last executing test programs: 34.958873302s ago: executing program 2 (id=262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(r0, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}, @decrefs, @exit_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}], 0xfd, 0x0, &(0x7f0000000340)="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"}) 34.958168062s ago: executing program 2 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 34.946791773s ago: executing program 2 (id=264): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b2, 0x0, 0x74d}]}) mount$binderfs(&(0x7f00000021c0), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0) 34.822644215s ago: executing program 2 (id=266): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, &(0x7f0000000180)="02000000777744952bdf04eb1bdcb210399666e08a771810d499218737214495f54176b7613c5cb2", 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000002a000040000000000400090000000000"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x3, 0xefffffffffffffff, 0xd, 0x0, 0x7fffffffffffffff, 0x0, 0xf, 0x7fff, 0x1, 0x8000000000000000, 0x7], 0x4, 0x41845}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x4cccc2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r7, 0x100000a, 0x12, r8, 0x100000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 34.644612158s ago: executing program 2 (id=273): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000600)=0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000000)={{}, {0x0, 0x7fffffff}, 0x0, 0x4}) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000080)={0xfff, 0x6}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000140)={0x6}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000002a80)=ANY=[@ANYBLOB='\x00\x00\b']) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) 34.566489469s ago: executing program 2 (id=276): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r2}) 18.993924217s ago: executing program 32 (id=276): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r2}) 2.261288494s ago: executing program 0 (id=810): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'a', ' *:* ', 'rw\x00'}, 0x9) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 2.241058485s ago: executing program 0 (id=811): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x5, 0x10, 0xf1, 0x0, 0x970, 0x8, 0xffffffffffffffff, 0xb, 0x0, 0x5, 0x0, 0xbdb], 0xfffe1001, 0x3d4e00}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000c00)=ANY=[@ANYBLOB="0100000000000092892fd405f17e00010000400000000000"]) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r4, &(0x7f00000013c0)=""/4089, 0xff9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) mmap(&(0x7f0000b7e000/0x2000)=nil, 0x2000, 0x3000008, 0x50, r4, 0x8f233000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x29b, 0x0, 0xa2}]}) read(r4, &(0x7f0000000280)=""/4096, 0x1000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000b7e000/0x1000)=nil, r11, 0x2, 0x11, r7, 0x0) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r12, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"]) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r13, 0xc0389424, 0x0) 1.353387409s ago: executing program 4 (id=828): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{}, {0xff, 0x0, 0x10}, {}, {}, {0x0, 0xdc}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x89, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x40}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9}, {}, {0x0, 0x1}, {}, {0x20}, {0x3}, {0x4, 0x4}]}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 1.170706632s ago: executing program 4 (id=829): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x4880, 0x0) read(r0, &(0x7f0000000480)=""/106, 0x6a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008600004000"/24]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000780)=0x7fffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x6832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @pic={0xc, 0x0, 0x6, 0xf, 0x2, 0x8e, 0xdc, 0x40, 0x7, 0x7f, 0x5f, 0x1, 0x3, 0x0, 0x2, 0x6}}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10000, 0x2, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x8, 0xc2, 0xd6, 0x40, 0x8, 0x2, 0x1, 0x34, 0x44, 0x8, 0x0, 0xa39}, {0x6, 0x1, 0x6, 0x8, 0x8, 0xfc, 0x4, 0x3, 0xa, 0x9e, 0x4, 0x6}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x8, 0x5, 0xc7, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x4000000000000000, 0x6, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0xff, 0x0, 0x0, 0x3, 0x7fffffffffffffff], 0xeeee8000, 0x2011c0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000000000001f0001c0"]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.162766582s ago: executing program 0 (id=830): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x121642, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) write(r0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) 1.160296652s ago: executing program 0 (id=831): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async, rerun: 64) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) (async, rerun: 64) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000340)) (async, rerun: 64) read(r2, &(0x7f0000000000), 0x2002) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x401) (async) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000280)=[@exit_looper], 0xe, 0x0, &(0x7f00000002c0)="a2b571521127e32f0f63c5292c34"}) 1.098279043s ago: executing program 0 (id=832): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000002500)={'system_u:object_r:restorecond_exec_t:s0', 0x20, 'system_u:object_r:ksm_device_t:s0', 0x20, 0xfffffffffffffff8, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x84) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x81, 0x4, 0x0, 0x5, 0x1, 0xc, 0x2c, 0x95, 0x1, 0x0, 0x81, 0x0, 0x4, 0x504dcab8, 0x3, 0x0, 0x2, 0xbe, '\x00', 0x9, 0x4}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0xc, 0x4, 0x81}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x1014e001, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x1}, {}, {0x0, 0x0, 0x4b}, {0x0, 0x35}, {0x18, 0x6}, {0x3, 0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x3}, {0x73, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x0, 0x7c}, {0x0, 0x2}, {0x9, 0x8}, {0x7f, 0x4}, {0x7, 0xff, 0x0, '\x00', 0x39}, {0x0, 0x20, 0x80, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xd1}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x80}, {0x6, 0xff, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x2, 0xfd}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) (async) write$selinux_validatetrans(r0, &(0x7f0000002500)={'system_u:object_r:restorecond_exec_t:s0', 0x20, 'system_u:object_r:ksm_device_t:s0', 0x20, 0xfffffffffffffff8, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x84) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x7c}, {0x6}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x81, 0x4, 0x0, 0x5, 0x1, 0xc, 0x2c, 0x95, 0x1, 0x0, 0x81, 0x0, 0x4, 0x504dcab8, 0x3, 0x0, 0x2, 0xbe, '\x00', 0x9, 0x4}) (async) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000040)={0xc, 0x4, 0x81}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x1014e001, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x1, 0x1}, {}, {0x0, 0x0, 0x4b}, {0x0, 0x35}, {0x18, 0x6}, {0x3, 0x0, 0x6}, {0x2}, {0x2, 0x6}, {0x3}, {0x73, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x0, 0x7c}, {0x0, 0x2}, {0x9, 0x8}, {0x7f, 0x4}, {0x7, 0xff, 0x0, '\x00', 0x39}, {0x0, 0x20, 0x80, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xd1}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x80}, {0x6, 0xff, 0x40, '\x00', 0x1}, {0x0, 0x8, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x2, 0xfd}]}}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) (async) 1.057071923s ago: executing program 4 (id=833): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10000008) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000004d564b"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0x1b00, 0x1}, @fd, @fd}, &(0x7f0000000780)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0xb, 0xffffffffffffff6e}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000040)={0x90000, 0x0, [0x1, 0x5, 0x3, 0x3, 0x800, 0x4, 0x4, 0x3]}) 910.639236ms ago: executing program 4 (id=835): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000740)=0x10, 0x12) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 910.461786ms ago: executing program 4 (id=836): prctl$PR_MCE_KILL(0x35, 0x0, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae09, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x7101}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r6, 0x8004b706, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) read(r7, &(0x7f0000000040)=""/106, 0x6a) (async) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) (async) ioctl$KVM_GET_MSRS(r9, 0xc008ae88, &(0x7f0000000100)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80000000000) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r10, 0x4068aea3, &(0x7f0000000140)) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) 908.084436ms ago: executing program 0 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0xa, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x13, r2, 0xb3d68000) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x2}) (async) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x142, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 706.724259ms ago: executing program 4 (id=838): prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f0000000380), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x2000, 0x2000, &(0x7f0000115000/0x2000)=nil}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0xc80, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x5, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x23, 0x0, 0x0, 0x8}]}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x40, 0x12) ioctl$UI_ABS_SETUP(r7, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x400, 0x2000, 0x0, 0x0, 0x3}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007401"]) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x300480, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r12, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x3, 0xad, 0x6, 0x9}]}) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="7374ba38cd90d649a92d616c2c00"]) 586.727581ms ago: executing program 1 (id=840): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdc) r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$khugepaged_scan(r4, &(0x7f0000000380), 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r8, &(0x7f0000000300)='reno\x00', 0x5) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x3}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 426.576233ms ago: executing program 3 (id=845): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@register_looper={0x400c6314}, @dead_binder_done], 0x0, 0x0, 0x0}) 426.354343ms ago: executing program 3 (id=846): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0xac, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r1}, @acquire_done, @acquire, @decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x9, 0x0, 0xe}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @dead_binder_done], 0x1000, 0x0, &(0x7f0000000400)="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"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001440)={0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x2) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc4) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001400)={0xac, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x2}, @free_buffer={0x40086303, r1}, @acquire_done, @acquire, @decrefs={0x40046307, 0x1}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x9, 0x0, 0xe}, @flat=@binder={0x73622a85, 0x1, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @release={0x40046306, 0x2}, @increfs_done={0x40106308, 0x2}, @dead_binder_done], 0x1000, 0x0, &(0x7f0000000400)="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"}) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001440)={0x1}) (async) 426.084683ms ago: executing program 3 (id=847): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x5b) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x110) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x8, 0x737, 0x20000000, 0x6, 0x1, 0xf, 0x80000000, 0x8, 0x48d0, 0x2, 0xfffffffffffffe00, 0x6, 0x100, 0xffffffffffff2764, 0x2, 0x7], 0x2, 0x88002}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1dd, 0x0, 0x390}]}) (async) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0xd, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0x8]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x8ae9b000) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000b4}]}) (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r9, 0x0) 422.275704ms ago: executing program 1 (id=848): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100240, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x2}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, 0x0, 0x0) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000ffd000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 337.651215ms ago: executing program 3 (id=849): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x3, 0x7f75a000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [{0xadf, 0x0, 0x5}, {0x802, 0x0, 0x9}, {0xc0011031, 0x0, 0x1800000000}]}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r3, 0x5, 0x414e037, r2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000100)={r6}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000280)=[@clear_death], 0x0, 0x0, 0x0}) openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01eaff0094d5301f0e47b4610000000000000000"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 142.777418ms ago: executing program 1 (id=850): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)=ANY=[]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000400)=@x86={0x0, 0x3, 0xfb, 0x0, 0xff, 0x0, 0x4, 0x40, 0x81, 0x3, 0x7, 0x8, 0x0, 0x4, 0x8, 0x82, 0x7f, 0x8, 0x7f, '\x00', 0x6}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000300)={[{@stats}, {@stats}, {@stats}], [{@euid_gt={'euid>', r5}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot}, {@flag='nolazytime'}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@dont_appraise}, {@audit}]}) 141.794448ms ago: executing program 3 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a9d42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008904"]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x8000000, 0x1000}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x600101, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) 133.071418ms ago: executing program 1 (id=852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) 86.238639ms ago: executing program 1 (id=853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008aec1, &(0x7f0000000d00)={"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"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 2.86095ms ago: executing program 3 (id=854): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011022, 0x0, 0x6}]}) prctl$PR_SET_TSC(0x1a, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c6314}], 0x0, 0x0, 0x0}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0011022, 0x0, 0x6}]}) (async) prctl$PR_SET_TSC(0x1a, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c6314}], 0x0, 0x0, 0x0}) (async) 0s ago: executing program 1 (id=855): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x80, 0x0, 0x1}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r4, 0xa48a2000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 29.998763][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.007791][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.015233][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.022784][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.030406][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.037845][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.045218][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.052643][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.060317][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.068568][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.076421][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.083833][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.091636][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.099471][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.107043][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.114437][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.121848][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.129287][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.137185][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.144579][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.152630][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.158232][ T368] rust_binder: Error while translating object. [ 30.160237][ T368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.160442][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.173227][ T368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:14 [ 30.176016][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.200324][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.207901][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.215314][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.223181][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.231184][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.240151][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.247731][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.255173][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.262631][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.270184][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.278093][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.285505][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.292903][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.300309][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.307994][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.315377][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.323307][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.330917][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.338481][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.345881][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.353254][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.360658][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.368133][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.375487][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.383287][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.391577][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.399043][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.406482][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.414252][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.421685][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.429505][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.436908][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.444288][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.451977][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.459457][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.467531][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.474933][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.482790][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.490204][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.498579][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.506144][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.513562][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.521314][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.529553][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.538113][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.547716][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.557261][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.564693][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.572456][ T383] binder: Binderfs stats mode cannot be changed during a remount [ 30.572496][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.594132][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.603418][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.612475][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.620102][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.628114][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.635897][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.646655][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.657285][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.664726][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.674306][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.681752][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.689291][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.696754][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.704155][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.715383][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.722840][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.730570][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.738004][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.745607][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.753058][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.760623][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.768058][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.782180][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.790465][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.795138][ T395] rust_binder: Write failure EFAULT in pid:25 [ 30.798125][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.812871][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.826358][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.827694][ T398] binder: Unknown parameter '00000000000000000003' [ 30.834081][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.848133][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.856875][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.864343][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.874354][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.882594][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.890162][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.898134][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.906915][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.914377][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.921857][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.929319][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.936812][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.944209][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.952230][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.959721][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.968368][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.975783][ T408] ======================================================= [ 30.975783][ T408] WARNING: The mand mount option has been deprecated and [ 30.975783][ T408] and is ignored by this kernel. Remove the mand [ 30.975783][ T408] option from the mount to silence this warning. [ 30.975783][ T408] ======================================================= [ 30.986162][ T406] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 31.012012][ T406] rust_binder: Error while translating object. [ 31.017325][ T410] binder: Unknown parameter '01777777777777777777777' [ 31.025176][ T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.040674][ T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 31.045738][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.050755][ T411] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 31.059265][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.077401][ T411] rust_binder: Error while translating object. [ 31.084567][ T411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.084693][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.091233][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 31.100348][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.124252][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.131829][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.140806][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.148243][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.155830][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.163247][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.170829][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.178473][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.197667][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.205593][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.213173][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.221163][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.228746][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.236357][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.243941][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.251544][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.252000][ T420] rust_binder: Write failure EINVAL in pid:34 [ 31.259165][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.279606][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.287878][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.305597][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.311785][ T424] rust_binder: Read failure Err(EAGAIN) in pid:36 [ 31.313080][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.332950][ T426] binder: Unknown parameter 'nXI' [ 31.342512][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.351208][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.358686][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.366241][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.373656][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.381175][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.388664][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.401988][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.409507][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.417109][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.424548][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.431985][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.439855][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.447281][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.454727][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.462143][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.469576][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.476978][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.484350][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.491791][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.499235][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.506735][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.515931][ T434] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 31.524688][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.532256][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.539876][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.547496][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.555041][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.562524][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.570032][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.577860][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.585317][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.593064][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.600654][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.608180][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.623424][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.630104][ T440] input: syz0 as /devices/virtual/input/input4 [ 31.631012][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.644647][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.652424][ T444] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.652518][ T450] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.670374][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.677802][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.685185][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.692571][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.699966][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.707351][ T64] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.715715][ T64] hid-generic 01FF:0004:0400.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 31.750134][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.750168][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.760548][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.776528][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.783162][ T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 31.791783][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.803100][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:55 [ 31.809257][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.816814][ T463] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 31.830967][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.840088][ T463] rust_binder: Error while translating object. [ 31.847062][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.867837][ T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.881772][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.892119][ T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 31.926691][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.955634][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.959616][ T464] fido_id[464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.970285][ T482] binder: Unknown parameter 'defcontext01777777777777777777777' [ 31.992348][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.992379][ T456] rust_binder: Write failure EFAULT in pid:10 [ 31.993991][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 31.994006][ T36] audit: type=1400 audit(1750375908.280:145): avc: denied { read } for pid=471 comm="syz.0.50" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.001375][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.010344][ T36] audit: type=1400 audit(1750375908.280:146): avc: denied { open } for pid=471 comm="syz.0.50" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.015672][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.084714][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.111374][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.119557][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.148173][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.156952][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.173280][ T36] audit: type=1400 audit(1750375908.460:147): avc: denied { execute } for pid=484 comm="syz.3.53" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.193514][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.208442][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.218175][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.224412][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.230875][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.238024][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.245773][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.251944][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.258320][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.264476][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.270660][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.277718][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.285395][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.291714][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.297999][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.304166][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.314561][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.320812][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.327454][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.333578][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.339927][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.346732][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.353095][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.359378][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.366260][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.372373][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.378809][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.384925][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.402548][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.410952][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.417253][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.423333][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.429538][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.435772][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.441955][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.449087][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.455323][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.461735][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.477680][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.483913][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.505608][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.511802][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.519388][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.532427][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.551083][ T456] rust_binder: Write failure EFAULT in pid:10 [ 32.576610][ T504] rust_binder: Write failure EINVAL in pid:53 [ 32.602493][ T36] audit: type=1400 audit(1750375908.890:148): avc: denied { append } for pid=507 comm="syz.2.62" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.645099][ T506] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 32.649783][ T36] audit: type=1400 audit(1750375908.890:149): avc: denied { write } for pid=507 comm="syz.2.62" name="pfkey" dev="proc" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.683546][ T36] audit: type=1400 audit(1750375908.890:150): avc: denied { map } for pid=507 comm="syz.2.62" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.762403][ T519] input: syz0 as /devices/virtual/input/input5 [ 32.785647][ T522] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 32.785673][ T522] rust_binder: Error while translating object. [ 32.802015][ T522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.811355][ T522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 32.826848][ T527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 32.842788][ T527] binder: Bad value for 'max' [ 32.872877][ T532] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 32.880543][ T36] audit: type=1400 audit(1750375909.160:151): avc: denied { load_policy } for pid=531 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 32.902783][ T532] SELinux: failed to load policy [ 32.907851][ T533] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 32.916021][ T533] SELinux: failed to load policy [ 32.967736][ T541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.967798][ T541] rust_binder: inc_ref_done called when no active inc_refs [ 32.975096][ T541] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.988269][ T542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.045319][ T545] SELinux: failed to load policy [ 33.067088][ T551] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 33.076682][ T551] rust_binder: Write failure EINVAL in pid:64 [ 33.106282][ T557] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 33.112485][ T557] rust_binder: Error while translating object. [ 33.126476][ T557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.132771][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 33.206946][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.224516][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.224538][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.224562][ T561] rust_binder: Error in use_page_slow: ESRCH [ 33.231329][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.245463][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.252137][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.260746][ T561] rust_binder: use_range failure ESRCH [ 33.267665][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.273268][ T561] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 33.280047][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.295094][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.302036][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.314710][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:85 [ 33.320255][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.330182][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.336814][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.343306][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.350155][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.356623][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.363038][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.369493][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.375941][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.382347][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.388807][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.395488][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.401958][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.408407][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.414809][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.421245][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.427805][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.434228][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.440860][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.449081][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.455951][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.462433][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.469080][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.558663][ T36] audit: type=1400 audit(1750375909.840:152): avc: denied { execute } for pid=576 comm="syz.1.83" path="/selinux/load" dev="selinuxfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 33.590008][ T575] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 33.590033][ T575] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 33.598539][ T575] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 33.607559][ T583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.639086][ T589] rust_binder: Write failure EFAULT in pid:76 [ 33.661735][ T36] audit: type=1326 audit(1750375909.950:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=590 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74f8b8e929 code=0x0 [ 33.700783][ T36] audit: type=1400 audit(1750375909.990:154): avc: denied { read } for pid=586 comm="syz.3.85" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.709774][ T587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.741955][ T597] block device autoloading is deprecated and will be removed. [ 33.756348][ T597] syz.1.88: attempt to access beyond end of device [ 33.756348][ T597] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 33.759585][ T599] rust_binder: Error while translating object. [ 33.769506][ T599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.771197][ T597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.775839][ T599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 33.788286][ T597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:76 [ 33.794969][ T600] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.810707][ T600] rust_binder: Read failure Err(EFAULT) in pid:78 [ 33.865594][ T602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.872273][ T602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.878995][ T602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.968766][ T609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.977814][ T607] binder: Bad value for 'max' [ 33.990759][ T607] rust_binder: Got transaction with invalid offset. [ 33.990859][ T607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.999313][ T607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 34.000609][ T612] binder: Unknown parameter 'smackfshat' [ 34.076991][ T616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.077099][ T616] rust_binder: Write failure EINVAL in pid:81 [ 34.218520][ T622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 34.279413][ T630] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 34.279689][ T631] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 34.330727][ T633] binder: Bad value for 'stats' [ 34.371417][ T635] input: syz1 as /devices/virtual/input/input7 [ 34.410021][ T639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 34.410329][ T639] binder: Bad value for 'stats' [ 34.413805][ T641] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.427951][ T641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.437477][ T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 34.470640][ T647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.484109][ T648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126 [ 34.515858][ T650] SELinux: security_context_str_to_sid () failed with errno=-22 [ 34.562562][ T655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.587968][ T664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.607790][ T664] rust_binder: Write failure EINVAL in pid:89 [ 34.615264][ T666] input: syz0 as /devices/virtual/input/input8 [ 34.628439][ T666] input: failed to attach handler leds to device input8, error: -6 [ 34.766342][ T673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 34.927530][ T681] rust_binder: Write failure EINVAL in pid:52 [ 34.974666][ T683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.980934][ T684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.988071][ T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.994649][ T683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.004444][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 35.011313][ T683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96 [ 35.037074][ T686] rust_binder: Write failure EINVAL in pid:99 [ 35.043167][ T687] input: syz0 as /devices/virtual/input/input9 [ 35.060027][ T689] binder: Unknown parameter 'Xr/kvm' [ 35.066108][ T687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.066403][ T686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.074383][ T686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 35.216919][ T697] rust_binder: Write failure EFAULT in pid:103 [ 35.331594][ T709] binder: Bad value for 'stats' [ 35.354207][ T712] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.442879][ T720] kvm: kvm [719]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 35.450218][ T724] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 35.464282][ T720] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 35.485627][ T720] SELinux: failed to load policy [ 35.492518][ T720] binder: Unknown parameter '>max' [ 35.499037][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.570065][ T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 35.594198][ T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.603644][ T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 35.613435][ T748] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 35.620878][ T751] binder: Unknown parameter 'dont_hash' [ 35.628600][ T748] rust_binder: Read failure Err(EFAULT) in pid:68 [ 35.653901][ T755] rust_binder: Error while translating object. [ 35.654999][ T753] rust_binder: Write failure EINVAL in pid:144 [ 35.660708][ T755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 35.693345][ T755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:70 [ 35.700277][ T757] rust_binder: Write failure EFAULT in pid:146 [ 35.830127][ T769] rust_binder: Write failure EINVAL in pid:75 [ 35.838320][ T772] rust_binder: Read failure Err(EAGAIN) in pid:113 [ 35.849488][ T772] rust_binder: Write failure EINVAL in pid:113 [ 35.865891][ T776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 35.893750][ T782] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 35.912076][ T782] rust_binder: Write failure EINVAL in pid:82 [ 35.932159][ T793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 35.982364][ T792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.982617][ T793] rust_binder: Write failure EINVAL in pid:158 [ 35.991701][ T792] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 36.004871][ T792] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 36.012826][ T792] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 36.022641][ T792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.023351][ T798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.419434][ T825] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.636289][ T839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 36.643252][ T839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.707224][ T840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 36.795155][ T844] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 36.890202][ T850] rust_binder: Write failure EFAULT in pid:113 [ 36.957788][ T853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:116 [ 36.984775][ T855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.072438][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 37.072456][ T36] audit: type=1326 audit(1750375913.360:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=865 comm="syz.0.175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74f8b8e929 code=0x0 [ 37.229409][ T871] SELinux: ebitmap: truncated map [ 37.234499][ T871] SELinux: failed to load policy [ 37.512792][ T888] deleting an unspecified loop device is not supported. [ 37.558550][ T36] audit: type=1400 audit(1750375913.850:172): avc: denied { map } for pid=890 comm="syz.2.183" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 37.937045][ T921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.977831][ T922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.994570][ T922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 38.026864][ T927] rust_binder: Write failure EFAULT in pid:139 [ 38.071860][ T932] SELinux: security_context_str_to_sid (syteuGй :) failed with errno=-22 [ 38.119247][ T937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.170490][ T939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 38.709514][ T947] random: crng reseeded on system resumption [ 38.713757][ T36] audit: type=1400 audit(1750375915.000:173): avc: denied { append } for pid=946 comm="syz.2.198" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.737147][ T947] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 38.847607][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.851094][ T952] rust_binder: Write failure EINVAL in pid:144 [ 38.857828][ T952] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 38.990641][ T957] kvm: user requested TSC rate below hardware speed [ 39.015184][ T958] binder: Unknown parameter '01777777777777777777777' [ 39.022128][ T957] binder: Unknown parameter '01777777777777777777777' [ 39.135008][ T965] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.135655][ T965] rust_binder: Error in use_page_slow: ESRCH [ 39.142291][ T965] rust_binder: use_range failure ESRCH [ 39.148415][ T965] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 39.154079][ T965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.171302][ T965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:149 [ 39.213315][ T968] rust_binder: Write failure EFAULT in pid:150 [ 39.307071][ T972] binder: Unknown parameter '' [ 39.323704][ T970] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=960 (1920 ns) > initial count (152 ns). Using initial count to start timer. [ 39.340298][ T36] audit: type=1400 audit(1750375915.630:174): avc: denied { write } for pid=969 comm="syz.0.206" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 39.409377][ T979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151 [ 39.440999][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.450708][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.457398][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.472274][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.480513][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.495704][ T982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.536436][ T992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.543422][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.543436][ T993] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 39.554078][ T992] rust_binder: Error while translating object. [ 39.565646][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 39.583159][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:160 [ 39.694884][ T1008] SELinux: Context @ is not valid (left unmapped). [ 39.819603][ T1012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.821455][ T1010] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 39.837683][ T1010] rust_binder: Write failure EINVAL in pid:159 [ 39.842389][ T1012] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.924100][ T36] audit: type=1400 audit(1750375916.210:175): avc: denied { write } for pid=1020 comm="syz.3.222" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.955563][ T36] audit: type=1400 audit(1750375916.210:176): avc: denied { remove_name } for pid=1020 comm="syz.3.222" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.980112][ T36] audit: type=1400 audit(1750375916.210:177): avc: denied { unlink } for pid=1020 comm="syz.3.222" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.194685][ T1036] rust_binder: Error while translating object. [ 40.194742][ T1036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 40.202020][ T1036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:165 [ 40.625223][ T1066] binder: Unknown parameter 'non' [ 40.685123][ T36] audit: type=1400 audit(1750375916.970:178): avc: denied { read open } for pid=1075 comm="syz.2.244" path="uts:[4026532398]" dev="nsfs" ino=4026532398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.709927][ T36] audit: type=1400 audit(1750375916.970:179): avc: denied { ioctl } for pid=1075 comm="syz.2.244" path="uts:[4026532398]" dev="nsfs" ino=4026532398 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.797994][ T1083] binder: Unknown parameter '' [ 40.904859][ T1093] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 40.911357][ T1095] SELinux: Context is not valid (left unmapped). [ 40.925926][ T1095] rust_binder: Write failure EINVAL in pid:172 [ 40.926748][ T1095] rust_binder: Write failure EINVAL in pid:172 [ 41.018557][ T1099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.029176][ T1099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 41.035960][ T1099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:176 [ 41.083314][ T1106] kvm: kvm [1105]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 41.236566][ T1116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.237339][ T1116] rust_binder: Write failure EINVAL in pid:181 [ 41.244513][ T36] audit: type=1326 audit(1750375917.530:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1115 comm="$,@.-,$!" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74f8b8e929 code=0x0 [ 41.585585][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.616388][ T1147] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.616753][ T1147] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 41.623216][ T1147] rust_binder: Error while translating object. [ 41.634054][ T1147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.641184][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 41.848582][ T1167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.950650][ T1173] kvm: kvm [1172]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 41.966637][ T1173] binder: Unknown parameter '' [ 41.988494][ T1175] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.988854][ T1175] rust_binder: Write failure EINVAL in pid:177 [ 41.997058][ T1175] rust_binder: Write failure EINVAL in pid:177 [ 42.089573][ T1183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.109767][ T1186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.157677][ T1188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 42.268126][ T1193] __vm_enough_memory: pid: 1193, comm: syz.3.287, bytes: 281474976845824 not enough memory for the allocation [ 42.768336][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 42.768354][ T36] audit: type=1326 audit(1750375919.060:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1214 comm="syz.3.295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e53b8e929 code=0x0 [ 42.847945][ T1216] binder: Bad value for 'stats' [ 43.153130][ T1218] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.219813][ T1224] rust_binder: Write failure EINVAL in pid:192 [ 43.273599][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.362201][ T1232] rust_binder: Write failure EFAULT in pid:197 [ 43.369008][ T1232] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 43.623400][ T1248] binder: Unknown parameter 'fscontext?}n' [ 43.634064][ T288] cgroup: fork rejected by pids controller in /syz0 [ 43.719208][ T59] bridge_slave_1: left allmulticast mode [ 43.725057][ T59] bridge_slave_1: left promiscuous mode [ 43.733728][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.743336][ T59] bridge_slave_0: left allmulticast mode [ 43.749340][ T59] bridge_slave_0: left promiscuous mode [ 43.754989][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.871047][ T36] audit: type=1400 audit(1750375920.160:184): avc: denied { execute } for pid=1257 comm="syz.3.314" path="/104/memory.numa_stat" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.871091][ T1263] rust_binder: Read failure Err(EAGAIN) in pid:200 [ 43.967968][ T59] veth1_macvtap: left promiscuous mode [ 43.980110][ T59] veth0_vlan: left promiscuous mode [ 44.009058][ T1270] input: syz1 as /devices/virtual/input/input14 [ 44.106206][ T1275] rust_binder: Write failure EINVAL in pid:319 [ 44.164264][ T1279] binder: Bad value for 'max' [ 44.216463][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.231726][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.239818][ T1269] bridge_slave_0: entered allmulticast mode [ 44.246439][ T1269] bridge_slave_0: entered promiscuous mode [ 44.253031][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.293678][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.303605][ T1269] bridge_slave_1: entered allmulticast mode [ 44.311766][ T1269] bridge_slave_1: entered promiscuous mode [ 44.356508][ T1288] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 44.368262][ T1288] rust_binder: Write failure EINVAL in pid:207 [ 44.428852][ T36] audit: type=1400 audit(1750375920.720:185): avc: denied { create } for pid=1269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.445567][ T36] audit: type=1400 audit(1750375920.720:186): avc: denied { write } for pid=1269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.463487][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.483315][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.490736][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.497821][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.535566][ T36] audit: type=1400 audit(1750375920.720:187): avc: denied { read } for pid=1269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.603311][ T901] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.611446][ T901] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.628574][ T901] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.635678][ T901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.662136][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.669328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.722613][ T1269] veth0_vlan: entered promiscuous mode [ 44.767926][ T1269] veth1_macvtap: entered promiscuous mode [ 45.016881][ T1323] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 45.327985][ T1325] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.351360][ T1329] binder: Unknown parameter 'smackfsdef' [ 45.375200][ T36] audit: type=1400 audit(1750375921.660:188): avc: denied { relabelfrom } for pid=1328 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.402290][ T1325] binder: Bad value for 'stats' [ 45.408608][ T36] audit: type=1400 audit(1750375921.660:189): avc: denied { relabelto } for pid=1328 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.775026][ T1333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.775341][ T1332] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 45.794005][ T1333] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 45.801275][ T1333] rust_binder: Write failure EINVAL in pid:9 [ 45.801332][ T1332] rust_binder: Write failure EINVAL in pid:9 [ 45.818622][ T1333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:9 [ 45.900780][ T1337] rust_binder: Error while translating object. [ 45.910263][ T1337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.916519][ T1337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 45.955150][ T1342] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 45.976726][ T1342] input: syz0 as /devices/virtual/input/input16 [ 46.162938][ T1349] rust_binder: Error while translating object. [ 46.162988][ T1349] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 46.178927][ T1349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 46.253372][ T1360] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 46.285075][ T36] audit: type=1400 audit(1750375922.570:190): avc: denied { ioctl } for pid=1361 comm="syz.3.342" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.326852][ T1365] rust_binder: Write failure EFAULT in pid:20 [ 46.358756][ T1367] random: crng reseeded on system resumption [ 46.358756][ T36] audit: type=1400 audit(1750375922.650:191): avc: denied { write } for pid=1366 comm="syz.3.344" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.436374][ T1368] SELinux: policydb version -1758411624 does not match my version range 15-33 [ 46.450604][ T1368] SELinux: failed to load policy [ 46.470321][ T1368] kvm: kvm [1363]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 46.502510][ T1376] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 46.502536][ T1376] rust_binder: Error while translating object. [ 46.513396][ T1376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.519870][ T1376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:361 [ 46.718653][ T1385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 46.767254][ T1387] input: syz0 as /devices/virtual/input/input17 [ 47.075597][ T1398] binder: Unknown parameter '' [ 47.317225][ T1405] rust_binder: Got transaction with invalid offset. [ 47.317273][ T1405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.340646][ T1405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 47.386733][ T1414] rust_binder: Write failure EFAULT in pid:245 [ 47.395859][ T1413] rust_binder: Error while translating object. [ 47.395890][ T1413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 47.395913][ T1413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27 [ 47.447902][ T1413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.456832][ T1419] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 47.463498][ T1419] rust_binder: Error while translating object. [ 47.485988][ T1419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.492457][ T1421] rust_binder: Write failure EFAULT in pid:29 [ 47.493911][ T1419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 47.516737][ T1423] rust_binder: Write failure EFAULT in pid:29 [ 47.574931][ T1427] rust_binder: Write failure EINVAL in pid:33 [ 47.587877][ T1425] rust_binder: Write failure EINVAL in pid:252 [ 47.637251][ T469] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 47.654105][ T469] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 47.665869][ T469] hid-generic C98F:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.700183][ T1435] fido_id[1435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.903422][ T36] audit: type=1326 audit(1750375924.190:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x0 [ 48.097368][ T1447] binder: Unknown parameter 'non0x0000000000000008' [ 48.315125][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.315221][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.322104][ T1456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 48.370044][ T1458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 48.682503][ T1462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.898062][ T1469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 48.909353][ T1469] kvm: user requested TSC rate below hardware speed [ 49.142354][ T1476] rust_binder: Write failure EFAULT in pid:70 [ 49.342121][ T1485] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 49.354643][ T1485] rust_binder: Error while translating object. [ 49.371375][ T1485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.377880][ T1487] binder: Bad value for 'stats' [ 49.402221][ T1485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270 [ 49.414786][ T1487] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.433237][ T36] audit: type=1400 audit(1750375925.710:193): avc: denied { map } for pid=1486 comm="syz.0.384" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 49.478190][ T1489] rust_binder: Error while translating object. [ 49.478215][ T1489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 49.484396][ T1489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272 [ 49.637636][ T1499] random: crng reseeded on system resumption [ 49.890299][ T1514] input: syz0 as /devices/virtual/input/input19 [ 50.512075][ T1527] SELinux: failed to load policy [ 51.168405][ T945] hid-generic 0009:0002:0001.0003: unknown main item tag 0xe [ 51.176845][ T945] hid-generic 0009:0002:0001.0003: hidraw0: HID vff.ff Device [syz1] on syz0 [ 51.224388][ T1561] fido_id[1561]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.393991][ T1569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 51.508069][ T1575] kvm: kvm [1574]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 51.603548][ T1578] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 51.687041][ T1582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.687077][ T1582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 51.845895][ T1595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 51.927069][ T1597] rust_binder: Write failure EFAULT in pid:393 [ 51.987864][ T1602] random: crng reseeded on system resumption [ 52.226177][ T1614] SELinux: security_context_str_to_sid () failed with errno=-22 [ 52.251941][ T1616] SELinux: policydb magic number 0xc4998c69 does not match expected magic number 0xf97cff8c [ 52.262366][ T1616] SELinux: failed to load policy [ 52.284408][ T1618] rust_binder: Error while translating object. [ 52.284444][ T1618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 52.290884][ T1618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:398 [ 52.323565][ T1618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.334761][ T1624] rust_binder: Error in use_page_slow: ESRCH [ 52.342862][ T1624] rust_binder: use_range failure ESRCH [ 52.358472][ T1618] block device autoloading is deprecated and will be removed. [ 52.371997][ T1624] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 52.372027][ T1624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.380540][ T1624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:136 [ 52.391198][ T1618] syz.3.430: attempt to access beyond end of device [ 52.391198][ T1618] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.451867][ T1631] binder: Unknown parameter 'euid>00000000000000000000' [ 52.495750][ T1640] binder: Unknown parameter '/dev/ttyS3' [ 52.586275][ T1645] rust_binder: Write failure EINVAL in pid:145 [ 52.886179][ T36] audit: type=1326 audit(1750375929.180:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1671 comm="syz.1.447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f715738e929 code=0x0 [ 53.025184][ T1680] binder: Unknown parameter 'processor : 0 [ 53.025184][ T1680] vendor_id : GenuineIntel [ 53.025184][ T1680] cpu family : 6 [ 53.025184][ T1680] model : 79 [ 53.025184][ T1680] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 53.025184][ T1680] stepping : 0 [ 53.025184][ T1680] microcode : 0xffffffff [ 53.025184][ T1680] cpu MHz : 2199.998 [ 53.025184][ T1680] cache size : 56320 KB [ 53.025184][ T1680] physical id : 0 [ 53.025184][ T1680] siblings : 2 [ 53.025184][ T1680] core id : 0 [ 53.025184][ T1680] cpu cores : 1 [ 53.025184][ T1680] apicid : 0 [ 53.025184][ T1680] initial apicid : 0 [ 53.025184][ T1680] fpu : yes [ 53.025184][ T1680] fpu_exception : yes [ 53.025184][ T1680] cpuid level : 13 [ 53.025184][ T1680] wp : yes [ 53.025184][ T1680] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 53.025184][ T1680] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 53.029396][ T1680] binder: Binderfs stats mode cannot be changed during a remount [ 53.260008][ T1684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:418 [ 53.260122][ T1684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 53.794067][ T36] audit: type=1400 audit(1750375930.080:195): avc: denied { map } for pid=1691 comm="syz.0.452" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 53.947894][ T1697] can0: slcan on ttyS3. [ 53.953672][ T36] audit: type=1400 audit(1750375930.240:196): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.981685][ T36] audit: type=1400 audit(1750375930.270:197): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.028906][ T36] audit: type=1400 audit(1750375930.270:198): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.055915][ T36] audit: type=1400 audit(1750375930.270:199): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.067238][ T1705] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 54.096431][ T1705] rust_binder: Error while translating object. [ 54.105164][ T36] audit: type=1400 audit(1750375930.270:200): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=3646 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.105205][ T36] audit: type=1400 audit(1750375930.320:201): avc: denied { read } for pid=1701 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.160224][ T1705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.160260][ T1705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:421 [ 54.176784][ T36] audit: type=1400 audit(1750375930.320:202): avc: denied { open } for pid=1701 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.213370][ T36] audit: type=1400 audit(1750375930.320:203): avc: denied { getattr } for pid=1701 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.257850][ T36] audit: type=1400 audit(1750375930.540:204): avc: denied { write } for pid=1700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.304655][ T1717] rust_binder: Error while translating object. [ 54.304686][ T1717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.315631][ T1717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166 [ 54.325984][ T1694] can0 (unregistered): slcan off ttyS3. [ 54.589378][ T1748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:431 [ 55.022396][ T1758] binder: Bad value for 'max' [ 55.094047][ T1767] binder: Unknown parameter '' [ 55.293858][ T1791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 55.345015][ T1794] rust_binder: Write failure EINVAL in pid:445 [ 55.367135][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.696778][ T1807] rust_binder: Write failure EFAULT in pid:198 [ 55.876210][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.883596][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.891137][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.897973][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.904521][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.911338][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.918257][ T1814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.362126][ T1828] input: syz1 as /devices/virtual/input/input23 [ 56.422263][ T1830] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 56.519060][ T1835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 56.575104][ T1837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 56.584525][ T1837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:455 [ 56.723032][ T1841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 56.732360][ T1841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:459 [ 57.403275][ T1848] random: crng reseeded on system resumption [ 57.425571][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.425567][ T993] Bluetooth: hci0: command 0x1003 tx timeout [ 57.523977][ T59] bridge_slave_1: left allmulticast mode [ 57.529863][ T59] bridge_slave_1: left promiscuous mode [ 57.535496][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.543270][ T59] bridge_slave_0: left allmulticast mode [ 57.549135][ T59] bridge_slave_0: left promiscuous mode [ 57.554780][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.671244][ T1861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 57.679659][ T1852] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.701165][ T1852] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.708487][ T1852] bridge_slave_0: entered allmulticast mode [ 57.715221][ T1852] bridge_slave_0: entered promiscuous mode [ 57.722117][ T1852] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.729370][ T1852] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.730913][ T1865] rust_binder: Write failure EFAULT in pid:227 [ 57.739340][ T1852] bridge_slave_1: entered allmulticast mode [ 57.758162][ T1852] bridge_slave_1: entered promiscuous mode [ 57.764955][ T59] veth1_macvtap: left promiscuous mode [ 57.775318][ T59] veth0_vlan: left promiscuous mode [ 57.800049][ T1874] rust_binder: Write failure EFAULT in pid:384 [ 57.838996][ T1877] binder: Bad value for 'max' [ 57.931960][ T1852] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.939050][ T1852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.946324][ T1852] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.953341][ T1852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.008472][ T1882] binder: Unknown parameter 'defcontext01777777777777777777777' [ 58.042319][ T1852] veth0_vlan: entered promiscuous mode [ 58.055334][ T1852] veth1_macvtap: entered promiscuous mode [ 58.216146][ T1901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:465 [ 58.216352][ T1901] SELinux: truncated policydb string identifier [ 58.247184][ T1901] SELinux: failed to load policy [ 58.277158][ T1908] binder: Unknown parameter '-sconte~t?}' [ 58.295951][ T1905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 58.295990][ T1905] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.310279][ T1905] rust_binder: Read failure Err(EFAULT) in pid:248 [ 58.375085][ T1908] binder: Bad value for 'max' [ 58.539094][ T1924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.990101][ T1951] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 58.990134][ T1951] rust_binder: Error in use_page_slow: EBUSY [ 59.004671][ T1951] rust_binder: use_range failure EBUSY [ 59.010914][ T1951] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 59.016613][ T1951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 59.024257][ T1951] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 59.035959][ T1951] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:263 [ 59.104127][ T1958] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 59.179015][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 59.179033][ T36] audit: type=1326 audit(1750375935.470:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1961 comm="syz.1.526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f715738e929 code=0x0 [ 59.189103][ T1960] kvm: user requested TSC rate below hardware speed [ 59.326964][ T1973] rust_binder: Read failure Err(EAGAIN) in pid:15 [ 59.327499][ T36] audit: type=1400 audit(1750375935.620:219): avc: denied { create } for pid=1972 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 59.387620][ T1977] rust_binder: Write failure EINVAL in pid:19 [ 59.424693][ T1981] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 59.475927][ T1983] rust_binder: Error while translating object. [ 59.475954][ T1983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.495622][ T1983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 59.577712][ T1989] rust_binder: Read failure Err(EAGAIN) in pid:27 [ 59.718050][ T1995] rust_binder: Write failure EFAULT in pid:477 [ 59.769085][ T1999] binder: Unknown parameter '+$p TP;:(YI$1v!4ŗXP [ 59.769085][ T1999] w0M l*ݶ~i$% >M' [ 59.824909][ T2007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 59.824937][ T2007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:268 [ 59.847696][ T2007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.103603][ T2027] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 60.110150][ T2027] rust_binder: Error while translating object. [ 60.142029][ T2027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.148593][ T2027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 60.589513][ T2042] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 60.610629][ T2042] binder: Bad value for 'defcontext' [ 60.800882][ T2065] binder: Unknown parameter 'non' [ 60.884438][ T2075] binder: Bad value for 'defcontext' [ 60.890108][ T36] audit: type=1400 audit(1750375937.180:220): avc: granted { setsecparam } for pid=2059 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 60.913167][ T2076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 60.985053][ T36] audit: type=1326 audit(1750375937.270:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2080 comm="syz.1.563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f715738e929 code=0x0 [ 61.064896][ T2088] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 61.065398][ T2087] input: syz0 as /devices/virtual/input/input27 [ 61.080843][ T2087] input: failed to attach handler leds to device input27, error: -6 [ 61.132779][ T2093] binder: Unknown parameter '0x0000000000000003' [ 61.212428][ T2101] binder: Unknown parameter 'st' [ 61.286603][ T2107] rust_binder: Write failure EFAULT in pid:295 [ 61.328943][ T2113] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 61.378959][ T2113] rust_binder: Write failure EINVAL in pid:57 [ 61.418930][ T2122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.450573][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.480586][ T36] audit: type=1326 audit(1750375937.770:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2127 comm="syz.3.580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e53b8e929 code=0x0 [ 61.688013][ T2142] random: crng reseeded on system resumption [ 61.704975][ T2142] rust_binder: Failed copying remainder into alloc: EFAULT [ 61.704992][ T2142] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 61.712496][ T2142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 61.721233][ T2142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:64 [ 61.737570][ T2146] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 61.755409][ T2146] rust_binder: Write failure EINVAL in pid:305 [ 61.778649][ T2144] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 61.778667][ T2144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 61.791143][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:534 [ 61.806453][ T2145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 61.806460][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 61.806480][ T2145] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.816187][ T2144] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.831908][ T36] audit: type=1326 audit(1750375938.120:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2152 comm="syz.4.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0138e929 code=0x0 [ 61.836930][ T2144] rust_binder: Read failure Err(EFAULT) in pid:534 [ 61.848168][ T2145] rust_binder: Read failure Err(EFAULT) in pid:534 [ 61.882066][ T2157] syz.4.586: attempt to access beyond end of device [ 61.882066][ T2157] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.977250][ T2161] binder: Unknown parameter 'sta綞ps\`2g' [ 62.051297][ T2170] rust_binder: Write failure EINVAL in pid:543 [ 62.152329][ T2178] binder: Bad value for 'stats' [ 62.159402][ T2180] rust_binder: Write failure EFAULT in pid:550 [ 62.168103][ T2177] binder: Bad value for 'stats' [ 62.281700][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 62.292771][ T2190] Bluetooth: hci0: Frame reassembly failed (-90) [ 62.307272][ T2192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 62.400788][ T2192] rust_binder: Error while translating object. [ 62.410165][ T2192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.416698][ T2192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:560 [ 62.531542][ T36] audit: type=1400 audit(1750375938.820:224): avc: denied { setcheckreqprot } for pid=2197 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 62.587601][ T2199] rust_binder: Write failure EINVAL in pid:308 [ 62.588220][ T2199] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.602482][ T2199] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 62.611063][ T2199] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 62.619360][ T2199] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 62.628006][ T2199] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 62.667903][ T2205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 62.715578][ T2209] input: syz0 as /devices/virtual/input/input28 [ 62.777678][ T2215] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 63.050158][ T2224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.101021][ T2223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 63.107881][ T2222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.117355][ T2223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:317 [ 63.150549][ T2238] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 63.157434][ T2236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.167792][ T2236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 63.183147][ T2235] rust_binder: Write failure EINVAL in pid:580 [ 63.216429][ T2242] kvm: kvm [2241]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 63.248511][ T901] Bluetooth: hci1: Frame reassembly failed (-84) [ 63.255361][ T2244] Bluetooth: hci1: Frame reassembly failed (-90) [ 63.276693][ T2242] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 63.276731][ T2242] rust_binder: Error in use_page_slow: EBUSY [ 63.287252][ T2242] rust_binder: use_range failure EBUSY [ 63.293248][ T2242] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 63.298882][ T2242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 63.306615][ T2242] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 63.316021][ T2242] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:325 [ 63.413528][ T36] audit: type=1400 audit(1750375939.700:225): avc: denied { execute } for pid=2247 comm="syz.0.614" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.638603][ T2251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 63.659317][ T2255] binder: Bad value for 'stats' [ 63.875127][ T2258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 63.884798][ T2260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.937537][ T2260] rust_binder: Write failure EINVAL in pid:340 [ 63.944768][ T2260] rust_binder: Write failure EINVAL in pid:340 [ 63.967725][ T2262] SELinux: security_context_str_to_sid () failed with errno=-22 [ 64.000179][ T2267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84 [ 64.000209][ T2266] binder: Bad value for 'stats' [ 64.176680][ T2274] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 64.184343][ T2274] SELinux: failed to load policy [ 64.189766][ T2274] tun0: tun_chr_ioctl cmd 1074025676 [ 64.195169][ T2274] tun0: owner set to 0 [ 64.247998][ T2276] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 64.255258][ T2276] rust_binder: Write failure EINVAL in pid:90 [ 64.305609][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.338519][ T2289] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 64.338536][ T2289] rust_binder: Error while translating object. [ 64.349235][ T2289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.355491][ T2289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 64.958538][ T2310] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 65.222962][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.245230][ T2321] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 65.253109][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.275586][ T993] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 65.276432][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.291730][ T2318] input: syz0 as /devices/virtual/input/input30 [ 65.306868][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.316571][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.323975][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.331507][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.339126][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.346957][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.354377][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.361869][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.369265][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.376993][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.384732][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.397380][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.408880][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.418404][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.421549][ T2326] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 65.427664][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.443309][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.451370][ T2326] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 65.451389][ T2326] rust_binder: Error while translating object. [ 65.451421][ T2326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.451443][ T2326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 65.477431][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.480128][ T2327] input: syz0 as /devices/virtual/input/input32 [ 65.486867][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.508389][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.516852][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.524932][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.533225][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.543336][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.552690][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.560345][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.567936][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.575401][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.583248][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.590826][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.612474][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.620327][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.632122][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.641584][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.649237][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.655787][ T2333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.656922][ T2333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.656951][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.679166][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.686652][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.694169][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.701624][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.709168][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.716602][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.730066][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.737664][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.745097][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.761113][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.768999][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.777003][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.788312][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.796066][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.803577][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.803637][ T2338] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 65.818694][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.825677][ T2338] SELinux: failed to load policy [ 65.826503][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.838820][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.846467][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.854444][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.862119][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.869720][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.877300][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.884735][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.892203][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.900328][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.908719][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x6 [ 65.916374][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x3 [ 65.926665][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.934084][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.942250][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.950157][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.957820][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.965303][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.972846][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.981210][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 65.996820][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.004356][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.014090][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.021870][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.028064][ T2351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 66.029325][ T2351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:132 [ 66.029504][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.055803][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.063302][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.073311][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.080786][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.089836][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.097438][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.105115][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.113174][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.120702][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.128172][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.135611][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.143119][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.150566][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.158114][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.165594][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.166696][ T2353] binder: Bad value for 'max' [ 66.173004][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.173033][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.192929][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.200968][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.208495][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.215991][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.223419][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.230898][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.238500][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.245949][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.253432][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.260911][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.268326][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.275737][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.283110][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.290537][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.297954][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.305393][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.312832][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.315559][ T994] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 66.320252][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.335153][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.364175][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.371926][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.379628][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.387365][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.394861][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.402554][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.410169][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.418260][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.425904][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.433587][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.460182][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.475311][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.483216][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.491164][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.499968][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.511657][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.526845][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.534426][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.541945][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.556027][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.564150][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.572159][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.579749][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.590427][ T2374] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.598530][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.611900][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.619615][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.630467][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.638550][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.646399][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.653896][ T901] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.662068][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.676093][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.683903][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.692342][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.700275][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.711952][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.720621][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.729699][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.745811][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.753544][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.762113][ T2392] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 66.763082][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.778646][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.786858][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.794342][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.801777][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.809565][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.817046][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.824450][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.832186][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.839665][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.847131][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.854524][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.862135][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.869589][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.882253][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.898385][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.906196][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.913675][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.916407][ T36] audit: type=1326 audit(1750375943.200:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2396 comm="syz.4.666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0138e929 code=0x0 [ 66.921239][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.952187][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.959706][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.967187][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.974750][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.982972][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.991614][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 66.999052][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.006473][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.013833][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.021230][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.028643][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.036803][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.044203][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.051889][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.059553][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.067328][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.074752][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.083247][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.091157][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.098627][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.106086][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.113463][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.120958][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.128341][ T945] hid-generic 01FF:0004:0400.0004: unknown main item tag 0x0 [ 67.136636][ T945] hid-generic 01FF:0004:0400.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 67.149652][ T2403] fido_id[2403]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.164321][ T2404] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.164596][ T2404] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 67.179923][ T2404] rust_binder: Write failure EINVAL in pid:371 [ 67.195389][ T2406] SELinux: security_context_str_to_sid () failed with errno=-22 [ 67.412039][ T2413] rust_binder: Write failure EINVAL in pid:374 [ 67.433648][ T2416] binder: Bad value for 'max' [ 67.494798][ T2420] binder: Bad value for 'max' [ 67.545595][ T2430] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 67.558303][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.565786][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.566248][ T2430] rust_binder: Write failure EINVAL in pid:385 [ 67.573200][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573230][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573252][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573273][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573294][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573315][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573338][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573359][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573380][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573403][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.573423][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.609878][ T2433] binder: Bad value for 'stats' [ 67.619186][ T2434] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.665724][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.679628][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.687020][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.694415][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.701938][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.709556][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.716985][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.724371][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.724397][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.739222][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.746736][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.746780][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.763441][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.772213][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.779667][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.787124][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.787308][ T2437] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 67.794515][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.801994][ T2437] rust_binder: Write failure EINVAL in pid:390 [ 67.809066][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.822824][ T31] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 67.830856][ T31] hid-generic 0001:0000:0000.0005: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 67.873140][ T2441] fido_id[2441]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.914713][ T2447] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 67.917296][ T2445] binder: Unknown parameter 'processor : 0 [ 67.917296][ T2445] vendor_id : GenuineIntel [ 67.917296][ T2445] cpu family : 6 [ 67.917296][ T2445] model : 79 [ 67.917296][ T2445] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 67.917296][ T2445] stepping : 0 [ 67.917296][ T2445] microcode : 0xffffffff [ 67.917296][ T2445] cpu MHz : 2199.998 [ 67.917296][ T2445] cache size : 56320 KB [ 67.917296][ T2445] physical id : 0 [ 67.917296][ T2445] siblings : 2 [ 67.917296][ T2445] core id : 0 [ 67.917296][ T2445] cpu cores : 1 [ 67.917296][ T2445] apicid : 0 [ 67.917296][ T2445] initial apicid : 0 [ 67.917296][ T2445] fpu : yes [ 67.917296][ T2445] fpu_exception : yes [ 67.917296][ T2445] cpuid level : 13 [ 67.917296][ T2445] wp : yes [ 67.917296][ T2445] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 67.917296][ T2445] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 68.142234][ T2454] can0: slcan on ttyS3. [ 68.246092][ T2453] can0 (unregistered): slcan off ttyS3. [ 68.337504][ T2480] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 68.396788][ T2494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496 [ 68.430091][ T2494] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.439842][ T2494] rust_binder: Read failure Err(EFAULT) in pid:496 [ 68.520846][ T2506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.542598][ T2506] rust_binder: Write failure EINVAL in pid:409 [ 68.573825][ T2510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.583382][ T2510] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 68.597359][ T2510] rust_binder: Write failure EINVAL in pid:413 [ 68.667662][ T36] audit: type=1400 audit(1750375944.960:227): avc: denied { append } for pid=2516 comm="syz.4.700" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.702310][ T2517] rust_binder: Error while translating object. [ 68.702339][ T2517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.707491][ T994] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.709164][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 68.737840][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 68.780249][ T2524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 68.805613][ T2524] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.817688][ T2524] rust_binder: Read failure Err(EFAULT) in pid:418 [ 68.887172][ T36] audit: type=1326 audit(1750375945.180:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2531 comm="syz.4.705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0138e929 code=0x0 [ 68.939890][ T2536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.991985][ T2538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 69.065941][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 69.086843][ T2544] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.139632][ T2547] random: crng reseeded on system resumption [ 69.158557][ T2547] Unrecognized hibernate image header format! [ 69.164699][ T2547] PM: hibernation: Image mismatch: architecture specific data [ 69.307111][ T2549] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 69.307130][ T2549] rust_binder: Error while translating object. [ 69.319341][ T2549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.325551][ T2549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:622 [ 69.504332][ T2565] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 69.521827][ T2565] rust_binder: Write failure EINVAL in pid:637 [ 69.546215][ T36] audit: type=1400 audit(1750375945.840:229): avc: denied { execute } for pid=2567 comm="syz.3.717" path="/dev/hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 69.732655][ T2573] rust_binder: Error while translating object. [ 69.732685][ T2573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.739128][ T2573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:172 [ 69.826696][ T2582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 69.835798][ T2582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:174 [ 69.868844][ T2585] binder: Unknown parameter 'stats$Ax"WV' [ 70.015537][ T2599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439 [ 70.052125][ T2609] input: syz0 as /devices/virtual/input/input34 [ 70.099537][ T2616] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.103109][ T2609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:179 [ 70.111044][ T2609] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.216265][ T2622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 70.216308][ T2622] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.243390][ T2622] rust_binder: Read failure Err(EFAULT) in pid:451 [ 70.266415][ T2626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.277332][ T2626] rust_binder: Got transaction with invalid offset. [ 70.283837][ T2626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.291502][ T2626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 70.307901][ T2628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:659 [ 70.380398][ T2636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 70.448628][ T2649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.477014][ T2649] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 70.492529][ T2649] rust_binder: Write failure EINVAL in pid:469 [ 70.520037][ T2658] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.530422][ T2658] rust_binder: Read failure Err(EAGAIN) in pid:471 [ 70.537365][ T2658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 70.560337][ T2661] rust_binder: Write failure EFAULT in pid:185 [ 70.613556][ T2667] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.640010][ T2675] input: syz0 as /devices/virtual/input/input36 [ 70.652761][ T2675] input: failed to attach handler leds to device input36, error: -6 [ 70.677647][ T2675] binder: Unknown parameter 'nXI' [ 70.702608][ T2679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.771123][ T2684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.784259][ T2684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.811626][ T36] audit: type=1326 audit(1750375947.100:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2691 comm="syz.3.757" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e53b8e929 code=0x0 [ 70.845985][ T2690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.999329][ T2698] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 70.999356][ T2698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 71.008117][ T2698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:479 [ 71.460308][ T2707] SELinux: policydb magic number 0x6d000000 does not match expected magic number 0xf97cff8c [ 71.479886][ T2707] SELinux: failed to load policy [ 71.720900][ T2719] cgroup: fork rejected by pids controller in /syz4 [ 71.838700][ T59] bridge_slave_1: left allmulticast mode [ 71.853544][ T59] bridge_slave_1: left promiscuous mode [ 71.861746][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.869826][ T59] bridge_slave_0: left allmulticast mode [ 71.890376][ T59] bridge_slave_0: left promiscuous mode [ 71.896422][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.986165][ T36] audit: type=1326 audit(1750375948.270:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x0 [ 72.029289][ T36] audit: type=1326 audit(1750375948.270:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.078807][ T36] audit: type=1326 audit(1750375948.270:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.108891][ T36] audit: type=1326 audit(1750375948.270:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.136287][ T36] audit: type=1326 audit(1750375948.270:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.160645][ T36] audit: type=1326 audit(1750375948.400:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.191143][ T36] audit: type=1326 audit(1750375948.400:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.215877][ T59] veth1_macvtap: left promiscuous mode [ 72.221546][ T59] veth0_vlan: left promiscuous mode [ 72.238240][ T36] audit: type=1326 audit(1750375948.400:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.293957][ T36] audit: type=1326 audit(1750375948.400:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.324320][ T36] audit: type=1326 audit(1750375948.400:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2827 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715738e929 code=0x7ffc0000 [ 72.324372][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.355215][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.366077][ T2831] bridge_slave_0: entered allmulticast mode [ 72.372944][ T2831] bridge_slave_0: entered promiscuous mode [ 72.389570][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.391587][ T2853] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.398821][ T2853] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 72.399558][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.405337][ T2853] rust_binder: Write failure EINVAL in pid:496 [ 72.424930][ T2831] bridge_slave_1: entered allmulticast mode [ 72.435159][ T2856] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.438100][ T2831] bridge_slave_1: entered promiscuous mode [ 72.446450][ T2856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.461961][ T2856] rust_binder: Error in use_page_slow: ESRCH [ 72.461985][ T2856] rust_binder: use_range failure ESRCH [ 72.468364][ T2856] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 72.473938][ T2856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.482033][ T2856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:498 [ 72.525738][ T2831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.541855][ T2831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.549191][ T2831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.556207][ T2831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.576000][ T901] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.583254][ T901] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.592518][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.599605][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.626310][ T901] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.627530][ T2859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.633399][ T901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.664974][ T2831] veth0_vlan: entered promiscuous mode [ 72.674529][ T2831] veth1_macvtap: entered promiscuous mode [ 72.705386][ T2862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.705896][ T2862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 72.772046][ T2875] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.963115][ T2893] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.969958][ T2893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 72.976935][ T2893] rust_binder: Error while translating object. [ 72.986249][ T2893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.992453][ T2893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 73.001870][ T2893] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.011033][ T2893] rust_binder: Read failure Err(EFAULT) in pid:510 [ 73.077148][ T2901] rust_binder: Error while translating object. [ 73.088519][ T2905] rust_binder: Write failure EINVAL in pid:517 [ 73.092024][ T2901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 73.102759][ T2901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:14 [ 73.158780][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.174354][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.184021][ T2911] rust_binder: Write failure EINVAL in pid:16 [ 73.193320][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.199607][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.211568][ T2920] random: crng reseeded on system resumption [ 73.224754][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.224774][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.247705][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.254193][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.255326][ T2920] kernel profiling enabled (shift: 8) [ 73.262372][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.269428][ T2920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 73.273036][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.293643][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.301205][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.307935][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.314393][ T2923] rust_binder: Write failure EINVAL in pid:521 [ 73.321102][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.327551][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.334113][ T2924] rust_binder: Write failure EINVAL in pid:521 [ 73.335564][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.358184][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.366551][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.375269][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.381822][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.388541][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.395348][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.402193][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.417613][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.424296][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.431426][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.437917][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.447267][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.453719][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.460198][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.466734][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.473280][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.482880][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.489760][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.496399][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.504530][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.513792][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.520821][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.527863][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.535442][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.550827][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.558095][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.564853][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.573295][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.580211][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.589499][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.596346][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.602942][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.609698][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.616289][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.624842][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.632533][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.640387][ T2941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:716 [ 73.650195][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.664510][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.666054][ T2949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.671519][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.684318][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.691222][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.701372][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.707912][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.714602][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.735946][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.743471][ T2959] random: crng reseeded on system resumption [ 73.744974][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.757451][ T2960] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 73.764817][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.773114][ T2910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.790058][ T2960] kvm: kvm [2948]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 73.859046][ T2965] rust_binder: Write failure EINVAL in pid:540 [ 73.859224][ T2965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.865449][ T2965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 73.950013][ T2966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 73.988311][ T2968] input: syz0 as /devices/virtual/input/input38 [ 74.005595][ T2968] input: failed to attach handler leds to device input38, error: -6 [ 74.107746][ T2974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.107993][ T2974] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.119745][ T2974] rust_binder: Read failure Err(EFAULT) in pid:731 [ 74.378048][ T2984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.378478][ T2984] rust_binder: Error while translating object. [ 74.385335][ T2984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.391875][ T2984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 74.777315][ T3010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 74.787203][ T3010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:24 [ 74.803622][ T3010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.813431][ T3010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.845743][ T3010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 74.865276][ T3012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.891790][ T3014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.898549][ T3014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.019853][ T3052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.028692][ T3017] cgroup: fork rejected by pids controller in /syz1 [ 75.038189][ T3052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30 [ 75.050148][ T3052] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.061125][ T3052] rust_binder: Read failure Err(EFAULT) in pid:30 [ 75.415332][ T3114] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 75.699040][ T3129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:626 [ 75.699064][ T3130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:626 [ 75.731205][ T3131] binder: Unknown parameter 'st8͐I-al' [ 75.746485][ T3135] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.746861][ T3135] rust_binder: Error while translating object. [ 75.753320][ T3135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 75.759670][ T3135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:758 [ 75.782118][ T3138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.783375][ T3133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.791589][ T3138] rust_binder: Error in use_page_slow: ESRCH [ 75.806753][ T3138] rust_binder: use_range failure ESRCH [ 75.806784][ T3133] kvm: kvm [3132]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 75.812759][ T3138] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 75.812776][ T3138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.812801][ T3138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:760 [ 75.856892][ T3141] rust_binder: Write failure EFAULT in pid:762 [ 75.866131][ T3141] binder: Unknown parameter 'contй' [ 75.908032][ T3147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:768 [ 75.908849][ T3147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:768 [ 75.950216][ T3154] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 76.046742][ T3158] rust_binder: Write failure EINVAL in pid:777 [ 76.050223][ T3158] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 76.179207][ T3162] rust_binder: Error while translating object. [ 76.179240][ T3162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 76.185475][ T3162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:635 [ 76.229537][ T3166] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 76.245969][ T3166] rust_binder: Write failure EINVAL in pid:637 [ 76.280943][ T3168] rust_binder: Write failure EINVAL in pid:639 [ 76.318261][ T3170] rust_binder: Write failure EFAULT in pid:783 [ 76.369865][ T3175] ------------[ cut here ]------------ [ 76.381566][ T3175] WARNING: CPU: 0 PID: 3175 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 76.390988][ T3175] Modules linked in: [ 76.394893][ T3175] CPU: 0 UID: 0 PID: 3175 Comm: syz.1.855 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 76.408405][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.418504][ T3175] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 76.424550][ T3175] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 76.444313][ T3175] RSP: 0018:ffffc90000fff5a0 EFLAGS: 00010246 [ 76.450423][ T3175] RAX: 0000000000000000 RBX: 1ffff920001ffeb8 RCX: 0000000000000000 [ 76.458421][ T3175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000fff648 [ 76.466554][ T3175] RBP: ffffc90000fff6c8 R08: ffffc90000fff647 R09: 0000000000000000 [ 76.474549][ T3175] R10: ffffc90000fff630 R11: fffff520001ffec9 R12: ffffc90000fff5e0 [ 76.482631][ T3175] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 76.490646][ T3175] FS: 00007f71581696c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.499618][ T3175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.506248][ T3175] CR2: 0000200000001000 CR3: 000000011b0d2000 CR4: 00000000003526b0 [ 76.514276][ T3175] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.522260][ T3175] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.530269][ T3175] Call Trace: [ 76.533619][ T3175] [ 76.536562][ T3175] ? do_syscall_64+0x58/0xf0 [ 76.541155][ T3175] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 76.546890][ T3175] ? hashtab_init+0xdb/0x1f0 [ 76.551494][ T3175] ___kmalloc_large_node+0x9c/0x1d0 [ 76.556716][ T3175] ? hashtab_init+0xdb/0x1f0 [ 76.561309][ T3175] __kmalloc_large_node_noprof+0x1e/0xe0 [ 76.566972][ T3175] ? hashtab_init+0xdb/0x1f0 [ 76.571557][ T3175] __kmalloc_noprof+0x26d/0x450 [ 76.576505][ T3175] hashtab_init+0xdb/0x1f0 [ 76.580921][ T3175] ? common_read+0x16d/0x480 [ 76.585564][ T3175] symtab_init+0x44/0x70 [ 76.589908][ T3175] common_read+0x1de/0x480 [ 76.594306][ T3175] ? __cfi_common_read+0x10/0x10 [ 76.599360][ T3175] ? hashtab_init+0x105/0x1f0 [ 76.604145][ T3175] policydb_read+0xaa8/0x28c0 [ 76.608874][ T3175] ? kasan_save_alloc_info+0x40/0x50 [ 76.614163][ T3175] ? __cfi_policydb_read+0x10/0x10 [ 76.619300][ T3175] ? security_load_policy+0x128/0x12f0 [ 76.624749][ T3175] security_load_policy+0x162/0x12f0 [ 76.630112][ T3175] ? irqentry_exit+0x4a/0x60 [ 76.634706][ T3175] ? exc_page_fault+0x66/0xc0 [ 76.639396][ T3175] ? asm_exc_page_fault+0x2b/0x30 [ 76.644428][ T3175] ? __cfi_security_load_policy+0x10/0x10 [ 76.650209][ T3175] ? rep_movs_alternative+0x4a/0xa0 [ 76.655411][ T3175] sel_write_load+0x298/0x5e0 [ 76.660125][ T3175] ? futex_wait+0x288/0x540 [ 76.664631][ T3175] ? __cfi_sel_write_load+0x10/0x10 [ 76.669838][ T3175] ? __cfi_futex_wait+0x10/0x10 [ 76.674683][ T3175] ? bpf_lsm_file_permission+0xd/0x20 [ 76.680063][ T3175] ? __cfi_sel_write_load+0x10/0x10 [ 76.685277][ T3175] vfs_write+0x3c0/0xe80 [ 76.689538][ T3175] ? __cfi_vfs_write+0x10/0x10 [ 76.694295][ T3175] ? __kasan_check_write+0x18/0x20 [ 76.699418][ T3175] ? mutex_lock+0x92/0x1c0 [ 76.703825][ T3175] ? __cfi_mutex_lock+0x10/0x10 [ 76.708708][ T3175] ? __fget_files+0x2c5/0x340 [ 76.713382][ T3175] ksys_write+0x141/0x250 [ 76.717722][ T3175] ? xfd_validate_state+0x68/0x150 [ 76.722846][ T3175] ? __cfi_ksys_write+0x10/0x10 [ 76.727705][ T3175] ? __kasan_check_write+0x18/0x20 [ 76.732829][ T3175] ? fpregs_restore_userregs+0x11d/0x260 [ 76.738468][ T3175] __x64_sys_write+0x7f/0x90 [ 76.743051][ T3175] x64_sys_call+0x271c/0x2ee0 [ 76.747750][ T3175] do_syscall_64+0x58/0xf0 [ 76.752161][ T3175] ? clear_bhb_loop+0x35/0x90 [ 76.756862][ T3175] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.762862][ T3175] RIP: 0033:0x7f715738e929 [ 76.767294][ T3175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.786924][ T3175] RSP: 002b:00007f7158169038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 76.795333][ T3175] RAX: ffffffffffffffda RBX: 00007f71575b5fa0 RCX: 00007f715738e929 [ 76.803396][ T3175] RDX: 00000000000012fe RSI: 0000200000000000 RDI: 0000000000000003 [ 76.811473][ T3175] RBP: 00007f7157410b39 R08: 0000000000000000 R09: 0000000000000000 [ 76.819575][ T3175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.827647][ T3175] R13: 0000000000000000 R14: 00007f71575b5fa0 R15: 00007ffc12fa7cf8 [ 76.835817][ T3175] [ 76.838841][ T3175] ---[ end trace 0000000000000000 ]--- [ 76.844445][ T3175] SELinux: failed to load policy