91.941378][ T2976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.039970][ T2976] rust_binder: Error while translating object. [ 92.040017][ T2976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 92.057172][ T2976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:287 [ 92.096285][ T2978] rust_binder: Write failure EFAULT in pid:863 [ 92.697425][ T2997] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 93.052387][ T3001] rust_binder: Error while translating object. [ 93.052435][ T3001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.058918][ T3001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 93.304543][ T3006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 93.446285][ T3011] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 93.490356][ T3011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 93.511413][ T3011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:635 [ 93.716748][ T3017] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 93.786969][ T3017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.798118][ T3017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.818722][ T3017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:305 [ 94.023133][ T3025] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 94.194037][ T3030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.200405][ T3030] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 94.980527][ T3047] input: syz0 as /devices/virtual/input/input41 [ 95.018405][ T3046] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 95.035479][ T3047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.060400][ T3046] SELinux: failed to load policy [ 95.082064][ T3048] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 95.100458][ T3048] SELinux: failed to load policy [ 95.183372][ T3048] binder: Bad value for 'max' [ 95.381049][ T3055] rust_binder: Write failure EINVAL in pid:323 [ 95.467228][ T3058] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 95.522355][ T3058] rust_binder: Write failure EINVAL in pid:882 [ 95.648232][ T3063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 95.764108][ T36] kauditd_printk_skb: 2826 callbacks suppressed [ 95.764128][ T36] audit: type=1400 audit(1750397439.550:15203): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.832030][ T36] audit: type=1400 audit(1750397439.550:15204): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.900594][ T36] audit: type=1400 audit(1750397439.550:15205): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.914964][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.943549][ T3078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.950910][ T3082] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.957720][ T3082] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 95.973275][ T36] audit: type=1400 audit(1750397439.550:15206): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.980416][ T3078] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 96.002047][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 96.228702][ T3092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:656 [ 96.334129][ T3100] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 96.366223][ T3102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.391878][ T3100] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 96.523827][ T3106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 96.580347][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.613442][ T3108] Bluetooth: hci0: Frame reassembly failed (-84) [ 96.735916][ T3113] rust_binder: Read failure Err(EAGAIN) in pid:662 [ 96.806831][ T3114] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.861008][ T3117] binder: Unknown parameter 'dont_hash' [ 97.376577][ T3133] binder: Unknown parameter 'fscontext?' [ 97.744804][ T3137] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 98.159875][ T3149] rust_binder: Write failure EFAULT in pid:676 [ 98.478071][ T3165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 98.632710][ T328] Bluetooth: hci0: command 0x1003 tx timeout [ 98.638837][ T1105] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 98.762164][ T3174] input: syz1 as /devices/virtual/input/input45 [ 98.780046][ T3174] SELinux: policydb magic number 0x9070ff8c does not match expected magic number 0xf97cff8c [ 98.804501][ T3174] SELinux: failed to load policy [ 99.084667][ T3180] binder: Unknown parameter 'üÿÿÿÿÿÿÿ0-0000000000·!è_UØ…' [ 99.111484][ T3183] rust_binder: Write failure EFAULT in pid:343 [ 99.319928][ T3189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:695 [ 99.379560][ T3189] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 99.421733][ T3189] rust_binder: Read failure Err(EFAULT) in pid:695 [ 99.711994][ T3207] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 99.728464][ T3205] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 99.745620][ T3207] rust_binder: Write failure EINVAL in pid:701 [ 99.749552][ T3208] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 99.807915][ T3208] rust_binder: Write failure EINVAL in pid:701 [ 99.939820][ T3218] binder: Binderfs stats mode cannot be changed during a remount [ 100.064069][ T3224] rust_binder: Write failure EFAULT in pid:353 [ 100.087089][ T3227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.170031][ T3227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:710 [ 100.215459][ T3231] rust_binder: Error while translating object. [ 100.238788][ T3231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.254410][ T3231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 100.558644][ T3244] binder: Bad value for 'stats' [ 100.723756][ T3246] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 100.771270][ T36] kauditd_printk_skb: 3482 callbacks suppressed [ 100.771371][ T36] audit: type=1400 audit(1750397444.560:18596): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.801463][ T36] audit: type=1400 audit(1750397444.560:18597): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.825266][ T36] audit: type=1400 audit(1750397444.560:18598): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.832991][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.856768][ T289] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 100.865549][ T289] audit: backlog limit exceeded [ 100.866400][ T1810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.872852][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.884598][ T289] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 100.892816][ T1810] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 100.958853][ T3249] rust_binder: Write failure EFAULT in pid:714 [ 100.992905][ T3252] rust_binder: Write failure EFAULT in pid:372 [ 101.164053][ T3254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.170277][ T3254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:717 [ 101.396980][ T3264] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 101.421952][ T3264] rust_binder: Error in use_page_slow: EBUSY [ 101.433163][ T3264] rust_binder: use_range failure EBUSY [ 101.440102][ T3264] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 101.458647][ T3264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 101.468076][ T3264] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 101.485384][ T3271] rust_binder: Error while translating object. [ 101.503289][ T3264] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:957 [ 101.520961][ T3271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.536084][ T3271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 101.617281][ T3275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:722 [ 101.635789][ T3273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 101.896355][ T3289] input: syz1 as /devices/virtual/input/input46 [ 102.120931][ T3297] rust_binder: Write failure EINVAL in pid:390 [ 102.503234][ T3309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.513435][ T3309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:395 [ 102.544807][ T3309] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 102.570875][ T3309] rust_binder: Read failure Err(EFAULT) in pid:395 [ 102.589634][ T3311] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 102.645337][ T3314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:973 [ 103.260893][ T3333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.454042][ T3357] binder: Unknown parameter 'fscontext?}ÿ' [ 104.492158][ T3358] input: syz0 as /devices/virtual/input/input48 [ 104.766161][ T3368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 104.802148][ T3368] tap0: tun_chr_ioctl cmd 1074025678 [ 104.822742][ T3368] tap0: group set to 0 [ 104.831031][ T3368] rust_binder: Read failure Err(EFAULT) in pid:427 [ 105.038857][ T3375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:429 [ 105.522844][ T3388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.825210][ T13] bridge_slave_1: left allmulticast mode [ 105.837502][ T36] kauditd_printk_skb: 2651 callbacks suppressed [ 105.837521][ T36] audit: type=1400 audit(1750397449.610:21227): avc: denied { read } for pid=3406 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.870525][ T13] bridge_slave_1: left promiscuous mode [ 105.880447][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.897247][ T36] audit: type=1400 audit(1750397449.610:21228): avc: denied { read open } for pid=3406 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.897415][ T13] bridge_slave_0: left allmulticast mode [ 105.965430][ T3409] rust_binder: Write failure EINVAL in pid:747 [ 105.975130][ T13] bridge_slave_0: left promiscuous mode [ 105.990402][ T36] audit: type=1400 audit(1750397449.610:21229): avc: denied { mounton } for pid=3406 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.013093][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.031961][ T3416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.042441][ T36] audit: type=1400 audit(1750397449.620:21230): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.054846][ T3416] SELinux: ebitmap: truncated map [ 106.102650][ T3416] SELinux: failed to load policy [ 106.121239][ T3418] rust_binder: Write failure EFAULT in pid:1009 [ 106.150405][ T36] audit: type=1400 audit(1750397449.620:21231): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.163838][ T3416] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 106.188638][ T3421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.198919][ T36] audit: type=1400 audit(1750397449.620:21232): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=467 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.206148][ T3422] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.231710][ T36] audit: type=1400 audit(1750397449.630:21233): avc: denied { sys_module } for pid=3406 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.241412][ T3422] audit: audit_lost=101 audit_rate_limit=0 audit_backlog_limit=64 [ 106.318415][ T13] veth1_macvtap: left promiscuous mode [ 106.324402][ T13] veth0_vlan: left promiscuous mode [ 106.423416][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.430553][ T3406] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.437871][ T3406] bridge_slave_0: entered allmulticast mode [ 106.445770][ T3406] bridge_slave_0: entered promiscuous mode [ 106.451558][ T3429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.453574][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.479349][ T3406] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.488288][ T3406] bridge_slave_1: entered allmulticast mode [ 106.495084][ T3406] bridge_slave_1: entered promiscuous mode [ 106.683478][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.690689][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.698137][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.705231][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.789600][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.803379][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.828684][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.835797][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.893924][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.901021][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.983597][ T3443] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 106.983623][ T3443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 107.010568][ T3444] rust_binder: Failed copying remainder into alloc: EFAULT [ 107.020384][ T3443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:759 [ 107.047815][ T3444] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 107.101165][ T3449] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 107.120445][ T3444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.120479][ T3444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:759 [ 107.170148][ T3449] rust_binder: Write failure EINVAL in pid:1019 [ 107.172104][ T3406] veth0_vlan: entered promiscuous mode [ 107.261257][ T3406] veth1_macvtap: entered promiscuous mode [ 107.276167][ T3452] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.276191][ T3452] rust_binder: Read failure Err(EFAULT) in pid:762 [ 107.749529][ T3466] rust_binder: Error while translating object. [ 107.759168][ T3466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 107.768628][ T3466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:7 [ 107.788736][ T3466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 107.811959][ T3466] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.832174][ T3466] rust_binder: Read failure Err(EFAULT) in pid:7 [ 107.843589][ T3470] binder: Bad value for 'max' [ 107.859345][ T3471] binder: Bad value for 'max' [ 108.020407][ T3474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.545879][ T3501] rust_binder: Write failure EFAULT in pid:462 [ 108.606285][ T3505] rust_binder: Write failure EFAULT in pid:777 [ 108.662062][ T3508] binder: Bad value for 'defcontext' [ 109.186428][ T3525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.187617][ T3525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1038 [ 109.247862][ T3528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.711261][ T3539] binder: Bad value for 'stats' [ 109.913869][ T3544] SELinux: failed to load policy [ 109.951233][ T3544] rust_binder: Write failure EINVAL in pid:1045 [ 110.244320][ T3556] rust_binder: Error in use_page_slow: ESRCH [ 110.244360][ T3556] rust_binder: use_range failure ESRCH [ 110.261277][ T3556] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 110.270271][ T3556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 110.297990][ T3556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:27 [ 110.517609][ T3564] rust_binder: Error while translating object. [ 110.566755][ T3564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 110.630350][ T3564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1049 [ 110.842689][ T36] kauditd_printk_skb: 1047 callbacks suppressed [ 110.842712][ T36] audit: type=1400 audit(1750397454.630:22224): avc: denied { read } for pid=3565 comm="syz.1.1031" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.927205][ T36] audit: type=1400 audit(1750397454.630:22225): avc: denied { read open } for pid=3565 comm="syz.1.1031" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.964147][ T36] audit: type=1400 audit(1750397454.630:22226): avc: denied { ioctl } for pid=3565 comm="syz.1.1031" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.020345][ T36] audit: type=1400 audit(1750397454.680:22227): avc: denied { read } for pid=3574 comm="syz.5.1034" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.052038][ T3579] binder: Bad value for 'max' [ 111.108725][ T36] audit: type=1400 audit(1750397454.680:22228): avc: denied { read open } for pid=3574 comm="syz.5.1034" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.181632][ T36] audit: type=1400 audit(1750397454.680:22229): avc: denied { ioctl } for pid=3574 comm="syz.5.1034" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.236928][ T36] audit: type=1400 audit(1750397454.700:22230): avc: denied { read } for pid=3574 comm="syz.5.1034" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.270590][ T36] audit: type=1400 audit(1750397454.700:22231): avc: denied { read open } for pid=3574 comm="syz.5.1034" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.330355][ T36] audit: type=1400 audit(1750397454.700:22232): avc: denied { ioctl } for pid=3574 comm="syz.5.1034" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.404500][ T36] audit: type=1400 audit(1750397454.700:22233): avc: denied { ioctl } for pid=3574 comm="syz.5.1034" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.594143][ T3592] input: syz0 as /devices/virtual/input/input50 [ 111.694655][ T3592] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 111.694681][ T3592] rust_binder: Error while translating object. [ 111.718540][ T3608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.734583][ T3592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.734618][ T3592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 111.814345][ T3612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 111.826371][ T3611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.837280][ T3611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1060 [ 111.901236][ T3617] input: syz1 as /devices/virtual/input/input51 [ 111.920261][ T3616] random: crng reseeded on system resumption [ 112.039983][ T3616] binder: Bad value for 'stats' [ 112.248021][ T3627] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.508421][ T3635] rust_binder: Error while translating object. [ 112.508461][ T3635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 112.534521][ T3635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:56 [ 112.803053][ T3642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 113.114741][ T3652] rust_binder: Error while translating object. [ 113.140883][ T3656] rust_binder: Error while translating object. [ 113.156762][ T3652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.164591][ T3656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.181232][ T3652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1065 [ 113.216213][ T3656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1065 [ 113.289634][ T3660] binder: Bad value for 'defcontext' [ 113.359777][ T3667] binder: Unknown parameter 'dont_hash' [ 113.369060][ T3664] binder: Bad value for 'stats' [ 113.447709][ T3665] binder: Unknown parameter 'fscontext?}vsock' [ 113.651979][ T3680] rust_binder: Write failure EINVAL in pid:805 [ 113.694303][ T3682] rust_binder: Write failure EFAULT in pid:75 [ 113.716735][ T3682] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 113.739091][ T3682] rust_binder: Write failure EINVAL in pid:75 [ 113.745002][ T3687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.764554][ T3686] tap0: tun_chr_ioctl cmd 1074025673 [ 113.777822][ T3687] tap0: tun_chr_ioctl cmd 1074025678 [ 113.783250][ T3687] tap0: group set to 0 [ 113.789381][ T3687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.790761][ T3687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.843289][ T3690] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.034488][ T3700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 114.061455][ T3695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:813 [ 114.207879][ T3705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.241978][ T3708] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.299110][ T3714] rust_binder: Error in use_page_slow: ESRCH [ 114.306284][ T3714] rust_binder: use_range failure ESRCH [ 114.316191][ T3714] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 114.323252][ T3714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 114.332105][ T3714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1078 [ 114.355861][ T3705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.435402][ T3718] rust_binder: Error while translating object. [ 114.453716][ T3719] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 114.460469][ T3719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 114.468584][ T3718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 114.480170][ T3719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1080 [ 114.489680][ T3718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1080 [ 114.911258][ T3731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 115.060557][ T3734] input: syz0 as /devices/virtual/input/input52 [ 115.230370][ T3734] rust_binder: Write failure EINVAL in pid:1088 [ 115.337322][ T3744] binder: Bad value for 'stats' [ 115.418227][ T3746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.462505][ T3748] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 184, size: 4096) [ 115.469025][ T3748] rust_binder: Error while translating object. [ 115.481339][ T3748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.487586][ T3748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 115.500483][ T3748] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 115.510040][ T3748] rust_binder: Error while translating object. [ 115.519593][ T3748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.525859][ T3748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 115.775304][ T3755] binder: Bad value for 'stats' [ 115.850558][ T36] kauditd_printk_skb: 1140 callbacks suppressed [ 115.850577][ T36] audit: type=1400 audit(1750397459.640:23374): avc: denied { map } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.888191][ T3758] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 115.888212][ T3758] rust_binder: Read failure Err(EFAULT) in pid:1094 [ 115.942211][ T36] audit: type=1400 audit(1750397459.640:23375): avc: denied { read } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.968173][ T3761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1094 [ 115.978572][ T36] audit: type=1400 audit(1750397459.640:23376): avc: denied { map } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.015323][ T3761] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 116.015691][ T3761] rust_binder: Read failure Err(EFAULT) in pid:1094 [ 116.046558][ T36] audit: type=1400 audit(1750397459.640:23377): avc: denied { read } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.081033][ T36] audit: type=1400 audit(1750397459.640:23378): avc: denied { map } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.123014][ T36] audit: type=1400 audit(1750397459.640:23379): avc: denied { read } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.154139][ T36] audit: type=1400 audit(1750397459.640:23380): avc: denied { map } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.196271][ T36] audit: type=1400 audit(1750397459.640:23381): avc: denied { read } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.224385][ T36] audit: type=1400 audit(1750397459.640:23382): avc: denied { map } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.332586][ T36] audit: type=1400 audit(1750397459.640:23383): avc: denied { read } for pid=3754 comm="syz.6.1091" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.513388][ T3770] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.515195][ T3770] rust_binder: Error in use_page_slow: ESRCH [ 116.543252][ T3773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 116.553265][ T3770] rust_binder: use_range failure ESRCH [ 116.573909][ T3773] rust_binder: Error while translating object. [ 116.579452][ T3773] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 116.593000][ T3770] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 116.604023][ T3773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:93 [ 116.659807][ T3770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 116.691788][ T3770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:536 [ 116.732977][ T3780] SELinux: security_context_str_to_sid () failed with errno=-22 [ 117.222986][ T3793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.969532][ T3812] kvm: user requested TSC rate below hardware speed [ 118.018112][ T3819] binder: Bad value for 'stats' [ 118.041620][ T3812] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 118.041653][ T3812] rust_binder: Error while translating object. [ 118.080374][ T3812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.100440][ T3812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:829 [ 118.135489][ T3825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 118.153077][ T3825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:117 [ 118.222321][ T3828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.331153][ T3832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.419183][ T3834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1106 [ 118.442480][ T3834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1106 [ 118.477743][ T3834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1106 [ 118.509130][ T3838] rust_binder: Write failure EFAULT in pid:121 [ 118.528805][ T3837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 118.540340][ T3837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:833 [ 118.678557][ T3840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:835 [ 118.698862][ T3847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.922210][ T3861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.932573][ T3861] rust_binder: Error in use_page_slow: ESRCH [ 118.939194][ T3861] rust_binder: use_range failure ESRCH [ 118.946604][ T3861] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 118.954633][ T3861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 118.978348][ T3861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:555 [ 119.089685][ T3869] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.158816][ T3866] rust_binder: Write failure EFAULT in pid:849 [ 119.371531][ T3878] binder: Bad value for 'defcontext' [ 119.388409][ T3886] rust_binder: Write failure EINVAL in pid:1112 [ 119.389762][ T3883] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 119.396466][ T3886] rust_binder: Write failure EINVAL in pid:1112 [ 119.410368][ T3883] rust_binder: Error while translating object. [ 119.416759][ T3883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.450419][ T3883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:852 [ 119.546563][ T3892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.740088][ T3901] random: crng reseeded on system resumption [ 119.779778][ T3901] input: syz0 as /devices/virtual/input/input54 [ 119.922486][ T3903] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 120.048604][ T3914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.048638][ T3914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:858 [ 120.660774][ T3937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 120.772055][ T3940] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 120.860694][ T36] kauditd_printk_skb: 766 callbacks suppressed [ 120.860714][ T36] audit: type=1400 audit(1750397464.650:24150): avc: denied { ioctl } for pid=3942 comm="syz.0.1156" path="/dev/binderfs/binder0" dev="binder" ino=77 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.860726][ T3943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.971973][ T36] audit: type=1400 audit(1750397464.680:24151): avc: denied { map } for pid=3942 comm="syz.0.1156" path="/dev/binderfs/binder0" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.030885][ T3951] kvm: Disabled LAPIC found during irq injection [ 121.061432][ T36] audit: type=1400 audit(1750397464.680:24152): avc: denied { read } for pid=3942 comm="syz.0.1156" path="/dev/binderfs/binder0" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.117440][ T3954] binder: Unknown parameter 'audit' [ 121.133255][ T36] audit: type=1400 audit(1750397464.680:24153): avc: denied { ioctl } for pid=3942 comm="syz.0.1156" path="/dev/binderfs/binder0" dev="binder" ino=77 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.167051][ T36] audit: type=1400 audit(1750397464.700:24154): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.202490][ T36] audit: type=1400 audit(1750397464.700:24155): avc: denied { read write open } for pid=3406 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.275943][ T36] audit: type=1400 audit(1750397464.700:24156): avc: denied { ioctl } for pid=3406 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.311878][ T3956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 121.320379][ T36] audit: type=1400 audit(1750397464.740:24157): avc: denied { ioctl } for pid=3942 comm="syz.0.1156" path="/dev/binderfs/binder0" dev="binder" ino=77 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.322555][ T3956] rust_binder: Read failure Err(EFAULT) in pid:160 [ 121.331542][ T36] audit: type=1400 audit(1750397464.740:24158): avc: denied { read } for pid=3945 comm="syz.5.1157" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.430344][ T36] audit: type=1400 audit(1750397464.740:24159): avc: denied { call } for pid=3942 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 121.495374][ T3958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 121.619317][ T3966] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 121.771882][ T3972] binder: Unknown parameter 'ë€ev/kvm' [ 121.805992][ T3975] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 122.130563][ T3990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.379088][ T4002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.446292][ T4007] rust_binder: Error in use_page_slow: ESRCH [ 122.477406][ T4007] rust_binder: use_range failure ESRCH [ 122.493119][ T4007] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 122.501659][ T4007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 122.520423][ T4015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.536837][ T4007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1139 [ 122.697009][ T4021] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.808628][ T4027] SELinux: security_context_str_to_sid () failed with errno=-22 [ 122.820726][ T4025] binder: Unknown parameter 'non' [ 123.093283][ T4045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.360165][ T4061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.447292][ T4063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 123.622155][ T4073] binder: Unknown parameter 'dont_hash' [ 123.672419][ T4075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:882 [ 123.755788][ T4085] random: crng reseeded on system resumption [ 123.882098][ T4085] input: syz1 as /devices/virtual/input/input57 [ 123.914518][ T4091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1165 [ 124.066753][ T4097] binder: Unknown parameter 'context' [ 124.215504][ T4104] rust_binder: Write failure EFAULT in pid:1170 [ 124.468882][ T4120] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 124.733683][ T4134] input: syz0 as /devices/virtual/input/input59 [ 124.797644][ T4135] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 124.797698][ T4135] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 124.806360][ T4135] rust_binder: Read failure Err(EFAULT) in pid:1177 [ 124.826834][ T4134] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 124.833968][ T4134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 124.849718][ T4134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:205 [ 125.061750][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:633 [ 125.101560][ T4144] __vm_enough_memory: pid: 4144, comm: syz.1.1216, bytes: 281474976845824 not enough memory for the allocation [ 125.198757][ T4147] rust_binder: Write failure EINVAL in pid:633 [ 125.661825][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.702573][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.751371][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.808733][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.855384][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.870721][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.887319][ T36] kauditd_printk_skb: 825 callbacks suppressed [ 125.887338][ T36] audit: type=1400 audit(1750397469.670:24985): avc: denied { map } for pid=4157 comm="syz.6.1220" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.887815][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.893720][ T36] audit: type=1400 audit(1750397469.670:24986): avc: denied { read } for pid=4157 comm="syz.6.1220" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.920666][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 125.994923][ T4158] __vm_enough_memory: pid: 4158, comm: syz.6.1220, bytes: 281474976845824 not enough memory for the allocation [ 126.010373][ T36] audit: type=1400 audit(1750397469.700:24987): avc: denied { map } for pid=4157 comm="syz.6.1220" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.031212][ T4158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.040940][ T4158] audit: audit_lost=121 audit_rate_limit=0 audit_backlog_limit=64 [ 126.048867][ T4158] audit: backlog limit exceeded [ 126.060675][ T4158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.068460][ T4175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.076847][ T4172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.084497][ T4158] audit: audit_lost=122 audit_rate_limit=0 audit_backlog_limit=64 [ 126.122788][ T4176] rust_binder: Error in use_page_slow: ESRCH [ 126.122812][ T4176] rust_binder: use_range failure ESRCH [ 126.137837][ T4176] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 126.148910][ T4176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 126.180384][ T4176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1185 [ 126.418142][ T4188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.799477][ T4202] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 126.960019][ T4204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:913 [ 127.041681][ T4213] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 127.176743][ T4217] binder: Bad value for 'stats' [ 127.370359][ T4232] rust_binder: Write failure EFAULT in pid:661 [ 127.770533][ T4246] binder: Unknown parameter 'ma3â00ŸD0000000000000000000' [ 127.824504][ T4244] rust_binder: Error in use_page_slow: ESRCH [ 127.824530][ T4244] rust_binder: use_range failure ESRCH [ 127.835214][ T4249] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 127.856433][ T4244] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 127.856456][ T4244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 127.880400][ T4244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:927 [ 127.986188][ T4254] binder: Unknown parameter 'contexts/fs/binfmt_misc/register' [ 128.111496][ T4262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.123431][ T4262] rust_binder: Error while translating object. [ 128.130254][ T4262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.137918][ T4262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:931 [ 128.148974][ T4262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.746341][ T4280] input: syz1 as /devices/virtual/input/input60 [ 129.031402][ T4289] rust_binder: Error while translating object. [ 129.031433][ T4289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.056017][ T4289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684 [ 129.538052][ T4319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.551040][ T4319] rust_binder: Error in use_page_slow: ESRCH [ 129.557544][ T4319] rust_binder: use_range failure ESRCH [ 129.565667][ T4319] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 129.572036][ T4319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.580229][ T4319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:955 [ 130.124728][ T4345] block device autoloading is deprecated and will be removed. [ 130.145910][ T4345] syz.6.1279: attempt to access beyond end of device [ 130.145910][ T4345] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.363905][ T4347] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 130.431149][ T4354] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 130.440620][ T4347] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 130.440641][ T4347] rust_binder: Read failure Err(EFAULT) in pid:968 [ 130.450941][ T4361] binder: Unknown parameter 'nXI' [ 130.464508][ T4354] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 130.478410][ T4354] kvm: requested 154209 ns i8254 timer period limited to 200000 ns [ 130.488672][ T4354] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 130.652828][ T4370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.848679][ T4378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.850885][ T4377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.881710][ T4378] rust_binder: Got transaction with invalid offset. [ 130.890722][ T36] kauditd_printk_skb: 1010 callbacks suppressed [ 130.890740][ T36] audit: type=1400 audit(1750397474.680:25897): avc: denied { read open } for pid=4379 comm="syz.6.1291" path="/dev/binderfs/binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.903931][ T4378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.973004][ T4378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1218 [ 130.991407][ T4382] SELinux: failed to load policy [ 131.020352][ T36] audit: type=1400 audit(1750397474.680:25898): avc: denied { read } for pid=4381 comm="syz.5.1292" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.080190][ T36] audit: type=1400 audit(1750397474.680:25899): avc: denied { read open } for pid=4381 comm="syz.5.1292" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.098747][ T4388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.131876][ T36] audit: type=1400 audit(1750397474.690:25900): avc: denied { read } for pid=4381 comm="syz.5.1292" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.200345][ T36] audit: type=1400 audit(1750397474.690:25901): avc: denied { read open } for pid=4381 comm="syz.5.1292" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.259374][ T4394] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.265994][ T36] audit: type=1400 audit(1750397474.690:25902): avc: denied { ioctl } for pid=4381 comm="syz.5.1292" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.285639][ T4394] audit: audit_lost=157 audit_rate_limit=0 audit_backlog_limit=64 [ 131.310546][ T4385] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.327868][ T1810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 131.335354][ T4394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.394419][ T4394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 131.640029][ T4407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:280 [ 131.848124][ T4417] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 131.868393][ T4414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 131.900043][ T4417] rust_binder: Write failure EINVAL in pid:1229 [ 132.461116][ T4447] serio: Serial port ttynull [ 132.524612][ T4451] rust_binder: Write failure EFAULT in pid:1239 [ 132.558755][ T4454] rust_binder: Error while translating object. [ 132.578218][ T4454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 132.600361][ T4454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:709 [ 132.770634][ T4468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 132.833833][ T4471] rust_binder: Write failure EINVAL in pid:295 [ 134.055307][ T4481] input: syz0 as /devices/virtual/input/input62 [ 134.058370][ T4483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.073193][ T4481] rust_binder: Read failure Err(EAGAIN) in pid:299 [ 134.078532][ T4483] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 134.087137][ T4483] rust_binder: Read failure Err(EFAULT) in pid:987 [ 134.159847][ T4483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.166919][ T4482] binder: Unknown parameter 'ÿÿÿÿ' [ 134.220283][ T4488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.289115][ T4487] rust_binder: Error in use_page_slow: ESRCH [ 134.289142][ T4487] rust_binder: use_range failure ESRCH [ 134.305391][ T4487] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 134.323009][ T4487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 134.332190][ T4487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:301 [ 134.905325][ T4520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 135.082460][ T4526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1259 [ 135.170208][ T4530] SELinux: security_context_str_to_sid () failed with errno=-22 [ 135.274194][ T4532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1002 [ 135.363594][ T4536] binder: Bad value for 'stats' [ 135.657833][ T4551] kvm: kvm [4550]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 135.690387][ T4549] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.776243][ T4549] rust_binder: Error in use_page_slow: ESRCH [ 135.810328][ T4549] rust_binder: use_range failure ESRCH [ 135.831598][ T4549] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 135.837103][ T4549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 135.841716][ T4562] binder: Unknown parameter 'defcontext01777777777777777777777' [ 135.875219][ T4549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1007 [ 135.971976][ T36] kauditd_printk_skb: 679 callbacks suppressed [ 135.971997][ T36] audit: type=1400 audit(1750397479.760:26556): avc: denied { read append } for pid=4563 comm="syz.5.1352" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.072191][ T36] audit: type=1400 audit(1750397479.800:26557): avc: denied { read open } for pid=4563 comm="syz.5.1352" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 136.139096][ T4567] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 136.149858][ T36] audit: type=1400 audit(1750397479.810:26558): avc: denied { read } for pid=4563 comm="syz.5.1352" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.185094][ T4567] rust_binder: Write failure EINVAL in pid:325 [ 136.212295][ T36] audit: type=1400 audit(1750397479.810:26559): avc: denied { read open } for pid=4563 comm="syz.5.1352" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.313192][ T36] audit: type=1400 audit(1750397479.810:26560): avc: denied { ioctl } for pid=4563 comm="syz.5.1352" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.328638][ T4575] rust_binder: Got transaction with invalid offset. [ 136.361872][ T4577] rust_binder: Write failure EINVAL in pid:327 [ 136.364898][ T4575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.387114][ T36] audit: type=1400 audit(1750397479.820:26561): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.390886][ T4575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:735 [ 136.413133][ T3406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.438183][ T36] audit: type=1400 audit(1750397479.820:26562): avc: denied { read write open } for pid=3406 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.446870][ T4578] audit: audit_backlog=65 > audit_backlog_limit=64 [ 136.489052][ T3406] audit: audit_lost=167 audit_rate_limit=0 audit_backlog_limit=64 [ 136.622936][ T4581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.706995][ T4581] rust_binder: Error while translating object. [ 136.707027][ T4581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 136.728695][ T4581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 136.870738][ T4602] rust_binder: Error while translating object. [ 136.893497][ T4602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 136.919683][ T4602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:746 [ 137.115724][ T4613] rust_binder: Write failure EINVAL in pid:1277 [ 137.123003][ T4615] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 75) [ 137.138610][ T4615] rust_binder: Error while translating object. [ 137.181492][ T4615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.200507][ T4615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:748 [ 137.208843][ T4613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1277 [ 137.328708][ T4625] random: crng reseeded on system resumption [ 137.501977][ T4635] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 137.569994][ T4640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.570364][ T4640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.606580][ T4640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.629762][ T4642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.641941][ T4637] rust_binder: Write failure EFAULT in pid:339 [ 137.794781][ T4651] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 137.794811][ T4651] rust_binder: Error while translating object. [ 137.820443][ T4651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 137.828324][ T4651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 138.174877][ T4670] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 138.215940][ T4676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.324727][ T4682] SELinux: ebitmap start bit (134) is not a multiple of the map unit size (64) [ 138.351140][ T4686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1288 [ 138.361664][ T4682] SELinux: failed to load policy [ 138.376835][ T4685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.380012][ T4682] SELinux: policydb version -795938998 does not match my version range 15-33 [ 138.440482][ T4682] SELinux: failed to load policy [ 138.633210][ T4703] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 138.655811][ T4702] rust_binder: Got transaction with invalid offset. [ 138.655863][ T4702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.672835][ T4702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1296 [ 138.851298][ T4708] rust_binder: Write failure EINVAL in pid:777 [ 138.966862][ T4711] binder: Unknown parameter 'fscontext?}er' [ 139.174265][ T4716] rust_binder: Write failure EFAULT in pid:779 [ 139.287055][ T4729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.308075][ T4729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 139.435386][ T4740] input: syz0 as /devices/virtual/input/input63 [ 139.599044][ T4748] binder: Unknown parameter 'sÝ1:û-½¹/' [ 139.687743][ T4753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.719263][ T4755] rust_binder: validate_parent_fixup: new_min_offset=16777288, sg_entry.length=67 [ 139.725963][ T4755] rust_binder: Error while translating object. [ 139.753651][ T4751] binder: Unknown parameter 'defcontext:ù*éÚ#0' [ 139.768697][ T4755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.768735][ T4755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1315 [ 139.845865][ T4757] SELinux: policydb version -845211227 does not match my version range 15-33 [ 139.895256][ T4757] SELinux: failed to load policy [ 139.983115][ T4761] serio: Serial port ttynull [ 140.138118][ T4772] binder: Unknown parameter 'measure' [ 140.202070][ T4775] SELinux: policydb version 905587468 does not match my version range 15-33 [ 140.211495][ T4776] rust_binder: Write failure EFAULT in pid:1323 [ 140.223603][ T4775] SELinux: failed to load policy [ 140.417315][ T4783] rust_binder: Write failure EINVAL in pid:1325 [ 140.421434][ T4775] binder: Bad value for 'stats' [ 140.633795][ T4790] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 140.860601][ T4809] random: crng reseeded on system resumption [ 140.990202][ T36] kauditd_printk_skb: 908 callbacks suppressed [ 140.990229][ T36] audit: type=1400 audit(1750397484.770:27468): avc: denied { read write } for pid=4814 comm="syz.5.1432" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.030390][ T36] audit: type=1400 audit(1750397484.780:27469): avc: denied { read write open } for pid=4814 comm="syz.5.1432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.056941][ T36] audit: type=1400 audit(1750397484.780:27470): avc: denied { map } for pid=4814 comm="syz.5.1432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.082748][ T36] audit: type=1400 audit(1750397484.780:27471): avc: denied { read } for pid=4814 comm="syz.5.1432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.107097][ T4820] binder: Unknown parameter 'defcontext01777777777777777777777' [ 141.116550][ T36] audit: type=1400 audit(1750397484.780:27472): avc: denied { map } for pid=4814 comm="syz.5.1432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.140575][ T36] audit: type=1400 audit(1750397484.780:27473): avc: denied { read execute } for pid=4814 comm="syz.5.1432" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.211663][ T36] audit: type=1400 audit(1750397484.820:27474): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.242007][ T36] audit: type=1400 audit(1750397484.820:27475): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.267942][ T36] audit: type=1400 audit(1750397484.840:27476): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.304709][ T4825] binder: Unknown parameter '´ü6’V' [ 141.305547][ T36] audit: type=1400 audit(1750397484.890:27477): avc: denied { remount } for pid=4818 comm="syz.1.1433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 141.527031][ T4829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.527064][ T4829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1092 [ 141.677344][ T4838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 141.855010][ T4848] binder: Bad value for 'max' [ 141.901696][ T4848] SELinux: policydb version -845211227 does not match my version range 15-33 [ 141.950950][ T4848] SELinux: failed to load policy [ 141.971998][ T4848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1333 [ 142.050324][ T4853] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 142.151123][ T4859] input: syz1 as /devices/virtual/input/input64 [ 142.231599][ T4863] rust_binder: Error while translating object. [ 142.231642][ T4863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 142.244964][ T4863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:813 [ 142.286143][ T4861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 142.324818][ T4850] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 142.350385][ T4850] rust_binder: Write failure EINVAL in pid:371 [ 142.459019][ T4872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 142.483008][ T4876] input: syz0 as /devices/virtual/input/input65 [ 142.527713][ T4875] rust_binder: Write failure EFAULT in pid:1337 [ 142.530734][ T4873] rust_binder: Write failure EFAULT in pid:1337 [ 142.551226][ T4875] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 176, limit: 192, size: 85) [ 142.558416][ T4873] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 176, limit: 192, size: 85) [ 142.572593][ T4875] rust_binder: Error while translating object. [ 142.589914][ T4873] rust_binder: Error while translating object. [ 142.603012][ T4875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.625998][ T4875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1337 [ 142.648343][ T4873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.658535][ T4873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1337 [ 142.863709][ T4892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1341 [ 143.050262][ T4905] rust_binder: Write failure EINVAL in pid:386 [ 143.140435][ T4902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1343 [ 143.257714][ T4910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 143.309715][ T4913] rust_binder: Write failure EINVAL in pid:388 [ 143.611457][ T4922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 143.662123][ T4922] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.699174][ T4922] rust_binder: Read failure Err(EFAULT) in pid:395 [ 143.701704][ T4924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:835 [ 143.788031][ T4928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1116 [ 144.188708][ T4940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.246024][ T4944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 144.249559][ T4947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.288258][ T4947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1348 [ 145.162024][ T4994] input: syz0 as /devices/virtual/input/input67 [ 145.166036][ T4991] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.168488][ T4991] rust_binder: Read failure Err(EFAULT) in pid:1129 [ 145.181529][ T4991] rust_binder: Write failure EINVAL in pid:1129 [ 145.444184][ T5004] rust_binder: Write failure EINVAL in pid:857 [ 145.604596][ T5013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:860 [ 145.626684][ T5015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1132 [ 145.672220][ T5015] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.696254][ T5017] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 184, limit: 200, size: 170) [ 145.704461][ T5019] binder: Bad value for 'defcontext' [ 145.706695][ T5015] rust_binder: Read failure Err(EFAULT) in pid:1132 [ 145.730389][ T5017] rust_binder: Error while translating object. [ 145.741780][ T5020] rust_binder: Write failure EINVAL in pid:1132 [ 145.745631][ T5017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.759041][ T5017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 145.769967][ T5017] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.779813][ T5017] rust_binder: Read failure Err(EFAULT) in pid:429 [ 145.909404][ T5029] rust_binder: Failed copying remainder into alloc: EFAULT [ 145.933760][ T5029] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 145.956287][ T5029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 145.980714][ T5029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1135 [ 146.001093][ T36] kauditd_printk_skb: 960 callbacks suppressed [ 146.001110][ T36] audit: type=1400 audit(1750397489.790:28438): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.074694][ T36] audit: type=1400 audit(1750397489.790:28439): avc: denied { read write open } for pid=3406 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.152443][ T36] audit: type=1400 audit(1750397489.790:28440): avc: denied { ioctl } for pid=3406 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.152870][ T3406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.189906][ T36] audit: type=1400 audit(1750397489.800:28441): avc: denied { read write } for pid=5038 comm="syz.6.1501" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 146.204733][ T1810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.213477][ T3406] audit: audit_lost=169 audit_rate_limit=0 audit_backlog_limit=64 [ 146.230103][ T1810] audit: audit_lost=170 audit_rate_limit=0 audit_backlog_limit=64 [ 146.244058][ T3406] audit: backlog limit exceeded [ 146.249322][ T1810] audit: backlog limit exceeded [ 146.418560][ T5053] random: crng reseeded on system resumption [ 146.648846][ T5062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 146.990697][ T5084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 147.049331][ T5079] rust_binder: Write failure EFAULT in pid:1377 [ 147.186157][ T5089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1141 [ 147.470835][ T5093] rust_binder: Write failure EINVAL in pid:452 [ 147.550976][ T5103] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 147.592420][ T5106] binder: Bad value for 'max' [ 147.777737][ T5117] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 147.798122][ T5116] rust_binder: Error in use_page_slow: ESRCH [ 147.798143][ T5116] rust_binder: use_range failure ESRCH [ 147.810533][ T5116] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 147.816135][ T5116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 147.831887][ T5116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:460 [ 147.873849][ T5117] kvm: kvm [5115]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 147.958247][ T5124] binder: Bad value for 'max' [ 147.966145][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 147.969885][ T5125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.976988][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 147.977139][ T5125] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 147.983783][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.005225][ T5125] rust_binder: Write failure EINVAL in pid:886 [ 148.013991][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.062706][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.070241][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.100402][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.108204][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.118908][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.127170][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.136510][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.156086][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.175380][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.182889][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.190682][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.198170][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.205722][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.213575][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.240405][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.266368][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.285612][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.299864][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.313437][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.340476][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.355937][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.369956][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.382507][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.389943][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.430143][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.452796][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.455746][ T5140] binder: Bad value for 'defcontext' [ 148.478742][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.492617][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.501977][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.520379][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.527834][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.535299][ T5145] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 148.563155][ T5145] SELinux: policydb version 51618937 does not match my version range 15-33 [ 148.580515][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.590046][ T5145] SELinux: failed to load policy [ 148.598198][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.608098][ T5145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:467 [ 148.612008][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.638404][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.649917][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.657524][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.680354][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.687962][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.714342][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.729773][ T5150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.731668][ T5147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 148.746997][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.762011][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.784687][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.796041][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.813775][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.830398][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.847990][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.856244][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.871323][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.886376][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.920379][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.927829][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.960766][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.968475][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 148.993302][ T5157] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 149.000396][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.009276][ T5157] rust_binder: Write failure EINVAL in pid:901 [ 149.020358][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.036008][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.044095][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.052246][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.059859][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.068480][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.076724][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.084881][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.093067][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.101245][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.108912][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.118337][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.135159][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.150262][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.165233][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.180376][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.194749][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.210405][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.226793][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.242959][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.272614][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.285240][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.293657][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.302018][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.309493][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.318362][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.326621][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.357436][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.373748][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.389810][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.405852][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.417557][ T5166] SELinux: policydb version 1711943697 does not match my version range 15-33 [ 149.442471][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.467921][ T5166] SELinux: failed to load policy [ 149.473836][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.474598][ T5170] binder: Unknown parameter 'processor : 0 [ 149.474598][ T5170] vendor_id : GenuineIntel [ 149.474598][ T5170] cpu family : 6 [ 149.474598][ T5170] model : 79 [ 149.474598][ T5170] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 149.474598][ T5170] stepping : 0 [ 149.474598][ T5170] microcode : 0xffffffff [ 149.474598][ T5170] cpu MHz : 2199.998 [ 149.474598][ T5170] cache size : 56320 KB [ 149.474598][ T5170] physical id : 0 [ 149.474598][ T5170] siblings : 2 [ 149.474598][ T5170] core id : 0 [ 149.474598][ T5170] cpu cores : 1 [ 149.474598][ T5170] apicid : 0 [ 149.474598][ T5170] Œÿ|ù' [ 149.494030][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.592501][ T5166] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß : 2199.998 [ 149.592501][ T5166] cache size : 56320 KB [ 149.592501][ T5166] physical id : 0 [ 149.592501][ T5166] siblings : 2 [ 149.592501][ T5166] core id : 0 [ 149.592501][ T5166] cpu cores : 1 [ 149.592501][ T5166] apicid : 0 [ 149.592501][ T5166] Œÿ|ù) failed with errno=-22 [ 149.660452][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.668089][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.682638][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.700335][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.707772][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.716822][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.724918][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.740375][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.747913][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.756590][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.764851][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.773432][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.781951][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.789463][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.798180][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.806614][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.814977][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.823379][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.832198][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.839616][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.866970][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.875359][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.883592][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.892702][ T5175] binder: Unknown parameter 'defcontext01777777777777777777777' [ 149.909882][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.918286][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.940390][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.990461][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 149.999073][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.011561][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.027198][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.040349][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.060434][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.083933][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.116773][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.130403][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.166070][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.174811][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.188313][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.210475][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.240424][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.262942][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.270739][ T5187] kvm: kvm [5186]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xf [ 150.292250][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.299969][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.330412][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.343094][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.353437][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.371231][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.378723][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.392078][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.407492][ T5187] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 150.440275][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.468722][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.496439][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.504629][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.512365][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.531451][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.551549][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.559099][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.566732][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.574828][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.583654][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.591790][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.605892][ T5197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 150.640359][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.670364][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.688264][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.703367][ T5197] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 150.718792][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.758522][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.768889][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.779137][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.786850][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.795795][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.806678][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.831132][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.844894][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.868986][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.880377][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.910342][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.918069][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.950182][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.967985][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 150.998476][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.020358][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.049616][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.058335][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.076554][ T36] kauditd_printk_skb: 803 callbacks suppressed [ 151.076572][ T36] audit: type=1400 audit(1750397494.860:29245): avc: denied { map } for pid=5207 comm="syz.5.1553" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.083586][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.138390][ T5210] can0: slcan on ttyS3. [ 151.150330][ T36] audit: type=1400 audit(1750397494.890:29246): avc: denied { read } for pid=5207 comm="syz.5.1553" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.159090][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.233554][ T36] audit: type=1400 audit(1750397494.890:29247): avc: denied { read } for pid=5207 comm="syz.5.1553" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.233572][ T5212] can0 (unregistered): slcan off ttyS3. [ 151.256867][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.290372][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.298589][ T5211] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 151.307186][ T36] audit: type=1400 audit(1750397494.890:29248): avc: denied { read open } for pid=5207 comm="syz.5.1553" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.318352][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.362476][ T5212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:926 [ 151.364081][ T5210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:926 [ 151.373250][ T36] audit: type=1400 audit(1750397494.930:29249): avc: denied { read } for pid=5209 comm="syz.0.1554" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.384567][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.407866][ T36] audit: type=1400 audit(1750397494.930:29250): avc: denied { read open } for pid=5209 comm="syz.0.1554" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.436400][ T36] audit: type=1400 audit(1750397494.970:29251): avc: denied { ioctl } for pid=5209 comm="syz.0.1554" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 151.450442][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.463068][ T36] audit: type=1400 audit(1750397494.970:29252): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 151.480379][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.501527][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.518739][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.542180][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.590366][ T36] audit: type=1400 audit(1750397495.130:29253): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 151.600127][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.636761][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.644953][ T36] audit: type=1400 audit(1750397495.140:29254): avc: denied { map } for pid=5207 comm="syz.5.1553" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 151.649970][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.744546][ T5224] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 151.744571][ T5224] rust_binder: Error while translating object. [ 151.750411][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.773090][ T5224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 151.773124][ T5224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1418 [ 151.784657][ T5222] binder: Unknown parameter 'defcontext000000000000000000000030x0000000000000003' [ 151.792314][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.823347][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.830920][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.838498][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.845940][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.853543][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.856715][ T5230] rust_binder: Write failure EFAULT in pid:487 [ 151.861090][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.875096][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.882737][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.890383][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.911567][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.919175][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.927679][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.935978][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.943481][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.950902][ T872] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 151.959950][ T872] hid-generic 01FF:0004:0400.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 152.030607][ T5232] fido_id[5232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.187695][ T5240] rust_binder: Write failure EINVAL in pid:1156 [ 154.085010][ T1810] cgroup: fork rejected by pids controller in /syz5 [ 154.213949][ T60] bridge_slave_1: left allmulticast mode [ 154.219650][ T60] bridge_slave_1: left promiscuous mode [ 154.235106][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.244990][ T60] bridge_slave_0: left allmulticast mode [ 154.251004][ T60] bridge_slave_0: left promiscuous mode [ 154.256781][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.417137][ T60] veth1_macvtap: left promiscuous mode [ 154.422957][ T60] veth0_vlan: left promiscuous mode [ 156.649744][ T36] kauditd_printk_skb: 649 callbacks suppressed [ 156.649763][ T36] audit: type=1400 audit(1750397500.430:29904): avc: denied { execmem } for pid=5488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 156.697089][ T36] audit: type=1400 audit(1750397500.440:29905): avc: denied { read append } for pid=5490 comm="syz.1.1651" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 156.721429][ T36] audit: type=1400 audit(1750397500.440:29906): avc: denied { read } for pid=5489 comm="syz.0.1650" name="binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 156.745252][ T36] audit: type=1400 audit(1750397500.440:29907): avc: denied { read } for pid=5489 comm="syz.0.1650" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 156.768516][ T36] audit: type=1400 audit(1750397500.450:29908): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.793066][ T36] audit: type=1400 audit(1750397500.460:29909): avc: denied { read } for pid=5490 comm="syz.1.1651" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 156.816337][ T36] audit: type=1400 audit(1750397500.490:29910): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.841428][ T36] audit: type=1400 audit(1750397500.540:29911): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 157.464263][ T36] audit: type=1400 audit(1750397501.250:29912): avc: denied { read } for pid=5502 comm="syz.0.1653" name="binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 157.495029][ T36] audit: type=1400 audit(1750397501.260:29913): avc: denied { execmem } for pid=5501 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 161.750360][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 161.750379][ T36] audit: type=1400 audit(1750397505.530:29964): avc: denied { execmem } for pid=5542 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 161.782905][ T36] audit: type=1400 audit(1750397505.540:29965): avc: denied { read write } for pid=5544 comm="syz.1.1666" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 161.849651][ T36] audit: type=1400 audit(1750397505.540:29966): avc: denied { read } for pid=5544 comm="syz.1.1666" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 161.876240][ T36] audit: type=1400 audit(1750397505.540:29967): avc: denied { read } for pid=5545 comm="syz.6.1667" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 161.899029][ T36] audit: type=1400 audit(1750397505.540:29968): avc: denied { read } for pid=5545 comm="syz.6.1667" name="binder1" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 161.922364][ T36] audit: type=1400 audit(1750397505.540:29969): avc: denied { read write } for pid=5545 comm="syz.6.1667" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 161.945881][ T36] audit: type=1400 audit(1750397505.560:29970): avc: denied { read write } for pid=5544 comm="syz.1.1666" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 161.969757][ T36] audit: type=1400 audit(1750397505.570:29971): avc: denied { execmem } for pid=5544 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 161.989367][ T36] audit: type=1400 audit(1750397505.570:29972): avc: denied { read } for pid=5544 comm="syz.1.1666" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 162.012577][ T36] audit: type=1400 audit(1750397505.570:29973): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 167.653628][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 167.653647][ T36] audit: type=1400 audit(1750397511.440:30036): avc: denied { execmem } for pid=5582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 167.681849][ T36] audit: type=1400 audit(1750397511.460:30037): avc: denied { read } for pid=5584 comm="syz.1.1679" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 167.720843][ T36] audit: type=1400 audit(1750397511.460:30038): avc: denied { read } for pid=5583 comm="syz.0.1678" name="binder1" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 167.760402][ T36] audit: type=1400 audit(1750397511.460:30039): avc: denied { read } for pid=5583 comm="syz.0.1678" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 167.786724][ T3406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.797856][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.804599][ T3406] audit: audit_lost=171 audit_rate_limit=0 audit_backlog_limit=64 [ 167.810371][ T36] audit: type=1400 audit(1750397511.470:30040): avc: denied { read } for pid=5585 comm="syz.6.1680" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 167.814069][ T3406] audit: backlog limit exceeded [ 167.840973][ T291] audit: audit_lost=172 audit_rate_limit=0 audit_backlog_limit=64 [ 173.113462][ T36] kauditd_printk_skb: 131 callbacks suppressed [ 173.113480][ T36] audit: type=1400 audit(1750397516.900:30171): avc: denied { execmem } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 173.144531][ T36] audit: type=1400 audit(1750397516.900:30172): avc: denied { mounton } for pid=5613 comm="syz.0.1687" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 173.168363][ T36] audit: type=1400 audit(1750397516.900:30173): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 173.193455][ T36] audit: type=1400 audit(1750397516.930:30174): avc: denied { read } for pid=5614 comm="syz.1.1688" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 173.216561][ T36] audit: type=1400 audit(1750397516.930:30175): avc: denied { mounton } for pid=5614 comm="syz.1.1688" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 173.239759][ T36] audit: type=1400 audit(1750397516.930:30176): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 173.263969][ T36] audit: type=1400 audit(1750397516.950:30177): avc: denied { read write } for pid=5616 comm="syz.6.1689" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 173.287937][ T36] audit: type=1400 audit(1750397516.950:30178): avc: denied { read } for pid=5616 comm="syz.6.1689" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 173.310747][ T36] audit: type=1400 audit(1750397516.950:30179): avc: denied { read write } for pid=3406 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 175.127318][ T36] audit: type=1400 audit(1750397518.910:30180): avc: denied { execmem } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 175.275706][ T306] bridge_slave_1: left allmulticast mode [ 175.290327][ T306] bridge_slave_1: left promiscuous mode [ 175.296040][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.312309][ T306] bridge_slave_0: left allmulticast mode [ 175.318165][ T306] bridge_slave_0: left promiscuous mode [ 175.323957][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.433371][ T306] veth1_macvtap: left promiscuous mode [ 175.438892][ T306] veth0_vlan: left promiscuous mode [ 175.692991][ T306] bridge_slave_1: left allmulticast mode [ 175.698777][ T306] bridge_slave_1: left promiscuous mode [ 175.704505][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.712106][ T306] bridge_slave_0: left allmulticast mode [ 175.717835][ T306] bridge_slave_0: left promiscuous mode [ 175.723634][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.731556][ T306] bridge_slave_1: left allmulticast mode [ 175.737296][ T306] bridge_slave_1: left promiscuous mode [ 175.743064][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.750681][ T306] bridge_slave_0: left allmulticast mode [ 175.756345][ T306] bridge_slave_0: left promiscuous mode [ 175.762158][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.923418][ T306] veth1_macvtap: left promiscuous mode [ 175.928936][ T306] veth0_vlan: left promiscuous mode [ 175.934666][ T306] veth1_macvtap: left promiscuous mode [ 175.940206][ T306] veth0_vlan: left promiscuous mode