last executing test programs: 51.037353405s ago: executing program 3 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3970b8090d64f40c}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) write$UHID_INPUT(r4, &(0x7f00000011c0)={0x8, {"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", 0x1000}}, 0x1006) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/119, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000500)) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000008c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 50.890364657s ago: executing program 3 (id=354): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) ioctl$PPPIOCSNPMODE(r0, 0xc008744c, &(0x7f0000000100)={0x283}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000240)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 50.798811218s ago: executing program 3 (id=357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/215) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x4000912, r0, 0x207db000) 50.790724008s ago: executing program 3 (id=358): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x302200, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xede) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9250) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 50.737445489s ago: executing program 3 (id=360): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x401, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x200, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000140), 0x2, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r11, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc001, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)={[{0x2d, 'cpuset'}]}, 0x8) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}, {0x2b, 'devices'}, {0x2d, 'rdma'}, {0x2d, 'rlimit'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}]}, 0x2b) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000080)=@arm64={0x1, 0xc, 0xf, '\x00', 0x10001}) 50.647758251s ago: executing program 3 (id=365): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000f2}]}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r4, 0xfffff000) 35.625076853s ago: executing program 32 (id=365): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000f2}]}) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x580, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r4, 0xfffff000) 2.445678924s ago: executing program 4 (id=1431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x58, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3f) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0x7c00000000000000, 0x4000, 0x7, 0x0, 0x16}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01007b840000000d00"/24]) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x7fff, 0x4, 0x7ff, 0x8, 0x4, 0x0, 0x100, 0x4, 0x0, 0x63, 0x4, 0x7, 0x4, 0x7, 0x1, 0x9], 0x4, 0x1004}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.189776278s ago: executing program 4 (id=1436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x345, 0x0, 0x1}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=[@increfs], 0x1e, 0x0, 0x0}) 2.122075689s ago: executing program 4 (id=1437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x17) (async) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x64, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x4, 0x2, 0x12}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x1, 0x3a}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}, @exit_looper, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r2}], 0xfd, 0x0, &(0x7f0000000340)="54e42d650e78fc8731fedb8308f3bb09a2d00f8ae07df8fa983a6c87cdb0dfb7a6c12a6cef682db693fa3350e1295b56c582677288565c1a9bd3f87101edf598707f02462227baff38531b92efe04d91bd54ef49567b71471e16cb7c561b0ba17a5c2e1e77fb99f72644ed6bcac574698aff3cc23362f73f87db1ae3e15e55f4f67bb1ec2ea61017c9b4da019c2beb09aedcb3fe15161a583b3fc0734511b3101130e303e4fc2f01790c0de2bdf1837af82cce6a36db09eaf5d5352feb34f7ccf09d9f962367726b8274391da6511dd09349a4fcaffd0fd064f2de285a55ef7b8e68d50f8d8201c17ef9a38a1bf6af2cfedcdab74c29602d42a7cb688b"}) 2.106596189s ago: executing program 4 (id=1439): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86e"}) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000002c0)="ff99e28a", 0x4) syz_clone3(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_clone(0x41020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) (async) r5 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r2, 0x12) (async) r6 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x9}}, 0x30) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000480)={0x4, 0x0, [{0xb, 0xc, 0x2, 0xf, 0xffffffc0, 0x67140000, 0x7}, {0xb, 0x0, 0x0, 0x204a, 0x7, 0x297, 0x1f}, {0x9, 0x7fff, 0x2, 0x9, 0x10000, 0xdff, 0x1}, {0xd, 0x3, 0x1, 0x80000001, 0x1, 0xe4, 0xc}]}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x280e42, 0x0) 2.03670198s ago: executing program 4 (id=1442): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.929311122s ago: executing program 4 (id=1446): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x501202, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)) write$selinux_load(r0, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "c86b57eab189c94fbdb340877efbdfbfd439e54a1c29c2a6ae506625603e4f279e8c815c098d9e8ecf423fad704a1ae7829df745f929c541be7c89c947232b90010d343ebb824d52682f647d0d60d9cca8c367c2ddfe456e9c7fb367541aeee2e3a98032ab5cd12768ce2d0fa144b3d200baf35ce19f4f016ccc1c59139f27f238bfd50cee2985"}, 0x97) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r0}, r1, 0x0, @inherit={0x78, &(0x7f0000000380)={0x0, 0x6, 0xffffffff, 0xfffffffffffffbff, {0xe96f6ec0608c0e80, 0x8, 0x62e2842, 0x4, 0x7}, [0x5, 0x3, 0x8000000000000000, 0x0, 0xf, 0x9]}}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001400)={0x8, 0x6, {0x100000001, @struct={0x82, 0x9}, 0x0, 0x2, 0x80000000, 0x2d41, 0x5, 0x6, 0xc08, @usage=0x1, 0xffff0001, 0x2a, [0x6, 0x6, 0x6, 0x3, 0x2, 0x8]}, {0x2, @usage=0x2, 0x0, 0xe68b, 0xa, 0x200, 0x84b, 0x4, 0x14, @usage=0x4, 0xa, 0x4, [0xf864, 0xff, 0x81, 0x0, 0x4, 0x8ff]}, {0x1, @usage=0x9, 0x0, 0xffff, 0x8fe7, 0x76e, 0x1, 0x2, 0x18, @usage=0xffffffff00000001, 0x1, 0xfa22, [0xb, 0x9f34, 0xd5, 0xfffffffffffff721, 0x1000000, 0xffffffff]}, {0x5297, 0x6, 0x10000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001800)={r2, 0xfffffffffffffff9, 0x1, [0xd, 0x1, 0x5, 0x5, 0x9], [0x5, 0x6, 0x8, 0x1f24e6a2, 0x685, 0x1, 0x4, 0x1ff, 0x0, 0x8, 0x8, 0x2a, 0x4, 0xfffffffffffff9a1, 0x5, 0x1, 0x7f, 0x9, 0x7, 0xeb2a, 0x0, 0x7, 0x5, 0x9d0, 0xfffffffffffff69c, 0xfffffffffffffff7, 0x401, 0x1, 0x0, 0x40, 0x8, 0x9, 0x4d, 0x3, 0x8000, 0x4, 0x63, 0x7, 0x2, 0x10000, 0xffffffffffffffb7, 0xc, 0x6, 0x4, 0x7, 0x7, 0x5, 0x8, 0x29, 0x8, 0x40, 0x8, 0xfffffffffffffff8, 0x0, 0x100000001, 0xf1, 0x49, 0xc2, 0x5, 0x7f, 0x1, 0xa011, 0x2, 0xffffffffffffffff, 0xac, 0x9, 0x1, 0x1d9b6f9d, 0x1, 0x8a6, 0x8, 0x8, 0x80000001, 0x4, 0x4, 0x9586, 0x8001, 0x3, 0xe26, 0x5, 0x100, 0x5, 0xffffffff8ac06859, 0x6, 0x48a, 0xa, 0x8000, 0x7fff, 0x25, 0x0, 0x8, 0xac, 0xde, 0x0, 0x100000001, 0x0, 0x400000000000, 0x0, 0x4, 0x3, 0x8, 0x4, 0x0, 0x82, 0x6cfd, 0xd, 0x4d7, 0x7fff, 0x10001, 0x1ff, 0x3, 0x3ff, 0x10001, 0x7ebd, 0x76f, 0x81, 0xd, 0x5, 0x2603, 0x0, 0x8]}) write$selinux_load(r0, &(0x7f0000001c40)={0xf97cff8c, 0x8, 'SE Linux', "1ff4d90aa26ea840325e42299a487fe46f4c769aebf6e20abfdda7bcabad3ce4662add2da0fa1782ab1e03add17111668f5af046ebbe060cbc9f2725454d9b591b99456f6da27a8959af9d194538224b27fb738537ab4dc2c3277c53f4ef2cc9b0b21c157ed8227eb29503ebf750b1915312f7776cd83f4050e59786e3290888070994c68f04336543f66397cbdd2860631327bb0d4835f98bb3ff7278707719a6a966a5093b4dd0598494723d4f0a78f5336a762630c6092c3d78fb857a1554a91ea547f5ba6efc3a97f8d24cf595fb4c4d3a07689e90c458b1"}, 0xea) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002040)={0x9c, 0x0, &(0x7f0000001f40)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001d40)={@fda={0x66646185, 0x8, 0x1, 0x34}, @fda={0x66646185, 0x7, 0x1, 0xd}, @fda={0x66646185, 0x3, 0x2, 0x8}}, &(0x7f0000001dc0)={0x0, 0x20, 0x40}}}, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001e80)={@flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000001e00)=""/83, 0x53, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000001f00)={0x0, 0x18, 0x40}}}], 0x3e, 0x0, &(0x7f0000002000)="56b69eed7964f8dfb0ca8d0531ed2a0cfdee0fbc1d5831cf230caf020df36744d1659c2ce1027454d027f6f8644e246855c02cf4f9d92122fbfe78dc1740"}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002080), 0x1, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f00000020c0)=""/193) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000002200)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003240)='/sys/power/pm_debug_messages', 0x2000, 0x81) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000003280)={0x1, 0x3a0}) write$selinux_load(r4, &(0x7f00000032c0)={0xf97cff8c, 0x8, 'SE Linux', "ef8b53c9611a8e4faac0078b26907c70b67068ce577c2a73c78982d48fd14a9372b7f409d94c6d4d6cebb8e303f5941257aa16ff69aa90096db8e26cdc806cfd9af754723f2cd2e9c3f353412f63fdff9db51523c217f5abd04251abe5bba46650a7735458f0af8ad50fe8347d70ccb623754fda714d8880f234cfa70f93d34e67f1c8da6283a85a8356bf72956ebc3cac39af79efc975ae762f37e17ebbfc786a14c864e9957314760350893f8d9911e50c8780792f5f0d79bcc9dcb65234e9b5d918bb757a7d15ce63579c7a1353b084db15b78717a417f26015c4957e17"}, 0xef) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000033c0)={0x2, 0x6, 0x4000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000003400)={{0xeeee8000, 0xffff1000, 0x9, 0x8, 0x8, 0x33, 0x3, 0x98, 0x3, 0x2, 0x1}, {0x19181002, 0x6000, 0xa, 0x4a, 0x3, 0x5, 0x4, 0x0, 0x9, 0x7f, 0x81, 0x17}, {0xf004, 0xc5dc5000, 0x10, 0x3, 0xfc, 0xce, 0x7, 0x2, 0x0, 0x7, 0x1, 0x2}, {0x80a0000, 0x5000, 0xc, 0xd6, 0x2, 0x9, 0x9, 0xe, 0x4e, 0x3, 0x0, 0x3}, {0xffff1000, 0x2000, 0xe, 0xff, 0x22, 0x9, 0x4, 0x4, 0x1, 0xa, 0x3}, {0x5000, 0xd000, 0x0, 0xff, 0xff, 0x6, 0x7, 0x0, 0xfe, 0x81, 0xe, 0x7}, {0x100000, 0x8000000, 0x0, 0x9, 0xc, 0x1, 0x3, 0x2b, 0x99, 0x0, 0x6, 0xf9}, {0x8080000, 0x10000, 0x8, 0x9, 0x6, 0x9, 0x1a, 0x3f, 0x4, 0x5, 0x2, 0x5}, {0xdddd0000, 0x3}, {0x4, 0x2}, 0x21, 0x0, 0xeeee0000, 0x116047, 0x7, 0x4000, 0xeeef0000, [0x5, 0x5, 0xa, 0x9]}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000003540)) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f0000003580)={0x2, 0x53e}) write$UHID_INPUT(r5, &(0x7f00000035c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000004600)) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000004640)={0x8, 0x2}) r6 = openat$cgroup_ro(r0, &(0x7f0000004680)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000046c0)=0x5) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000004980)={0x2, 0x1, &(0x7f0000004700)=""/212, &(0x7f0000004800)=""/198, &(0x7f0000004900)=""/84, 0x10f000}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000049c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000005e40)={0x7, 0x0, [{0x4000, 0x97, &(0x7f0000004a00)=""/151}, {0xdddd1000, 0x4b, &(0x7f0000004ac0)=""/75}, {0x4, 0xec, &(0x7f0000004b40)=""/236}, {0x1, 0xe6, &(0x7f0000004c40)=""/230}, {0x1, 0x2c, &(0x7f0000004d40)=""/44}, {0x6000, 0x1000, &(0x7f0000004d80)=""/4096}, {0x4000, 0xac, &(0x7f0000005d80)=""/172}]}) 1.546788598s ago: executing program 0 (id=1452): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r1, 0x8924, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) 1.546037798s ago: executing program 0 (id=1453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.34279953s ago: executing program 0 (id=1456): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000300), 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 1.283234451s ago: executing program 0 (id=1457): openat$kvm(0x0, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[]) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x20000, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000080)={0x2, 0x6}) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_IRQ_LINE(r8, 0x4008ae61, &(0x7f0000000100)={0x7d}) ioctl$ASHMEM_GET_PIN_STATUS(r8, 0x7709, 0x0) 1.043863555s ago: executing program 0 (id=1458): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) syz_clone(0x803480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000500)={0x5, 0x0, [{0x80000000, 0x2, 0x1, 0x8, 0x8, 0x8}, {0x40000001, 0x0, 0x4, 0x9, 0x3, 0x10, 0x81}, {0xa, 0x5, 0x0, 0x80000001, 0x7, 0x5, 0x41}, {0x4, 0xffffffd4, 0x4, 0xb5e3, 0x5, 0x8, 0x8}, {0xd, 0x1, 0x3, 0x8, 0x1, 0x80000000, 0xac7}]}) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 898.773407ms ago: executing program 0 (id=1459): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0xfffe, 0x60}, 'syz0\x00', 0x19}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000e80)={'syz0\x00', {0x3f, 0x9, 0x8, 0xe}, 0x12, [0x3, 0x8, 0x76f, 0x3, 0x8001, 0x5, 0x63e, 0xfffffffd, 0x3, 0xc, 0x9, 0x1, 0x3, 0x9, 0x9, 0xb0c, 0x8, 0xa3d0, 0x7, 0x7b, 0x5, 0xbc2f, 0x4, 0x80000001, 0xfffffffe, 0x3, 0x7, 0xf, 0x8, 0xd2f1, 0x7, 0xffffffff, 0x3, 0xe, 0x3, 0x0, 0x6, 0x47f2, 0x80000000, 0x4, 0x0, 0x7, 0x5, 0x29e, 0x2, 0x2, 0x9, 0xdf26, 0x1, 0x40, 0x4, 0x3ef, 0x80, 0x3, 0x9, 0x1a, 0x3, 0x5, 0x5, 0x9, 0x8000, 0x80000000, 0xcd, 0xfff], [0x6, 0x227, 0x9, 0x7, 0x8, 0x5, 0x81, 0x45, 0xc322, 0x6000, 0x7, 0x2, 0xf0, 0x1, 0x90000, 0x798, 0x7ff, 0x7, 0xa, 0x3ff, 0x9e, 0xd1a, 0x0, 0x1, 0x2, 0xa, 0x0, 0x5, 0x2, 0x101, 0xfff, 0x4, 0x1, 0x401, 0x5, 0x0, 0x1000, 0x5, 0x10, 0x4, 0x7fffffff, 0x3ea1, 0xfffffffa, 0x2, 0xfffffff9, 0xffffffff, 0x6, 0x400, 0x2243ccfc, 0x8455, 0x0, 0xe, 0xffffffa8, 0xdc9b, 0x0, 0x4, 0xff, 0x5, 0x1, 0x4, 0x2, 0xd5c, 0x6, 0x6], [0x1, 0x7fff, 0x1, 0x6b, 0x9, 0x3, 0xb6, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x4, 0x40, 0x7, 0x2, 0x6, 0x8, 0xe2, 0x80000001, 0x7fffffff, 0x8, 0x401, 0x4, 0xc7, 0x4, 0x2, 0x6, 0x2, 0x648, 0x1, 0x10001, 0x4f68, 0x5, 0x40, 0x1, 0xc, 0x3, 0xffff, 0x7, 0x9, 0x1, 0xc0c, 0xcd, 0x9, 0x2, 0x401, 0x0, 0x8, 0x9, 0x0, 0x10, 0x7ff, 0x0, 0x7, 0x8a, 0x5, 0x2, 0x3, 0x2, 0x5, 0x0, 0x3, 0x3], [0xc51, 0x2, 0x8, 0x1, 0x9, 0x3, 0x7fff, 0x10000, 0x1, 0x6, 0x200, 0x7, 0x5, 0x0, 0x9, 0x8, 0x3, 0x10, 0x6, 0xd2, 0x8, 0x1ff, 0x400, 0x1, 0xb, 0x9, 0xfbd, 0x9, 0x0, 0x2, 0x1, 0xed, 0x6, 0x2, 0x5, 0xfff, 0xe79, 0x20c, 0xe0, 0x2, 0x3ff, 0xfffffffe, 0x9, 0xa, 0x100, 0x9, 0x3ff, 0x8e6, 0x1, 0x200, 0x9, 0x2, 0x3, 0x0, 0xb7, 0xc, 0x0, 0x9, 0x4, 0x4, 0x3, 0xcd87, 0x8001, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8b, 0x0, '\x00', 0xff}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x7}]}}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) 779.969249ms ago: executing program 2 (id=1461): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x72d4df47f2d2d030, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000040)={0x2, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x3}], 0x16, 0x0, &(0x7f00000000c0)="a18728c6856ca4d3b2138082db83158c260d7db03102"}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x1000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0x1, 0x64, &(0x7f0000000180)=""/100}]}) r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0x9, 0x0, [{0xd000, 0xb2, &(0x7f0000000280)=""/178}, {0x10000, 0x14, &(0x7f0000000340)=""/20}, {0xd000, 0x4c, &(0x7f0000000380)=""/76}, {0x0, 0xa4, &(0x7f0000000400)=""/164}, {0xdddd0000, 0x8a, &(0x7f00000004c0)=""/138}, {0x0, 0x2a, &(0x7f0000000580)=""/42}, {0x10000, 0x1d, &(0x7f00000005c0)=""/29}, {0x2000, 0x97, &(0x7f0000000600)=""/151}, {0x1, 0x5e, &(0x7f00000006c0)=""/94}]}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000980)={&(0x7f0000000880)=""/240, 0xf0, 0xaddf, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000b40)={0x2, 0x0, [{0x5000, 0xba, &(0x7f00000009c0)=""/186}, {0x2, 0x9f, &(0x7f0000000a80)=""/159}]}) r2 = openat(r0, &(0x7f0000000bc0)='./file0\x00', 0x426380, 0x50) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000dc0)={0x3, 0x1, &(0x7f0000000c00)=""/76, &(0x7f0000000c80)=""/160, &(0x7f0000000d40)=""/110, 0xeeef0000}) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000e00)={0x160002, 0x0, [0x9, 0x40, 0x6, 0x5, 0x36, 0x8, 0x8, 0x6]}) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000f80)={0x3, 0x1, &(0x7f0000000e80)=""/9, &(0x7f0000000ec0)=""/94, &(0x7f0000000f40), 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000fc0)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001000), 0xee, 0x0, &(0x7f0000001040)="63f93b05953e468c9b4ead0135042c5a6d58a047a3b2b568473220c8250f968090b3ab5a2c2c37e614dbac857c8fa11f40afb6c90fb1e3826d83b4e518eb1b89d16758dda0bfcdcf1504c56f6bfdda2b0feea8dd6b94a282ee22a604ca78b0f46b4b91c46d3c85d33f9d1c8d75f955570cf36f7c43657c53ebafc96afc4ad5c4b7fb30701e38b1519aede73fac3723a973f3682056b7b8189e1654004a2a3ddf25760f2c8d1a6956a54f45b7a8472160e63850bd1dc4d44e247a4798a6dde6e8cffb91e20e293bc6676ceddbd9567fa27ab5a83644588c186c3310f35cdb199661e59a05162cbf5b4e7e3f59dda5"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000001200)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f00000011c0)={0xfffa, 0x3}}) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000001240)=""/234) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001340)) ioctl$KVM_CAP_SYNC_REGS(r1, 0x4068aea3, &(0x7f0000001380)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000001440)=0x7) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001480)={0x9, 0x4, 0x40, 0x8, 0x14, "55506d1f3c1a9337"}) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000014c0)={0x802b, 0x2}) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000001500)={0xc000000000000000, 0x5000, 0x28, 0x5, 0x10}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000001540)={[0x2bd4096f, 0x200, 0x0, 0x100000000, 0x800, 0x8, 0x1, 0x200, 0xc00000000000000, 0x1000, 0x0, 0xf01, 0xffffffffffffffff, 0x8, 0xd71c5a8, 0x7], 0x100000, 0x80200}) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x80000001) 686.82165ms ago: executing program 2 (id=1462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x69) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0xd000, 0x0, 0x3, 0xfffffff4, 0x0, [{0x1, 0xa2, 0x8, '\x00', 0x1}, {0x4, 0x0, 0x1, '\x00', 0x5}, {0x7, 0x6, 0xd5, '\x00', 0x8}, {0xf5, 0xfa, 0x8, '\x00', 0x9}, {0x5, 0x1, 0x5}, {0x1, 0x7, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x7}, {0x3, 0x4, 0x2}, {0x5, 0xac, 0x73, '\x00', 0x80}, {0x8, 0x1, 0x0, '\x00', 0xb}, {0x4, 0x2, 0x3, '\x00', 0x8}, {0xda, 0xda, 0x7, '\x00', 0x35}, {0xf2, 0x6, 0x6, '\x00', 0xa9}, {0x7, 0xc0, 0x8, '\x00', 0x6}, {0x2, 0x4, 0x5, '\x00', 0x5}, {0x7, 0x7, 0x8, '\x00', 0xb}, {0xc, 0x3, 0x5, '\x00', 0x6e}, {0xd, 0x5e, 0x4, '\x00', 0xff}, {0x9, 0x7, 0x5, '\x00', 0x9}, {0x1, 0x4, 0xf8, '\x00', 0x1}, {0xfc, 0x7, 0x5, '\x00', 0x7}, {0x4, 0xf9, 0x2, '\x00', 0x9}, {0x7, 0xe, 0x7f, '\x00', 0x5}, {0x5, 0x7, 0x5, '\x00', 0x9}]}}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) ioctl$BLKOPENZONE(r1, 0x40101286, &(0x7f0000000000)={0x3, 0xfffffffffffffffb}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) 456.654973ms ago: executing program 1 (id=1464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x3}, 'syz1\x00', 0xc}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000080)) (async) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x247, 0x0, 0x7}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4d, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x8, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4d, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x8, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000002340)={0x110000, 0x0, [0x80000000, 0x2, 0x4, 0x6, 0x8, 0x6, 0x9, 0x401]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x108a02, 0x0) 294.853316ms ago: executing program 2 (id=1465): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 293.781776ms ago: executing program 2 (id=1466): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x64) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x8, 0x2}) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000200)={0x1}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async, rerun: 64) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000240)=@x86={0x10, 0x8, 0x5, 0x0, 0x3, 0xe, 0x6, 0x7, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278c, 0x8, 0x3, 0x6, 0x5, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffb, 0x3, 0x9, 0x5, 0xfffffffffffffffe, 0x7, 0x80, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0xfffffffffffff001, 0x3, 0xffffffffffffffff], 0x3000, 0x98302}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8000) (rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r2, 0x4d75d000) 202.452407ms ago: executing program 1 (id=1467): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x40, &(0x7f00000000c0)={[{@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x2}}], [{@measure}]}) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 169.123238ms ago: executing program 1 (id=1468): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$KVM_RUN(r0, 0xae80, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$KVM_RUN(r0, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9d) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) 90.534429ms ago: executing program 1 (id=1469): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000004280)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f00000000c0)={0x5000, 0x6000}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/11) (async) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0xe44}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 89.604119ms ago: executing program 1 (id=1470): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) (async, rerun: 32) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) (rerun: 32) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) read$FUSE(r1, 0x0, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async, rerun: 64) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='loAk none\x00'], 0xa) (async) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) 88.373649ms ago: executing program 1 (id=1471): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x6e, 0x0, &(0x7f0000000040)="d94ef431b71aaae4e2dc2672fb4f4fccf9f9ba4c9a93641b3cd14d57944940b0cde2d54299618cc3ed8bee5d07257eb392b6fea30c90b36337cfd41e53e280c6048d670fb491fca28746bdc4c35618ff920a878de31b8678742ddb37f8dd5035b32343bd034c023fdd0d96eea9a1"}) 30.91503ms ago: executing program 2 (id=1472): prctl$PR_SET_SECUREBITS(0x1c, 0x30) prctl$PR_SET_SECUREBITS(0x8, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000540)=[@dead_binder_done, @acquire], 0x0, 0x700000000000000, 0x0}) 0s ago: executing program 2 (id=1473): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0xc4201, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffffffffffd) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) read(r1, &(0x7f0000000000)=""/175, 0xfffffe14) kernel console output (not intermixed with test programs): _binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 29.068191][ T875] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 29.079642][ T875] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:138 [ 29.194999][ T893] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 29.227059][ T899] rust_binder: Error while translating object. [ 29.227089][ T899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 29.238222][ T899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:151 [ 29.342920][ T907] binder: Unknown parameter 'non' [ 29.358495][ T907] binder: Unknown parameter 'non' [ 29.394020][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 29.394030][ T36] audit: type=1400 audit(1750412851.790:236): avc: denied { setattr } for pid=910 comm="syz.3.190" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.450671][ T916] rust_binder: Write failure EFAULT in pid:173 [ 29.477867][ T920] binder: Bad value for 'max' [ 29.494910][ T919] rust_binder: Error in use_page_slow: ESRCH [ 29.494929][ T919] rust_binder: use_range failure ESRCH [ 29.501238][ T919] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 29.506772][ T919] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.515035][ T919] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:129 [ 29.533950][ T36] audit: type=1400 audit(1750412851.930:237): avc: denied { execute } for pid=917 comm="syz.1.191" name="file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.565862][ T920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 29.725781][ T937] kvm: user requested TSC rate below hardware speed [ 29.742286][ T937] rust_binder: Write failure EFAULT in pid:171 [ 29.777265][ T36] audit: type=1400 audit(1750412852.170:238): avc: denied { read } for pid=940 comm="syz.1.199" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.807465][ T36] audit: type=1400 audit(1750412852.170:239): avc: denied { open } for pid=940 comm="syz.1.199" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.833640][ T36] audit: type=1400 audit(1750412852.170:240): avc: denied { ioctl } for pid=940 comm="syz.1.199" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 29.893993][ T36] audit: type=1400 audit(1750412852.290:241): avc: denied { read write } for pid=946 comm="syz.1.201" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 29.917545][ T36] audit: type=1400 audit(1750412852.290:242): avc: denied { open } for pid=946 comm="syz.1.201" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 30.032598][ T966] rust_binder: Error while translating object. [ 30.032622][ T966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.038886][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 30.104395][ T969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.113615][ T969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 30.179168][ T979] rust_binder: Write failure EINVAL in pid:141 [ 30.267243][ T994] rust_binder: Write failure EINVAL in pid:151 [ 30.286436][ T36] audit: type=1326 audit(1750412852.680:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=999 comm="syz.0.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7098e929 code=0x0 [ 30.394004][ T996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.394038][ T996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 30.574569][ T36] audit: type=1326 audit(1750412852.970:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1016 comm="syz.3.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0ce78e929 code=0x0 [ 30.664667][ T36] audit: type=1400 audit(1750412853.060:245): avc: denied { ioctl } for pid=1022 comm="syz.1.221" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.693272][ T1023] __vm_enough_memory: pid: 1023, comm: syz.1.221, bytes: 281474976845824 not enough memory for the allocation [ 30.990940][ T1035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.997070][ T1035] rust_binder: Error while translating object. [ 31.003758][ T1035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.009950][ T1035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166 [ 31.178422][ T1037] rust_binder: Write failure EINVAL in pid:149 [ 31.223820][ T1041] rust_binder: Error while translating object. [ 31.228671][ T1043] input: syz0 as /devices/virtual/input/input12 [ 31.230086][ T1041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.242738][ T1041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:151 [ 31.286518][ T1045] rust_binder: inc_ref_done called when no active inc_refs [ 31.574731][ T1068] binder: Bad value for 'stats' [ 31.608746][ T1066] rust_binder: Error while translating object. [ 31.608774][ T1066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.614990][ T1066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:156 [ 31.676473][ T1075] rust_binder: Write failure EINVAL in pid:158 [ 31.760812][ T1083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 31.767035][ T1083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:204 [ 31.776711][ T1083] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.785928][ T1083] rust_binder: Read failure Err(EFAULT) in pid:204 [ 31.816961][ T1085] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 32.018334][ T1105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 32.178063][ T1119] rust_binder: Write failure EINVAL in pid:226 [ 32.195955][ T1121] binder: Unknown parameter 'context' [ 32.208455][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.208481][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.217788][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.224713][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.231429][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.240731][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.241584][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.247355][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.259947][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.260239][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.266410][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.272628][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.279244][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.285242][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.291826][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.297812][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.304378][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.311682][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.317297][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.322973][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.329546][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.335582][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.342149][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.348273][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.354803][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.362475][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.373393][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.378718][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.383873][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.390427][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.392852][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.398921][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.405407][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.418071][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.422185][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.424615][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.431248][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.437114][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.449707][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.455943][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.462435][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.462820][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.468791][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.474790][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.474808][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.474822][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.481541][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.487420][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.494041][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.502255][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.511094][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.519735][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.525839][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.532345][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.538396][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.550543][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.556714][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.562412][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.563576][ T1138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:228 [ 32.569951][ T1123] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.576830][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.582864][ T1139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.591691][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.598250][ T1139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 32.604717][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.643730][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.650151][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.656550][ T1131] rust_binder: Write failure EINVAL in pid:229 [ 32.686910][ T1151] SELinux: security_context_str_to_sid () failed with errno=-22 [ 32.878916][ T1173] input: syz1 as /devices/virtual/input/input15 [ 32.929496][ T1176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.929713][ T1176] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 32.973612][ T1181] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 32.991839][ T1181] SELinux: failed to load policy [ 33.060249][ T1183] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 33.073204][ T1183] input: syz0 as /devices/virtual/input/input17 [ 33.112919][ T1196] rust_binder: Write failure EINVAL in pid:213 [ 33.146176][ T1183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 33.166710][ T1212] binder: Unknown parameter 'non' [ 33.210585][ T1217] input: syz1 as /devices/virtual/input/input19 [ 33.424436][ T1243] rust_binder: Write failure EFAULT in pid:257 [ 33.446820][ T1245] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.463870][ T1246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.471119][ T1245] rust_binder: Error in use_page_slow: ESRCH [ 33.471134][ T1245] rust_binder: use_range failure ESRCH [ 33.477200][ T1245] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 33.482680][ T1245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.490877][ T1245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:255 [ 33.594343][ T1263] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:259 [ 33.622112][ T1269] input: syz0 as /devices/virtual/input/input20 [ 33.734199][ T1282] rust_binder: Error while translating object. [ 33.734221][ T1282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.740648][ T1282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:269 [ 33.798303][ T1292] binder: Bad value for 'max' [ 33.851642][ T1298] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.017632][ T1320] random: crng reseeded on system resumption [ 34.041446][ T1323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 34.064384][ T1326] SELinux: policydb magic number 0xff does not match expected magic number 0xf97cff8c [ 34.086455][ T1326] SELinux: failed to load policy [ 34.156930][ T1329] rust_binder: Write failure EFAULT in pid:228 [ 34.161059][ T1329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.167269][ T1329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 34.288684][ T1354] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 34.307967][ T1358] rust_binder: Write failure EINVAL in pid:289 [ 34.308518][ T1357] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.323221][ T1357] rust_binder: Read failure Err(EFAULT) in pid:289 [ 34.325880][ T1358] rust_binder: Write failure EINVAL in pid:289 [ 34.361946][ T1363] rust_binder: Write failure EINVAL in pid:293 [ 34.362380][ T1362] rust_binder: Write failure EINVAL in pid:234 [ 34.388933][ T1365] rust_binder: Write failure EINVAL in pid:236 [ 34.419682][ T1370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.495238][ T1386] binder: Bad value for 'stats' [ 34.507356][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 34.514300][ T36] audit: type=1400 audit(1750412856.900:282): avc: denied { write } for pid=1387 comm="syz.1.340" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.541584][ T36] audit: type=1400 audit(1750412856.910:283): avc: denied { remove_name } for pid=1387 comm="syz.1.340" name="binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.566672][ T36] audit: type=1400 audit(1750412856.910:284): avc: denied { unlink } for pid=1387 comm="syz.1.340" name="binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.569232][ T1390] random: crng reseeded on system resumption [ 34.589616][ T36] audit: type=1400 audit(1750412856.970:285): avc: denied { append } for pid=1389 comm="syz.1.341" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.636065][ T36] audit: type=1400 audit(1750412857.030:286): avc: denied { ioctl } for pid=1389 comm="syz.1.341" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.677609][ T1392] binder: Unknown parameter 'non' [ 34.725564][ T1396] UHID_CREATE from different security context by process 308 (syz.1.344), this is not allowed. [ 34.832916][ T1409] kvm: kvm [1408]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 34.984502][ T1425] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.984529][ T1425] rust_binder: Read failure Err(EFAULT) in pid:293 [ 35.089977][ T1436] rust_binder: Error while translating object. [ 35.098270][ T1436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.110835][ T1436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 35.217271][ T36] audit: type=1400 audit(1750412857.610:287): avc: denied { setattr } for pid=291 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.405180][ T1455] rust_binder: Error while translating object. [ 35.405227][ T1455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 35.415407][ T1455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:251 [ 35.609137][ T1473] rust_binder: Error while translating object. [ 35.632288][ T1473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 35.648227][ T1473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 35.838791][ T1489] __vm_enough_memory: pid: 1489, comm: syz.2.378, bytes: 281474976845824 not enough memory for the allocation [ 36.075390][ T1491] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 36.341812][ T1510] block device autoloading is deprecated and will be removed. [ 36.364154][ T1510] syz.1.385: attempt to access beyond end of device [ 36.364154][ T1510] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 36.785236][ T1524] SELinux: failed to load policy [ 36.884579][ T1538] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 36.884658][ T1538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 37.261932][ T1561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 37.272142][ T1561] rust_binder: Read failure Err(EFAULT) in pid:336 [ 37.289551][ T1561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.924931][ T1592] SELinux: security_context_str_to_sid () failed with errno=-22 [ 37.940294][ T1594] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.028442][ T1601] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 38.100475][ T1609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 38.100513][ T1609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:285 [ 38.288958][ T1622] serio: Serial port ttynull [ 38.343149][ T1629] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 38.343800][ T1630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.384717][ T1633] rust_binder: Error while translating object. [ 38.404594][ T1633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.434468][ T1633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 38.522163][ T36] audit: type=1400 audit(1750412860.920:288): avc: denied { write } for pid=1645 comm="syz.1.429" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 38.597061][ T1649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371 [ 38.597292][ T1649] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.606769][ T1649] rust_binder: Read failure Err(EFAULT) in pid:371 [ 38.643297][ T1651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 38.682679][ T36] audit: type=1400 audit(1750412861.080:289): avc: denied { write } for pid=1652 comm="syz.0.432" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.756957][ T1655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 38.756994][ T1655] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.778307][ T1655] rust_binder: Read failure Err(EFAULT) in pid:299 [ 38.791662][ T36] audit: type=1400 audit(1750412861.190:290): avc: denied { append } for pid=1657 comm="syz.1.434" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 38.846044][ T1662] binder: Bad value for 'stats' [ 38.863318][ T1663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 38.887371][ T1667] binder: Unknown parameter '0x0000000000000000' [ 39.708531][ T1699] rust_binder: inc_ref_done called when no active inc_refs [ 39.990560][ T1711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.007248][ T1711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:387 [ 40.053458][ T1720] rust_binder: Got transaction with invalid offset. [ 40.080926][ T1720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.100788][ T1720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 40.160544][ T1725] rust_binder: Error while translating object. [ 40.188301][ T1725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.200767][ T1725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 40.342769][ T36] audit: type=1400 audit(1750412862.740:291): avc: denied { write } for pid=1742 comm="syz.0.462" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 40.365732][ T1744] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 40.478459][ T1748] rust_binder: Read failure Err(EAGAIN) in pid:406 [ 40.646100][ T1756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.668885][ T1756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:322 [ 40.688339][ T1762] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.706374][ T1758] rust_binder: got new transaction with bad transaction stack [ 40.706395][ T1758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 40.748305][ T1768] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 40.909034][ T1777] SELinux: syz.0.474 (1777) set checkreqprot to 1. This is no longer supported. [ 41.168418][ T36] audit: type=1326 audit(1750412863.560:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.1.479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f911118e929 code=0x0 [ 42.009767][ T1801] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.009797][ T1801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:335 [ 42.050603][ T36] audit: type=1400 audit(1750412864.450:293): avc: denied { ioctl } for pid=1803 comm="syz.1.484" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.109961][ T1810] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 42.109985][ T1810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 42.118009][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:424 [ 42.299151][ T1816] rust_binder: Write failure EINVAL in pid:339 [ 42.442472][ T1824] SELinux: security_context_str_to_sid (00000000000000000000) failed with errno=-22 [ 42.484964][ T1826] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 42.492315][ T1826] rust_binder: Write failure EINVAL in pid:431 [ 42.592524][ T1826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.599470][ T1826] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 42.628465][ T1835] input: syz0 as /devices/virtual/input/input24 [ 42.701751][ T1836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.850381][ T1840] SELinux: failed to load policy [ 42.909589][ T1843] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 43.056151][ T1858] binder: Unknown parameter 'det' [ 43.065284][ T1852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.065317][ T1852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444 [ 43.148854][ T1861] rust_binder: Error while translating object. [ 43.176995][ T1861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.188594][ T1866] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 43.218206][ T1861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 43.661884][ T1880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:366 [ 43.857215][ T36] audit: type=1326 audit(1750412866.240:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1883 comm="syz.0.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e7098e929 code=0x0 [ 43.916697][ T1890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:368 [ 43.988362][ T1894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.093625][ T1900] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 44.101129][ T1896] kvm: user requested TSC rate below hardware speed [ 44.595742][ T1921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:473 [ 44.597498][ T1921] rust_binder: Write failure EFAULT in pid:473 [ 44.925307][ T1937] rust_binder: Write failure EINVAL in pid:464 [ 44.934101][ T1933] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 45.058306][ T36] audit: type=1400 audit(1750412867.460:295): avc: denied { validate_trans } for pid=1940 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 45.100373][ T1943] binder: Unknown parameter '0x0000000000000000' [ 45.358319][ T1951] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 45.401166][ T1957] rust_binder: Write failure EINVAL in pid:480 [ 45.421630][ T1958] SELinux: policydb magic number 0x400c630e does not match expected magic number 0xf97cff8c [ 45.452583][ T1958] SELinux: failed to load policy [ 45.458023][ T1957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.462722][ T1958] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 176, size: 161) [ 45.469294][ T1958] rust_binder: Error while translating object. [ 45.485355][ T1958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.505451][ T1958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 45.949350][ T1986] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 46.267870][ T2004] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 46.267895][ T2004] rust_binder: Error while translating object. [ 46.286992][ T2004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.293374][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 46.302329][ T2006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.328311][ T2008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.358469][ T2012] binder: Unknown parameter 'coyBLV"i5ntext' [ 46.418026][ T2019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.418482][ T2019] rust_binder: Error in use_page_slow: ESRCH [ 46.424949][ T2019] rust_binder: use_range failure ESRCH [ 46.452635][ T2019] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 46.473970][ T2019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.493448][ T2019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:509 [ 46.585722][ T2030] binder: Unknown parameter 'coyBLV"i5ntext' [ 46.799968][ T2036] rust_binder: Write failure EINVAL in pid:515 [ 46.800543][ T2036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.806770][ T2036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 47.078917][ T2045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 47.107155][ T2045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:501 [ 47.288062][ T2052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.317795][ T2052] rust_binder: Failed copying remainder into alloc: EFAULT [ 47.318859][ T2057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:505 [ 47.338230][ T2052] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 47.347425][ T2052] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 47.362906][ T2060] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 47.367794][ T2052] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:405 [ 47.413580][ T2065] rust_binder: Error while translating object. [ 47.430910][ T2065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 47.437193][ T2065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:405 [ 47.551594][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:511 [ 47.670549][ T2081] rust_binder: Write failure EINVAL in pid:415 [ 47.707608][ T36] audit: type=1326 audit(1750412870.100:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2082 comm="syz.0.571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7098e929 code=0x0 [ 47.746771][ T2081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.746808][ T2081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415 [ 47.821149][ T2086] SELinux: policydb magic number 0x65736f72 does not match expected magic number 0xf97cff8c [ 47.878227][ T2086] SELinux: failed to load policy [ 48.573410][ T2106] rust_binder: Write failure EFAULT in pid:536 [ 48.579100][ T2106] kvm: kvm [2105]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 48.696711][ T2111] kvm: kvm [2110]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 48.761047][ T2121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.904784][ T2133] rust_binder: Error while translating object. [ 48.916928][ T2133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.931130][ T2133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:551 [ 48.940812][ T2132] rust_binder: Write failure EFAULT in pid:422 [ 49.026444][ T2145] binder: Unknown parameter 'k Qݯں*?wk[~& 5'**.d;Pq~c'PK;E2ܔ b3PhlHOsP4' [ 49.188340][ T2159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.237974][ T2163] binder: Unknown parameter 'mask' [ 49.310904][ T2171] binder: Binderfs stats mode cannot be changed during a remount [ 49.333406][ T36] audit: type=1400 audit(1750412871.730:297): avc: denied { map } for pid=2167 comm="syz.2.601" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 49.432578][ T2177] rust_binder: Error while translating object. [ 49.432615][ T2177] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.439033][ T2177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 49.601314][ T2184] random: crng reseeded on system resumption [ 49.651239][ T2184] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 49.671391][ T2184] SELinux: failed to load policy [ 49.718561][ T2193] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 49.725882][ T2192] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 49.733550][ T2193] rust_binder: Write failure EINVAL in pid:446 [ 49.733620][ T2192] rust_binder: Write failure EINVAL in pid:446 [ 49.804198][ T36] audit: type=1326 audit(1750412872.200:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 49.835212][ T36] audit: type=1326 audit(1750412872.200:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 49.868383][ T36] audit: type=1326 audit(1750412872.200:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 49.938204][ T36] audit: type=1326 audit(1750412872.200:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 49.956475][ T2204] rust_binder: Write failure EINVAL in pid:456 [ 49.979282][ T36] audit: type=1326 audit(1750412872.200:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 50.010919][ T36] audit: type=1326 audit(1750412872.200:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 50.034725][ T36] audit: type=1326 audit(1750412872.200:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 50.066047][ T36] audit: type=1326 audit(1750412872.200:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2195 comm="syz.2.610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x7ffc0000 [ 50.101227][ T2207] binder: Unknown parameter 'non00000000000000000000006' [ 50.357165][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.364258][ T2231] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.371692][ T2231] bridge_slave_0: entered allmulticast mode [ 50.378394][ T2231] bridge_slave_0: entered promiscuous mode [ 50.387407][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.397802][ T2231] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.405236][ T2231] bridge_slave_1: entered allmulticast mode [ 50.411882][ T2231] bridge_slave_1: entered promiscuous mode [ 50.419747][ T305] bridge_slave_1: left allmulticast mode [ 50.432764][ T305] bridge_slave_1: left promiscuous mode [ 50.442089][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.450091][ T305] bridge_slave_0: left allmulticast mode [ 50.458221][ T305] bridge_slave_0: left promiscuous mode [ 50.463873][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.570112][ T2231] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.577187][ T2231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.584582][ T2231] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.591616][ T2231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.624869][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.632747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.652643][ T305] veth1_macvtap: left promiscuous mode [ 50.664522][ T305] veth0_vlan: left promiscuous mode [ 50.732242][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.739332][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.748378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.755446][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.788027][ T2231] veth0_vlan: entered promiscuous mode [ 50.797405][ T2259] binder: Unknown parameter 'dirsy.c' [ 50.830818][ T2231] veth1_macvtap: entered promiscuous mode [ 50.874280][ T2265] rust_binder: Write failure EINVAL in pid:584 [ 50.913469][ T2281] binder: Unknown parameter 'processor : 0 [ 50.913469][ T2281] vendor_id : GenuineIntel [ 50.913469][ T2281] cpu family : 6 [ 50.913469][ T2281] model : 79 [ 50.913469][ T2281] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 50.913469][ T2281] stepping : 0 [ 50.913469][ T2281] microcode : 0xffffffff [ 50.913469][ T2281] cpu MHz : 2199.998 [ 50.913469][ T2281] cache size : 56320 KB [ 50.913469][ T2281] physical id : 0 [ 50.913469][ T2281] siblings : 2 [ 50.913469][ T2281] core id : 0 [ 50.913469][ T2281] cpu cores : 1 [ 50.913469][ T2281] apicid : 0 [ 50.913469][ T2281] initial apicid : 0 [ 50.913469][ T2281] fpu : yes [ 50.913469][ T2281] fpu_exception : yes [ 50.913469][ T2281] cpuid level : 13 [ 50.913469][ T2281] wp : yes [ 50.913469][ T2281] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 50.913469][ T2281] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 50.929470][ T2281] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1633902440 (13071219520 ns) > initial count (4350241648 ns). Using initial count to start timer. [ 51.082102][ T2283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.116110][ T2281] binfmt_misc: register: failed to install interpreter file ./file0 [ 51.246099][ T2289] SELinux: syz.0.636 (2289) set checkreqprot to 1. This is no longer supported. [ 51.257728][ T2289] kvm_intel: kvm [2288]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 51.318882][ T2290] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.627285][ T2296] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 51.665421][ T2294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:478 [ 51.840142][ T2312] input: syz0 as /devices/virtual/input/input27 [ 51.855835][ T2312] input: failed to attach handler leds to device input27, error: -6 [ 51.930715][ T2321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.930740][ T2321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.944914][ T2321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.944943][ T2321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.946254][ T2322] rust_binder: Error in use_page_slow: ESRCH [ 51.957863][ T2322] rust_binder: use_range failure ESRCH [ 51.964846][ T2322] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 51.970571][ T2322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.978750][ T2322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:487 [ 51.994526][ T2326] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.028397][ T2325] rust_binder: Error in use_page_slow: ESRCH [ 52.028417][ T2325] rust_binder: use_range failure ESRCH [ 52.034464][ T2325] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 52.039974][ T2325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.047958][ T2325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:615 [ 52.150192][ T2330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.159307][ T2330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:620 [ 52.171362][ T2330] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.180514][ T2330] rust_binder: Read failure Err(EFAULT) in pid:620 [ 52.208295][ T2333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 52.240849][ T2333] rust_binder: Read failure Err(EFAULT) in pid:8 [ 52.246809][ T2340] SELinux: failed to load policy [ 52.263926][ T2341] rust_binder: Write failure EFAULT in pid:8 [ 52.265388][ T2338] kvm: kvm [2337]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 52.273073][ T2335] rust_binder: Failed copying remainder into alloc: EFAULT [ 52.281825][ T2335] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 52.299014][ T2335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.307660][ T2335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:492 [ 52.368638][ T2348] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 52.457087][ T2352] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 52.473445][ T2352] rust_binder: Write failure EINVAL in pid:632 [ 52.495616][ T2356] binder: Binderfs stats mode cannot be changed during a remount [ 52.536003][ T2362] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 52.675086][ T2364] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.690695][ T2374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 52.789892][ T2376] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.799142][ T2376] rust_binder: Read failure Err(EFAULT) in pid:640 [ 52.878942][ T2381] input: syz1 as /devices/virtual/input/input29 [ 52.987817][ T2390] rust_binder: Write failure EFAULT in pid:600 [ 52.999734][ T2392] SELinux: policydb version 1247598834 does not match my version range 15-33 [ 53.014823][ T2392] SELinux: failed to load policy [ 53.077385][ T2398] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.081335][ T2398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.087923][ T2398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 53.134552][ T2400] input: syz1 as /devices/virtual/input/input30 [ 53.154385][ T2404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 53.154420][ T2404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:16 [ 53.183646][ T2400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.195288][ T2400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 53.354154][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 53.354175][ T36] audit: type=1400 audit(1750412875.750:331): avc: denied { execute } for pid=2413 comm="syz.1.680" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 53.444270][ T2423] binder: Bad value for 'max' [ 53.450162][ T36] audit: type=1326 audit(1750412875.860:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2402 comm="syz.0.677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e7098e929 code=0x0 [ 53.562258][ T2430] input: syz0 as /devices/virtual/input/input31 [ 53.609883][ T2432] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 53.612829][ T2432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 53.699687][ T36] audit: type=1400 audit(1750412876.100:333): avc: denied { execute } for pid=2438 comm="syz.4.689" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 53.753939][ T36] audit: type=1400 audit(1750412876.150:334): avc: denied { mounton } for pid=2442 comm="syz.4.690" path="/13/memory.events" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.835967][ T2445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:515 [ 53.881058][ T2453] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 53.904940][ T2450] SELinux: failed to load policy [ 53.952087][ T2460] rust_binder: Write failure EFAULT in pid:522 [ 53.952609][ T2460] rust_binder: Write failure EFAULT in pid:522 [ 53.977242][ T2467] rust_binder: Write failure EFAULT in pid:39 [ 53.998003][ T2447] rust_binder: Write failure EFAULT in pid:655 [ 54.054198][ T2469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.117646][ T2470] rust_binder: Failed to allocate buffer. len:104, is_oneway:false [ 54.124543][ T2470] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 54.198067][ T2475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 54.347847][ T2499] binder: Bad value for 'stats' [ 54.351201][ T2497] rust_binder: Write failure EFAULT in pid:624 [ 54.377148][ T2501] rust_binder: Write failure EINVAL in pid:663 [ 54.414713][ T2509] rust_binder: Error while translating object. [ 54.420986][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 54.427248][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:626 [ 54.481770][ T2517] rust_binder: Write failure EFAULT in pid:60 [ 54.520863][ T2521] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 54.563901][ T2511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:628 [ 54.617783][ T2529] binder: Bad value for 'stats' [ 54.662696][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.664059][ T2529] binder: Unknown parameter 'defcontextT:)du@75' [ 54.671983][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.684758][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.692868][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.700361][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.707736][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.715171][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.722769][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.730507][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.737980][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.745512][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.753249][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.760841][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.768342][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.775764][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.783201][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.790638][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.798340][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.805709][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.813113][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.820518][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.828124][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.835567][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.843077][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.850576][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.858000][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.865451][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.873171][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.880661][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.888039][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.895545][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.903152][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.910564][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.917929][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.925768][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.933166][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.940601][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.948466][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.956087][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.963761][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.971252][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.979322][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.988015][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 54.995519][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.014867][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.022453][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.022821][ T36] audit: type=1326 audit(1750412877.420:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.2.721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x0 [ 55.029963][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.060356][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.067725][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.075135][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.082582][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.092567][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.099993][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.107366][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.115182][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.122594][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.130201][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.137580][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.145076][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.157409][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.165104][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.172699][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.177664][ T2541] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 55.189367][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.197023][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.206030][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.208510][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:679 [ 55.213474][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.213759][ T2543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.222686][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.222712][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.222734][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.222782][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.230640][ T2543] rust_binder: Read failure Err(EFAULT) in pid:679 [ 55.238856][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.286641][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.295566][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.303134][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.311152][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.318642][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.326167][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.338293][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.346006][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.355117][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.363433][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.371108][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.378654][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.386390][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.390393][ T2552] rust_binder: Error while translating object. [ 55.393818][ T2552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 55.394030][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.419132][ T2552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:686 [ 55.428220][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.445896][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.453527][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.461077][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.468600][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.477115][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.498264][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.505733][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.513322][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.520935][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.528591][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.535996][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.543484][ T389] hid-generic 0007:0006:096F.0003: unknown main item tag 0x0 [ 55.558067][ T389] hid-generic 0007:0006:096F.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 55.585133][ T2559] fido_id[2559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.780101][ T2591] rust_binder: Read failure Err(EAGAIN) in pid:638 [ 55.791062][ T2589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.809802][ T2589] rust_binder: Error while translating object. [ 55.816818][ T2589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.823233][ T2589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:701 [ 55.933557][ T2605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.953330][ T2602] rust_binder: Error while translating object. [ 55.968268][ T2602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 55.974723][ T2602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:76 [ 55.997995][ T2612] rust_binder: Error while translating object. [ 56.018010][ T2612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.030811][ T2612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:640 [ 56.035872][ T2614] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 56.068997][ T2614] SELinux: failed to load policy [ 56.229953][ T2628] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 56.229978][ T2628] rust_binder: Error while translating object. [ 56.239800][ T2628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.247639][ T2628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 56.442807][ T2641] __vm_enough_memory: pid: 2641, comm: syz.4.756, bytes: 281474976845824 not enough memory for the allocation [ 56.604287][ T2647] rust_binder: Write failure EFAULT in pid:647 [ 56.731205][ T36] audit: type=1326 audit(1750412879.130:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.1.763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f911118e929 code=0x0 [ 56.787079][ T36] audit: type=1326 audit(1750412879.180:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911118e929 code=0x7ffc0000 [ 56.819098][ T389] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 56.840410][ T389] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.850281][ T36] audit: type=1326 audit(1750412879.180:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f911118e929 code=0x7ffc0000 [ 56.851366][ T2674] rust_binder: Write failure EFAULT in pid:102 [ 56.898405][ T36] audit: type=1326 audit(1750412879.180:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f911118e929 code=0x7ffc0000 [ 56.948022][ T36] audit: type=1326 audit(1750412879.180:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2662 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f911118e929 code=0x7ffc0000 [ 56.973853][ T2682] SELinux: syz.0.770 (2682) set checkreqprot to 1. This is no longer supported. [ 56.976787][ T2681] can0: slcan on ttyS3. [ 57.059409][ T389] can0 (unregistered): slcan off ttyS3. [ 57.156822][ T2716] rust_binder: Error while translating object. [ 57.156864][ T2716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.163368][ T2716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 57.212269][ T2725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 57.279197][ T2735] binder: Unknown parameter 'd|URefc' [ 57.318000][ T2740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.394790][ T2749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 57.401313][ T2749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:669 [ 57.467786][ T2754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671 [ 57.477344][ T2751] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 57.486480][ T2751] rust_binder: Error in use_page_slow: EBUSY [ 57.496840][ T2751] rust_binder: use_range failure EBUSY [ 57.502991][ T2751] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 57.508573][ T2751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 57.516236][ T2751] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 57.525571][ T2751] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:671 [ 57.537494][ T2754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.600622][ T2763] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.607196][ T2763] rust_binder: Read failure Err(EFAULT) in pid:728 [ 57.626237][ T10] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 57.647073][ T10] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 57.704171][ T2780] SELinux: failed to load policy [ 57.826965][ T2790] binder: Unknown parameter 'fscontext?}' [ 57.864133][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 57.864162][ T2794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.874489][ T2794] rust_binder: Read failure Err(EFAULT) in pid:585 [ 57.903185][ T2798] rust_binder: Write failure EFAULT in pid:132 [ 58.065823][ T2804] binder: Unknown parameter 'coyBLV"i5ntext' [ 58.128455][ T2807] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 58.137102][ T2807] rust_binder: Write failure EINVAL in pid:743 [ 58.169331][ T2810] random: crng reseeded on system resumption [ 58.196476][ T2810] binder: Bad value for 'defcontext' [ 58.395355][ T2825] block device autoloading is deprecated and will be removed. [ 58.417808][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 58.417823][ T36] audit: type=1326 audit(1750412880.810:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f911118e929 code=0x0 [ 58.417868][ T2827] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.480637][ T36] audit: type=1400 audit(1750412880.880:384): avc: denied { mounton } for pid=2829 comm="syz.4.806" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.480888][ T2830] binder: Bad value for 'defcontext' [ 58.582741][ T2843] SELinux: security_context_str_to_sid () failed with errno=-22 [ 58.643595][ T2843] binder: Unknown parameter 'obj_type' [ 58.676412][ T2846] rust_binder: Write failure EFAULT in pid:689 [ 58.686872][ T2850] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 58.693901][ T2850] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:590 [ 58.738917][ T2849] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.760600][ T2849] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 58.845365][ T2860] binder: Bad value for 'max' [ 58.869495][ T2860] binder: Bad value for 'max' [ 58.904311][ T2865] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.237539][ T2881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:159 [ 59.271592][ T2890] rust_binder: Error while translating object. [ 59.271625][ T2890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.277820][ T2890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 59.296245][ T2886] rust_binder: Error in use_page_slow: ESRCH [ 59.305628][ T2886] rust_binder: use_range failure ESRCH [ 59.313216][ T2886] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 59.320592][ T2886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 59.331119][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:609 [ 59.382519][ T2906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.391962][ T2906] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 59.444570][ T2913] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.453335][ T2913] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 59.490578][ T2915] binder: Bad value for 'max' [ 59.633958][ T2931] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.633982][ T2931] rust_binder: Read failure Err(EFAULT) in pid:713 [ 59.763953][ T2949] rust_binder: Error while translating object. [ 59.770844][ T2949] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.777603][ T2949] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 59.907569][ T2965] rust_binder: Write failure EFAULT in pid:621 [ 59.964640][ T2971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 59.986103][ T2973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.987596][ T2971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 59.995405][ T2973] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 60.004593][ T2971] rust_binder: Error while translating object. [ 60.011857][ T2973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.019825][ T2971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.031869][ T2971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 60.038473][ T2978] binder: Bad value for 'stats' [ 60.086550][ T2980] rust_binder: Write failure EINVAL in pid:190 [ 60.098412][ T2982] binder: Unknown parameter 'nXI' [ 60.170124][ T3004] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 60.170227][ T3004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.178894][ T3004] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 60.186095][ T3004] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 60.194310][ T3004] rust_binder: Read failure Err(EFAULT) in pid:203 [ 60.215247][ T3008] binder: Binderfs stats mode cannot be changed during a remount [ 60.231689][ T3006] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.267662][ T3015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.288772][ T3017] binder: Unknown parameter 'processor : 0 [ 60.288772][ T3017] vendor_id : GenuineIntel [ 60.288772][ T3017] cpu family : 6 [ 60.288772][ T3017] model : 79 [ 60.288772][ T3017] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 60.288772][ T3017] stepping : 0 [ 60.288772][ T3017] microcode : 0xffffffff [ 60.288772][ T3017] cpu MHz : 2199.998 [ 60.288772][ T3017] cache size : 56320 KB [ 60.288772][ T3017] physical id : 0 [ 60.288772][ T3017] siblings : 2 [ 60.288772][ T3017] core id : 0 [ 60.288772][ T3017] cpu cores : 1 [ 60.288772][ T3017] apicid : 0 [ 60.288772][ T3017] initial apicid : 0 [ 60.288772][ T3017] fpu : yes [ 60.288772][ T3017] fpu_exception : yes [ 60.288772][ T3017] cpuid level : 13 [ 60.288772][ T3017] wp : yes [ 60.288772][ T3017] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 60.288772][ T3017] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 60.297912][ T3017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.431574][ T3018] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.755453][ T3037] rust_binder: Write failure EFAULT in pid:209 [ 60.758516][ T36] audit: type=1326 audit(1750412883.160:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3036 comm="syz.1.873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f911118e929 code=0x0 [ 60.806355][ T3040] block device autoloading is deprecated and will be removed. [ 60.814008][ T3040] syz.4.874: attempt to access beyond end of device [ 60.814008][ T3040] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 60.828071][ T3040] SELinux: policydb string length 808464392 does not match expected length 8 [ 60.837377][ T3040] SELinux: failed to load policy [ 60.891445][ T3046] binder: Unknown parameter 'ax0p000000' [ 60.923334][ T3050] rust_binder: Error while translating object. [ 60.923369][ T3050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.938224][ T3050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 61.216717][ T3072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 61.259642][ T3076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.269701][ T3076] rust_binder: Error while translating object. [ 61.276233][ T3076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.283162][ T3076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:658 [ 61.349938][ T3084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:662 [ 61.379423][ T36] audit: type=1400 audit(1750412883.780:386): avc: denied { map } for pid=3077 comm="syz.4.886" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.427556][ T3088] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 61.435038][ T3088] rust_binder: Write failure EINVAL in pid:232 [ 61.459547][ T36] audit: type=1326 audit(1750412883.860:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3089 comm="syz.2.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdfa58e929 code=0x0 [ 61.615779][ T3102] rust_binder: Write failure EFAULT in pid:243 [ 61.651546][ T3106] binder: Unknown parameter 'fscontexp t' [ 61.750605][ T3115] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 61.927631][ T3128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 61.927673][ T3128] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 61.937275][ T3128] rust_binder: Read failure Err(EFAULT) in pid:257 [ 62.004353][ T3136] rust_binder: Write failure EFAULT in pid:755 [ 62.021035][ T3138] rust_binder: Write failure EINVAL in pid:757 [ 62.131722][ T3146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:260 [ 62.201976][ T3159] rust_binder: Write failure EFAULT in pid:262 [ 62.318882][ T3178] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 62.356872][ T3190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.365394][ T3190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:814 [ 62.396168][ T3193] rust_binder: Write failure EINVAL in pid:778 [ 62.416309][ T3193] rust_binder: Write failure EINVAL in pid:778 [ 62.423346][ T3193] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.434139][ T3193] rust_binder: Read failure Err(EFAULT) in pid:778 [ 62.440583][ T3195] SELinux: failed to load policy [ 62.462997][ T3193] rust_binder: Write failure EINVAL in pid:778 [ 62.494238][ T3209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:787 [ 62.524220][ T3214] rust_binder: Error while translating object. [ 62.533590][ T3214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.542290][ T3214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671 [ 62.589805][ T3216] rust_binder: Write failure EINVAL in pid:272 [ 62.643959][ T3219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:792 [ 62.653195][ T3223] rust_binder: Error while translating object. [ 62.662510][ T3219] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.663917][ T3223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.677065][ T3224] rust_binder: Read failure Err(EAGAIN) in pid:272 [ 62.686979][ T3219] rust_binder: Read failure Err(EFAULT) in pid:792 [ 62.700399][ T3223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:822 [ 62.707897][ T3216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272 [ 62.996168][ T3253] rust_binder: Error while translating object. [ 63.005403][ T3253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.011889][ T3253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831 [ 63.035654][ T3259] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 63.132940][ T3271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.137071][ T3273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.143641][ T3273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:808 [ 63.168632][ T3269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.193347][ T3264] SELinux: failed to load policy [ 63.205551][ T3269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:681 [ 63.333597][ T3290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:838 [ 63.353029][ T3294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 63.371615][ T3296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.393720][ T3300] rust_binder: Error in use_page_slow: ESRCH [ 63.405491][ T3300] rust_binder: use_range failure ESRCH [ 63.413362][ T3300] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 63.423978][ T3300] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 63.433801][ T3300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:688 [ 63.471735][ T36] audit: type=1400 audit(1750412885.860:388): avc: denied { map } for pid=3301 comm="syz.0.961" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.489297][ T3298] rust_binder: Write failure EINVAL in pid:844 [ 63.502137][ T3307] binder: Unknown parameter 'fscontext?}' [ 63.503775][ T36] audit: type=1400 audit(1750412885.860:389): avc: denied { read } for pid=3301 comm="syz.0.961" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.518502][ T36] audit: type=1400 audit(1750412885.880:390): avc: denied { append } for pid=3297 comm="syz.1.960" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.562926][ T36] audit: type=1400 audit(1750412885.880:391): avc: denied { read } for pid=3297 comm="syz.1.960" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.588369][ T36] audit: type=1400 audit(1750412885.880:392): avc: denied { open } for pid=3297 comm="syz.1.960" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.602240][ T3311] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.619509][ T36] audit: type=1400 audit(1750412885.880:393): avc: denied { ioctl } for pid=3297 comm="syz.1.960" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 63.652923][ T36] audit: type=1400 audit(1750412885.880:394): avc: denied { ioctl } for pid=3297 comm="syz.1.960" path="/dev/binderfs/binder1" dev="binder" ino=55 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.673963][ T3314] rust_binder: Write failure EFAULT in pid:699 [ 63.691750][ T36] audit: type=1400 audit(1750412885.900:395): avc: denied { mounton } for pid=3306 comm="syz.2.962" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.720951][ T36] audit: type=1400 audit(1750412885.970:396): avc: denied { read write } for pid=289 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.744917][ T36] audit: type=1400 audit(1750412885.970:397): avc: denied { open } for pid=289 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.816046][ T3319] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.817431][ T3319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:701 [ 63.856291][ T3325] input: syz1 as /devices/virtual/input/input44 [ 63.886661][ T3325] SELinux: failed to load policy [ 63.907000][ T3328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.910784][ T3328] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.919715][ T3328] random: crng reseeded on system resumption [ 64.003957][ T3336] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 64.089692][ T3342] binder: Unknown parameter 'fowner' [ 64.109765][ T3343] binder: Unknown parameter 'fowner' [ 64.133305][ T3347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.489955][ T3358] tap0: tun_chr_ioctl cmd 1074025677 [ 64.501741][ T3358] tap0: linktype set to 774 [ 64.511004][ T3358] binder: Unknown parameter 'defco~ttLIeȆpB&GB~GihMRIBFndxx'+cOUM8;_ ۗ#׀}fz.' [ 64.798120][ T3360] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 64.819324][ T3363] __vm_enough_memory: pid: 3363, comm: syz.4.980, bytes: 281474976845824 not enough memory for the allocation [ 64.832836][ T3363] rust_binder: Write failure EFAULT in pid:303 [ 64.884212][ T3376] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 64.897925][ T3376] rust_binder: Write failure EINVAL in pid:312 [ 64.898370][ T3376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.930321][ T3381] kvm: kvm [3380]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 64.984272][ T3386] rust_binder: Write failure EINVAL in pid:859 [ 65.024020][ T3396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.030502][ T3397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.067041][ T3396] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 65.101437][ T3405] input: syz1 as /devices/virtual/input/input47 [ 65.107024][ T3402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 65.142326][ T288] cgroup: fork rejected by pids controller in /syz1 [ 65.163134][ T3411] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 65.188053][ T3411] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 65.188066][ T3411] rust_binder: Error while translating object. [ 65.196857][ T3411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.203070][ T3411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 65.266811][ T13] bridge_slave_1: left allmulticast mode [ 65.281768][ T13] bridge_slave_1: left promiscuous mode [ 65.287419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.296104][ T13] bridge_slave_0: left allmulticast mode [ 65.304984][ T13] bridge_slave_0: left promiscuous mode [ 65.311196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.435317][ T3420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:844 [ 65.449959][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.466141][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.473574][ T3414] bridge_slave_0: entered allmulticast mode [ 65.479964][ T3414] bridge_slave_0: entered promiscuous mode [ 65.486655][ T3424] rust_binder: Write failure EINVAL in pid:844 [ 65.487007][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.500263][ T3414] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.507730][ T3414] bridge_slave_1: entered allmulticast mode [ 65.513993][ T3414] bridge_slave_1: entered promiscuous mode [ 65.523142][ T13] veth1_macvtap: left promiscuous mode [ 65.528720][ T13] veth0_vlan: left promiscuous mode [ 65.597850][ T3426] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 65.602400][ T3414] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.617179][ T3414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.624534][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.631602][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.656335][ T3430] rust_binder: Error while translating object. [ 65.656368][ T3430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 65.664395][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.680897][ T3430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:337 [ 65.683982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.702427][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.709484][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.718562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.725614][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.746485][ T3414] veth0_vlan: entered promiscuous mode [ 65.759677][ T3414] veth1_macvtap: entered promiscuous mode [ 65.868865][ T306] hid-generic C98F:0003:0000.0006: unknown main item tag 0x0 [ 65.876368][ T306] hid-generic C98F:0003:0000.0006: unknown main item tag 0x0 [ 65.886548][ T306] hid-generic C98F:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.927311][ T3443] fido_id[3443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.927379][ T3441] rust_binder: Write failure EINVAL in pid:339 [ 65.989771][ T3452] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 66.015115][ T3452] rust_binder: Write failure EINVAL in pid:729 [ 66.192000][ T3469] rust_binder: Error while translating object. [ 66.208245][ T3469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 66.214432][ T3469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:741 [ 66.246314][ T3471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.307382][ T3474] input: syz1 as /devices/virtual/input/input49 [ 66.345248][ T3474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.469247][ T3479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.476343][ T3479] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 66.482917][ T3479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 66.491972][ T3479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:849 [ 66.513738][ T3481] rust_binder: Write failure EFAULT in pid:851 [ 66.513760][ T3482] rust_binder: Write failure EFAULT in pid:851 [ 66.619935][ T3494] tap0: tun_chr_ioctl cmd 2148553947 [ 67.010535][ T3518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.024408][ T3526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:873 [ 67.104498][ T3529] SELinux: security_context_str_to_sid (sytem_uG3) failed with errno=-22 [ 67.162778][ T3535] kvm: user requested TSC rate below hardware speed [ 67.371234][ T3540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 67.384157][ T3542] SELinux: policydb version -1044624437 does not match my version range 15-33 [ 67.398390][ T3542] SELinux: failed to load policy [ 67.500247][ T3553] rust_binder: Write failure EFAULT in pid:27 [ 67.509506][ T3556] binder: Unknown parameter 'sti`n3;2ÉN6Fb˖+atc' [ 67.729048][ T3563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 67.729079][ T3563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 67.862216][ T3574] input: syz0 as /devices/virtual/input/input50 [ 68.008750][ T3580] SELinux: policydb version -39848861 does not match my version range 15-33 [ 68.017895][ T3580] SELinux: failed to load policy [ 68.666409][ T3605] input: syz1 as /devices/virtual/input/input51 [ 68.704673][ T3603] binder: Bad value for 'context' [ 68.723418][ T36] kauditd_printk_skb: 140 callbacks suppressed [ 68.723434][ T36] audit: type=1400 audit(1750412891.120:538): avc: denied { write } for pid=3607 comm="syz.4.1057" name="pfkey" dev="proc" ino=4026532894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 68.839122][ T3615] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 68.850121][ T3613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.850877][ T3613] rust_binder: Write failure EINVAL in pid:759 [ 68.853981][ T36] audit: type=1400 audit(1750412891.250:539): avc: denied { view } for pid=3614 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.888643][ T3613] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.888667][ T3613] rust_binder: Read failure Err(EFAULT) in pid:759 [ 68.890589][ T3615] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.915513][ T3615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 68.924962][ T36] audit: type=1400 audit(1750412891.290:540): avc: denied { ioctl } for pid=3614 comm="syz.1.1059" path="net:[4026532467]" dev="nsfs" ino=4026532467 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.989045][ T3617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.989638][ T3617] rust_binder: Error in use_page_slow: ESRCH [ 68.996552][ T3617] rust_binder: use_range failure ESRCH [ 69.008203][ T3617] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 69.028179][ T3617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.048192][ T3617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:761 [ 69.058238][ T36] audit: type=1400 audit(1750412891.450:541): avc: denied { append } for pid=3624 comm="syz.0.1063" name="pfkey" dev="proc" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.110763][ T3631] rust_binder: Error while translating object. [ 69.110790][ T3631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.115069][ T3632] rust_binder: Write failure EFAULT in pid:763 [ 69.125004][ T3631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 69.170413][ T3636] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 69.229308][ T3641] kvm: Disabled LAPIC found during irq injection [ 69.235253][ T3647] input: syz0 as /devices/virtual/input/input53 [ 69.278562][ T3650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:767 [ 69.279860][ T3643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.300900][ T3657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.306423][ T3639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.314070][ T3659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.328495][ T3639] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 69.339137][ T3663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.368223][ T3662] rust_binder: Write failure EINVAL in pid:894 [ 69.390507][ T3666] SELinux: policydb version -299566526 does not match my version range 15-33 [ 69.428196][ T3666] SELinux: failed to load policy [ 69.514897][ T36] audit: type=1400 audit(1750412891.910:542): avc: denied { attach_queue } for pid=3674 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 69.595021][ T36] audit: type=1400 audit(1750412891.990:543): avc: denied { execute } for pid=3679 comm="syz.0.1081" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 69.656124][ T36] audit: type=1400 audit(1750412891.990:544): avc: denied { unmount } for pid=3414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 69.676990][ T3686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 69.677663][ T3686] rust_binder: Error while translating object. [ 69.695455][ T3688] rust_binder: Write failure EFAULT in pid:906 [ 69.699066][ T3686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.710071][ T3686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 69.842595][ T3701] binder: Unknown parameter 'sw' [ 69.863259][ T3703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 70.425473][ T3753] input: syz1 as /devices/virtual/input/input55 [ 70.495491][ T3756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.542226][ T3758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 70.575835][ T3760] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.592610][ T3760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.599585][ T3760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:778 [ 70.610475][ T3762] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 89) [ 70.636594][ T3762] rust_binder: Error while translating object. [ 70.670319][ T3762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.676541][ T3762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:942 [ 70.813556][ T3772] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.818897][ T3780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.832576][ T3772] SELinux: failed to load policy [ 70.894703][ T3786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:954 [ 70.894881][ T3786] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 70.932303][ T3780] rust_binder: Error in use_page_slow: ESRCH [ 70.948205][ T3780] rust_binder: use_range failure ESRCH [ 70.955807][ T3780] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 70.978195][ T3780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.998351][ T3780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:784 [ 71.069518][ T3798] random: crng reseeded on system resumption [ 71.095720][ T3798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.118278][ T3798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:787 [ 71.132777][ T3802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.142342][ T3802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.210729][ T3808] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.285517][ T36] audit: type=1400 audit(1750412893.680:545): avc: denied { validate_trans } for pid=3813 comm="syz.4.1127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.314224][ T3817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 71.314254][ T3817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:961 [ 71.323713][ T3817] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.332861][ T3817] rust_binder: Read failure Err(EFAULT) in pid:961 [ 71.352464][ T3819] binder: Unknown parameter '/dev/vhost-vsock' [ 71.377771][ T3826] rust_binder: Write failure EFAULT in pid:96 [ 71.469643][ T3837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.494845][ T3837] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 71.515147][ T3837] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.703623][ T3843] input: syz0 as /devices/virtual/input/input57 [ 71.752874][ T3848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.770779][ T3848] rust_binder: Error in use_page_slow: ESRCH [ 71.786050][ T3848] rust_binder: use_range failure ESRCH [ 71.803335][ T3848] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 71.815977][ T3848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.832751][ T3848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:799 [ 71.876601][ T289] cgroup: fork rejected by pids controller in /syz2 [ 71.990488][ T305] bridge_slave_1: left allmulticast mode [ 71.998185][ T305] bridge_slave_1: left promiscuous mode [ 72.008513][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.021215][ T305] bridge_slave_0: left allmulticast mode [ 72.032128][ T305] bridge_slave_0: left promiscuous mode [ 72.047418][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.132397][ T3863] kvm: Disabled LAPIC found during irq injection [ 72.203354][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.210427][ T3867] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.227174][ T3872] rust_binder: Write failure EFAULT in pid:110 [ 72.227208][ T3867] bridge_slave_0: entered allmulticast mode [ 72.240467][ T3867] bridge_slave_0: entered promiscuous mode [ 72.246968][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.254180][ T3867] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.261799][ T3867] bridge_slave_1: entered allmulticast mode [ 72.269991][ T3867] bridge_slave_1: entered promiscuous mode [ 72.291538][ T305] veth1_macvtap: left promiscuous mode [ 72.307292][ T305] veth0_vlan: left promiscuous mode [ 72.323030][ T36] audit: type=1400 audit(1750412894.720:546): avc: denied { mounton } for pid=3878 comm="syz.4.1151" path="/151/memory.events" dev="tmpfs" ino=808 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.386979][ T36] audit: type=1400 audit(1750412894.780:547): avc: denied { append } for pid=3880 comm="syz.4.1152" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.534749][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.541942][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.549464][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.556526][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.596684][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.605338][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.615721][ T3886] rust_binder: Write failure EINVAL in pid:117 [ 72.623766][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.637040][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.644791][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.651941][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.702278][ T3867] veth0_vlan: entered promiscuous mode [ 72.703890][ T3889] random: crng reseeded on system resumption [ 72.729003][ T3867] veth1_macvtap: entered promiscuous mode [ 72.857269][ T3904] binder: Unknown parameter 'ax' [ 72.979991][ T3912] binder: Unknown parameter 'contextfs/binder0' [ 73.035928][ T3927] rust_binder: Write failure EINVAL in pid:16 [ 73.109697][ T3946] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.286732][ T3951] input: syz0 as /devices/virtual/input/input59 [ 73.308073][ T3954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:978 [ 73.521013][ T3965] input: syz1 as /devices/virtual/input/input60 [ 73.644789][ T3970] binder: Unknown parameter '' [ 73.694022][ T3981] rust_binder: Write failure EINVAL in pid:987 [ 73.727146][ T3988] rust_binder: Write failure EFAULT in pid:133 [ 73.865588][ T3999] kvm: kvm [3998]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3072 [ 73.882633][ T3999] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 73.889892][ T3999] rust_binder: Write failure EINVAL in pid:135 [ 74.064775][ T4013] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 74.329840][ T4057] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 74.447882][ T4064] binder: Unknown parameter 'coyBLV"i5ntext' [ 74.525965][ T4067] input: syz1 as /devices/virtual/input/input62 [ 74.747447][ T4080] binder: Bad value for 'max' [ 74.857636][ T4084] binder: Unknown parameter 'subj_type' [ 74.940678][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 74.940697][ T36] audit: type=1400 audit(1750412897.340:557): avc: denied { setcurrent } for pid=4091 comm="syz.4.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 74.986296][ T36] audit: type=1401 audit(1750412897.340:558): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 74.997238][ T4095] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.052639][ T4094] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 75.164995][ T4098] SELinux: failed to load policy [ 75.178396][ T4103] binder: Bad value for 'max' [ 75.218777][ T4105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154 [ 75.260710][ T36] audit: type=1400 audit(1750412897.660:559): avc: denied { associate } for pid=4104 comm="syz.1.1219" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.316412][ T4112] rust_binder: Error while translating object. [ 75.316456][ T4112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.324221][ T4112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1030 [ 75.345888][ T4110] cgroup: fork rejected by pids controller in /syz4 [ 75.391879][ T4115] block device autoloading is deprecated and will be removed. [ 75.408566][ T4115] syz.0.1223: attempt to access beyond end of device [ 75.408566][ T4115] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 75.650490][ T4236] rust_binder: Write failure EINVAL in pid:159 [ 75.712187][ T305] bridge_slave_1: left allmulticast mode [ 75.729051][ T305] bridge_slave_1: left promiscuous mode [ 75.746620][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.768811][ T305] bridge_slave_0: left allmulticast mode [ 75.774501][ T305] bridge_slave_0: left promiscuous mode [ 75.800078][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.883267][ T4249] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 75.929156][ T4254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1050 [ 75.940312][ T305] veth1_macvtap: left promiscuous mode [ 75.971000][ T305] veth0_vlan: left promiscuous mode [ 76.217262][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.224521][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.233470][ T4260] bridge_slave_0: entered allmulticast mode [ 76.240122][ T4260] bridge_slave_0: entered promiscuous mode [ 76.248334][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.255487][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.301569][ T4260] bridge_slave_1: entered allmulticast mode [ 76.308011][ T4260] bridge_slave_1: entered promiscuous mode [ 76.463730][ T4300] tap0: tun_chr_ioctl cmd 1074025678 [ 76.469862][ T4300] tap0: group set to 0 [ 76.476556][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.483743][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.494358][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.501432][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.538166][ T4260] veth0_vlan: entered promiscuous mode [ 76.552612][ T4260] veth1_macvtap: entered promiscuous mode [ 76.602050][ T4313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.602089][ T4313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 76.646553][ T4319] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 76.655555][ T4319] rust_binder: Error while translating object. [ 76.664312][ T4319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.670515][ T4319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1068 [ 76.690750][ T4321] input: syz1 as /devices/virtual/input/input63 [ 76.886664][ T4330] rust_binder: Write failure EINVAL in pid:82 [ 76.906530][ T4337] rust_binder: inc_ref_done called when no active inc_refs [ 76.931039][ T4340] binder: Unknown parameter 's' [ 77.072096][ T4350] rust_binder: Write failure EFAULT in pid:85 [ 77.306648][ T4366] binder: Bad value for 'max' [ 77.333411][ T36] audit: type=1400 audit(1750412899.730:560): avc: denied { setattr } for pid=4374 comm="syz.0.1272" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.425171][ T4379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 77.518107][ T4382] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 77.537460][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.537479][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.552641][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.564448][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.567456][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.577003][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.582739][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.598362][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.600584][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.608605][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.616493][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.632934][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.633064][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.648683][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.648794][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.656932][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.674046][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.674099][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.695548][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.695565][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.708185][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.714713][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.723339][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.729991][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.738061][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.745085][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.768101][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.775318][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.783562][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.791141][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.799349][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.805900][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.816935][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.817214][ T4392] rust_binder: Read failure Err(EAGAIN) in pid:1103 [ 77.823600][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.841831][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.849040][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.857113][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.877061][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.885468][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.892200][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.903361][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.910023][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.918081][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.925772][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.934512][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.944150][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.953855][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.961924][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.971083][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.977611][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 77.988341][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.994894][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.005375][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.016572][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.025339][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.032065][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.040200][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.046713][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.056071][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.062964][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.073844][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.080679][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.092232][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.099653][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.107892][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.134099][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.142238][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.148862][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.158422][ T4413] binder: Unknown parameter 'RtG^K1e' [ 78.165844][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.173426][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.182846][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.194956][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.209605][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.216210][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.224895][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.233481][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.241599][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.255647][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.264494][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.264502][ T4420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.279332][ T4420] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 78.279959][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.294654][ T4415] rust_binder: Write failure EFAULT in pid:20 [ 78.300569][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.308563][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.308661][ T4417] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 78.316656][ T4382] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 78.323495][ T4417] rust_binder: Error in use_page_slow: EBUSY [ 78.334263][ T4382] rust_binder: Read failure Err(EFAULT) in pid:100 [ 78.343766][ T4417] rust_binder: use_range failure EBUSY [ 78.358822][ T4417] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 78.366043][ T4417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 78.384514][ T4417] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 78.398772][ T4417] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1120 [ 78.408460][ T4427] __vm_enough_memory: pid: 4427, comm: syz.1.1288, bytes: 36028797018968064 not enough memory for the allocation [ 78.411172][ T4426] binder: Unknown parameter '0x0000000000000003' [ 78.463086][ T4433] rust_binder: Write failure EINVAL in pid:23 [ 78.463323][ T4431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 78.466565][ T4436] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 78.525647][ T4444] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 78.546730][ T4442] rust_binder: Error while translating object. [ 78.546772][ T4442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.557863][ T4442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1125 [ 78.633952][ T36] audit: type=1326 audit(1750412901.030:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4456 comm="syz.2.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4e278e929 code=0x0 [ 78.735818][ T4464] random: crng reseeded on system resumption [ 78.782219][ T4464] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 79.087151][ T4477] input: syz0 as /devices/virtual/input/input66 [ 79.103582][ T4477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.103615][ T4477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1136 [ 79.292778][ T36] audit: type=1400 audit(1750412901.690:562): avc: denied { execute } for pid=4514 comm="syz.1.1317" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 79.316429][ T4515] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 79.361443][ T4518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.368983][ T4518] rust_binder: Error in use_page_slow: ESRCH [ 79.369005][ T4518] rust_binder: use_range failure ESRCH [ 79.375469][ T4518] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 79.379203][ T9] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 79.388499][ T4518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.397037][ T4518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:249 [ 79.399067][ T9] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 79.615909][ T4536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.615945][ T4536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 79.626017][ T36] audit: type=1400 audit(1750412902.020:563): avc: denied { map } for pid=4533 comm="syz.2.1322" path="/proc/118/net/pfkey" dev="proc" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.667256][ T36] audit: type=1400 audit(1750412902.020:564): avc: denied { execute } for pid=4533 comm="syz.2.1322" path="/proc/118/net/pfkey" dev="proc" ino=4026532451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.692739][ T4540] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 79.780838][ T36] audit: type=1400 audit(1750412902.180:565): avc: denied { write } for pid=4543 comm="syz.0.1325" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 79.859736][ T4551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.859796][ T4551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.988273][ T4579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 80.324504][ T4610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1180 [ 80.734459][ T4632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.753955][ T4631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.762998][ T4632] binder: Bad value for 'max' [ 80.796098][ T4637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.796373][ T4637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 80.818217][ T4637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:46 [ 80.848262][ T4647] rust_binder: Write failure EINVAL in pid:157 [ 80.879798][ T4652] binder: Bad value for 'max' [ 80.892452][ T36] audit: type=1400 audit(1750412903.290:566): avc: denied { map } for pid=4651 comm="syz.0.1358" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.895215][ T4649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.944742][ T36] audit: type=1400 audit(1750412903.340:567): avc: denied { map } for pid=4648 comm="syz.4.1357" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 80.955703][ T4662] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 80.968427][ T4662] rust_binder: Read failure Err(EFAULT) in pid:268 [ 80.982037][ T36] audit: type=1400 audit(1750412903.340:568): avc: denied { execute } for pid=4648 comm="syz.4.1357" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 81.103232][ T4674] rust_binder: Write failure EINVAL in pid:1208 [ 81.106139][ T4674] rust_binder: Read failure Err(EAGAIN) in pid:1208 [ 81.123330][ T36] audit: type=1326 audit(1750412903.520:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.0.1364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e7098e929 code=0x0 [ 81.271502][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 81.277684][ T4699] rust_binder: Error while translating object. [ 81.286985][ T4699] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.293506][ T4699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 81.399225][ T4718] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 81.413613][ T4718] rust_binder: Error while translating object. [ 81.422669][ T4718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.422887][ T4723] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.429013][ T4718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 81.446599][ T4723] rust_binder: Error while translating object. [ 81.456211][ T4723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.462620][ T4723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 81.482854][ T4718] rust_binder: Write failure EFAULT in pid:290 [ 81.510277][ T4729] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 81.535625][ T4736] binder: Unknown parameter './binderfs' [ 81.664507][ T4745] rust_binder: Write failure EFAULT in pid:293 [ 81.696865][ T4747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.807785][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.822957][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.827508][ T4757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:83 [ 81.830426][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.847126][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.854845][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 81.862984][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 81.899995][ T4761] fido_id[4761]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.984472][ T4769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:91 [ 82.089968][ T4771] rust_binder: Write failure EFAULT in pid:93 [ 82.110927][ T4773] binder: Bad value for 'max' [ 82.176001][ T4781] binder: Unknown parameter 'non' [ 82.185286][ T36] audit: type=1400 audit(1750412904.590:570): avc: denied { setcheckreqprot } for pid=4783 comm="syz.0.1397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 82.304213][ T4786] rust_binder: Error while translating object. [ 82.304231][ T4786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 82.310663][ T4786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100 [ 82.381456][ T4794] kvm: kvm [4793]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 82.398493][ T4794] kvm: apic: phys broadcast and lowest prio [ 82.430516][ T4802] binder: Unknown parameter 'statsglobal' [ 82.445470][ T4804] random: crng reseeded on system resumption [ 82.453554][ T4806] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 82.453573][ T4806] rust_binder: Read failure Err(EFAULT) in pid:1229 [ 82.471807][ T4804] rust_binder: Error while translating object. [ 82.478561][ T4804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 82.484838][ T4804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:107 [ 82.497308][ T4810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.528519][ T4816] rust_binder: Write failure EINVAL in pid:1231 [ 82.536014][ T4816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.544057][ T4816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1231 [ 82.565286][ T4815] rust_binder: Write failure EINVAL in pid:114 [ 82.565335][ T4808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1231 [ 82.587259][ T4819] rust_binder: Write failure EINVAL in pid:195 [ 82.620955][ T4823] rust_binder: Error in use_page_slow: ESRCH [ 82.620983][ T4823] rust_binder: use_range failure ESRCH [ 82.627047][ T4823] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 82.633559][ T4823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 82.641599][ T4823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1234 [ 82.665849][ T4827] rust_binder: Write failure EFAULT in pid:1236 [ 82.754993][ T4835] rust_binder: Write failure EINVAL in pid:117 [ 82.763509][ T4835] rust_binder: Write failure EINVAL in pid:117 [ 82.783550][ T4837] kvm: kvm [4836]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 82.798998][ T4837] rust_binder: Error while translating object. [ 82.799039][ T4837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 82.805227][ T4837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1240 [ 82.913316][ T4846] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 82.949300][ T4842] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 82.957520][ T4843] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 83.011983][ T36] audit: type=1326 audit(1750412905.410:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4849 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b258e929 code=0x7ffc0000 [ 83.025409][ T4853] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 83.058878][ T4853] rust_binder: Write failure EINVAL in pid:305 [ 83.094705][ T36] audit: type=1326 audit(1750412905.410:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4849 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b258e929 code=0x7ffc0000 [ 83.108656][ T4867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.140236][ T4857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 83.158567][ T4858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 83.175384][ T4864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.184847][ T4869] rust_binder: Write failure EINVAL in pid:311 [ 83.279416][ T4867] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.439508][ T4899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.446240][ T4899] rust_binder: got new transaction with bad transaction stack [ 83.446258][ T4899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 83.475065][ T4904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 83.626838][ T4910] rust_binder: Write failure EINVAL in pid:217 [ 83.653085][ T4914] rust_binder: Write failure EFAULT in pid:219 [ 83.660375][ T4914] random: crng reseeded on system resumption [ 83.689239][ T4916] rust_binder: Write failure EFAULT in pid:132 [ 83.699063][ T4914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219 [ 83.705298][ T4914] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 83.714568][ T4914] rust_binder: Read failure Err(EFAULT) in pid:219 [ 83.730624][ T4912] rust_binder: Error while translating object. [ 83.740279][ T4920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 83.753013][ T4912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.763538][ T4912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 83.844394][ T4941] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 83.853588][ T4941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 83.861810][ T4941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1249 [ 83.889958][ T4943] rust_binder: Write failure EINVAL in pid:1251 [ 83.892182][ T36] audit: type=1400 audit(1750412906.290:573): avc: denied { setattr } for pid=4260 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.931415][ T4939] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.931448][ T4939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 84.055969][ T4950] binder: Bad value for 'stats' [ 84.143704][ T4954] rust_binder: Write failure EINVAL in pid:342 [ 84.246861][ T4962] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 84.268403][ T4962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 84.287538][ T4962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:344 [ 84.302312][ T4966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.332522][ T4969] rust_binder: Error while translating object. [ 84.352969][ T4969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 84.368171][ T4969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1260 [ 84.484794][ T4976] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 84.523618][ T4976] SELinux: failed to load policy [ 84.535579][ T4978] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 84.571062][ T4979] binder: Unknown parameter '' [ 84.928829][ T4988] input: syz0 as /devices/virtual/input/input69 [ 85.037593][ T4993] rust_binder: Error while translating object. [ 85.037620][ T4993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 85.048853][ T4993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 85.350704][ T5002] binder: Bad value for 'max' [ 85.418314][ T5004] input: syz1 as /devices/virtual/input/input70 [ 85.667491][ T5014] binder: Unknown parameter 'measure' [ 85.700741][ T5016] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 85.871991][ T5035] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 85.871991][ T5035] attempt to add with overflow [ 85.900588][ T5035] ------------[ cut here ]------------ [ 85.906110][ T5035] kernel BUG at rust/helpers/bug.c:7! [ 85.912429][ T5035] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 85.919401][ T5035] CPU: 1 UID: 0 PID: 5035 Comm: syz.2.1473 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 85.928199][ T36] audit: type=1400 audit(1750412908.310:574): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.932870][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.932885][ T5035] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 85.968218][ T36] audit: type=1400 audit(1750412908.310:575): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.970021][ T5035] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7c 6e ab bd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 36 aa e2 31 90 90 90 90 90 90 90 90 90 [ 86.010873][ T5035] RSP: 0018:ffffc9000b4773f0 EFLAGS: 00010246 [ 86.016969][ T5035] RAX: 000000000000008c RBX: 1ffff9200168ee80 RCX: d248ca60ee179f00 [ 86.018199][ T36] audit: type=1400 audit(1750412908.310:576): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.024954][ T5035] RDX: ffffc900016c1000 RSI: 00000000000036c8 RDI: 00000000000036c9 [ 86.024971][ T5035] RBP: ffffc9000b4773f0 R08: ffffc9000b4770e7 R09: 1ffff9200168ee1c [ 86.062179][ T5035] R10: dffffc0000000000 R11: fffff5200168ee1d R12: 0000000000000000 [ 86.070187][ T5035] R13: dffffc0000000000 R14: ffffc9000b477420 R15: ffffc9000b477450 [ 86.076620][ T36] audit: type=1400 audit(1750412908.310:577): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.078179][ T5035] FS: 00007fc4e36b66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 86.078200][ T5035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.078215][ T5035] CR2: 00007fc4e36b5f98 CR3: 0000000124faa000 CR4: 00000000003526b0 [ 86.118185][ T36] audit: type=1400 audit(1750412908.310:578): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.122249][ T5035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.122264][ T5035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.158675][ T5035] Call Trace: [ 86.161989][ T5035] [ 86.164937][ T5035] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 86.168176][ T36] audit: type=1400 audit(1750412908.310:579): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.172510][ T5035] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 86.203958][ T5035] ? kernel_text_address+0xa9/0xe0 [ 86.209097][ T5035] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 86.222850][ T5035] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 86.226307][ T36] audit: type=1400 audit(1750412908.310:580): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.229043][ T5035] ? arch_stack_walk+0x10b/0x170 [ 86.229075][ T5035] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 86.264119][ T5035] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 86.272044][ T5035] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 86.282047][ T5035] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 86.292667][ T5035] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 86.305025][ T5035] ? mas_wr_store_type+0x8eb/0x1ad0 [ 86.310251][ T5035] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 86.323043][ T5035] ? mas_preallocate+0x56e/0xc60 [ 86.328027][ T5035] ? __cfi_mas_preallocate+0x10/0x10 [ 86.333331][ T5035] ? kasan_save_alloc_info+0x40/0x50 [ 86.338636][ T5035] ? __asan_memset+0x39/0x50 [ 86.343261][ T5035] mmap_region+0x1371/0x1bd0 [ 86.348045][ T5035] ? __cfi_mmap_region+0x10/0x10 [ 86.353003][ T5035] ? __futex_queue+0x19a/0x340 [ 86.358005][ T5035] ? __kasan_check_read+0x15/0x20 [ 86.363048][ T5035] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 86.369323][ T5035] ? file_mmap_ok+0x147/0x1a0 [ 86.374023][ T5035] do_mmap+0xb6d/0x13c0 [ 86.378202][ T5035] ? __cfi_do_mmap+0x10/0x10 [ 86.382809][ T5035] ? down_write_killable+0xe9/0x2d0 [ 86.388026][ T5035] ? __cfi_down_write_killable+0x10/0x10 [ 86.393679][ T5035] vm_mmap_pgoff+0x38f/0x4e0 [ 86.398291][ T5035] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 86.403515][ T5035] ? __fget_files+0x2c5/0x340 [ 86.408226][ T5035] ksys_mmap_pgoff+0x166/0x1e0 [ 86.413546][ T5035] __x64_sys_mmap+0x121/0x140 [ 86.418251][ T5035] x64_sys_call+0x13bf/0x2ee0 [ 86.422967][ T5035] do_syscall_64+0x58/0xf0 [ 86.427413][ T5035] ? clear_bhb_loop+0x35/0x90 [ 86.432294][ T5035] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.438213][ T5035] RIP: 0033:0x7fc4e278e929 [ 86.442646][ T5035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.462274][ T5035] RSP: 002b:00007fc4e36b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.470721][ T5035] RAX: ffffffffffffffda RBX: 00007fc4e29b5fa0 RCX: 00007fc4e278e929 [ 86.478718][ T5035] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 86.486712][ T5035] RBP: 00007fc4e2810b39 R08: 0000000000000004 R09: 0000000000000000 [ 86.494704][ T5035] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 86.502787][ T5035] R13: 0000000000000000 R14: 00007fc4e29b5fa0 R15: 00007ffd41cf9d08 [ 86.510786][ T5035] [ 86.513824][ T5035] Modules linked in: [ 86.518341][ T5035] ---[ end trace 0000000000000000 ]--- [ 86.532037][ T5035] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 86.537460][ T5035] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 7c 6e ab bd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 36 aa e2 31 90 90 90 90 90 90 90 90 90 [ 86.557450][ T5035] RSP: 0018:ffffc9000b4773f0 EFLAGS: 00010246 [ 86.563731][ T5035] RAX: 000000000000008c RBX: 1ffff9200168ee80 RCX: d248ca60ee179f00 [ 86.571955][ T5035] RDX: ffffc900016c1000 RSI: 00000000000036c8 RDI: 00000000000036c9 [ 86.580150][ T5035] RBP: ffffc9000b4773f0 R08: ffffc9000b4770e7 R09: 1ffff9200168ee1c [ 86.588353][ T5035] R10: dffffc0000000000 R11: fffff5200168ee1d R12: 0000000000000000 [ 86.596433][ T5035] R13: dffffc0000000000 R14: ffffc9000b477420 R15: ffffc9000b477450 [ 86.605114][ T5035] FS: 00007fc4e36b66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 86.614426][ T5035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.621419][ T5035] CR2: 00007fc4e36b5f98 CR3: 0000000124faa000 CR4: 00000000003526b0 [ 86.635019][ T5035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.643324][ T5035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.651539][ T5035] Kernel panic - not syncing: Fatal exception [ 86.657909][ T5035] Kernel Offset: disabled [ 86.662226][ T5035] Rebooting in 86400 seconds..