last executing test programs: 3m13.796523048s ago: executing program 2 (id=638): openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f0000000000)=[@register_looper, @increfs, @decrefs={0x40046307, 0x1}, @dead_binder_done], 0xf3, 0x0, &(0x7f0000000c00)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9aca27f2df6f986a7afc85946a3a0b48f4708dc75752094cd6934b93e52df25f6e8e624eefcc70654c5adf31edb0581265f46eb5ffd9713322d78d3aae5e7808a8a6d8dcde0e7783f25ebb4cd8c4d2a232d9be46a40103db9b0488f4bf3e5751b8437bb741b6c3f5d9bc502104d76f62fbeb7274650475d1440703ca3da95c09c0594c0bea0bfaf1ff58e93f96699eefdc010dd5dd2e2217412531920058c1d06fa9e4"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x800, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000d40)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m13.468039783s ago: executing program 2 (id=642): openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) (async, rerun: 64) r0 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000010"]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x204008, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@obj_user={'obj_user', 0x3d, 'stats=global'}}]}) 3m12.543885497s ago: executing program 2 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x101b82, 0x5f) write$cgroup_int(r1, &(0x7f0000000280)=0x900000000001, 0x12) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 3m12.446944169s ago: executing program 2 (id=651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5, 0x24ab}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000fffff6400def3a05b04100"/48]) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b104000000000001020000000d000000"]) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0xa, 0x2, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/221, 0xdd, 0x0, 0x21}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x1400}, @register_looper], 0x0, 0x0, 0x0}) 3m12.044494724s ago: executing program 2 (id=655): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) (async) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc0046209, 0xfffffffffffffffe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x582, 0x0, 0x4348}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 3m11.966664976s ago: executing program 2 (id=656): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000080), 0x2400, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e2d6bbcf70e61d0eceb00683d92a2f535dbb174044149f89ebf7d1c6e8bf36a08d8c4c28a1eae1dfa400518a46d52100834c6c4f1c0db482a71f07a3ac884bc82888d3bcec4b3035cd641f10ec0425fe7998b671445c299d5c1de4bf63a6b72b05da74b74742d546b8dcba145e643aa69767553d1c69efa71e40b7c9737019231fca2bc0ac4f16beea672af0106af98168eeef540d8"]) 2m56.619392559s ago: executing program 32 (id=656): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) write(r0, 0x0, 0x0) (async) write(r0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000080), 0x2400, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e2d6bbcf70e61d0eceb00683d92a2f535dbb174044149f89ebf7d1c6e8bf36a08d8c4c28a1eae1dfa400518a46d52100834c6c4f1c0db482a71f07a3ac884bc82888d3bcec4b3035cd641f10ec0425fe7998b671445c299d5c1de4bf63a6b72b05da74b74742d546b8dcba145e643aa69767553d1c69efa71e40b7c9737019231fca2bc0ac4f16beea672af0106af98168eeef540d8"]) 2.771486728s ago: executing program 0 (id=2928): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10000, 0x12) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x1, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.434576883s ago: executing program 0 (id=2933): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0x98, &(0x7f0000000180)={0x5, 0xfffffffffffffbff, 0x8}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="6c7b0200000000000000"], 0xa) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) 2.244699216s ago: executing program 0 (id=2935): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x40000000000064) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) write(r5, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xe0, 0x6, '\x00', 0x161e}) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close(r6) 1.910873631s ago: executing program 0 (id=2940): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r0, 0x4068aea3, &(0x7f0000000040)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x1}], 0x14, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xffffffff) 1.758937634s ago: executing program 3 (id=2945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000809e00000000000000e851000000000000"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x5c, 0x0, &(0x7f0000000480)=[@request_death={0x400c630e, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xa}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x40}], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008602"]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3e}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000500), 0x801, 0x0) write$khugepaged_scan(r10, &(0x7f0000000540), 0x8) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close(0x5) close(0x4) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1.548631556s ago: executing program 1 (id=2947): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x1, 0xf}}, 0x30) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000240)={0x1, r3}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xb4, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x0, 0x0, 0x1e}, @fda={0x66646185, 0x5, 0x1, 0x17}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @increfs={0x40046304, 0x3}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x1000}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x1, 0x35}}, &(0x7f0000000480)={0x0, 0x18, 0x30}}}], 0x36, 0x0, &(0x7f00000004c0)="716a717f48fadb759c672678dd194a6a9acde00cd32a310b8d53a97233460ae55cd307f669d6c76cf4782e9e79152a3adc8b3c6139a2"}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$rfkill(r6, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x88d, 0x0, 0x1}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1.322367s ago: executing program 3 (id=2949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x367d) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000080)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0xffffffff}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x2, 0x28}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x367d) (async) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f0000000080)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0xffffffff}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x2, 0x28}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 1.189512632s ago: executing program 1 (id=2951): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x0, 0x3, 0x7f}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r4, 0x0, 0x7) openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r5, 0x8010743f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x9) 1.031649465s ago: executing program 0 (id=2952): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r0, 0x2000) 972.708645ms ago: executing program 4 (id=2953): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x280c00, 0x0) (async) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x280c00, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/139) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x38) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x38) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8ae9b000) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x40010, r2, 0x0) 898.175327ms ago: executing program 1 (id=2954): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x141800, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) mount$binderfs(&(0x7f0000000000), &(0x7f0000002200)='./binderfs\x00', 0x0, 0x2002004, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000000)={0x10000000000000bf, 0x0, [{0x277, 0x0, 0xffffffffffffff8f}]}) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"]) 897.345656ms ago: executing program 4 (id=2955): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0xa]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6500, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, 0x0) (async) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 872.327707ms ago: executing program 3 (id=2956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) (async) ioctl$TUNGETSNDBUF(r0, 0x400454dc, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x561, 0x0, 0x9}]}) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) (async) ioctl$TUNATTACHFILTER(r7, 0x401054d5, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 584.510421ms ago: executing program 4 (id=2957): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x4d8182) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x2, 0x0, [0x2, 0xd, 0x7, 0x1, 0x80, 0xffffffff, 0x1, 0x6]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x0, 0x5, 0x3}) write$selinux_load(r3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3], 0x3e) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000000c0)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1, 0x155) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 552.773902ms ago: executing program 1 (id=2958): ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000040)={{0xfffffffc, 0x80000000}, 0x100, './file0\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x92b5) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xfffffffd, 0x47, &(0x7f0000000200)="a2e13cb84fb8624e348c5172e1b4d5655faf529e734ea436f5f21bd276d0b2ebda4cebdee401af94cf1e8af57e5d121e96865c6c5b313f5e9d63666ebe9aa9f941f630e6413de6"}]}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000340)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000000300)=0xfffffffa}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc001, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000003c0)) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000400)=0x735e) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) write$rfkill(r3, &(0x7f0000000480)={0x9, 0x8, 0x2}, 0x8) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000004c0)={0x9, 0xffff, 0x6, 0xe, 0x11, "3e8005b09de76694"}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x2) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000580)={0x0, 0x1, 0x153b9ad8, 0x800}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) read(r5, &(0x7f0000000600)=""/141, 0x8d) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f00000006c0)=0xeeee8000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000700)=0x2) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000780)={0x5, 0x7, 0x7, 0x2bd9, 0x5}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000007c0)=0x6) write$tcp_mem(r6, &(0x7f0000000800)={0x7, 0x20, 0x70, 0x20, 0x6}, 0x48) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000880)={0x6, 0xfffffff1, 0x1, 0x9, 0x40, "afdc5a0dcf12e65229e09684310a3f9d41c375", 0xc, 0xe}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_KVMCLOCK_CTRL(r7, 0xaead) ioctl$TIOCSIG(r2, 0x40045436, 0x26) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000008c0)=0x6) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000900)) 527.582492ms ago: executing program 3 (id=2959): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs2/binder1\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000008009d000040"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000400)={0xdf, 0x0, 0x8000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x6, 0x0, 0x1a}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/40, 0x28, 0x0, 0x3a}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000140)={0x0, 0x20, 0x48}}}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 400.547074ms ago: executing program 4 (id=2960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa, 0x0, 0x2f}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 364.882695ms ago: executing program 1 (id=2961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 292.340736ms ago: executing program 4 (id=2962): mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) (rerun: 64) 228.620547ms ago: executing program 3 (id=2963): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/213, 0xd5, 0x1ff, 0x4, 0x400, 0x5, 0x2}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, {0x9, 0x2, 0xf}}, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) 222.145217ms ago: executing program 1 (id=2964): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) close(0x3) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x1, 0xf9, 0x83e, 0x8}, 'syz1\x00', 0x2}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, 0x0) (async, rerun: 64) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, 0x0) (async, rerun: 64) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 172.335608ms ago: executing program 3 (id=2965): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.stat\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) syz_clone(0x20180, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x606c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x34) write$cgroup_subtree(r3, &(0x7f00000002c0)={[{0x2d, 'rdma'}, {0x2d, 'cpuset'}, {0x2b, 'net_cls'}, {0x2b, 'rlimit'}, {0x2b, 'freezer'}, {0x2d, 'perf_event'}, {0x2b, 'rdma'}, {0x2b, 'cpuacct'}, {0x2d, 'cpu'}, {0x2d, 'devices'}]}, 0x51) ioctl$TCSBRK(r0, 0x5409, 0xffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x420, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) 68.422369ms ago: executing program 4 (id=2966): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002600)={{0x0, 0x0, 0x80, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000240)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r10, 0x4018aee1, 0x0) r11 = openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x806}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xffffff80}, {0x6}]}) write$cgroup_subtree(r11, &(0x7f0000002500)=ANY=[@ANYBLOB="f3b2b01780f94225fcc35ef435df1853fa3714b4a17933f8184eb0ce4dd11ea8458a4d277f3a9d149bb8ae47b9639a2ada39bebbc5144126460924ea5b65faf1ffcd6b990ab90475731db14275643c8e527be445a893c40264d6c003b141b192055e61c0978ab4cdd81b1a5ad4865f91aed59cffcf9d2bf15c702faccacd5d9006d3e0bdb930d776dd36b53da88f31558ed4c5dd60e8243a35cbf63d08a3e8319328844dfe0fb6587090affd3d2abf4bae649569184080e52cf433fcceb3ba586c28f3a07440c53fd8d2", @ANYRESHEX=r12, @ANYRES64=r0], 0x44) r13 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) ioctl$TCSETS(r13, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.max\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=2967): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x59, 0x81, '\x00', 0x5}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) write$snapshot(r1, &(0x7f0000000080)="8cb555c7aab2540db8cf89fa8c92f23bc6adf106193b5ad936ddc09658cc3a195673715a58f63626fc1fba16bd37cbd751d59ac41c74bace9cc681fecad05bfda798ac8c93d9841d6fa433c83f03c009cd4472acfe91befe6582a1cdd8db20561fd706c8ed0437834a84bdececb101e555ea0d1d3b9fe980732b898dd8059dde2be4cd76e2735da112", 0x89) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x283, 0x0, 0x8}]}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000180)) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x9}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x105a40, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000280)) close(r0) syz_clone(0x20100, &(0x7f00000002c0)="231759b57071476677bd9c07f62013f00e9ac56fc173cbc426c83a65d1ba7c708d215c3ceab1e50d810f1470fc6e52a22b00163a3d11bde248ae1308783031fac66bf5dffec6c3c34a9fa02306741f91dd5cc26379d06550908777dbf25689f7974222f937bd9e7e619c572cb7b274d85c370ef6f7e7275f5fcc00d7c6543819d0f799878e040b2df1cc540b9bc1b23753546802172bb269e083fcff0a8d563419873a7204f8e63c25a65c374b2c388728b976b4a8d843d2b4", 0xb9, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="51af38a44c962207f501157b73360109545aada5d7b2791e06925587b46c47e6bba7b3463a796a69e9fef1dbcab09d13e7b3be55581e24266f01f01871139fa28910db3e039dd3dfebf2d0e7927554b987e833bb42bdbb7ac5c8cadfa891a6ae342259c21459506f70025a7ea3a0ab5a5c1064fc6bee5a8f10731c493c98ca9cd40fda68750b473969b5cd552433760d4ab4fdcece0ab6075c4a39979dcfe928062d6608ee053fc38d8d3f2023347e56bbeb365ff6ac86ec126628") ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "a572d0ff2b7aa6f05f00c72b798082ed"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000014c0)={0xc, 0x2, {0x1000, @usage=0xd21, 0x0, 0x2, 0x8000000000000000, 0x8, 0x9, 0x7ff, 0x1c5, @usage=0x4, 0x80, 0x9, [0x6, 0x2, 0xd, 0x5, 0xfffffffffffff323, 0x8]}, {0x10000, @usage=0x2, 0x0, 0x7fffffff, 0x100, 0xfffffffffffff000, 0x355, 0x8, 0x408, @usage, 0xac5a, 0x8, [0x6, 0x100000001, 0x3, 0xffffffff, 0x5, 0xfffffffffffffff9]}, {0x9, @usage=0xd8fd, 0x0, 0x3, 0x5, 0x2, 0x6, 0xff, 0x44, @usage=0x9d0, 0x2, 0x3, [0x2, 0xcb2, 0x6, 0x5, 0x743, 0x3]}, {0x9, 0x40, 0x7}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000018c0)={0x10, 0x2, {0x2, @usage=0x1000, r3, 0x10, 0x7, 0xfffffffffffffff9, 0x2, 0x4, 0x494, @struct={0x2, 0xad}, 0x6, 0x4, [0xfffffffffffffff8, 0x4, 0xf, 0x8f, 0x33d5971d, 0x9]}, {0x4, @struct={0x3, 0x6}, 0x0, 0x3, 0x5, 0x1, 0x8000000000000000, 0x5a, 0x400, @usage=0x9, 0x5, 0xffffffff, [0xd462, 0x7, 0x5, 0xffffffff00000000, 0xff80000000000000, 0xfff]}, {0x5, @usage=0x80, r4, 0x0, 0xcb61, 0xffffffff8adc49df, 0x1, 0x5, 0x8, @usage=0x8000000000000001, 0x5, 0x2, [0x4c, 0x100000001, 0x7ff, 0x2, 0x2, 0x6]}, {0x8, 0x80, 0xffffffffffffffff}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001cc0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000001d00)={0x10000, 0x0, [0x7f8, 0x1, 0x4, 0x7, 0x5, 0x8000, 0x8]}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001d80), 0x100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001dc0), 0x440400, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000001e00)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001e40)={0x4000, 0x0, 0x40, 0x9, 0xa}) write$cgroup_devices(r6, &(0x7f0000001e80)={'b', ' *:* ', 'm\x00'}, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000001ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_RUN(r0, 0xae80, 0x0) r9 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x43) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000035c0)={0xb0, 0x0, &(0x7f0000003400)=[@free_buffer={0x40086303, r9}, @enter_looper, @acquire, @transaction_sg={0x40486311, {0xfff, 0x0, 0x0, 0x0, 0x86bd124a3673a40a, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003180)={@flat=@binder={0x73622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000002100)=""/98, 0x62, 0x2, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000002180)=""/4096, 0x1000, 0x2, 0x14}}, &(0x7f0000003200)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003340)={@fda={0x66646185, 0x8, 0x2, 0x38}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000003240)=""/215, 0xd7, 0x2, 0x13}}, &(0x7f00000033c0)={0x0, 0x20, 0x38}}}, @enter_looper, @enter_looper], 0xc3, 0x0, &(0x7f00000034c0)="ad9eb466795282419b95c5147caf96c2d2ee1de5d90b129a7f4ae76b5f951abf409b1c6f49063b08dd4856d5dd7242da103dd5b813de3b0399827db0011620061640fd5cb6064ef1c9ab2729741f6532da4ac91f93e51f53d4d8b5070a24b30266ab79b809b0a26a9352062ff7930c84c4d7bacb59740c5be68630bc10a9b96d9f7135dcc2dbef3f194cf9ca5d603975748be189c2293ee87548b47bc23d127d033de7d1029b86b47993f47794aeb2f74a426dc2763032fa74296773bf74d96b3adc79"}) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003600), 0x10000, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000003740)) kernel console output (not intermixed with test programs): 6 comm="syz.1.2009" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 182.050411][ T6578] rust_binder: Write failure EINVAL in pid:715 [ 182.061941][ T36] audit: type=1400 audit(1750355457.950:31628): avc: denied { relabelfrom } for pid=6566 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 182.143942][ T36] audit: type=1400 audit(1750355457.950:31629): avc: denied { relabelto } for pid=6566 comm="syz.1.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 182.199459][ T36] audit: type=1400 audit(1750355457.950:31630): avc: denied { mounton } for pid=6566 comm="syz.1.2009" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.242683][ T36] audit: type=1400 audit(1750355457.990:31631): avc: denied { read write } for pid=2427 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.292252][ T6580] random: crng reseeded on system resumption [ 182.550253][ T6588] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 182.550278][ T6588] rust_binder: Read failure Err(EFAULT) in pid:1537 [ 182.786549][ T6599] random: crng reseeded on system resumption [ 182.915136][ T6601] binder: Unknown parameter '' [ 183.041274][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.054175][ T12] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 183.088878][ T6615] kvm: Disabled LAPIC found during irq injection [ 183.120333][ T6615] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 183.144196][ T6615] rust_binder: Write failure EINVAL in pid:731 [ 183.156897][ T6615] binder: Bad value for 'defcontext' [ 183.364721][ T6623] random: crng reseeded on system resumption [ 183.488025][ T6626] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 183.488047][ T6626] rust_binder: Read failure Err(EFAULT) in pid:1545 [ 183.570717][ T6629] input: syz0 as /devices/virtual/input/input106 [ 184.037248][ T6637] input: syz1 as /devices/virtual/input/input107 [ 184.222210][ T6646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 184.244612][ T6646] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 184.354142][ T6651] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 184.583875][ T6657] binder: Unknown parameter '' [ 184.602696][ T6655] binder: Unknown parameter '' [ 185.120844][ T665] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.124054][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 185.443017][ T6698] rust_binder: Write failure EINVAL in pid:740 [ 185.574407][ T6704] random: crng reseeded on system resumption [ 185.621207][ T6706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:744 [ 185.763070][ T6715] SELinux: policydb version -1057923543 does not match my version range 15-33 [ 185.805762][ T6715] SELinux: failed to load policy [ 185.820238][ T6718] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 185.834874][ T6718] SELinux: failed to load policy [ 186.044241][ T6724] rust_binder: Write failure EINVAL in pid:1580 [ 186.113225][ T6731] rust_binder: Write failure EINVAL in pid:747 [ 186.228184][ T6733] input: syz1 as /devices/virtual/input/input109 [ 186.308573][ T6737] rust_binder: Write failure EINVAL in pid:749 [ 186.509387][ T6748] rust_binder: Write failure EINVAL in pid:1588 [ 186.583746][ T6752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.615027][ T6752] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 186.664589][ T36] kauditd_printk_skb: 665 callbacks suppressed [ 186.664607][ T36] audit: type=1400 audit(1750355462.910:32297): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.722290][ T6762] rust_binder: Write failure EINVAL in pid:755 [ 186.760845][ T36] audit: type=1400 audit(1750355462.920:32298): avc: denied { ioctl } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.860147][ T36] audit: type=1400 audit(1750355462.960:32299): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.874790][ T6766] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.919590][ T6773] SELinux: policydb version 29956485 does not match my version range 15-33 [ 186.946673][ T36] audit: type=1400 audit(1750355462.960:32300): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=462 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 186.946909][ T6773] SELinux: failed to load policy [ 186.990150][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x7 [ 187.001417][ T6766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1594 [ 187.003915][ T6766] rust_binder: Read failure Err(EFAULT) in pid:1594 [ 187.008083][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x7 [ 187.039235][ T36] audit: type=1400 audit(1750355462.970:32301): avc: denied { ioctl } for pid=6750 comm="syz.1.2070" path="/dev/binderfs/binder0" dev="binder" ino=86 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.064854][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x7 [ 187.072848][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.080620][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.088432][ T36] audit: type=1400 audit(1750355462.970:32302): avc: denied { read write } for pid=6760 comm="syz.4.2073" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 187.112673][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.113728][ T6777] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.120740][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.128410][ T6777] audit: audit_lost=133 audit_rate_limit=0 audit_backlog_limit=64 [ 187.137786][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.145800][ T36] audit: type=1400 audit(1750355462.970:32303): avc: denied { read write open } for pid=6760 comm="syz.4.2073" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 187.175715][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.175744][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.175766][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.186389][ T6777] audit: backlog limit exceeded [ 187.193632][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.199913][ T6779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:761 [ 187.204669][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.229116][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.236896][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.244671][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.252413][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.260135][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.267880][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.275710][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.283449][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.291275][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.298984][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.306732][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.314472][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.322431][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.330210][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.338000][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.346251][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.354284][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.362795][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.371704][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.379797][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.382767][ T6782] binder: Unknown parameter 'coyBLV"i5ntext' [ 187.387631][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.402484][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.410285][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.418295][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.426384][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.434190][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.442008][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.449806][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.457596][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.465421][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.473245][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.482675][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.490592][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.498492][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.506334][ T6786] kvm: kvm [6785]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 187.516663][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.533428][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.549891][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.560887][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.568845][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.586234][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.600922][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.608708][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.617440][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.625981][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.636158][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.644546][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.653398][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.663903][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.681022][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.692937][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.701955][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.709728][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.712213][ T6795] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.718803][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.734774][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.744891][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.753497][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.762286][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.770196][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.781289][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.789125][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.799104][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.807714][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.816398][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.824994][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.833567][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.844359][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.859021][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.869020][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.872472][ T59] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 187.877899][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.893249][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.900995][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.910084][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.918767][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.930960][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.950871][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.959509][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.968523][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.977231][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 187.985992][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.003287][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.012127][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.020018][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.029481][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.038284][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.047194][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.056073][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.064728][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.079334][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.088722][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.098101][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.107887][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.117129][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.126117][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.134883][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.149070][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.157888][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.166619][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.175590][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.184368][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.193009][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.201683][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.209647][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.225189][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.234077][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.251113][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.258934][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.266695][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.274468][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.282229][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.290007][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.298144][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.305947][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.313709][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.321511][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.329263][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.337269][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.345276][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.353063][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.361040][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.368791][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.376571][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.384387][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.392160][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.399886][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.407660][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.415709][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.423483][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.431518][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.439478][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.447646][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.455522][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.463324][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.471481][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.479551][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.487368][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.495326][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.520267][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.528157][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.535978][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.543954][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.551729][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.559808][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.568637][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.576528][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.585332][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.593400][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.601188][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.610870][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.619913][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.630863][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.638640][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.647916][ T10] hid-generic 0008:0000:FFFFFBFF.0022: unknown main item tag 0x0 [ 188.658638][ T10] hid-generic 0008:0000:FFFFFBFF.0022: hidraw0: HID v9.86 Device [syz0] on syz1 [ 188.766987][ T6835] input: syz1 as /devices/virtual/input/input112 [ 188.835660][ T6841] binder: Unknown parameter 'processor : 0 [ 188.835660][ T6841] vendor_id : GenuineIntel [ 188.835660][ T6841] cpu family : 6 [ 188.835660][ T6841] model : 79 [ 188.835660][ T6841] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 188.835660][ T6841] stepping : 0 [ 188.835660][ T6841] microcode : 0xffffffff [ 188.835660][ T6841] cpu MHz : 2199.998 [ 188.835660][ T6841] cache size : 56320 KB [ 188.835660][ T6841] physical id : 0 [ 188.835660][ T6841] siblings : 2 [ 188.835660][ T6841] core id : 0 [ 188.835660][ T6841] cpu cores : 1 [ 188.835660][ T6841] apicid : 0 [ 188.835660][ T6841] initial apicid : 0 [ 188.835660][ T6841] fpu : yes [ 188.835660][ T6841] fpu_exception : yes [ 188.835660][ T6841] cpuid level : 13 [ 188.835660][ T6841] wp : yes [ 188.835660][ T6841] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 188.835660][ T6841] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 189.088969][ T6858] SELinux: truncated policydb string identifier [ 189.243800][ T6858] SELinux: failed to load policy [ 189.431438][ T6865] fido_id[6865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.442904][ T6868] binder: Unknown parameter 'coyBLV"i5ntext' [ 189.455863][ T9] hid (null): unknown global tag 0xc [ 189.462257][ T9] hid-generic 0003:0004:01FF.0023: unknown main item tag 0x2 [ 189.483142][ T9] hid-generic 0003:0004:01FF.0023: collection stack underflow [ 189.499291][ T9] hid-generic 0003:0004:01FF.0023: item 0 0 0 12 parsing failed [ 189.507314][ T9] hid-generic 0003:0004:01FF.0023: probe with driver hid-generic failed with error -22 [ 189.920851][ T665] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.921061][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 190.112275][ T6881] input: syz1 as /devices/virtual/input/input114 [ 190.125636][ T6887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:777 [ 190.188219][ T6881] binder: Bad value for 'max' [ 190.259733][ T6889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.605061][ T6908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.636406][ T6908] rust_binder: Error in use_page_slow: ESRCH [ 190.636435][ T6908] rust_binder: use_range failure ESRCH [ 190.658763][ T6908] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 190.674473][ T6908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 190.700906][ T6908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:792 [ 190.718907][ T6914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 190.809235][ T6914] rust_binder: Error while translating object. [ 190.850919][ T6914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.860399][ T6914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1628 [ 190.980990][ T6926] random: crng reseeded on system resumption [ 191.238802][ T6942] input: syz0 as /devices/virtual/input/input116 [ 191.286391][ T6942] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 191.320925][ T6942] SELinux: failed to load policy [ 191.687902][ T36] kauditd_printk_skb: 722 callbacks suppressed [ 191.687923][ T36] audit: type=1400 audit(1750355467.930:33026): avc: denied { read } for pid=6958 comm="syz.4.2139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.719879][ T36] audit: type=1400 audit(1750355467.930:33027): avc: denied { read open } for pid=6958 comm="syz.4.2139" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.744501][ T36] audit: type=1400 audit(1750355467.930:33028): avc: denied { read } for pid=6958 comm="syz.4.2139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.768267][ T36] audit: type=1400 audit(1750355467.930:33029): avc: denied { read open } for pid=6958 comm="syz.4.2139" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.795376][ T36] audit: type=1400 audit(1750355467.930:33030): avc: denied { read } for pid=6958 comm="syz.4.2139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.880848][ T36] audit: type=1400 audit(1750355467.930:33031): avc: denied { read open } for pid=6958 comm="syz.4.2139" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.950177][ T36] audit: type=1400 audit(1750355467.930:33032): avc: denied { read } for pid=6958 comm="syz.4.2139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.992514][ T6976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 191.992545][ T6976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:810 [ 191.999040][ T36] audit: type=1400 audit(1750355467.930:33033): avc: denied { read open } for pid=6958 comm="syz.4.2139" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.064607][ T6981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.065580][ T6981] rust_binder: Error while translating object. [ 192.107408][ T3359] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.110853][ T36] audit: type=1400 audit(1750355467.940:33034): avc: denied { read } for pid=6958 comm="syz.4.2139" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.131566][ T6981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 192.192804][ T6981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1635 [ 192.302985][ T6986] random: crng reseeded on system resumption [ 192.335318][ T6996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.580620][ T7006] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.113494][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.134158][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.152626][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.160232][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.167719][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.175356][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.182776][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.190267][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.198572][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.207006][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.215293][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.224594][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.232065][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.239553][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.247388][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.254909][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.262365][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.266732][ T7034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.275703][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.290432][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.297999][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.305502][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.312961][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.320483][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.328745][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.336329][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.341421][ T7036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.344014][ T340] hid-generic 00C6:07FE:0000.0024: unknown main item tag 0x0 [ 193.346775][ T7036] rust_binder: Write failure EINVAL in pid:818 [ 193.353277][ T340] hid-generic 00C6:07FE:0000.0024: hidraw0: HID v0.05 Device [syz0] on syz1 [ 193.409350][ T7036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:818 [ 193.419962][ T7045] can0: slcan on ptm2. [ 193.481024][ T7043] can0 (unregistered): slcan off ptm2. [ 193.751286][ T7049] fido_id[7049]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.779729][ T7053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.986861][ T7058] rust_binder: Read failure Err(EAGAIN) in pid:1650 [ 194.232087][ T7063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.282046][ T7063] rust_binder: Write failure EINVAL in pid:1654 [ 194.368981][ T7069] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 194.402441][ T7071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.402484][ T7075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.439694][ T7072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.446291][ T7070] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 194.479935][ T7071] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.577300][ T7079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.625845][ T7084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1289 [ 194.659878][ T7074] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.885757][ T7102] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.913853][ T7102] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 194.920470][ T7102] rust_binder: Read failure Err(EFAULT) in pid:1664 [ 195.241687][ T7118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.541658][ T7123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.568038][ T7123] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 195.595333][ T7123] rust_binder: Read failure Err(EFAULT) in pid:834 [ 195.640617][ T7127] binder: Unknown parameter 'smackfsroot' [ 195.654430][ T7129] rust_binder: Write failure EFAULT in pid:1675 [ 195.774450][ T7133] input: syz0 as /devices/virtual/input/input118 [ 195.835678][ T7138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1296 [ 195.845463][ T7139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.901187][ T7142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 195.942729][ T7141] rust_binder: Write failure EINVAL in pid:836 [ 196.076336][ T7152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.100899][ T7152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.111489][ T7152] rust_binder: Error in use_page_slow: ESRCH [ 196.118105][ T7152] rust_binder: use_range failure ESRCH [ 196.128222][ T7152] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 196.150352][ T7152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 196.152032][ T7151] binder: Unknown parameter 'context' [ 196.201060][ T7152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:840 [ 196.202161][ T7152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.242370][ T7157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 196.364234][ T7161] rust_binder: got new transaction with bad transaction stack [ 196.388483][ T7161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1686 [ 196.522863][ T7163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 196.544094][ T7163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1306 [ 196.553605][ T7163] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 196.563086][ T7163] rust_binder: Read failure Err(EFAULT) in pid:1306 [ 196.610396][ T7166] __vm_enough_memory: pid: 7166, comm: syz.3.2202, bytes: 281474976845824 not enough memory for the allocation [ 196.690851][ T36] kauditd_printk_skb: 725 callbacks suppressed [ 196.690872][ T36] audit: type=1400 audit(1750355472.930:33728): avc: denied { ioctl } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder1" dev="binder" ino=90 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.761689][ T36] audit: type=1400 audit(1750355472.940:33729): avc: denied { read } for pid=7167 comm="syz.4.2203" name="binder0" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.801139][ T7168] input: syz0 as /devices/virtual/input/input119 [ 196.813902][ T36] audit: type=1400 audit(1750355472.940:33730): avc: denied { read open } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder0" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.868366][ T36] audit: type=1400 audit(1750355472.940:33731): avc: denied { ioctl } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder0" dev="binder" ino=89 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 196.946576][ T36] audit: type=1400 audit(1750355472.940:33732): avc: denied { set_context_mgr } for pid=7167 comm="syz.4.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.987222][ T36] audit: type=1400 audit(1750355472.940:33733): avc: denied { map } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder0" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.031429][ T36] audit: type=1400 audit(1750355472.940:33734): avc: denied { read } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder0" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.087729][ T36] audit: type=1400 audit(1750355472.940:33735): avc: denied { ioctl } for pid=7167 comm="syz.4.2203" path="/dev/binderfs/binder0" dev="binder" ino=89 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 197.141585][ T7178] KVM: debugfs: duplicate directory 7178-10 [ 197.171012][ T2427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.178012][ T36] audit: type=1400 audit(1750355472.940:33736): avc: denied { read write } for pid=7167 comm="syz.4.2203" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 197.456684][ T7192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1693 [ 197.457147][ T7192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1693 [ 197.466013][ T7195] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 197.589951][ T7197] binder: Unknown parameter '00000000000000000003' [ 197.661945][ T7201] kvm_intel: kvm [7199]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 198.040783][ T7213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.050424][ T7213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.098945][ T7215] input: syz0 as /devices/virtual/input/input120 [ 198.228557][ T7223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.283176][ T7228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1699 [ 198.488520][ T7238] __vm_enough_memory: pid: 7238, comm: syz.0.2223, bytes: 281474976845824 not enough memory for the allocation [ 198.551968][ T7242] rust_binder: Read failure Err(EAGAIN) in pid:1704 [ 198.590266][ T7234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1704 [ 198.669968][ T7245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.681761][ T7246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.163238][ T7254] rust_binder: Error while translating object. [ 199.169963][ T7254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 199.177217][ T7254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1073 [ 199.187878][ T7254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.477287][ T7267] binder: Unknown parameter 'defcontext01777777777777777777777' [ 199.542258][ T7269] binder: Unknown parameter 'defcontext01777777777777777777777' [ 199.675021][ T7271] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 199.680762][ T7271] pim6reg0: linktype set to 769 [ 199.758419][ T7273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.032023][ T7289] random: crng reseeded on system resumption [ 200.131190][ T7295] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 200.158770][ T7295] SELinux: security_context_str_to_sid () failed with errno=-22 [ 200.200051][ T7296] SELinux: security_context_str_to_sid () failed with errno=-22 [ 200.200986][ T7295] SELinux: security_context_str_to_sid (sytem_uGй_device) failed with errno=-22 [ 200.582654][ T7311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:866 [ 201.243039][ T7335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1091 [ 201.292162][ T7338] binder: Unknown parameter '0x0000000000000003' [ 201.709072][ T36] kauditd_printk_skb: 846 callbacks suppressed [ 201.709094][ T36] audit: type=1400 audit(1750355477.950:34542): avc: denied { read } for pid=7349 comm="syz.0.2259" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.749714][ T36] audit: type=1400 audit(1750355477.960:34543): avc: denied { read open } for pid=7349 comm="syz.0.2259" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.794745][ T36] audit: type=1400 audit(1750355477.960:34544): avc: denied { read write } for pid=3359 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.860846][ T36] audit: type=1400 audit(1750355477.970:34545): avc: denied { read write open } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.915854][ T36] audit: type=1400 audit(1750355477.970:34546): avc: denied { ioctl } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.034156][ T36] audit: type=1400 audit(1750355477.990:34547): avc: denied { ioctl } for pid=7349 comm="syz.0.2259" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.099068][ T36] audit: type=1400 audit(1750355478.030:34548): avc: denied { read } for pid=7355 comm="syz.1.2260" name="binder0" dev="binder" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.133603][ T7371] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.148581][ T3359] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.153009][ T2734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.211744][ T7371] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 202.211779][ T7371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1368 [ 202.240897][ T7371] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.241410][ T7377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.250141][ T7371] rust_binder: Read failure Err(EFAULT) in pid:1368 [ 202.283284][ T7380] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.306212][ T7377] rust_binder: Error in use_page_slow: ESRCH [ 202.320831][ T7377] rust_binder: use_range failure ESRCH [ 202.329433][ T7377] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 202.340863][ T7377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 202.364739][ T7382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1734 [ 202.375991][ T7377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:892 [ 202.384372][ T7381] kvm: Disabled LAPIC found during irq injection [ 202.422871][ T7381] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 202.777310][ T7401] rust_binder: Write failure EFAULT in pid:902 [ 202.794505][ T7402] rust_binder: Write failure EINVAL in pid:1104 [ 202.984063][ T7419] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.240946][ T7428] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 203.292195][ T7426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.322033][ T7426] rust_binder: Write failure EINVAL in pid:1737 [ 203.701925][ T7456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.767199][ T7458] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.791999][ T7458] rust_binder: Error while translating object. [ 203.811271][ T7456] rust_binder: Write failure EFAULT in pid:1119 [ 203.825304][ T7458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.854542][ T7458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1747 [ 203.862406][ T7463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.002859][ T7463] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 204.038952][ T7465] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 204.049100][ T7467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:921 [ 204.147742][ T7470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.341171][ T7471] rust_binder: Error while translating object. [ 204.370416][ T7471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.398901][ T7471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1121 [ 204.410613][ T7477] binder: Unknown parameter 'dont_hash' [ 204.752239][ T7483] rust_binder: Write failure EFAULT in pid:926 [ 204.951407][ T7498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.991110][ T7498] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.531205][ T7526] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 205.560878][ T7526] rust_binder: Write failure EINVAL in pid:1765 [ 205.578171][ T7518] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 101) [ 205.600577][ T7518] rust_binder: Error while translating object. [ 205.705454][ T7518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.724538][ T7518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1124 [ 205.837193][ T7540] SELinux: security_context_str_to_sid () failed with errno=-22 [ 206.094926][ T7550] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.293134][ T7563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.322038][ T7565] tun0: tun_chr_ioctl cmd 1074025675 [ 206.342008][ T7563] binder: Bad value for 'stats' [ 206.365865][ T7565] tun0: persist enabled [ 206.383892][ T7565] tun0: tun_chr_ioctl cmd 1074025675 [ 206.389403][ T7565] tun0: persist enabled [ 206.611543][ T7587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.631304][ T7587] rust_binder: Error in use_page_slow: ESRCH [ 206.637786][ T7587] rust_binder: use_range failure ESRCH [ 206.643979][ T7587] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 206.649492][ T7587] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 206.690900][ T7587] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1783 [ 206.714156][ T36] kauditd_printk_skb: 1000 callbacks suppressed [ 206.714177][ T36] audit: type=1400 audit(1750355482.960:35525): avc: denied { read write } for pid=7591 comm="syz.4.2333" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.835193][ T36] audit: type=1400 audit(1750355482.970:35526): avc: denied { read } for pid=7590 comm="syz.3.2332" name="binder0" dev="binder" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.865546][ T36] audit: type=1400 audit(1750355482.970:35527): avc: denied { read open } for pid=7590 comm="syz.3.2332" path="/dev/binderfs/binder0" dev="binder" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.901016][ T36] audit: type=1400 audit(1750355482.970:35528): avc: denied { read } for pid=7590 comm="syz.3.2332" name="binder0" dev="binder" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.954324][ T36] audit: type=1400 audit(1750355482.970:35529): avc: denied { read open } for pid=7590 comm="syz.3.2332" path="/dev/binderfs/binder0" dev="binder" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 206.974927][ T7604] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.000372][ T7606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.008131][ T2734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.014217][ T7606] audit: audit_lost=168 audit_rate_limit=0 audit_backlog_limit=64 [ 207.020860][ T2734] audit: audit_lost=169 audit_rate_limit=0 audit_backlog_limit=64 [ 207.213419][ T7616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.306652][ T7616] rust_binder: Error in use_page_slow: ESRCH [ 207.324911][ T7616] rust_binder: use_range failure ESRCH [ 207.349156][ T7616] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 207.372307][ T7616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 207.391806][ T7616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1790 [ 207.490168][ T7620] random: crng reseeded on system resumption [ 207.536566][ T7620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.540189][ T7620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.552690][ T7620] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 207.567125][ T7620] rust_binder: Write failure EINVAL in pid:966 [ 207.677350][ T7626] binder: Bad value for 'stats' [ 208.153082][ T7645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:973 [ 208.270059][ T59] bridge_slave_1: left allmulticast mode [ 208.271637][ T7654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:975 [ 208.281128][ T59] bridge_slave_1: left promiscuous mode [ 208.322525][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.344568][ T59] bridge_slave_0: left allmulticast mode [ 208.375218][ T59] bridge_slave_0: left promiscuous mode [ 208.377386][ T7654] rust_binder: Read failure Err(EFAULT) in pid:975 [ 208.388493][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.591907][ T59] veth1_macvtap: left promiscuous mode [ 208.597481][ T59] veth0_vlan: left promiscuous mode [ 208.789227][ T7671] rust_binder: Write failure EINVAL in pid:984 [ 208.867822][ T7659] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.889748][ T7659] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.896967][ T7659] bridge_slave_0: entered allmulticast mode [ 208.910361][ T7659] bridge_slave_0: entered promiscuous mode [ 208.917831][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.944207][ T7659] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.961087][ T7659] bridge_slave_1: entered allmulticast mode [ 208.967507][ T7659] bridge_slave_1: entered promiscuous mode [ 209.093761][ T7681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:986 [ 209.122946][ T7681] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 209.282023][ T7685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.407237][ T10] hid-generic C993:0003:0000.0025: unknown main item tag 0x0 [ 209.460642][ T10] hid-generic C993:0003:0000.0025: unknown main item tag 0x0 [ 209.493740][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.500841][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.511033][ T10] hid-generic C993:0003:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 209.567226][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.574328][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.869781][ T7659] veth0_vlan: entered promiscuous mode [ 210.014954][ T7659] veth1_macvtap: entered promiscuous mode [ 210.161590][ T7706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:992 [ 210.185664][ T7702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.387177][ T7715] rust_binder: Error while translating object. [ 210.410864][ T7715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 210.440916][ T7715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:995 [ 210.591229][ T7720] rust_binder: Error while translating object. [ 210.600314][ T7720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.610906][ T7720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 211.034067][ T12] bridge_slave_1: left allmulticast mode [ 211.052311][ T7745] input: syz1 as /devices/virtual/input/input122 [ 211.090994][ T12] bridge_slave_1: left promiscuous mode [ 211.099517][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.136837][ T12] bridge_slave_0: left allmulticast mode [ 211.154877][ T12] bridge_slave_0: left promiscuous mode [ 211.164971][ T7745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.185817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.208926][ T7745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.385306][ T12] veth1_macvtap: left promiscuous mode [ 211.399235][ T12] veth0_vlan: left promiscuous mode [ 211.523509][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.530644][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.538935][ T7731] bridge_slave_0: entered allmulticast mode [ 211.547515][ T7731] bridge_slave_0: entered promiscuous mode [ 211.556977][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.565579][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.573304][ T7731] bridge_slave_1: entered allmulticast mode [ 211.579790][ T7731] bridge_slave_1: entered promiscuous mode [ 211.674273][ T7759] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 4096) [ 211.674300][ T7759] rust_binder: Error while translating object. [ 211.686758][ T7759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.697979][ T7759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1004 [ 211.721655][ T36] kauditd_printk_skb: 917 callbacks suppressed [ 211.721674][ T36] audit: type=1400 audit(1750355487.970:36443): avc: denied { read write } for pid=7758 comm="syz.1.2383" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.797860][ T36] audit: type=1400 audit(1750355488.010:36444): avc: denied { ioctl } for pid=7758 comm="syz.1.2383" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.851824][ T36] audit: type=1400 audit(1750355488.010:36445): avc: denied { read } for pid=7758 comm="syz.1.2383" name="binder0" dev="binder" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.891698][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.898801][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.906162][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.913228][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.920853][ T36] audit: type=1400 audit(1750355488.010:36446): avc: denied { read open } for pid=7758 comm="syz.1.2383" path="/dev/binderfs/binder0" dev="binder" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 211.963122][ T36] audit: type=1400 audit(1750355488.010:36447): avc: denied { read write open } for pid=7758 comm="syz.1.2383" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.989293][ T36] audit: type=1400 audit(1750355488.020:36448): avc: denied { read write } for pid=3359 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.021047][ T36] audit: type=1400 audit(1750355488.020:36449): avc: denied { read write open } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.052523][ T7768] tun1: tun_chr_ioctl cmd 1074025675 [ 212.056704][ T36] audit: type=1400 audit(1750355488.020:36450): avc: denied { ioctl } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.057861][ T7768] tun1: persist disabled [ 212.083960][ T36] audit: type=1400 audit(1750355488.070:36451): avc: denied { create } for pid=7731 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.109186][ T36] audit: type=1400 audit(1750355488.080:36452): avc: denied { read write } for pid=3359 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.143778][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.152236][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.162203][ T7768] binder: Unknown parameter '01777777777777777777777' [ 212.169620][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.176727][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.191407][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.198515][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.309693][ T7731] veth0_vlan: entered promiscuous mode [ 212.410606][ T7731] veth1_macvtap: entered promiscuous mode [ 212.477091][ T7772] rust_binder: Write failure EINVAL in pid:1015 [ 212.584871][ T339] hid-generic C98F:0003:0000.0026: unknown main item tag 0x0 [ 212.598742][ T339] hid-generic C98F:0003:0000.0026: unknown main item tag 0x0 [ 212.618352][ T339] hid-generic C98F:0003:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 212.848816][ T7785] fido_id[7785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.874926][ T7787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.891484][ T7787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1022 [ 213.083288][ T7793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.461906][ T7806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 213.482218][ T7806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:10 [ 213.501966][ T10] hid-generic C98F:0003:0000.0027: unknown main item tag 0x0 [ 213.541658][ T10] hid-generic C98F:0003:0000.0027: unknown main item tag 0x0 [ 213.561262][ T10] hid-generic C98F:0003:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 213.808345][ T7815] SELinux: security_context_str_to_sid () failed with errno=-22 [ 213.908236][ T7819] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 213.918878][ T7817] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.961888][ T7824] binder: Binderfs stats mode cannot be changed during a remount [ 214.044627][ T7827] binder: Unknown parameter 'subj_type' [ 214.462793][ T7839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.464311][ T7840] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 214.886998][ T7864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.040640][ T7831] rust_binder: Read failure Err(EFAULT) in pid:19 [ 215.180947][ T7874] SELinux: security_context_str_to_sid () failed with errno=-22 [ 215.417834][ T7879] SELinux: Context system_u: is not valid (left unmapped). [ 215.668118][ T7890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 215.668157][ T7890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 215.686614][ T7886] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 215.761910][ T7893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 216.193637][ T7915] binder: Unknown parameter 'nXI' [ 216.313703][ T7915] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 216.333187][ T7915] rust_binder: Write failure EINVAL in pid:1048 [ 216.580869][ T7929] rust_binder: Error while translating object. [ 216.587175][ T7929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.597207][ T7929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1233 [ 216.668809][ T7931] kvm: kvm [7930]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000004) [ 216.711868][ T7931] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 216.718864][ T7931] rust_binder: Write failure EINVAL in pid:36 [ 216.732134][ T36] kauditd_printk_skb: 737 callbacks suppressed [ 216.732154][ T36] audit: type=1400 audit(1750355492.980:37190): avc: denied { read } for pid=7932 comm="syz.1.2442" name="binder1" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.797248][ T36] audit: type=1400 audit(1750355492.980:37191): avc: denied { read open } for pid=7932 comm="syz.1.2442" path="/dev/binderfs/binder1" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.822561][ T36] audit: type=1400 audit(1750355492.980:37192): avc: denied { read write } for pid=2734 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.848699][ T36] audit: type=1400 audit(1750355492.980:37193): avc: denied { read write open } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.877749][ T36] audit: type=1400 audit(1750355492.980:37194): avc: denied { ioctl } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.904494][ T7933] rust_binder: Write failure EFAULT in pid:1050 [ 216.931143][ T36] audit: type=1400 audit(1750355493.020:37195): avc: denied { read } for pid=7932 comm="syz.1.2442" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 216.976623][ T36] audit: type=1400 audit(1750355493.020:37196): avc: denied { read open } for pid=7932 comm="syz.1.2442" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.004047][ T36] audit: type=1400 audit(1750355493.020:37197): avc: denied { ioctl } for pid=7932 comm="syz.1.2442" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.045644][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.060604][ T36] audit: type=1400 audit(1750355493.040:37198): avc: denied { read } for pid=7934 comm="syz.4.2443" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.064450][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.084971][ T36] audit: type=1400 audit(1750355493.040:37199): avc: denied { read open } for pid=7934 comm="syz.4.2443" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.101747][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.123133][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.130744][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.139471][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.150012][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.158542][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.166923][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.182239][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.189688][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.199154][ T7954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.205220][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.221340][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.229068][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.237641][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.254821][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.262466][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.263559][ T7956] rust_binder: Write failure EINVAL in pid:47 [ 217.270183][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.284043][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.291466][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.299383][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.307466][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.314915][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.322516][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.330321][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.337858][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.345330][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.352344][ T7961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 217.352868][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.371470][ T7962] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 217.380850][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.386714][ T7962] rust_binder: Write failure EINVAL in pid:1055 [ 217.400637][ T7962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1055 [ 217.403834][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.431039][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.438744][ T10] hid-generic 0001:0000:0000.0028: unknown main item tag 0x0 [ 217.448537][ T10] hid-generic 0001:0000:0000.0028: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 217.495510][ T7964] rust_binder: Write failure EINVAL in pid:51 [ 217.575370][ T7968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1244 [ 217.588209][ T7968] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.613137][ T7968] rust_binder: Read failure Err(EFAULT) in pid:1244 [ 217.805310][ T7982] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 217.806585][ T7981] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 217.952478][ T7984] rust_binder: Write failure EINVAL in pid:56 [ 218.194796][ T7994] rust_binder: Error while translating object. [ 218.221952][ T7994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 218.238375][ T7994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:62 [ 218.281188][ T7992] fido_id[7992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.671084][ T8018] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 218.726678][ T8016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.727077][ T8018] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 218.751967][ T8016] rust_binder: Write failure EINVAL in pid:63 [ 218.765342][ T8024] input: syz0 as /devices/virtual/input/input124 [ 218.780004][ T8018] rust_binder: Error while translating object. [ 218.780051][ T8018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.798946][ T8018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1254 [ 219.048537][ T8035] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 219.053100][ T8034] rust_binder: Error while translating object. [ 219.102806][ T8034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 219.148841][ T8034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1256 [ 219.317597][ T63] hid-generic C98F:0003:0000.0029: unknown main item tag 0x0 [ 219.368940][ T63] hid-generic C98F:0003:0000.0029: unknown main item tag 0x0 [ 219.389076][ T63] hid-generic C98F:0003:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 219.649500][ T8060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 219.720073][ T8062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.802726][ T8062] rust_binder: Error in use_page_slow: ESRCH [ 219.826056][ T8062] rust_binder: use_range failure ESRCH [ 219.845191][ T8062] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 219.868901][ T8062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 219.897339][ T8062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:74 [ 219.988441][ T8067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.050868][ T8065] fido_id[8065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.077011][ T8067] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.078097][ T8069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.252940][ T8070] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 231) [ 220.269616][ T8070] rust_binder: Error while translating object. [ 220.309803][ T8070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 220.327855][ T8072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 220.330864][ T8074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 220.360720][ T8072] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 220.382222][ T8070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 220.401834][ T8072] rust_binder: Read failure Err(EFAULT) in pid:89 [ 220.616813][ T8083] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 220.662100][ T8083] rust_binder: Write failure EINVAL in pid:92 [ 220.788103][ T8090] input: syz0 as /devices/virtual/input/input126 [ 220.792904][ T8092] rust_binder: Write failure EINVAL in pid:1267 [ 220.804069][ T8088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.832648][ T8090] kvm: emulating exchange as write [ 220.857710][ T8095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 220.869687][ T8090] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 220.902602][ T8098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 220.902638][ T8098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1078 [ 220.919716][ T8090] rust_binder: Write failure EINVAL in pid:97 [ 221.347291][ T8110] rust_binder: Write failure EINVAL in pid:1082 [ 221.376936][ T8115] binder: Unknown parameter 'r_' [ 221.417883][ T8110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1082 [ 221.618961][ T10] hid-generic C98F:0003:0000.002A: unknown main item tag 0x0 [ 221.651219][ T8126] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.674633][ T10] hid-generic C98F:0003:0000.002A: unknown main item tag 0x0 [ 221.694762][ T10] hid-generic C98F:0003:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 221.756049][ T36] kauditd_printk_skb: 804 callbacks suppressed [ 221.756068][ T36] audit: type=1400 audit(1750355498.000:38004): avc: denied { read write } for pid=8130 comm="syz.1.2505" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.840839][ T36] audit: type=1400 audit(1750355498.050:38005): avc: denied { read open } for pid=8130 comm="syz.1.2505" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 221.874183][ T36] audit: type=1400 audit(1750355498.050:38006): avc: denied { read write } for pid=7731 comm="syz-executor" name="loop0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 221.942212][ T8131] binder: Unknown parameter 'non' [ 221.957520][ T36] audit: type=1400 audit(1750355498.050:38007): avc: denied { read write open } for pid=7731 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.014967][ T36] audit: type=1400 audit(1750355498.050:38008): avc: denied { ioctl } for pid=7731 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=462 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.060841][ T36] audit: type=1400 audit(1750355498.060:38009): avc: denied { ioctl } for pid=8130 comm="syz.1.2505" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 222.150840][ T36] audit: type=1400 audit(1750355498.150:38010): avc: denied { read write } for pid=8130 comm="syz.1.2505" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.183697][ T36] audit: type=1400 audit(1750355498.150:38011): avc: denied { read write open } for pid=8130 comm="syz.1.2505" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.220205][ T36] audit: type=1400 audit(1750355498.150:38012): avc: denied { ioctl } for pid=8130 comm="syz.1.2505" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.250469][ T36] audit: type=1400 audit(1750355498.150:38013): avc: denied { ioctl } for pid=8130 comm="syz.1.2505" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.297658][ T8148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.304533][ T8148] rust_binder: Error while translating object. [ 222.311451][ T8148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 222.317694][ T8148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 222.347371][ T8151] rust_binder: Error while translating object. [ 222.356537][ T8151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 222.363923][ T8151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1281 [ 222.421302][ T8153] binder: Bad value for 'defcontext' [ 222.555668][ T8159] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 222.556663][ T8159] input: syz0 as /devices/virtual/input/input127 [ 222.593134][ T8157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.623299][ T8157] rust_binder: Error while translating object. [ 222.629810][ T8157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.657130][ T8157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1285 [ 222.682243][ T8159] kvm: kvm [8158]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0xffffffef9d7b133e [ 223.301424][ T8185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.805421][ T8194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1289 [ 224.036954][ T8203] rust_binder: Write failure EFAULT in pid:119 [ 224.064214][ T8202] random: crng reseeded on system resumption [ 224.331800][ T8213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.331834][ T8213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 224.395674][ T8216] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.566809][ T8221] rust_binder: Write failure EFAULT in pid:1296 [ 224.572072][ T8223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.640932][ T8220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 224.687246][ T63] hid-generic C98F:0003:00F1.002B: item fetching failed at offset 0/2 [ 224.707000][ T8220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 224.707039][ T8220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:125 [ 224.731027][ T63] hid-generic C98F:0003:00F1.002B: probe with driver hid-generic failed with error -22 [ 224.751762][ T8229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:125 [ 225.064015][ T8233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.186794][ T8233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1299 [ 225.263986][ T8242] rust_binder: Error while translating object. [ 225.300865][ T8242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.320869][ T8242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 225.884661][ T8265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.952204][ T8268] rtc_cmos 00:00: Alarms can be up to one day in the future [ 225.973544][ T8269] rust_binder: Write failure EFAULT in pid:146 [ 225.975087][ T8265] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 226.292339][ T8285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.323331][ T8285] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 226.772085][ T36] kauditd_printk_skb: 697 callbacks suppressed [ 226.772107][ T36] audit: type=1326 audit(1750355503.020:38711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e8b8e929 code=0x7ffc0000 [ 226.840856][ T36] audit: type=1326 audit(1750355503.020:38712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff7e8b8e929 code=0x7ffc0000 [ 226.874595][ T36] audit: type=1326 audit(1750355503.020:38713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e8b8e929 code=0x7ffc0000 [ 226.903505][ T8309] input: syz0 as /devices/virtual/input/input130 [ 226.932446][ T36] audit: type=1326 audit(1750355503.020:38714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff7e8b8e929 code=0x7ffc0000 [ 226.977404][ T36] audit: type=1400 audit(1750355503.020:38715): avc: denied { read write } for pid=8303 comm="syz.1.2559" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.029534][ T36] audit: type=1400 audit(1750355503.020:38716): avc: denied { read write open } for pid=8303 comm="syz.1.2559" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 227.078512][ T2734] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.085958][ T36] audit: type=1326 audit(1750355503.020:38717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8303 comm="syz.1.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e8b8e929 code=0x7ffc0000 [ 227.092706][ T8309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 227.120840][ T2734] audit: audit_lost=171 audit_rate_limit=0 audit_backlog_limit=64 [ 227.300815][ T8316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 227.321684][ T8316] rust_binder: Read failure Err(EFAULT) in pid:160 [ 227.352191][ T8318] rust_binder: Write failure EFAULT in pid:144 [ 227.381237][ T8319] rust_binder: Write failure EFAULT in pid:160 [ 227.468161][ T305] hid-generic C98F:0003:0000.002C: unknown main item tag 0x0 [ 227.505131][ T305] hid-generic C98F:0003:0000.002C: unknown main item tag 0x0 [ 227.527409][ T305] hid-generic C98F:0003:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 227.864485][ T8335] fido_id[8335]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.935849][ T8352] input: syz0 as /devices/virtual/input/input132 [ 227.955425][ T8352] input: syz0 as /devices/virtual/input/input131 [ 228.001906][ T8352] rust_binder: Write failure EFAULT in pid:1319 [ 228.341226][ T8372] SELinux: policydb string does not match my string SE Linux [ 228.392827][ T8372] SELinux: failed to load policy [ 228.397129][ T8375] binder: Unknown parameter 'st>ts' [ 228.407941][ T8365] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 228.407974][ T8365] rust_binder: Error in use_page_slow: EBUSY [ 228.460218][ T8365] rust_binder: use_range failure EBUSY [ 228.474257][ T8365] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 228.480063][ T8365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 228.546542][ T8365] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 228.580888][ T8378] rust_binder: Write failure EINVAL in pid:177 [ 228.592711][ T8365] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1321 [ 228.781407][ T8386] rust_binder: Error while translating object. [ 228.790005][ T8386] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.829466][ T8386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 229.076435][ T8395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 229.138598][ T8404] __vm_enough_memory: pid: 8404, comm: syz.1.2588, bytes: 281474976845824 not enough memory for the allocation [ 229.342320][ T8408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.353747][ T8408] rust_binder: Write failure EINVAL in pid:1144 [ 229.550273][ T8421] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 229.622510][ T8421] binder: Unknown parameter 'o}Aݜl!S&"͂0oqB3P67@E<%|v [ 229.622510][ T8421] ~.x c^ֈWhѼ\M'R}RSfL' [ 229.624106][ T8425] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 229.649535][ T8425] rust_binder: Write failure EINVAL in pid:195 [ 229.694426][ T8419] input: syz0 as /devices/virtual/input/input133 [ 229.752298][ T8419] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 230.102662][ T8444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.133922][ T8442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:180 [ 230.148173][ T8443] rust_binder: Write failure EINVAL in pid:1336 [ 230.175045][ T8444] rust_binder: Write failure EINVAL in pid:1336 [ 230.239366][ T8447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.307294][ T8452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1345 [ 230.477730][ T1513] hid-generic C98F:0003:0000.002D: unknown main item tag 0x0 [ 230.496267][ T1513] hid-generic C98F:0003:0000.002D: unknown main item tag 0x0 [ 230.509616][ T8464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1354 [ 230.510351][ T1513] hid-generic C98F:0003:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 230.600830][ T8429] rust_binder: Read failure Err(EFAULT) in pid:197 [ 230.610041][ T8466] fido_id[8466]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 230.976679][ T8481] rust_binder: Error in use_page_slow: ESRCH [ 230.976705][ T8481] rust_binder: use_range failure ESRCH [ 231.004717][ T8481] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 231.010296][ T8481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 231.047411][ T8481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1362 [ 231.344916][ T8500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1158 [ 231.789770][ T36] kauditd_printk_skb: 828 callbacks suppressed [ 231.789791][ T36] audit: type=1400 audit(1750355508.030:39540): avc: denied { read } for pid=8514 comm="syz.3.2623" name="binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.828077][ T36] audit: type=1400 audit(1750355508.030:39541): avc: denied { read open } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.853216][ T36] audit: type=1400 audit(1750355508.070:39542): avc: denied { ioctl } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.878586][ T8516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 231.879495][ T36] audit: type=1400 audit(1750355508.070:39543): avc: denied { set_context_mgr } for pid=8514 comm="syz.3.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 231.909665][ T36] audit: type=1400 audit(1750355508.070:39544): avc: denied { ioctl } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.936062][ T36] audit: type=1400 audit(1750355508.120:39545): avc: denied { map } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.963363][ T36] audit: type=1400 audit(1750355508.120:39546): avc: denied { read } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 231.988291][ T36] audit: type=1400 audit(1750355508.120:39547): avc: denied { read } for pid=8514 comm="syz.3.2623" name="binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.017731][ T36] audit: type=1400 audit(1750355508.120:39548): avc: denied { read open } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.032997][ T8520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227 [ 232.042982][ T36] audit: type=1400 audit(1750355508.120:39549): avc: denied { map } for pid=8514 comm="syz.3.2623" path="/dev/binderfs/binder0" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.227127][ T8505] rust_binder: Read failure Err(EFAULT) in pid:1364 [ 232.820819][ T8551] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 233.003084][ T8568] rust_binder: Write failure EINVAL in pid:1171 [ 233.216920][ T8571] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00002000000a0000 not found [ 233.231792][ T8571] rust_binder: Write failure EINVAL in pid:1173 [ 233.695530][ T339] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on sy1 [ 233.788593][ T8583] binder: Bad value for 'stats' [ 233.816569][ T8586] rust_binder: Write failure EFAULT in pid:1379 [ 233.906166][ T8585] fido_id[8585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 233.911999][ T8589] rust_binder: Read failure Err(EAGAIN) in pid:243 [ 233.970927][ T8589] random: crng reseeded on system resumption [ 234.398313][ T1513] hid-generic 009C:000B:0003.002F: unknown main item tag 0x6 [ 234.426401][ T1513] hid-generic 009C:000B:0003.002F: unknown main item tag 0x7 [ 234.460856][ T1513] hid-generic 009C:000B:0003.002F: unknown main item tag 0x0 [ 234.512122][ T1513] hid-generic 009C:000B:0003.002F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 234.776733][ T8626] fido_id[8626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.998358][ T8635] binder: Unknown parameter 'm' [ 235.031421][ T8639] SELinux: failed to load policy [ 235.056666][ T8639] rust_binder: Write failure EFAULT in pid:1187 [ 235.081847][ T8639] SELinux: security_context_str_to_sid () failed with errno=-22 [ 236.041824][ T8659] random: crng reseeded on system resumption [ 236.230688][ T8663] rust_binder: Read failure Err(EAGAIN) in pid:1393 [ 236.263748][ T8670] __vm_enough_memory: pid: 8670, comm: syz.3.2676, bytes: 281474976845824 not enough memory for the allocation [ 236.301638][ T8663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1393 [ 236.439622][ T8672] binder: Bad value for 'max' [ 236.671600][ T8676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.676289][ T8676] input: syz0 as /devices/virtual/input/input137 [ 236.791901][ T36] kauditd_printk_skb: 672 callbacks suppressed [ 236.791923][ T36] audit: type=1400 audit(1750355513.040:40222): avc: denied { ioctl } for pid=8675 comm="syz.1.2679" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 236.821919][ T8682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1397 [ 236.907640][ T36] audit: type=1400 audit(1750355513.040:40223): avc: denied { read write } for pid=8681 comm="syz.4.2682" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.002935][ T36] audit: type=1400 audit(1750355513.040:40224): avc: denied { read open } for pid=8681 comm="syz.4.2682" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.068374][ T36] audit: type=1400 audit(1750355513.040:40225): avc: denied { ioctl } for pid=8681 comm="syz.4.2682" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 237.100176][ T36] audit: type=1400 audit(1750355513.040:40226): avc: denied { read } for pid=8681 comm="syz.4.2682" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.135740][ T36] audit: type=1400 audit(1750355513.040:40227): avc: denied { read open } for pid=8681 comm="syz.4.2682" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.206259][ T36] audit: type=1400 audit(1750355513.040:40228): avc: denied { read } for pid=8681 comm="syz.4.2682" name="binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.269283][ T36] audit: type=1400 audit(1750355513.040:40229): avc: denied { read open } for pid=8681 comm="syz.4.2682" path="/dev/binderfs/binder1" dev="binder" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.303915][ T8691] binder: Unknown parameter 'max [ 237.303915][ T8691] zֺ@SG`h;%IuejU8t;&^' [ 237.332101][ T36] audit: type=1400 audit(1750355513.040:40230): avc: denied { ioctl } for pid=8681 comm="syz.4.2682" path="/dev/binderfs/binder1" dev="binder" ino=27 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.394212][ T8694] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 237.410825][ T36] audit: type=1400 audit(1750355513.070:40231): avc: denied { read } for pid=8675 comm="syz.1.2679" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.587247][ T8696] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 93) [ 237.587275][ T8696] rust_binder: Error while translating object. [ 237.602122][ T8696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.615974][ T8696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245 [ 237.626610][ T8704] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 237.664559][ T8703] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 237.733646][ T8702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.902209][ T8714] binder: Unknown parameter 'co_u' [ 237.950013][ T8719] binder: Unknown parameter 'coyBLV"i5ntext' [ 238.053912][ T8728] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 238.072559][ T8728] SELinux: failed to load policy [ 238.092248][ T8728] SELinux: policydb version -438888643 does not match my version range 15-33 [ 238.128081][ T8728] SELinux: failed to load policy [ 238.238701][ T8740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1205 [ 238.436168][ T8744] binder: Unknown parameter 'coyBLV"i5ntext' [ 238.543077][ T8748] binder: Unknown parameter 'mi' [ 238.615567][ T8752] SELinux: policydb version 579907362 does not match my version range 15-33 [ 238.643085][ T8752] SELinux: failed to load policy [ 238.655528][ T8752] input: syz0 as /devices/virtual/input/input138 [ 238.682612][ T8752] SELinux: policydb version -27415632 does not match my version range 15-33 [ 238.720812][ T8752] SELinux: failed to load policy [ 238.729928][ T8754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.734795][ T8754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1426 [ 238.808914][ T8752] SELinux: policydb version 809933787 does not match my version range 15-33 [ 238.837268][ T8752] SELinux: failed to load policy [ 239.033013][ T8762] kvm: user requested TSC rate below hardware speed [ 239.150348][ T8779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1220 [ 239.150391][ T8779] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 239.179970][ T8779] rust_binder: Read failure Err(EFAULT) in pid:1220 [ 239.235649][ T8779] serio: Serial port ttynull [ 239.552712][ T8808] input: syz0 as /devices/virtual/input/input140 [ 239.807751][ T8817] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 239.845717][ T8817] rust_binder: Write failure EINVAL in pid:1230 [ 240.205991][ T8831] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 240.226773][ T8831] rust_binder: Error while translating object. [ 240.259414][ T8834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.264908][ T8831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 240.286449][ T8831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1445 [ 240.609480][ T8852] rust_binder: Write failure EFAULT in pid:1455 [ 240.900847][ T8860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1460 [ 240.960881][ T8862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.009422][ T8862] rust_binder: Write failure EINVAL in pid:1462 [ 241.192314][ T8872] input: syz1 as /devices/virtual/input/input141 [ 241.430047][ T8888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.448697][ T8890] rust_binder: Error while translating object. [ 241.448729][ T8890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 241.458931][ T8888] rust_binder: Error in use_page_slow: ESRCH [ 241.463412][ T8890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1464 [ 241.481784][ T8886] rust_binder: Error in use_page_slow: ESRCH [ 241.502421][ T8888] rust_binder: use_range failure ESRCH [ 241.522487][ T8891] rust_binder: Write failure EFAULT in pid:305 [ 241.531061][ T8886] rust_binder: use_range failure ESRCH [ 241.550461][ T8888] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 241.564764][ T8886] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 241.588955][ T8888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 241.613224][ T8886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 241.632824][ T8888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1245 [ 241.653136][ T8886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1245 [ 241.673922][ T8895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1467 [ 241.789087][ T8895] rust_binder: Read failure Err(EFAULT) in pid:1467 [ 241.819138][ T36] kauditd_printk_skb: 879 callbacks suppressed [ 241.819159][ T36] audit: type=1400 audit(1750355518.060:41111): avc: denied { map } for pid=8899 comm="syz.1.2749" path="/dev/binderfs/binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 241.856602][ T36] audit: type=1400 audit(1750355518.080:41112): avc: denied { read write } for pid=2734 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.939536][ T36] audit: type=1400 audit(1750355518.080:41113): avc: denied { read write open } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.971138][ T36] audit: type=1400 audit(1750355518.080:41114): avc: denied { ioctl } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.996911][ T36] audit: type=1400 audit(1750355518.110:41115): avc: denied { read } for pid=8899 comm="syz.1.2749" path="/dev/binderfs/binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.026242][ T8905] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 242.048737][ T36] audit: type=1400 audit(1750355518.130:41116): avc: denied { read } for pid=8899 comm="syz.1.2749" name="binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.079976][ T8906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1248 [ 242.110376][ T36] audit: type=1400 audit(1750355518.130:41117): avc: denied { read open } for pid=8899 comm="syz.1.2749" path="/dev/binderfs/binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.158024][ T36] audit: type=1400 audit(1750355518.130:41118): avc: denied { read } for pid=8904 comm="syz.4.2750" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.191851][ T36] audit: type=1400 audit(1750355518.130:41119): avc: denied { read write } for pid=8899 comm="syz.1.2749" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 242.219217][ T36] audit: type=1400 audit(1750355518.130:41120): avc: denied { read open } for pid=8904 comm="syz.4.2750" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 242.361542][ T8917] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.453936][ T8922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.480726][ T8916] rust_binder: Write failure EINVAL in pid:1479 [ 242.522597][ T8925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 242.570890][ T8926] rust_binder: Error while translating object. [ 242.586941][ T8926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 242.596130][ T8926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:298 [ 242.900915][ T8940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.905251][ T8940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1488 [ 242.963375][ T8945] rust_binder: Error while translating object. [ 242.979861][ T8945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.989626][ T8945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 243.018591][ T8942] rust_binder: Error while translating object. [ 243.034098][ T8942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 243.044687][ T8942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1252 [ 243.170716][ T8949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.182167][ T8949] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 243.188789][ T8949] rust_binder: Error while translating object. [ 243.218016][ T8949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.230863][ T8949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1252 [ 243.415285][ T8960] input: syz0 as /devices/virtual/input/input142 [ 243.436926][ T8960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317 [ 243.715430][ T8968] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.802233][ T8967] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 243.927515][ T8973] rust_binder: Write failure EFAULT in pid:1491 [ 243.985154][ T8973] rust_binder: Error in use_page_slow: ESRCH [ 243.985185][ T8973] rust_binder: use_range failure ESRCH [ 243.999964][ T8973] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 244.023017][ T8973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 244.042870][ T8975] binder: Bad value for 'stats' [ 244.065983][ T8973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1491 [ 244.091931][ T8981] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4240, size: 89) [ 244.123819][ T8981] rust_binder: Error while translating object. [ 244.164649][ T8981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.193275][ T8981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:328 [ 244.745155][ T9003] binder: Bad value for 'stats' [ 244.807791][ T9007] rust_binder: Write failure EINVAL in pid:324 [ 244.901191][ T9011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 244.920851][ T9011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 244.941024][ T9011] rust_binder: validate_parent_fixup: new_min_offset=39, sg_entry.length=0 [ 244.959023][ T9011] rust_binder: Error while translating object. [ 244.959219][ T9018] binder: Unknown parameter 'donv_hash' [ 244.972340][ T9011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 244.990183][ T9011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 245.101123][ T9023] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 245.126398][ T9023] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 245.137154][ T8989] rust_binder: Read failure Err(EFAULT) in pid:1259 [ 245.143519][ T9023] rust_binder: Read failure Err(EFAULT) in pid:328 [ 245.242014][ T9026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.257358][ T9026] rust_binder: Got transaction with invalid offset. [ 245.266330][ T9026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.273111][ T9026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 245.394795][ T9033] binder: Bad value for 'max' [ 245.422377][ T9038] input: syz0 as /devices/virtual/input/input144 [ 245.521459][ T9040] rust_binder: Write failure EFAULT in pid:337 [ 245.530222][ T9040] rust_binder: Write failure EFAULT in pid:337 [ 245.609429][ T9045] rust_binder: Write failure EFAULT in pid:1269 [ 245.624021][ T9044] rust_binder: Write failure EFAULT in pid:1269 [ 245.633807][ T9044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.644166][ T9047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 245.656735][ T9047] rust_binder: Write failure EINVAL in pid:341 [ 245.656828][ T9044] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1280 (2560 ns) > initial count (8 ns). Using initial count to start timer. [ 245.691626][ T9049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.416490][ T9083] binder: Unknown parameter 'non' [ 246.744745][ T9057] rust_binder: Read failure Err(EFAULT) in pid:1275 [ 247.915670][ T36] kauditd_printk_skb: 684 callbacks suppressed [ 247.915694][ T36] audit: type=1400 audit(1750355524.150:41805): avc: denied { read } for pid=9084 comm="syz.0.2806" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.966486][ T36] audit: type=1400 audit(1750355524.150:41806): avc: denied { read open } for pid=9084 comm="syz.0.2806" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 247.970301][ T9090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.002328][ T36] audit: type=1400 audit(1750355524.160:41807): avc: denied { read } for pid=9086 comm="syz.3.2809" name="binder0" dev="binder" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.032848][ T36] audit: type=1400 audit(1750355524.160:41808): avc: denied { read open } for pid=9086 comm="syz.3.2809" path="/dev/binderfs/binder0" dev="binder" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.034948][ T9087] binder: Bad value for 'stats' [ 248.057470][ T36] audit: type=1400 audit(1750355524.160:41809): avc: denied { read } for pid=9088 comm="syz.4.2808" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.089005][ T9094] rust_binder: Got transaction with invalid offset. [ 248.089062][ T9094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.110832][ T36] audit: type=1400 audit(1750355524.160:41810): avc: denied { read open } for pid=9088 comm="syz.4.2808" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.115989][ T9096] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 248.130489][ T36] audit: type=1400 audit(1750355524.170:41811): avc: denied { ioctl } for pid=9088 comm="syz.4.2808" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.179931][ T9090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 248.180022][ T9094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356 [ 248.190629][ T9095] SELinux: failed to load policy [ 248.204921][ T36] audit: type=1400 audit(1750355524.170:41812): avc: denied { set_context_mgr } for pid=9088 comm="syz.4.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 248.226742][ T36] audit: type=1400 audit(1750355524.170:41813): avc: denied { ioctl } for pid=9088 comm="syz.4.2808" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.272223][ T36] audit: type=1400 audit(1750355524.170:41814): avc: denied { ioctl } for pid=9084 comm="syz.0.2806" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 248.314054][ T9097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1522 [ 248.497999][ T9105] rust_binder: Got transaction with invalid offset. [ 248.511316][ T9108] rust_binder: Got transaction with invalid offset. [ 248.519155][ T9105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.526167][ T9105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 248.536349][ T9108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.553145][ T9108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 248.723244][ T9112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.734192][ T9112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.084668][ T9127] tap0: tun_chr_ioctl cmd 35111 [ 249.278262][ T9133] tap0: tun_chr_ioctl cmd 1074025677 [ 249.292053][ T9133] tap0: linktype set to 825 [ 249.633674][ T9146] binder: Unknown parameter 'contextfs/binder0' [ 249.640665][ T9148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.648211][ T9148] input: syz1 as /devices/virtual/input/input146 [ 249.690869][ T9116] rust_binder: Read failure Err(EFAULT) in pid:362 [ 249.762241][ T9151] input: syz0 as /devices/virtual/input/input147 [ 249.776698][ T9149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.958532][ T9157] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 250.045505][ T9158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.045539][ T9158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1539 [ 250.073166][ T9160] rust_binder: Write failure EINVAL in pid:1303 [ 250.271657][ T9169] rust_binder: Write failure EFAULT in pid:1542 [ 250.281269][ T9170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 250.302078][ T9170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 250.521440][ T9175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.615763][ T9181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1544 [ 250.686466][ T9187] binder: Unknown parameter 'context' [ 250.878455][ T9194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.888559][ T9194] rust_binder: Failed to allocate buffer. len:4264, is_oneway:false [ 251.071371][ T9199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1315 [ 251.099743][ T9199] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 251.135957][ T9199] rust_binder: Read failure Err(EFAULT) in pid:1315 [ 251.623590][ T9218] rust_binder: Error while translating object. [ 251.653947][ T9215] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 251.655171][ T9218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.668924][ T9221] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.702620][ T9218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1321 [ 251.766368][ T9214] can0: slcan on ttynull. [ 252.621661][ T9267] SELinux: security_context_str_to_sid () failed with errno=-22 [ 252.927944][ T36] kauditd_printk_skb: 974 callbacks suppressed [ 252.927962][ T36] audit: type=1400 audit(1750355529.170:42780): avc: denied { read write } for pid=2734 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.981236][ T9275] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.996585][ T36] audit: type=1400 audit(1750355529.210:42781): avc: denied { read } for pid=9274 comm="syz.3.2865" name="binder0" dev="binder" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.053143][ T36] audit: type=1400 audit(1750355529.210:42782): avc: denied { read open } for pid=9274 comm="syz.3.2865" path="/dev/binderfs/binder0" dev="binder" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.140832][ T36] audit: type=1400 audit(1750355529.210:42783): avc: denied { ioctl } for pid=9274 comm="syz.3.2865" path="/dev/binderfs/binder0" dev="binder" ino=51 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.192093][ T36] audit: type=1400 audit(1750355529.220:42784): avc: denied { read write open } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.248271][ T36] audit: type=1400 audit(1750355529.220:42785): avc: denied { ioctl } for pid=2734 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.275593][ T36] audit: type=1400 audit(1750355529.230:42786): avc: denied { ioctl } for pid=9274 comm="syz.3.2865" path="/dev/binderfs/binder0" dev="binder" ino=51 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.320851][ T36] audit: type=1400 audit(1750355529.250:42787): avc: denied { search } for pid=9280 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.360843][ T36] audit: type=1400 audit(1750355529.250:42788): avc: denied { read } for pid=9280 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.384347][ T36] audit: type=1400 audit(1750355529.250:42789): avc: denied { read open } for pid=9280 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 253.532229][ T9296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 253.532732][ T9292] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 253.566748][ T9292] rust_binder: Write failure EINVAL in pid:1566 [ 254.028188][ T9322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.042842][ T9322] rust_binder: Error in use_page_slow: ESRCH [ 254.061475][ T9322] rust_binder: use_range failure ESRCH [ 254.076564][ T9322] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 254.092052][ T9322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.112931][ T9322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:413 [ 254.133110][ T9326] input: syz0 as /devices/virtual/input/input148 [ 254.162162][ T9329] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 254.177046][ T9329] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 254.186019][ T9326] input: failed to attach handler leds to device input148, error: -6 [ 254.980566][ T9376] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 254.987952][ T9376] rust_binder: Write failure EFAULT in pid:1591 [ 255.000569][ T9373] kvm: user requested TSC rate below hardware speed [ 255.010231][ T9378] rust_binder: Write failure EINVAL in pid:400 [ 255.207271][ T9387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.217736][ T9387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1593 [ 255.250739][ T9390] rust_binder: Write failure EFAULT in pid:405 [ 255.445535][ T9398] rust_binder: Failed copying remainder into alloc: EFAULT [ 255.456068][ T9398] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 255.471346][ T9398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 255.481272][ T9400] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 255.491083][ T9398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1596 [ 255.603027][ T9403] binder: Unknown parameter '00000000000000000000003' [ 255.672384][ T9401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:430 [ 255.722777][ T9406] rust_binder: Error while translating object. [ 255.732092][ T9406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.738335][ T9406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1600 [ 256.176313][ T9420] kvm: Disabled LAPIC found during irq injection [ 257.397199][ T9428] binder: Bad value for 'max' [ 257.399030][ T9427] __vm_enough_memory: pid: 9427, comm: syz.1.2909, bytes: 281474976845824 not enough memory for the allocation [ 257.442704][ T9428] input: syz1 as /devices/virtual/input/input151 [ 257.524016][ T9428] kvm: user requested TSC rate below hardware speed [ 257.551161][ T9440] binder: Bad value for 'max' [ 257.726876][ T9448] rust_binder: Read failure Err(EAGAIN) in pid:439 [ 257.995057][ T36] kauditd_printk_skb: 603 callbacks suppressed [ 257.995075][ T36] audit: type=1400 audit(1750355534.240:43393): avc: denied { read write } for pid=7659 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.033661][ T9463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1608 [ 258.096579][ T36] audit: type=1400 audit(1750355534.240:43394): avc: denied { read write } for pid=3359 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.151667][ T9467] rust_binder: Write failure EFAULT in pid:442 [ 258.186087][ T36] audit: type=1400 audit(1750355534.240:43395): avc: denied { read write open } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.231755][ T36] audit: type=1400 audit(1750355534.240:43396): avc: denied { ioctl } for pid=3359 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.261637][ T36] audit: type=1400 audit(1750355534.240:43397): avc: denied { read } for pid=9456 comm="syz.4.2917" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.285050][ T36] audit: type=1400 audit(1750355534.250:43398): avc: denied { read open } for pid=9456 comm="syz.4.2917" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.310260][ T36] audit: type=1400 audit(1750355534.250:43399): avc: denied { ioctl } for pid=9456 comm="syz.4.2917" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.347522][ T36] audit: type=1400 audit(1750355534.250:43400): avc: denied { map } for pid=9456 comm="syz.4.2917" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 258.380462][ T36] audit: type=1400 audit(1750355534.250:43401): avc: denied { execute } for pid=9456 comm="syz.4.2917" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 258.405448][ T36] audit: type=1400 audit(1750355534.250:43402): avc: denied { read } for pid=9456 comm="syz.4.2917" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.611691][ T9477] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 258.829197][ T9486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:451 [ 258.907953][ T9496] binder: Binderfs stats mode cannot be changed during a remount [ 258.918240][ T9492] rust_binder: Error while translating object. [ 258.947058][ T9492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.980828][ T9492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 259.132292][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.176084][ T9504] rust_binder: Write failure EFAULT in pid:455 [ 259.193722][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.231319][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.243854][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.253254][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.260741][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.269289][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.278622][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.282695][ T9512] rust_binder: Error while translating object. [ 259.286063][ T9512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 259.287145][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.303050][ T9512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1614 [ 259.310431][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.334785][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.356141][ T9514] rust_binder: Write failure EINVAL in pid:432 [ 259.361148][ T9503] binder: Unknown parameter '0xffffffffffffffff' [ 259.361653][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.392369][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.400277][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.409018][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.420074][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.434783][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.438260][ T9517] binder: Unknown parameter 'nXI' [ 259.447361][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.457945][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.465802][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.473372][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.482637][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.500413][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.507287][ T9525] binder: Unknown parameter 'processor : 0 [ 259.507287][ T9525] vendor_id : GenuineIntel [ 259.507287][ T9525] cpu family : 6 [ 259.507287][ T9525] model : 79 [ 259.507287][ T9525] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 259.507287][ T9525] stepping : 0 [ 259.507287][ T9525] microcode : 0xffffffff [ 259.507287][ T9525] cpu MHz : 2199.998 [ 259.507287][ T9525] cache size : 56320 KB [ 259.507287][ T9525] physical id : 0 [ 259.507287][ T9525] siblings : 2 [ 259.507287][ T9525] core id : 0 [ 259.507287][ T9525] cpu cores : 1 [ 259.507287][ T9525] apicid : 0 [ 259.507287][ T9525] initial apicid : 0 [ 259.507287][ T9525] fpu : yes [ 259.507287][ T9525] fpu_exception : yes [ 259.507287][ T9525] cpuid level : 13 [ 259.507287][ T9525] wp : yes [ 259.507287][ T9525] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 259.507287][ T9525] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 259.508111][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.666997][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.697603][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.705139][ T9532] binder: Unknown parameter 'fscontext?}' [ 259.707463][ T9529] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 259.711007][ T9530] rust_binder: Write failure EINVAL in pid:434 [ 259.719259][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.734162][ T9529] rust_binder: Read failure Err(EFAULT) in pid:434 [ 259.734338][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.749211][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.757387][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.765648][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.773837][ T45] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.790378][ T45] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.858207][ T9542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 259.860050][ T9542] rust_binder: Write failure EINVAL in pid:474 [ 259.907432][ T9542] SELinux: syz.3.2945 (9542) set checkreqprot to 1. This is no longer supported. [ 260.277380][ T9556] binder: Bad value for 'max' [ 260.355495][ T9553] fido_id[9553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.470848][ T9560] kvm: user requested TSC rate below hardware speed [ 260.499189][ T9560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:476 [ 260.841303][ T9583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.863179][ T9583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.191237][ T9594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.430846][ T9605] input: syz1 as /devices/virtual/input/input154 [ 261.569028][ T9608] ------------[ cut here ]------------ [ 261.574558][ T9608] WARNING: CPU: 0 PID: 9608 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 261.584018][ T9608] Modules linked in: [ 261.587932][ T9608] CPU: 0 UID: 0 PID: 9608 Comm: syz.3.2965 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 261.601445][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.611602][ T9608] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 261.617534][ T9608] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 261.637306][ T9608] RSP: 0018:ffffc90005597680 EFLAGS: 00010246 [ 261.643492][ T9608] RAX: 0000000000000000 RBX: 1ffff92000ab2ed4 RCX: 0000000000000000 [ 261.651606][ T9608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90005597728 [ 261.659604][ T9608] RBP: ffffc900055977a8 R08: ffffc90005597727 R09: 0000000000000000 [ 261.667816][ T9608] R10: ffffc90005597710 R11: fffff52000ab2ee5 R12: ffffc900055976c0 [ 261.675928][ T9608] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 261.684131][ T9608] FS: 00007f4e5b2ca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 261.693169][ T9608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.699780][ T9608] CR2: 0000200000006000 CR3: 0000000120dd8000 CR4: 00000000003526b0 [ 261.707853][ T9608] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 261.715889][ T9608] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.724012][ T9608] Call Trace: [ 261.727324][ T9608] [ 261.730306][ T9608] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 261.737835][ T9608] ? __kasan_slab_alloc+0x73/0x90 [ 261.743108][ T9608] ? hashtab_init+0xdb/0x1f0 [ 261.747742][ T9608] ___kmalloc_large_node+0x9c/0x1d0 [ 261.753001][ T9608] ? ebitmap_read+0x21d/0x990 [ 261.757714][ T9608] ? hashtab_init+0xdb/0x1f0 [ 261.762554][ T9608] __kmalloc_large_node_noprof+0x1e/0xe0 [ 261.768312][ T9608] ? hashtab_init+0xdb/0x1f0 [ 261.773139][ T9608] __kmalloc_noprof+0x26d/0x450 [ 261.778040][ T9608] hashtab_init+0xdb/0x1f0 [ 261.782532][ T9608] ? policydb_read+0x86f/0x28c0 [ 261.787433][ T9608] symtab_init+0x44/0x70 [ 261.791769][ T9608] policydb_read+0x8fe/0x28c0 [ 261.796492][ T9608] ? kasan_save_alloc_info+0x40/0x50 [ 261.801914][ T9608] ? __cfi_policydb_read+0x10/0x10 [ 261.807065][ T9608] ? security_load_policy+0x128/0x12f0 [ 261.812582][ T9608] security_load_policy+0x162/0x12f0 [ 261.814015][ T9613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.817904][ T9608] ? irqentry_exit+0x4a/0x60 [ 261.817937][ T9608] ? exc_page_fault+0x66/0xc0 [ 261.833787][ T9608] ? asm_exc_page_fault+0x2b/0x30 [ 261.838850][ T9608] ? __cfi_security_load_policy+0x10/0x10 [ 261.844809][ T9608] ? rep_movs_alternative+0x4a/0xa0 [ 261.850053][ T9608] sel_write_load+0x298/0x5e0 [ 261.854880][ T9608] ? futex_wait+0x288/0x540 [ 261.859417][ T9608] ? __cfi_sel_write_load+0x10/0x10 [ 261.864692][ T9608] ? __cfi_futex_wait+0x10/0x10 [ 261.869562][ T9608] ? bpf_lsm_file_permission+0xd/0x20 [ 261.875004][ T9608] ? __cfi_sel_write_load+0x10/0x10 [ 261.880252][ T9608] vfs_write+0x3c0/0xe80 [ 261.884585][ T9608] ? __cfi_vfs_write+0x10/0x10 [ 261.889387][ T9608] ? __kasan_check_write+0x18/0x20 [ 261.894577][ T9608] ? mutex_lock+0x92/0x1c0 [ 261.899031][ T9608] ? __cfi_mutex_lock+0x10/0x10 [ 261.904071][ T9608] ? __fget_files+0x2c5/0x340 [ 261.908791][ T9608] ksys_write+0x141/0x250 [ 261.913209][ T9608] ? xfd_validate_state+0x68/0x150 [ 261.918446][ T9608] ? __cfi_ksys_write+0x10/0x10 [ 261.923495][ T9608] ? __kasan_check_write+0x18/0x20 [ 261.928637][ T9608] ? fpregs_restore_userregs+0x11d/0x260 [ 261.934354][ T9608] __x64_sys_write+0x7f/0x90 [ 261.938986][ T9608] x64_sys_call+0x271c/0x2ee0 [ 261.943729][ T9608] do_syscall_64+0x58/0xf0 [ 261.948185][ T9608] ? clear_bhb_loop+0x35/0x90 [ 261.952931][ T9608] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 261.958862][ T9608] RIP: 0033:0x7f4e5a38e929 [ 261.963340][ T9608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.983012][ T9608] RSP: 002b:00007f4e5b2ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.991450][ T9608] RAX: ffffffffffffffda RBX: 00007f4e5a5b5fa0 RCX: 00007f4e5a38e929 [ 261.999444][ T9608] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000004 [ 262.007536][ T9608] RBP: 00007f4e5a410b39 R08: 0000000000000000 R09: 0000000000000000 [ 262.015544][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.023540][ T9608] R13: 0000000000000000 R14: 00007f4e5a5b5fa0 R15: 00007ffcd2af9478 [ 262.031732][ T9608] [ 262.034776][ T9608] ---[ end trace 0000000000000000 ]--- [ 262.040704][ T9608] SELinux: failed to load policy [ 265.081140][ T36] kauditd_printk_skb: 672 callbacks suppressed [ 265.081155][ T36] audit: type=1400 audit(1750355541.330:44075): avc: denied { search } for pid=9718 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.111360][ T36] audit: type=1400 audit(1750355541.330:44076): avc: denied { search } for pid=9718 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.112403][ T9719] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.135365][ T36] audit: type=1400 audit(1750355541.330:44077): avc: denied { search } for pid=9718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.141078][ T9719] audit: audit_lost=177 audit_rate_limit=0 audit_backlog_limit=64 [ 265.166217][ T36] audit: type=1400 audit(1750355541.330:44078): avc: denied { search } for pid=9718 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.172636][ T9719] audit: backlog limit exceeded [ 265.196848][ T36] audit: type=1400 audit(1750355541.330:44079): avc: denied { search } for pid=9719 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.202890][ T9719] audit: audit_backlog=65 > audit_backlog_limit=64 [ 265.224268][ T36] audit: type=1400 audit(1750355541.330:44080): avc: denied { search } for pid=9719 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1