last executing test programs: 1m32.881974407s ago: executing program 2 (id=1564): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r2, 0xa48a2000) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xc2a4a000) 1m32.807507778s ago: executing program 2 (id=1567): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) read(r1, &(0x7f00000001c0)=""/109, 0x6d) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1000}) r4 = openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'rdma'}]}, 0x6) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) read(r1, &(0x7f00000001c0)=""/109, 0x6d) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1000}) (async) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'rdma'}]}, 0x6) (async) 1m32.783077938s ago: executing program 2 (id=1569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ab00"]) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x5) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r7, &(0x7f0000000080)=""/93, 0xffffff6c) 1m32.001324751s ago: executing program 2 (id=1583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r3) (async) ioctl$FICLONE(r1, 0x40049409, r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000040)=0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000000000006c0a0000000800000000000000000000720000400000000009000000000000003c0a0000000000000500000000000000f208000000000000d70d000000000000"]) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000000000006c0a0000000800000000000000000000720000400000000009000000000000003c0a0000000000000500000000000000f208000000000000d70d000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0801, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x9) (async) write$cgroup_type(r7, &(0x7f0000000180), 0x9) 1m31.908190332s ago: executing program 2 (id=1585): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000002a80)={0x10001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x31) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000140)=[@increfs], 0x0, 0x0, &(0x7f00000002c0)}) 1m31.789310694s ago: executing program 2 (id=1586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0) write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1m16.794220565s ago: executing program 32 (id=1586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0) write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 37.89620779s ago: executing program 4 (id=2374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000960000400400"/24]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000005c0)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000118, 0x0, 0x1000}]}) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{}]}) 37.697322774s ago: executing program 4 (id=2377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_clone3(&(0x7f0000000480)={0x300040200, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xb) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffec4, 0x0, &(0x7f0000000600)=[@decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r4}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/223, 0x0, 0x1, 0x2a}, @fda={0x66646185, 0x0, 0x1, 0xd}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000040)}}, @request_death={0x400c630e, 0x3}, @enter_looper], 0x0, 0x1000000, 0x0}) 37.636333774s ago: executing program 4 (id=2379): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x86a80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB]) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) (async) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r6, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1fb, 0x5, 0xf000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r9, &(0x7f000001aa80)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xaece, 0x2) read(r12, &(0x7f0000000040)=""/8, 0x8) (async) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r13, 0x0) 37.521911376s ago: executing program 4 (id=2380): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfd66) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400500, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x2, 0xa14, 0x7fc000, 0xc6, 0x4, "ce96dbd95e7c70879b33a5d531b56deaa9a7ce"}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x3, 0x3, 0x1}) ioctl$KDDELIO(r0, 0x4b35, 0x1d0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000180)) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000001c0)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000200)={0x7, 0x5, 0x3, 0x4376}) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="10e8998a6cb4f80bca97f4880545e94f01c44d1186126559dd467e9946af8f2aeff2ae7a445a5dd3de7ed01f9a2e8512b2cd6007432a76ec4296eaaaa39c77a25ed24d35e36dcc961cc05528554cbbfc2c80796c8a8b949a2a42987cab9a91a46e0a39f5c8935a3a8deaff0d4bb66347cb601991e21d28d463ca4d08a65d1ee1c0563c188cd2c844a45fdc23de7a00c6b4b4dc6f4c6f9906d58974ec13830e5eb368676c29c1cdbebe4e38d242166e4c70799dbebd1603dfb411c3362d8765f9b39b60f4f60d450640e0fea25ff73870e92f81cb") ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000340)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4800, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000003c0)={0x4, 0x8, 0x9, 0xe0e, 0x1, "dd081b3336fa23351474c672cd40f6a27bb136", 0x3, 0x8000}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000400)=""/90) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000480)) ioctl$BLKRASET(r1, 0x1262, &(0x7f00000004c0)=0x7c) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000500), 0x159400, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000540)) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000580)) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000005c0)) ioctl$KDSETLED(r0, 0x4b32, 0x800) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000600)="135a33ff671c4c456f2771c686e95b3024c7b2535fd2620ecbc85082336d871b98434a91") ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000640)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000680)=0x7) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000006c0)=0xf) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000700)=0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000740)={r2, 0x8, 0x4, 0x7fff}) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000780)=""/80) 37.445352368s ago: executing program 4 (id=2381): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x40, 0x40) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) read$rfkill(r2, &(0x7f0000000200), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0xff05, 0x0) ioctl$NS_GET_USERNS(r4, 0x8004b708, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x400102, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) 37.444038948s ago: executing program 4 (id=2382): prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write(r0, &(0x7f0000004600)="a2d85ce6c04d5a02727d29519dcd4ea99884279c8564f9e08c3a", 0x1a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f000001aa80)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x9280, 0x0) ioctl$TCGETS(r7, 0x5401, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x40010, r2, 0xc0d2a000) syz_clone(0x511a8200, &(0x7f0000000040)="92370916e25289badb1ddfe648cb637d055714afbaaaee7598433fe7da6d178870a34e8683c1c84c446e6b8eb67fdb9171b321f3d9f93cb36f93eec534f75fe2307e737a59d84c0faaf009639beda7ac0076f296bd8f4a5f1922163fe31ba28b831175b31e19218423333e6f019c0f702985b5d2be60b5b0fd70af5fc9b940f74a6de68afc81c17c110ddf55fe38eb115147a80c1778b06ab34cecc84cb7b5432810e5c541311a929e18100bf76e435f672fa0fc4cabd75c200a4ce1014de1703ff2721a3cfe0eaff20de1b2565960008b9a1ecc08c0d684d4239f", 0xdb, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="6873ae9fda8837521a91a6337692121ee62e7c43b807333ed5731170f8ff4a5d38dd6ec44192a41ab628dcb62ea0ddd26d4a6fd95eb1439b2ab1644b63b144eae3b1c63e97e8b2168595513a909e3991d0d1aac3e67a247496c6df2169549258da46fd1c1aa119f8f8fd0b75d7a0db6c58da2b33113674c135c554a2e9951441aadcdad88267835f06a48e4038e940da9c8ee28b363d2fe54d7ed5154af2213aca94d097c06daefac5bfff04b590ad5434fa2344e15830f6c4a07b5e73d79d5ab9f11b4a01b1a9420e685ecf041624d0dca35d") mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r6, 0x293f000) 22.272466081s ago: executing program 33 (id=2382): prctl$PR_SET_VMA(0x48, 0x0, &(0x7f0000332000/0x4000)=nil, 0x4000, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write(r0, &(0x7f0000004600)="a2d85ce6c04d5a02727d29519dcd4ea99884279c8564f9e08c3a", 0x1a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f000001aa80)={0x2020}, 0x2020) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x9280, 0x0) ioctl$TCGETS(r7, 0x5401, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x40010, r2, 0xc0d2a000) syz_clone(0x511a8200, &(0x7f0000000040)="92370916e25289badb1ddfe648cb637d055714afbaaaee7598433fe7da6d178870a34e8683c1c84c446e6b8eb67fdb9171b321f3d9f93cb36f93eec534f75fe2307e737a59d84c0faaf009639beda7ac0076f296bd8f4a5f1922163fe31ba28b831175b31e19218423333e6f019c0f702985b5d2be60b5b0fd70af5fc9b940f74a6de68afc81c17c110ddf55fe38eb115147a80c1778b06ab34cecc84cb7b5432810e5c541311a929e18100bf76e435f672fa0fc4cabd75c200a4ce1014de1703ff2721a3cfe0eaff20de1b2565960008b9a1ecc08c0d684d4239f", 0xdb, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="6873ae9fda8837521a91a6337692121ee62e7c43b807333ed5731170f8ff4a5d38dd6ec44192a41ab628dcb62ea0ddd26d4a6fd95eb1439b2ab1644b63b144eae3b1c63e97e8b2168595513a909e3991d0d1aac3e67a247496c6df2169549258da46fd1c1aa119f8f8fd0b75d7a0db6c58da2b33113674c135c554a2e9951441aadcdad88267835f06a48e4038e940da9c8ee28b363d2fe54d7ed5154af2213aca94d097c06daefac5bfff04b590ad5434fa2344e15830f6c4a07b5e73d79d5ab9f11b4a01b1a9420e685ecf041624d0dca35d") mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r6, 0x293f000) 20.878548584s ago: executing program 5 (id=2553): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0xb4000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x511400, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x3, 0x66f04ba4}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x88721) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) r4 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x8080000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x513102, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x6, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x4, 0x2, 0x9, 0x3, 0x6, 0xfffffffffffffffe, 0xffffffffffffffed]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r8, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0) 9.147251532s ago: executing program 0 (id=2608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) (rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xda0, 0x0, 0x7}]}) (async, rerun: 64) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x12, 0x12, 0xc, 0x4c, 0x8, 0x20048000, 0x4, 0x0, 0x1}) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x4c, 0x0, 0x1, 0x3}, {0x16, 0x0, 0x0, 0xfffffffd}]}) (async, rerun: 64) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000840)={0x0, 0x3431, 0x0, [0x7, 0x9, 0x193, 0x4, 0x7], [0xa6e, 0x5, 0x39f745bb, 0xe, 0x1, 0x8000000000000001, 0x8000, 0xcd, 0x0, 0xffff, 0x1cb, 0x2d5e, 0x2, 0x8, 0x7, 0x4, 0x7fffffffffffffff, 0x7d, 0xffffffff, 0x7, 0xa72f, 0x5, 0x0, 0x6000000000, 0x5029, 0xb, 0xff, 0xfe24cf6, 0x4, 0x40, 0x5, 0x1, 0xffffffff, 0xa1, 0x5, 0xd, 0x4, 0x1, 0x8, 0x3, 0x3, 0x1, 0x10001, 0x40, 0xb219, 0x2, 0x3, 0x93c, 0x6, 0x219b03b8, 0x0, 0x80000000, 0x8001, 0x4, 0x2, 0x6a1e2adc, 0x8001, 0x2, 0x200, 0x7ff, 0x6, 0x2, 0x0, 0x101, 0x1, 0x5, 0x7, 0x2, 0x7ff, 0xffffffffffffffff, 0x7, 0xfffffffffffffffe, 0x8, 0x4, 0xffffffffffff0001, 0x3, 0x8001, 0x401, 0xffffffffffffff01, 0x1, 0x10000, 0xfffffffffffffff8, 0x100000000, 0x8, 0x5, 0x3, 0x7d43, 0x4, 0x2, 0x2, 0x100000001, 0x0, 0x3, 0x5, 0x6, 0x0, 0x7, 0x4, 0x620, 0xfffffffffffffff8, 0x100000001, 0xffffffffffffffff, 0x9, 0x0, 0x10, 0x7, 0x0, 0x7193, 0x9, 0x3b2f, 0x305e000000000, 0x7, 0x5, 0x2, 0x1, 0x0, 0x4, 0x1, 0x8000000000000000, 0x7, 0x9]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000001080)={r8, 0x82a, 0x9, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000c80)={r8, 0xa5ee, 0x80000001, 0x1}) 9.146619972s ago: executing program 1 (id=2609): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) (async) 9.140997652s ago: executing program 3 (id=2610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000100008004000000028811cbbeb63aed695731000000f601000001ff"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x2, 0x4}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xfffffffffffffff7}]}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000008605"]) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{}]}) 7.488017329s ago: executing program 0 (id=2611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r1, 0x0, 0x700) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r2) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x78, 0xfffffffffffffffb, 0x3, 0x9, 0x5, 0xfffffffffffffffe, 0x2, 0x80, 0x40007fffffff, 0x6, 0x7, 0x80000001, 0xfffffffffffff001, 0x3, 0xffffffffffffffff], 0x3000, 0x98302}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x4, 0xeeef0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0x3) ioctl$TUNSETLINK(r8, 0x400454cd, 0x301) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r9, 0x0) 7.487559449s ago: executing program 1 (id=2612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000740)=0x10, 0x12) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@flat=@handle={0x73682a85, 0x1b00, 0x1}, @fd, @fd}, &(0x7f0000000780)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.486709229s ago: executing program 3 (id=2613): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x4, &(0x7f00000000c0)=[0x0, 0x8, 0x3ff, 0x3ff], 0x7, 0x4, 0x1}) (async) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r1}, 0x4, &(0x7f00000000c0)=[0x0, 0x8, 0x3ff, 0x3ff], 0x7, 0x4, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 5.812952006s ago: executing program 0 (id=2614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) 5.812054516s ago: executing program 1 (id=2615): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000"]) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000000005000000000700000000000000"]) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x5000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000, 0x3}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) (async) write$UHID_CREATE(r0, &(0x7f0000000680)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001140)=""/5, 0x5}}, 0x120) (async) r7 = openat$tun(0xffffff9c, &(0x7f0000000240), 0x60a702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f0000000080)={{0x0, 0x8}, {0xf, 0x2}, 0x101}) r9 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r10, 0x0) 5.805471656s ago: executing program 3 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x80000019, 0x5, 0x0, 0x1, 0x5, 0x2, 0x7fffffff}, {0x1, 0xff, 0x4, 0x1400, 0x0, 0x6, 0x200}, {0x4, 0x6, 0x4, 0x1, 0x0, 0xffff}, {0x7, 0xfffffffb, 0x1, 0x6, 0xd, 0x4, 0x6}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x4, 0x8, 0x1e, 0x7f, 0x4, 0x2f, 0x9e, 0xf3, 0x1, 0xd4, 0x9, 0x3, 0xd, 0x6, 0x14}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) write$uinput_user_dev(r2, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000001440)={'syz1\x00', {0x4, 0x6, 0x7ff, 0x7ff}, 0x21, [0x0, 0x7, 0x9f, 0x3, 0x7fffffff, 0x0, 0xa5e, 0x4, 0x9, 0x3, 0x401, 0x10000, 0x0, 0x7, 0x80000001, 0x821d, 0x8c, 0x9, 0x2, 0x2, 0x2, 0xb8f, 0x0, 0x89, 0x5, 0xffffffff, 0xfff, 0x800, 0x42d2, 0x4, 0x3, 0x7, 0x5, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0xa, 0x400, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1, 0x7, 0xdfae, 0x7e6, 0x5, 0xfffffc01, 0x0, 0xa, 0x40, 0x5, 0xc4710000, 0x5, 0x4000000b, 0x6, 0x8, 0x17d4bd08, 0x80000000, 0x2], [0x7, 0x6, 0x1, 0x5, 0x0, 0x4, 0x3, 0x5, 0xb20, 0x4, 0x40, 0x4, 0x3, 0xffff0001, 0x4, 0xb, 0x4, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8007, 0x8000, 0xfff, 0x1000, 0x6, 0x5, 0xf9, 0x10001, 0x8, 0x9b, 0x2, 0x2, 0x4, 0x7245, 0xfffffff1, 0x80000000, 0x9, 0xd21, 0x8, 0x4, 0xffff, 0x3ff, 0x68e4, 0x7, 0x3, 0x7, 0x581, 0x3, 0x3, 0xc, 0xfff, 0x2, 0x200, 0x7, 0x800, 0x7, 0xffffffff, 0x119b, 0x9, 0x10, 0x4, 0x4], [0x0, 0x1ffff, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x1, 0x6, 0x5, 0x800, 0x8, 0x7a2d, 0x1650c5fd, 0x2ab, 0x3, 0x800, 0x717, 0x1, 0x5, 0x7, 0x7, 0x4f, 0x1, 0x4e1, 0x8, 0x87, 0x5, 0x8, 0x6e, 0x10, 0x3, 0xa02a, 0x6, 0x91d3, 0x7, 0x6, 0x9, 0x9e9, 0x5, 0x6, 0x7fff, 0xb, 0x8003, 0x1, 0x6, 0x8, 0x4f42, 0x6, 0xa2a, 0x4, 0x1, 0x10000, 0x6, 0xfffffff9, 0xffffffa0, 0x3, 0x6, 0x5f, 0xfffffe42, 0x9, 0x3ff, 0x10001, 0x2], [0xfff, 0x117, 0x200, 0x6, 0x800, 0x2, 0x1ed, 0x200, 0x6, 0x3ff, 0xffffffff, 0x8, 0x0, 0xffffea38, 0x2, 0x8, 0xfffff13b, 0x0, 0x43, 0x4068, 0xc51, 0x6, 0x9, 0x4, 0xfffffff7, 0x3, 0x8, 0x10a2a7e, 0x4, 0x3, 0xc0000000, 0x80000000, 0x80000000, 0x400, 0x7, 0x7, 0x1, 0x0, 0x0, 0x1ff, 0x2, 0x6a, 0x10, 0x8, 0x0, 0xb, 0x3, 0xfffffe01, 0x4, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x400, 0x1, 0x7, 0x800, 0x6, 0x675, 0x100, 0xc, 0x6, 0x20005]}, 0x45c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x4}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 3.957375416s ago: executing program 0 (id=2617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001, 0x2}) 3.956997966s ago: executing program 1 (id=2618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x1db, 0x0, 0xfffffffffffffffd}]}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x100000002000c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) 3.956732116s ago: executing program 3 (id=2619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x20d81a, &(0x7f0000000040)=ANY=[]) 2.081501056s ago: executing program 0 (id=2620): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TIOCCONS(r1, 0x541d) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000200)={0x4, 0x8}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000000e3ff000100c0"]) (async) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000240)={'binder1\x00'}) (async, rerun: 32) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x561, 0x0, 0x9}]}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) (async, rerun: 64) ioctl$KVM_RUN(r13, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x220f00, 0x0) 2.080027466s ago: executing program 1 (id=2621): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000e5ff9c02"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) 2.069135526s ago: executing program 3 (id=2622): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1ca) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x3) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0x6000, 0xdddd1000, 0xb, 0xc, 0x7, 0xbe, 0xe2, 0x3, 0x8, 0x2, 0x4, 0x6}, {0x2a221004, 0xffff1000, 0x8, 0x4, 0x1, 0x1, 0x70, 0x1, 0x9, 0x4, 0x0, 0x8}, {0x10000, 0x2, 0xf, 0x6d, 0xc2, 0xf8, 0x82, 0x4, 0xdc, 0x9, 0xf8, 0x1}, {0x1, 0xdddd0000, 0xb, 0xf7, 0x7, 0xd, 0x5, 0xf, 0x88, 0x4, 0x40, 0x21}, {0x8000000, 0xdddd0000, 0x8, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0xff, 0x0, 0x4}, {0x4000, 0x2000, 0x4, 0x8, 0x9, 0xcd, 0x8, 0x4e, 0x4, 0x10, 0x2, 0x4}, {0xffff1000, 0x100000, 0xd, 0x5, 0x1, 0x26, 0x6, 0xd2, 0xfb, 0xf6, 0x2, 0x28}, {0xeeee0000, 0x8000000, 0x0, 0x6, 0x4, 0x0, 0x20, 0xea, 0x3, 0x5, 0x2, 0x6c}, {0x5000, 0x7}, {0x2, 0x7ff}, 0x12, 0x0, 0x6000, 0x200, 0xe, 0x2000, 0xeeef0000, [0x6, 0x9, 0x6, 0x80]}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xb) read(r0, &(0x7f0000000200)=""/237, 0xed) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000300)='+&.\x00') ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000340)={[0x7fffffffffffffff, 0x9, 0x0, 0x76, 0x4, 0x6a, 0x81, 0x3, 0x3, 0x8, 0xed, 0x4, 0x2, 0x0, 0x1, 0x9], 0x4, 0x201}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000400)) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)={[{0x2b, 'net'}, {0x2d, 'io'}]}, 0x9) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)={[{0x2b, 'hugetlb'}, {0x2b, 'net_cls'}, {0x2b, 'io'}, {0x2d, 'pids'}, {0x2d, 'blkio'}]}, 0x23) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000540)={0xfffff373, 0x7}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r6, 0x50e18000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000600)={{0xffff, 0x0, 0x9, 0x10}, 'syz0\x00', 0x2c}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000680)) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000006c0)={0x2, {0x2, 0x4, 0x4, 0x4, 0x2, 0x10}}) r7 = openat$cgroup_ro(r6, &(0x7f0000000700)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) read(r7, &(0x7f0000000740)=""/229, 0xe5) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000840)={0x0, 0x6}) 1.032519ms ago: executing program 0 (id=2623): openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x1002000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x4, 0x4}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r6, 0xc0389424, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r7, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000500)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) 557.36µs ago: executing program 1 (id=2624): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) 0s ago: executing program 3 (id=2625): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 91.533835][ T4439] binder: Bad value for 'max' [ 91.539464][ T4439] rust_binder: Write failure EFAULT in pid:1024 [ 91.555877][ T4440] rust_binder: Error while translating object. [ 91.578200][ T4440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.584463][ T4440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 91.614896][ T36] audit: type=1400 audit(1750399581.029:548): avc: denied { setcheckreqprot } for pid=4443 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 91.691303][ T4444] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 91.700536][ T4444] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 91.709380][ T4444] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 91.721836][ T4444] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 91.731887][ T4444] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 91.741862][ T4444] kvm: requested 82971 ns i8254 timer period limited to 200000 ns [ 91.837881][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.837901][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.871491][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.871519][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.885260][ T36] audit: type=1400 audit(1750399581.299:549): avc: denied { block_suspend } for pid=4457 comm="syz.1.1238" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.886211][ T4456] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 91.904407][ T36] audit: type=1400 audit(1750399581.299:550): avc: denied { execute } for pid=4455 comm="syz.3.1237" path="/dev/binderfs/binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.914293][ T4452] rust_binder: Error in use_page_slow: ESRCH [ 91.959437][ T4456] rust_binder: Error while translating object. [ 91.965479][ T4456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.972194][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.982057][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.989207][ T4456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1031 [ 91.999281][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.008348][ T4452] rust_binder: use_range failure ESRCH [ 92.015318][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.018287][ T4452] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 92.020966][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.027392][ T4452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 92.035553][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.042435][ T4452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:451 [ 92.053730][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.069227][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.075905][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.082622][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.089175][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.095623][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.102216][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.109031][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.115643][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.122180][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.128709][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.135118][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.141768][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.148337][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.154770][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.161330][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.167862][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.175356][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.191870][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.200781][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.207479][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.217216][ T4453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.224384][ T4467] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 92.237092][ T4467] rust_binder: Error while translating object. [ 92.249275][ T4467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.255552][ T4467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 92.316370][ T4474] rust_binder: Error while translating object. [ 92.326512][ T4474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 92.332996][ T4474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:455 [ 92.422209][ T4479] rust_binder: Write failure EINVAL in pid:457 [ 92.503780][ T4493] random: crng reseeded on system resumption [ 92.581271][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.581299][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.587832][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.597146][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.602444][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.615440][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.615556][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.625088][ T4501] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.779926][ T36] audit: type=1400 audit(1750399582.199:551): avc: granted { setsecparam } for pid=4512 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 92.905873][ T4517] rust_binder: Write failure EFAULT in pid:299 [ 92.918284][ T36] audit: type=1326 audit(1750399582.329:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4518 comm="syz.3.1260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdedf8e929 code=0x0 [ 93.116280][ T36] audit: type=1400 audit(1750399582.529:553): avc: denied { mounton } for pid=4533 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 93.140370][ T12] bridge_slave_1: left allmulticast mode [ 93.146043][ T12] bridge_slave_1: left promiscuous mode [ 93.151911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.159705][ T12] bridge_slave_0: left allmulticast mode [ 93.165365][ T12] bridge_slave_0: left promiscuous mode [ 93.171276][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.323453][ T12] veth1_macvtap: left promiscuous mode [ 93.329076][ T12] veth0_vlan: left promiscuous mode [ 93.373345][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.380457][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.387679][ T4533] bridge_slave_0: entered allmulticast mode [ 93.394005][ T4533] bridge_slave_0: entered promiscuous mode [ 93.401200][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.413289][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.420555][ T4533] bridge_slave_1: entered allmulticast mode [ 93.426751][ T4533] bridge_slave_1: entered promiscuous mode [ 93.447202][ T4543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.447237][ T4543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:466 [ 93.486809][ T36] audit: type=1400 audit(1750399582.899:554): avc: denied { create } for pid=4533 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.492089][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498281][ T36] audit: type=1400 audit(1750399582.899:555): avc: denied { write } for pid=4533 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.516982][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.517103][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.560133][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.580640][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.588037][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.597030][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.604101][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.613845][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.620982][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.669128][ T4533] veth0_vlan: entered promiscuous mode [ 93.685616][ T4533] veth1_macvtap: entered promiscuous mode [ 93.726807][ T4563] SELinux: ebitmap: truncated map [ 93.737782][ T4563] SELinux: failed to load policy [ 93.770202][ T4563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 93.808806][ T4577] rust_binder: Write failure EFAULT in pid:1081 [ 94.030442][ T4583] binder: Bad value for 'max' [ 94.061806][ T4587] binder: Bad value for 'max' [ 94.073655][ T4587] binder: Bad value for 'max' [ 94.121903][ T4599] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 94.125008][ T4598] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.130117][ T4599] SELinux: failed to load policy [ 94.144163][ T4599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.182598][ T4603] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 94.182721][ T4599] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 94.199214][ T4602] kvm: user requested TSC rate below hardware speed [ 94.215388][ T4599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.215420][ T4599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307 [ 94.225705][ T4604] kvm: user requested TSC rate below hardware speed [ 94.242287][ T4602] binder: Bad value for 'stats' [ 94.361187][ T4611] rust_binder: Write failure EFAULT in pid:16 [ 94.673714][ T4618] SELinux: security_context_str_to_sid (selinux/checkreqprot) failed with errno=-22 [ 94.705593][ T4622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.757345][ T4622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311 [ 94.778524][ T4629] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 94.795370][ T4629] rust_binder: Write failure EINVAL in pid:25 [ 94.806627][ T4631] binder: Unknown parameter '"' [ 94.936031][ T4636] SELinux: policydb magic number 0x19 does not match expected magic number 0xf97cff8c [ 94.946153][ T4636] SELinux: failed to load policy [ 95.018998][ T4638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 95.040559][ T4642] rust_binder: Error in use_page_slow: ESRCH [ 95.040583][ T4642] rust_binder: use_range failure ESRCH [ 95.048110][ T4642] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 95.053700][ T4642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 95.061822][ T4642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:496 [ 95.130190][ T4647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499 [ 95.130268][ T4648] rust_binder: Error while translating object. [ 95.149206][ T4648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 95.155403][ T4648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:499 [ 95.441740][ T4663] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 95.450978][ T4663] rust_binder: Error in use_page_slow: EBUSY [ 95.461559][ T4663] rust_binder: use_range failure EBUSY [ 95.468201][ T4663] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 95.474938][ T4663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 95.483878][ T4663] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 95.493411][ T4663] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1113 [ 95.569446][ T4668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:315 [ 95.656322][ T4679] rust_binder: Write failure EINVAL in pid:320 [ 95.715460][ T4688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:322 [ 95.747241][ T4693] random: crng reseeded on system resumption [ 95.778509][ T4696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.778581][ T4696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.795103][ T4700] rust_binder: Write failure EFAULT in pid:333 [ 95.900611][ T4712] rust_binder: Error while translating object. [ 95.915656][ T4712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.924299][ T4712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29 [ 95.981785][ T4720] rust_binder: Write failure EINVAL in pid:502 [ 96.004123][ T4710] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 96.019565][ T4722] input: syz1 as /devices/virtual/input/input63 [ 96.019662][ T4723] binder: Unknown parameter 'non' [ 96.044496][ T4723] binder: Bad value for 'stats' [ 96.076790][ T4726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 96.077136][ T4726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.077159][ T4727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 96.382178][ T4736] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 96.454118][ T4740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 96.511077][ T4743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 96.814531][ T4751] rust_binder: Write failure EFAULT in pid:341 [ 96.842320][ T4751] kvm: user requested TSC rate below hardware speed [ 96.929776][ T4757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.929864][ T4757] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 96.955813][ T4758] rust_binder: Error while translating object. [ 96.973718][ T4758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 96.982734][ T4758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:341 [ 97.013796][ T4764] can0: slcan on ttyS3. [ 97.028184][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 97.028203][ T36] audit: type=1400 audit(1750399586.429:580): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 97.063982][ T36] audit: type=1400 audit(1750399586.429:581): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.090286][ T4764] rust_binder: Write failure EFAULT in pid:1143 [ 97.092325][ T36] audit: type=1400 audit(1750399586.429:582): avc: denied { read } for pid=148 comm="dhcpcd" name="n17" dev="tmpfs" ino=9010 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.122230][ T36] audit: type=1400 audit(1750399586.429:583): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=9010 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.122454][ T4764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 97.145201][ T36] audit: type=1400 audit(1750399586.429:584): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=9010 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.155146][ T4764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1143 [ 97.199761][ T36] audit: type=1400 audit(1750399586.449:585): avc: denied { read } for pid=4770 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.238097][ T36] audit: type=1400 audit(1750399586.449:586): avc: denied { open } for pid=4770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.266778][ T4787] binder: Bad value for 'max' [ 97.277728][ T36] audit: type=1400 audit(1750399586.449:587): avc: denied { getattr } for pid=4770 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.304947][ T36] audit: type=1400 audit(1750399586.499:588): avc: denied { associate } for pid=4763 comm="syz.3.1336" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 97.338753][ T36] audit: type=1400 audit(1750399586.609:589): avc: denied { write } for pid=4769 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.423605][ T4764] can0 (unregistered): slcan off ttyS3. [ 97.442269][ T4802] binder: Unknown parameter 'defcontext01777777777777777777777' [ 97.474226][ T4808] rust_binder: Error while translating object. [ 97.474267][ T4808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 97.481378][ T4808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1149 [ 97.683935][ T4830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:515 [ 97.818003][ T4850] binder: Unknown parameter 'non' [ 97.833649][ T4851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.842267][ T4846] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 97.856567][ T4857] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 97.893324][ T4853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 97.901510][ T4853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:522 [ 97.930632][ T4868] rust_binder: Write failure EINVAL in pid:526 [ 97.946840][ T4868] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.957615][ T4868] rust_binder: Write failure EFAULT in pid:526 [ 97.979458][ T4868] rust_binder: Write failure EINVAL in pid:526 [ 98.016109][ T4880] binder: Bad value for 'stats' [ 98.121508][ T290] cgroup: fork rejected by pids controller in /syz3 [ 98.134663][ T4886] SELinux: failed to load policy [ 98.161712][ T4895] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 98.161733][ T4895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.173358][ T4895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:79 [ 98.179485][ T4900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 98.195747][ T4900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:533 [ 98.276065][ T4907] SELinux: Context ²¤öu8Š,¤€gÕˆ@íö+”~Òõ‡ qú plîòêÊ É¯TýVL [ 98.276065][ T4907] ÁJá+°wsÍz…ô"™ïaÀçÕ ©* Ö3àBgû[ç’æ·Áá^B‡?„ìZUój„|.ÆŒÐݺÎ/ÂY"ƒÅký³……¬l.Xj_¯Ö5çׄëÿ‰ëÿA’®£¾#÷„˜—ø9|Ù+«Íšëu;N¿MU®ü)ú)œŸ%­?à{©¢Jõñ°;œä óGñ^¹ö÷uê”v°vi“&Fërö*ƒ‹ézÑômÌÇÉšFõ Ä¶AãFÉ™ó [ 98.276065][ T4907] mK‡M5ú™äì1Øö~!Rw¿Ò‰:¸ÄÉ™Ñ7^×¥S¢]b¥¡l Vó¯…Á|§@Ö.ÌÑ@ñ&°õ†Ñ§ë7Ky¯O“û³g’=÷³%Ô@+ËQZÊÖ is not valid (left unmapped). [ 98.360595][ T4911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.360901][ T4911] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 98.367361][ T4911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.376938][ T4911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:81 [ 98.387418][ T311] bridge_slave_1: left allmulticast mode [ 98.408183][ T311] bridge_slave_1: left promiscuous mode [ 98.408629][ T4912] random: crng reseeded on system resumption [ 98.418253][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.448774][ T311] bridge_slave_0: left allmulticast mode [ 98.454637][ T311] bridge_slave_0: left promiscuous mode [ 98.467604][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.490124][ T4922] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 98.490149][ T4922] rust_binder: Error while translating object. [ 98.500832][ T4922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.507082][ T4922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 98.573907][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.590208][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.597261][ T4923] bridge_slave_0: entered allmulticast mode [ 98.603613][ T4923] bridge_slave_0: entered promiscuous mode [ 98.610366][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.617508][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.624675][ T4923] bridge_slave_1: entered allmulticast mode [ 98.631096][ T4923] bridge_slave_1: entered promiscuous mode [ 98.693175][ T311] veth1_macvtap: left promiscuous mode [ 98.704966][ T311] veth0_vlan: left promiscuous mode [ 98.711004][ T4938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 98.766987][ T4943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.771447][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.790628][ T4923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.794156][ T4943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.797925][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.811445][ T4923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.816054][ T4947] SELinux: policydb string length 14080 does not match expected length 8 [ 98.827958][ T4947] SELinux: failed to load policy [ 98.848821][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.858632][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.868933][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.875990][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.885139][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.892208][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.917177][ T4923] veth0_vlan: entered promiscuous mode [ 98.927053][ T4923] veth1_macvtap: entered promiscuous mode [ 98.975478][ T4952] rust_binder: Failed to allocate buffer. len:4216, is_oneway:true [ 98.975497][ T4952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.983575][ T4952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:2 [ 99.033931][ T4954] SELinux: policydb version 532 does not match my version range 15-33 [ 99.051924][ T4954] SELinux: failed to load policy [ 99.058703][ T4954] rust_binder: Error while translating object. [ 99.058732][ T4954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.066649][ T4954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 99.263800][ T4964] rust_binder: Write failure EFAULT in pid:387 [ 99.376766][ T4970] rust_binder: Error while translating object. [ 99.383297][ T4970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.389718][ T4970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 99.400011][ T4971] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 99.419017][ T4974] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 99.437278][ T4976] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 99.445269][ T4976] rust_binder: Error while translating object. [ 99.456177][ T4976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.462430][ T4976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 99.474376][ T4976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.483661][ T4976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 99.507811][ T4978] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 99.513722][ T4981] rust_binder: Write failure EFAULT in pid:558 [ 99.628719][ T4998] input: syz0 as /devices/virtual/input/input65 [ 99.629580][ T5000] input: syz1 as /devices/virtual/input/input66 [ 99.637669][ T4998] input: failed to attach handler leds to device input65, error: -6 [ 99.660236][ T4998] random: crng reseeded on system resumption [ 99.691299][ T5002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.697279][ T4998] rust_binder: Error while translating object. [ 99.706772][ T4998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 99.713377][ T5002] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 99.724441][ T4998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:396 [ 99.748744][ T5007] binder: Bad value for 'defcontext' [ 99.776222][ T5009] tap0: tun_chr_ioctl cmd 1074025677 [ 99.785021][ T5011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.785054][ T5011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:565 [ 99.786217][ T5009] tap0: linktype set to 774 [ 99.809693][ T5013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 99.829928][ T5016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.880375][ T5018] SELinux: policydb version 698690932 does not match my version range 15-33 [ 99.896297][ T5018] SELinux: failed to load policy [ 99.908926][ T5019] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 99.909048][ T5019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 99.931161][ T5023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 99.934552][ T5025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.940841][ T5023] rust_binder: Write failure EINVAL in pid:571 [ 99.952506][ T5025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.963462][ T5026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.983514][ T5032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.992985][ T5034] binder: Bad value for 'max' [ 100.003488][ T5036] rust_binder: Write failure EFAULT in pid:577 [ 100.072461][ T5042] rust_binder: Write failure EFAULT in pid:108 [ 100.095663][ T5042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.104004][ T5045] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 100.170881][ T5049] rust_binder: Error while translating object. [ 100.170916][ T5049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.177268][ T5049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 100.187379][ T5049] rust_binder: Write failure EFAULT in pid:108 [ 100.196978][ T5049] rust_binder: Write failure EINVAL in pid:108 [ 100.222052][ T5051] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 100.236138][ T5051] SELinux: failed to load policy [ 100.328779][ T5057] rust_binder: Error while translating object. [ 100.328814][ T5057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.335656][ T5057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:417 [ 100.387885][ T5064] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 100.405785][ T5064] rust_binder: Write failure EINVAL in pid:587 [ 100.423468][ T5067] binder: Unknown parameter 'nr_free_pages 1527610 [ 100.423468][ T5067] nr_zone_inactive_anon 7 [ 100.423468][ T5067] nr_zone_active_anon 9547 [ 100.423468][ T5067] nr_zone_inactive_file 2216 [ 100.423468][ T5067] nr_zone_active_file 20638 [ 100.423468][ T5067] nr_zone_unevictable 0 [ 100.423468][ T5067] nr_zone_write_pending 114 [ 100.423468][ T5067] nr_mlock 0 [ 100.423468][ T5067] nr_bounce 0 [ 100.423468][ T5067] nr_zspages 0 [ 100.423468][ T5067] nr_free_cma 0 [ 100.423468][ T5067] nr_inactive_anon 7 [ 100.423468][ T5067] nr_active_anon 9547 [ 100.423468][ T5067] nr_inactive_file 2216 [ 100.423468][ T5067] nr_active_file 20638 [ 100.423468][ T5067] nr_unevictable 0 [ 100.423468][ T5067] nr_slab_reclaimable 6806 [ 100.423468][ T5067] nr_slab_unreclaimable 70806 [ 100.423468][ T5067] nr_isolated_anon 0 [ 100.423468][ T5067] nr_isolated_file 0 [ 100.423468][ T5067] workingset_nodes 13 [ 100.423468][ T5067] workingset_refault_anon 166 [ 100.423468][ T5067] workingset_refault_file 3429 [ 100.423468][ T5067] workingset_activate_anon 19 [ 100.423468][ T5067] workingset_activate_file 886 [ 100.423468][ T5067] workingset_restore_anon 0 [ 100.423468][ T5067] workingset_restore_file 15 [ 100.423468][ T5067] workingset_nodereclaim 0 [ 100.423468][ T5067] nr_anon_pages 6316 [ 100.423468][ T5067] nr_mapped 26737 [ 100.423468][ T5067] nr_file_pages 26063 [ 100.423468][ T5067] nr_dirty 114 [ 100.423468][ T5067] nr_writeback 0 [ 100.423468][ T5067] nr_writeback_temp 0 [ 100.423468][ T5067] nr_shmem 3213 [ 100.423468][ T5067] nr_shmem_hugepages 0 [ 100.423468][ T5067] nr_shmem_pmdmapped 0 [ 100.423468][ T5067] nr_file_hugepages 0 [ 100.423468][ T5067] nr_file_pmdmapped 0 [ 100.423468][ T5067] nr_anon_transparent_hugepages 0 [ 100.423468][ T5067] nr_vmscan_write 76264 [ 100.423468][ T5067] nr_vmscan_immediate_reclaim 0 [ 100.423468][ T5067] nr_dirtied 1612 [ 100.423468][ T5067] nr_written 6808 [ 100.423468][ T5067] nr_throttled_written 0 [ 100.430300][ T5060] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 100.623317][ T5060] rust_binder: Error in use_page_slow: EBUSY [ 100.634868][ T5060] rust_binder: use_range failure EBUSY [ 100.642221][ T5060] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 100.647804][ T5060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 100.655996][ T5060] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 100.689290][ T5072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.713460][ T5060] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:420 [ 100.714992][ T5075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26 [ 100.811822][ T5077] rust_binder: Error while translating object. [ 100.838256][ T5077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 100.845363][ T5077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:28 [ 100.865000][ T5077] rust_binder: Write failure EFAULT in pid:28 [ 101.239114][ T5133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 101.300487][ T5139] rust_binder: Error in use_page_slow: ESRCH [ 101.300503][ T5139] rust_binder: use_range failure ESRCH [ 101.306613][ T5139] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.312556][ T5139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.320889][ T5139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:447 [ 101.346530][ T5142] rust_binder: Write failure EINVAL in pid:450 [ 101.371917][ T5144] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 101.465502][ T5150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:454 [ 101.499778][ T5152] rust_binder: Write failure EINVAL in pid:456 [ 101.644975][ T5165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.681890][ T5168] rust_binder: Write failure EFAULT in pid:618 [ 101.723748][ T5171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 101.779193][ T5179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.798111][ T5179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 101.814344][ T5179] rust_binder: Error while translating object. [ 101.823678][ T5179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 101.830889][ T5179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:621 [ 102.037202][ T5208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.046450][ T5208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:469 [ 102.108545][ T5221] binder: Unknown parameter '18446744073709551615' [ 102.141405][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 102.141535][ T36] audit: type=1326 audit(1750399591.559:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.1.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x0 [ 102.286241][ T5242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.297800][ T5242] rust_binder: Error while translating object. [ 102.297843][ T5242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 102.304109][ T5242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:47 [ 102.326617][ T36] audit: type=1326 audit(1750399591.739:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5246 comm="syz.2.1483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f734138e929 code=0x0 [ 102.366552][ T5250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.425010][ T5250] rust_binder: Error in use_page_slow: ESRCH [ 102.425010][ T5252] rust_binder: Error in use_page_slow: ESRCH [ 102.425040][ T5252] rust_binder: use_range failure ESRCH [ 102.431264][ T5250] rust_binder: use_range failure ESRCH [ 102.438078][ T5252] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 102.442924][ T5250] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 102.449083][ T5252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.464621][ T5250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.468200][ T5252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:478 [ 102.481613][ T5250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:478 [ 102.514488][ T5257] rust_binder: Error in use_page_slow: ESRCH [ 102.523904][ T5257] rust_binder: use_range failure ESRCH [ 102.530044][ T5257] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 102.535615][ T5257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 102.543884][ T5257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:483 [ 102.734363][ T5265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.796620][ T5267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.803412][ T5268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 102.809962][ T5268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:493 [ 102.855636][ T5276] SELinux: failed to load policy [ 102.877434][ T5277] input: syz0 as /devices/virtual/input/input67 [ 103.062659][ T5286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.062685][ T5286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 103.169451][ T5291] rust_binder: Error while translating object. [ 103.181123][ T5291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 103.187415][ T5291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 103.214869][ T5293] binder: Unknown parameter 'processor : 0 [ 103.214869][ T5293] vendor_id : GenuineIntel [ 103.214869][ T5293] cpu family : 6 [ 103.214869][ T5293] model : 79 [ 103.214869][ T5293] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 103.214869][ T5293] stepping : 0 [ 103.214869][ T5293] microcode : 0xffffffff [ 103.214869][ T5293] cpu MHz : 2200.210 [ 103.214869][ T5293] cache size : 56320 KB [ 103.214869][ T5293] physical id : 0 [ 103.214869][ T5293] siblings : 2 [ 103.214869][ T5293] core id : 0 [ 103.214869][ T5293] cpu cores : 1 [ 103.214869][ T5293] apicid : 0 [ 103.214869][ T5293] initial apicid : 0 [ 103.214869][ T5293] fpu : yes [ 103.214869][ T5293] fpu_exception : yes [ 103.214869][ T5293] cpuid level : 13 [ 103.214869][ T5293] wp : yes [ 103.214869][ T5293] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 103.214869][ T5293] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 103.443212][ T5330] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 103.452534][ T5333] binder: Unknown parameter 'õÓ€o˜÷ztn*ñî©6$õPdÍÇé`èï' [ 103.633853][ T36] audit: type=1326 audit(1750399593.049:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.1507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f734138e929 code=0x0 [ 103.728747][ T5348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.737507][ T36] audit: type=1326 audit(1750399593.149:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5337 comm="syz.2.1507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f734138e929 code=0x0 [ 103.741965][ T5347] SELinux: security policydb version 17 (MLS) not backwards compatible [ 103.785952][ T5347] SELinux: failed to load policy [ 103.806038][ T5348] SELinux: security policydb version 17 (MLS) not backwards compatible [ 103.807362][ T36] audit: type=1326 audit(1750399593.219:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5346 comm="syz.0.1510" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe66238e929 code=0x0 [ 103.814434][ T5348] SELinux: failed to load policy [ 103.852801][ T5354] rust_binder: Write failure EFAULT in pid:658 [ 103.889551][ T5366] binder: Unknown parameter 'smackfsroot' [ 103.932912][ T5368] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 103.940723][ T5368] SELinux: failed to load policy [ 103.982647][ T5373] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 103.990772][ T5373] rust_binder: Write failure EINVAL in pid:661 [ 104.017777][ T5375] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 104.166139][ T5384] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1024 [ 104.174503][ T5384] rust_binder: Write failure EINVAL in pid:75 [ 104.174751][ T5386] input: syz0 as /devices/virtual/input/input70 [ 104.189804][ T5386] input: failed to attach handler leds to device input70, error: -6 [ 104.258943][ T5396] rust_binder: Write failure EINVAL in pid:198 [ 104.301672][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.359913][ T5404] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 104.367201][ T5404] rust_binder: Write failure EINVAL in pid:204 [ 104.367539][ T5404] rust_binder: Write failure EINVAL in pid:204 [ 104.412683][ T5412] binder: Bad value for 'stats' [ 104.737844][ T5423] rust_binder: Error in use_page_slow: ESRCH [ 104.737871][ T5423] rust_binder: use_range failure ESRCH [ 104.744305][ T5423] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 104.750002][ T5423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 104.757984][ T5423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:530 [ 104.812684][ T5433] rust_binder: Error while translating object. [ 104.822218][ T5433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 104.828886][ T5433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:229 [ 105.111172][ T5442] SELinux: failed to load policy [ 105.126973][ T5442] rust_binder: Write failure EINVAL in pid:234 [ 105.134743][ T5445] binder: Unknown parameter 'stýts' [ 105.150949][ T5445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 105.150998][ T5445] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.160396][ T5445] rust_binder: Read failure Err(EFAULT) in pid:236 [ 105.197495][ T5447] input: syz1 as /devices/virtual/input/input71 [ 105.226413][ T4559] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 105.234899][ T4559] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.329501][ T5455] binder: Unknown parameter '' [ 105.826544][ T5475] rust_binder: Got transaction with invalid offset. [ 105.826578][ T5475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 105.833331][ T5475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 105.856968][ T5477] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 105.889435][ T5479] binder: Unknown parameter 'f‹ª¶Ž ç«'ÖcÝî÷Óë3‹' [ 105.921992][ T36] audit: type=1400 audit(1750399595.339:621): avc: granted { setsecparam } for pid=5478 comm="syz.0.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 106.082796][ T5497] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 17) [ 106.082820][ T5497] rust_binder: Error while translating object. [ 106.093605][ T5497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.097045][ T5492] binder: Bad value for 'max' [ 106.100024][ T5497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 106.114192][ T5495] binder: Bad value for 'max' [ 106.251396][ T5520] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 106.303932][ T5518] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 106.303965][ T5518] rust_binder: Error in use_page_slow: EBUSY [ 106.317740][ T5518] rust_binder: use_range failure EBUSY [ 106.318197][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 106.325316][ T5518] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 106.329241][ T1811] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.354654][ T5518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 106.354686][ T5518] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 106.364268][ T5518] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:557 [ 106.490604][ T5540] binder: Bad value for 'stats' [ 106.551076][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.558181][ T5547] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.644326][ T5558] input: syz1 as /devices/virtual/input/input74 [ 106.706064][ T5560] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.051214][ T5579] rust_binder: Write failure EFAULT in pid:286 [ 107.063382][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.082275][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.090131][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.097733][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.111539][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.113039][ T5586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 107.130047][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.148630][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.156479][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.168949][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.180920][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.189705][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.197821][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.215569][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.223135][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.231733][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.239389][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.246893][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.253356][ T36] audit: type=1400 audit(1750399596.669:622): avc: denied { setattr } for pid=2757 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.254733][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.285926][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.293596][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.303300][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.311786][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.321444][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.329120][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.338533][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.346066][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.353765][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.353762][ T5596] rust_binder: Write failure EFAULT in pid:293 [ 107.353793][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.378277][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.385713][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.398180][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.405872][ T305] hid-generic 0001:0000:0000.000B: unknown main item tag 0x0 [ 107.416038][ T305] hid-generic 0001:0000:0000.000B: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 107.460408][ T5597] fido_id[5597]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.475839][ T5599] rust_binder: Error while translating object. [ 107.475876][ T5599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.488087][ T5599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 107.514523][ T5599] binder: Unknown parameter '¦CvÑ66max' [ 107.745897][ T5611] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 107.755271][ T5612] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 107.793305][ T5619] binder: Unknown parameter 'nXI77777777777777777777' [ 107.806195][ T5619] binder: Unknown parameter 'uid<00000000000000000000' [ 108.065724][ T5633] rust_binder: Write failure EINVAL in pid:320 [ 108.095846][ T5637] binder: Unknown parameter 'defcontext01777777777777777777777' [ 108.123777][ T5639] binder: Unknown parameter 'measure' [ 108.237116][ T36] audit: type=1326 audit(1750399597.649:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5644 comm="syz.0.1604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe66238e929 code=0x0 [ 108.310004][ T5650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.375650][ T5657] input: syz0 as /devices/virtual/input/input75 [ 108.396294][ T5652] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 108.396325][ T5652] rust_binder: Error in use_page_slow: EBUSY [ 108.407133][ T5652] rust_binder: use_range failure EBUSY [ 108.413510][ T5652] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 108.419232][ T5652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 108.426952][ T5652] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 108.436628][ T5652] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:604 [ 108.455313][ T5657] binder: Unknown parameter 'ÿc@' [ 108.577392][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.583637][ T1811] Bluetooth: hci0: command 0x1003 tx timeout [ 108.826772][ T5680] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 108.844581][ T5680] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 108.948214][ T5685] rust_binder: Write failure EFAULT in pid:96 [ 109.007007][ T5687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.139281][ T5693] binder: Unknown parameter '184467440737095516150x0000000000000003' [ 109.200812][ T36] audit: type=1326 audit(1750399598.619:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5695 comm="syz.3.1620" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b3e18e929 code=0x0 [ 109.292918][ T5703] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 109.292942][ T5703] rust_binder: Error while translating object. [ 109.301801][ T5703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.307987][ T5703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 109.318169][ T5704] rust_binder: Error while translating object. [ 109.329600][ T5704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.335959][ T5704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618 [ 109.404944][ T36] audit: type=1400 audit(1750399598.819:625): avc: denied { execute } for pid=5705 comm="syz.3.1623" path="/proc/diskstats" dev="proc" ino=4026532090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 109.507728][ T5714] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.533043][ T5718] rust_binder: Write failure EINVAL in pid:122 [ 109.533308][ T5718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.540303][ T5718] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 109.575956][ T5722] binder: Unknown parameter '' [ 109.606296][ T5724] random: crng reseeded on system resumption [ 109.630744][ T5726] rust_binder: inc_ref_done called when no active inc_refs [ 109.653467][ T5724] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 109.667957][ T5724] rust_binder: Write failure EINVAL in pid:128 [ 109.689002][ T5734] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 109.710969][ T5734] rust_binder: Write failure EINVAL in pid:357 [ 109.721920][ T5734] tap0: tun_chr_ioctl cmd 1074025678 [ 109.733687][ T5734] tap0: group set to 0 [ 109.754860][ T5739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.755275][ T5739] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 109.979383][ T5746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.226472][ T5766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.240183][ T5766] rust_binder: Write failure EINVAL in pid:629 [ 110.343068][ T5768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 110.359371][ T5768] rust_binder: Read failure Err(EFAULT) in pid:140 [ 110.440861][ T5774] rust_binder: Read failure Err(EAGAIN) in pid:372 [ 110.475626][ T5774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.488298][ T5774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372 [ 110.498619][ T5776] binder: Unknown parameter 'fscontext?}' [ 110.645670][ T5786] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 110.746054][ T5788] rust_binder: Error while translating object. [ 110.746097][ T5788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.753353][ T5788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377 [ 110.784080][ T5790] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 110.851673][ T5794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:379 [ 110.882835][ T5799] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.990010][ T5804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 111.350184][ T5814] binder: Bad value for 'stats' [ 111.390009][ T5814] can0: slcan on ttyS3. [ 111.421716][ T5814] can0 (unregistered): slcan off ttyS3. [ 111.428643][ T36] audit: type=1400 audit(1750399600.849:626): avc: denied { map } for pid=5813 comm="syz.3.1660" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 111.497945][ T5824] SELinux: failed to load policy [ 111.525649][ T5827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 111.525679][ T5827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:393 [ 111.648629][ T5845] binder: Unknown parameter 'cont%xt' [ 111.696911][ T5845] binder: Unknown parameter 'posixacl' [ 111.963359][ T5871] kvm: user requested TSC rate below hardware speed [ 111.979590][ T5871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.075146][ T5876] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.085367][ T5876] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 112.098313][ T5876] rust_binder: Read failure Err(EFAULT) in pid:646 [ 112.139571][ T5876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.189391][ T5867] rust_binder: Read failure Err(EFAULT) in pid:173 [ 112.263833][ T5880] rust_binder: Write failure EFAULT in pid:400 [ 112.271108][ T5880] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 112.287077][ T5881] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 112.434428][ T5896] binder: Unknown parameter 'processor : 0 [ 112.434428][ T5896] vendor_id : GenuineIntel [ 112.434428][ T5896] cpu family : 6 [ 112.434428][ T5896] model : 79 [ 112.434428][ T5896] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 112.434428][ T5896] stepping : 0 [ 112.434428][ T5896] microcode : 0xffffffff [ 112.434428][ T5896] cpu MHz : 2200.210 [ 112.434428][ T5896] cache size : 56320 KB [ 112.434428][ T5896] physical id : 0 [ 112.434428][ T5896] siblings : 2 [ 112.434428][ T5896] core id : 0 [ 112.434428][ T5896] cpu cores : 1 [ 112.434428][ T5896] apicid : 0 [ 112.434428][ T5896] initial apicid : 0 [ 112.434428][ T5896] fpu : yes [ 112.434428][ T5896] fpu_exception : yes [ 112.434428][ T5896] cpuid level : 13 [ 112.434428][ T5896] wp : yes [ 112.434428][ T5896] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 112.434428][ T5896] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 112.438263][ T5898] kvm: kvm [5897]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 112.606843][ T5905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.607042][ T5905] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.614226][ T5905] rust_binder: Error while translating object. [ 112.627973][ T5905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.634228][ T5905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:650 [ 112.736203][ T5920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.748654][ T5920] rust_binder: Error while translating object. [ 112.755201][ T5920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.766653][ T5920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:658 [ 112.839589][ T5922] __vm_enough_memory: pid: 5922, comm: syz.1.1686, bytes: 21474836480 not enough memory for the allocation [ 112.879211][ T5928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.879277][ T5928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.886114][ T5934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.895579][ T5928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.068900][ T5940] SELinux: policydb version -147518312 does not match my version range 15-33 [ 113.086684][ T5942] binder: Unknown parameter '00000000000000000005' [ 113.108186][ T5940] SELinux: failed to load policy [ 113.218018][ T5948] rust_binder: Write failure EINVAL in pid:206 [ 113.248707][ T5950] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.255261][ T5952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 113.261943][ T5950] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 113.278628][ T5952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 113.286653][ T5952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 113.296364][ T5953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.381024][ T5957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 113.387495][ T5957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:430 [ 113.432938][ T5959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.455763][ T5959] rust_binder: Read failure Err(EAGAIN) in pid:210 [ 113.518496][ T5964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.525066][ T5964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.580390][ T5977] input: syz1 as /devices/virtual/input/input79 [ 114.002429][ T6005] SELinux: security_context_str_to_sid (unco) failed with errno=-22 [ 114.015299][ T6007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.038436][ T6007] rust_binder: Error while translating object. [ 114.045109][ T6007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.051565][ T6007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 114.064835][ T36] audit: type=1326 audit(1750399603.479:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.097695][ T36] audit: type=1326 audit(1750399603.479:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.130337][ T36] audit: type=1326 audit(1750399603.479:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.139760][ T6010] binder: Unknown parameter 'context' [ 114.154231][ T36] audit: type=1326 audit(1750399603.479:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.184042][ T36] audit: type=1326 audit(1750399603.479:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.220079][ T36] audit: type=1326 audit(1750399603.519:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.243838][ T36] audit: type=1326 audit(1750399603.519:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.267844][ T36] audit: type=1326 audit(1750399603.519:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.291528][ T36] audit: type=1326 audit(1750399603.539:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.315596][ T36] audit: type=1326 audit(1750399603.539:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46118e929 code=0x7ffc0000 [ 114.350240][ T6017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 114.359950][ T6017] rust_binder: Read failure Err(EFAULT) in pid:456 [ 114.380088][ T6019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.386818][ T6019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.415940][ T6021] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 114.448725][ T6024] input: syz0 as /devices/virtual/input/input83 [ 114.463727][ T6024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.464082][ T6024] rust_binder: Error while translating object. [ 114.472720][ T6024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.479344][ T6024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 114.647362][ T6033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.657703][ T6033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:676 [ 114.685139][ T6032] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 114.709907][ T6032] SELinux: failed to load policy [ 114.715996][ T6035] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 114.716021][ T6035] rust_binder: Error while translating object. [ 114.728941][ T6035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.735215][ T6035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 114.747866][ T6032] rust_binder: Write failure EINVAL in pid:242 [ 114.788368][ T6040] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.853977][ T6043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.860653][ T6045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 114.870126][ T6043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:679 [ 114.880977][ T6045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:679 [ 114.971075][ T6047] rust_binder: Failed to allocate buffer. len:68944, is_oneway:false [ 114.998173][ T6047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 115.018180][ T6047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:464 [ 115.108236][ T6064] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 115.129115][ T6064] input: syz0 as /devices/virtual/input/input84 [ 115.240473][ T6074] input: syz0 as /devices/virtual/input/input85 [ 115.354885][ T6076] kvm: user requested TSC rate below hardware speed [ 115.372944][ T6076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472 [ 116.325983][ T6119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.459462][ T6125] binder: Unknown parameter 'd‚ÕI' [ 116.567790][ T6141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:496 [ 116.588706][ T6143] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 116.597985][ T6143] rust_binder: Error while translating object. [ 116.609323][ T6143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 116.615503][ T6143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 116.690717][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.692586][ T6153] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 116.705516][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.723791][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.728213][ T6153] rust_binder: Read failure Err(EFAULT) in pid:696 [ 116.731571][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.750607][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.758114][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.766242][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.776938][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.784661][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.792394][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.801107][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.808838][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.816428][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.829474][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.842003][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.849749][ T6159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.853025][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.867373][ T6159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:702 [ 116.867451][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.882287][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.887787][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.891189][ T6161] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 116.898931][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.913006][ T6159] rust_binder: Write failure EINVAL in pid:702 [ 116.926211][ T6159] rust_binder: Write failure EINVAL in pid:702 [ 116.932740][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.952746][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 116.964573][ T6161] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 116.964599][ T6161] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:506 [ 116.968212][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.008183][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.025804][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.034834][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.049395][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.071576][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.092690][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.100375][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.107836][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.115617][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.123300][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.130918][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.144010][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.151670][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.159259][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.166795][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.174610][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.185355][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.193105][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.200692][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.210839][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.218475][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.225875][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.235558][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.243234][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.261207][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.263493][ T6167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.278260][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.312782][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.332976][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.348224][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.366100][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.378221][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.385720][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.413684][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.428245][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.436525][ T6171] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 117.436571][ T6171] rust_binder: Error while translating object. [ 117.446001][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.450310][ T6171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.452460][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.471557][ T6171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 117.476624][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.493387][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.501127][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.508748][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.516155][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.526261][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.534118][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.543352][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.551595][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.567270][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.574874][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.582551][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.590369][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.598056][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.606444][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.614355][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.622344][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.632096][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.640561][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.655659][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.663927][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.671604][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.679536][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.687260][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.695177][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.702879][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.710500][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.717976][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.725678][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.733377][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.741429][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.749624][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.757122][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.764855][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.772476][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.780181][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.787682][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.795482][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.803505][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.811467][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.821455][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.821474][ T6179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.829019][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.843172][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.850978][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.858618][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.866014][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.873766][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.881376][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.889014][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.896409][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.904790][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.912633][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.920413][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.927910][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.936241][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.943829][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.951502][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.959087][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.966576][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.974196][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.981834][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.989431][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 117.996919][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.004760][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.012427][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.020024][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.027529][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.035162][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.043105][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.050675][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.058325][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.065831][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.074160][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.082472][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.090319][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.097725][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.105426][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.113268][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.121021][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.128609][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.136106][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.143732][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.151374][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.158947][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.166447][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.174183][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.181821][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.189389][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.196878][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.204509][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.212149][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.219723][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.227221][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.234943][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.242613][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.250186][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.257708][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.265419][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.273054][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.280600][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.288088][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.295703][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.303335][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.310899][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.318575][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.325970][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.333657][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.341217][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.348863][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.356269][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.363970][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.371545][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.379179][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.386602][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.394321][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.402117][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.409849][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.417259][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.424966][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.432537][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.440183][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.455082][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.462900][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.470583][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.478080][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.485765][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.493485][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.501152][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.508803][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.516370][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.524525][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.534198][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.554381][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.562392][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.570021][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.577532][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.585184][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.599571][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.607313][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.616421][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.624144][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.631979][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.640313][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.665101][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.676615][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.685028][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.692488][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.699954][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.709240][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.717310][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.724924][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.732541][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.740051][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.747501][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.755022][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.762602][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.773468][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.780914][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.788372][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.795769][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.803249][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.810666][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.827076][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.834582][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.848178][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.860271][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.867733][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.882102][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.892991][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.900915][ T340] hid-generic 0004:000E:07FF.000C: unknown main item tag 0x0 [ 118.909069][ T340] hid-generic 0004:000E:07FF.000C: hidraw0: HID v0.03 Device [syz0] on syz1 [ 118.918782][ T6187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.944978][ T6187] rust_binder: Write failure EINVAL in pid:726 [ 118.950074][ T6188] fido_id[6188]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.980644][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.986868][ T1811] Bluetooth: hci0: command 0x1003 tx timeout [ 119.027348][ T6197] rust_binder: Error in use_page_slow: ESRCH [ 119.027368][ T6197] rust_binder: use_range failure ESRCH [ 119.041561][ T6197] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 119.047064][ T6197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 119.056624][ T6197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:510 [ 119.079741][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 119.079759][ T36] audit: type=1326 audit(1750399608.499:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.149104][ T36] audit: type=1326 audit(1750399608.499:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.172814][ T36] audit: type=1326 audit(1750399608.499:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.199014][ T36] audit: type=1326 audit(1750399608.539:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.224334][ T6206] SELinux: policydb version 905587468 does not match my version range 15-33 [ 119.234034][ T36] audit: type=1326 audit(1750399608.539:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.258794][ T6206] SELinux: failed to load policy [ 119.263764][ T36] audit: type=1326 audit(1750399608.539:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.287646][ T36] audit: type=1326 audit(1750399608.539:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.326408][ T36] audit: type=1326 audit(1750399608.539:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.349916][ T36] audit: type=1326 audit(1750399608.539:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.374000][ T36] audit: type=1326 audit(1750399608.539:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6201 comm="syz.3.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b3e18e929 code=0x7ffc0000 [ 119.500098][ T6212] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 119.500250][ T6212] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 119.512043][ T6212] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 119.528491][ T6220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.539292][ T6220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.704502][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.711063][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.723786][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.733887][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.740484][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.746926][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.755514][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.762023][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.768715][ T6231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.775159][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.781866][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.788396][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.794985][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.801525][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.808671][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.815181][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.821719][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.828222][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.834736][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.841240][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.847817][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.854364][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.860885][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.867361][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.873883][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.880385][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.886896][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.893396][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.899919][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.906407][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.912949][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.919645][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.926257][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.932849][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.939411][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.945901][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.952427][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.977849][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.984423][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.990960][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.997450][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.004842][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.011523][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.018018][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.024514][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.031217][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.037692][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.044292][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.050775][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.057278][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.064068][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.070857][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.077329][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.083851][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.090401][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.096902][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.103399][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.109903][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.116377][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.122897][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.129382][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.135882][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.142551][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.149086][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.157105][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.622891][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.638258][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.653740][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.661742][ T6273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:540 [ 120.661862][ T6274] rust_binder: Failed copying remainder into alloc: EFAULT [ 120.678209][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.696407][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.698227][ T6274] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 120.709609][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.718237][ T6274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 120.728213][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.735012][ T6274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:540 [ 120.747776][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.767199][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.782055][ T6277] rust_binder: Write failure EFAULT in pid:338 [ 120.792548][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.804069][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.818202][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.838215][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.848281][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.866752][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.873498][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.885622][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.898763][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.909282][ T6280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.912222][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.932182][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.939022][ T6280] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 120.945361][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.961186][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.968283][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.976814][ T6280] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 120.982326][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 120.992637][ T6280] rust_binder: Write failure EINVAL in pid:340 [ 120.992668][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.005552][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.013620][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.020258][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.026857][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.033591][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.058227][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.064864][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.075466][ T6265] rust_binder: Read failure Err(EAGAIN) in pid:738 [ 121.108746][ T6282] rust_binder: Write failure EFAULT in pid:342 [ 121.232945][ T6286] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 121.270385][ T6289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.272002][ T6289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:744 [ 121.293862][ T6286] rust_binder: Write failure EINVAL in pid:545 [ 121.451772][ T6304] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.484748][ T6310] rust_binder: Write failure EFAULT in pid:349 [ 121.619640][ T6318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.713642][ T6319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 121.721307][ T6319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:751 [ 121.732145][ T6319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:751 [ 122.009509][ T6330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:562 [ 122.157615][ T6345] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 122.426549][ T12] bridge_slave_1: left allmulticast mode [ 122.432792][ T12] bridge_slave_1: left promiscuous mode [ 122.435891][ T6367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 122.439625][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.456791][ T12] bridge_slave_0: left allmulticast mode [ 122.462800][ T12] bridge_slave_0: left promiscuous mode [ 122.469829][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.508367][ T6377] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 122.515814][ T6377] rust_binder: Write failure EINVAL in pid:364 [ 122.534328][ T6384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 122.540653][ T6384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:366 [ 122.560051][ T6381] input: syz1 as /devices/virtual/input/input89 [ 122.588754][ T12] veth1_macvtap: left promiscuous mode [ 122.594294][ T12] veth0_vlan: left promiscuous mode [ 122.638673][ T6393] rust_binder: Write failure EFAULT in pid:592 [ 122.666890][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.680931][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.688388][ T6365] bridge_slave_0: entered allmulticast mode [ 122.698542][ T6365] bridge_slave_0: entered promiscuous mode [ 122.705775][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.718861][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.726242][ T6365] bridge_slave_1: entered allmulticast mode [ 122.732793][ T6365] bridge_slave_1: entered promiscuous mode [ 122.793556][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.800652][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.807932][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.811387][ T6399] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 122.815011][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.822894][ T6399] SELinux: failed to load policy [ 122.849458][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.856731][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.866702][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.873779][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.882518][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.889827][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.939945][ T6365] veth0_vlan: entered promiscuous mode [ 122.964150][ T6365] veth1_macvtap: entered promiscuous mode [ 122.982649][ T6404] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 122.990908][ T6404] rust_binder: Write failure EINVAL in pid:594 [ 123.176820][ T6419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 123.183412][ T6419] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 123.192612][ T6419] rust_binder: Read failure Err(EFAULT) in pid:380 [ 123.249796][ T6426] binder: Bad value for 'stats' [ 123.302632][ T6433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:387 [ 123.304624][ T6431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.316513][ T6431] rust_binder: Error while translating object. [ 123.324160][ T6431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.332019][ T6431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:778 [ 123.365111][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.368506][ T6440] binder: Bad value for 'defcontext' [ 123.390024][ T6443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:598 [ 123.599687][ T6457] binder: Bad value for 'max' [ 123.614310][ T6454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.614679][ T6454] rust_binder: Error while translating object. [ 123.620472][ T6461] binder: Unknown parameter 'nXI 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 123.620472][ T6461] ctxt 496684 [ 123.620472][ T6461] btime 1750399489 [ 123.620472][ T6461] processes 6275 [ 123.620472][ T6461] procs_running 4 [ 123.620472][ T6461] procs_blocked 0 [ 123.620472][ T6461] softirq 44253 32 8845 447 11828 2358 0 1636 9879 0 9228 [ 123.620472][ T6461] ' [ 123.621263][ T6454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.693218][ T6467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:609 [ 123.721643][ T6454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783 [ 123.817142][ T6475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.826436][ T6475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:616 [ 123.906531][ T6480] binder: Unknown parameter 'nXI' [ 124.092437][ T6489] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.139592][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 124.139617][ T36] audit: type=1400 audit(1750399613.559:701): avc: denied { execute } for pid=6490 comm="syz.3.1860" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 124.140319][ T6491] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 124.222207][ T6493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.299257][ T36] audit: type=1326 audit(1750399613.719:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.0.1862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe66238e929 code=0x0 [ 124.382112][ T6503] rust_binder: Got transaction with invalid offset. [ 124.382146][ T6503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.388887][ T6503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416 [ 124.475807][ T6507] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 124.485074][ T6507] rust_binder: Read failure Err(EFAULT) in pid:419 [ 124.495095][ T6507] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 124.697349][ T6511] rust_binder: Error while translating object. [ 124.705240][ T6511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.711864][ T6511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 124.837675][ T6519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:427 [ 125.018770][ T6532] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 125.146597][ T36] audit: type=1400 audit(1750399614.559:703): avc: granted { setsecparam } for pid=6543 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 125.176296][ T6546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.178545][ T6546] rust_binder: Error while translating object. [ 125.185019][ T6546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.191201][ T6546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:799 [ 125.201163][ T6547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.224127][ T1198] Bluetooth: hci1: Frame reassembly failed (-84) [ 125.237129][ T1198] Bluetooth: hci1: Frame reassembly failed (-90) [ 125.243575][ T6551] Bluetooth: hci1: Frame reassembly failed (-84) [ 125.272857][ T6558] rust_binder: Read failure Err(EAGAIN) in pid:633 [ 125.336249][ T6564] input: syz0 as /devices/virtual/input/input90 [ 125.410808][ T36] audit: type=1400 audit(1750399614.829:704): avc: denied { execute } for pid=6560 comm="syz.1.1882" path="/206/cgroup.controllers" dev="tmpfs" ino=1085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.443836][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.450102][ T2149] Bluetooth: hci0: command 0x1003 tx timeout [ 125.530745][ T36] audit: type=1400 audit(1750399614.939:705): avc: denied { read write } for pid=4533 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.611299][ T6573] input: syz1 as /devices/virtual/input/input91 [ 125.628170][ T36] audit: type=1400 audit(1750399614.939:706): avc: denied { read write open } for pid=4533 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.712527][ T36] audit: type=1400 audit(1750399614.939:707): avc: denied { ioctl } for pid=4533 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.755371][ T36] audit: type=1400 audit(1750399614.979:708): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.800285][ T36] audit: type=1400 audit(1750399614.979:709): avc: denied { read write open } for pid=2673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.844527][ T2673] audit: audit_backlog=65 > audit_backlog_limit=64 [ 126.062540][ T6597] rust_binder: Write failure EFAULT in pid:817 [ 126.514781][ T6611] rust_binder: Write failure EFAULT in pid:28 [ 126.749260][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.809341][ T6618] binder: Unknown parameter 'processor : 0 [ 126.809341][ T6618] vendor_id : GenuineIntel [ 126.809341][ T6618] cpu family : 6 [ 126.809341][ T6618] model : 79 [ 126.809341][ T6618] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 126.809341][ T6618] stepping : 0 [ 126.809341][ T6618] microcode : 0xffffffff [ 126.809341][ T6618] cpu MHz : 2200.210 [ 126.809341][ T6618] cache size : 56320 KB [ 126.809341][ T6618] physical id : 0 [ 126.809341][ T6618] siblings : 2 [ 126.809341][ T6618] core id : 0 [ 126.809341][ T6618] cpu cores : 1 [ 126.809341][ T6618] apicid : 0 [ 126.809341][ T6618] initial apicid : 0 [ 126.809341][ T6618] fpu : yes [ 126.809341][ T6618] fpu_exception : yes [ 126.809341][ T6618] cpuid level : 13 [ 126.809341][ T6618] wp : yes [ 126.809341][ T6618] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 126.809341][ T6618] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 127.055332][ T6635] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 127.278425][ T1811] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 127.279185][ T2149] Bluetooth: hci1: command 0x1003 tx timeout [ 127.428508][ T6650] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 127.428537][ T6650] rust_binder: Read failure Err(EFAULT) in pid:450 [ 127.453521][ T6650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:450 [ 127.574002][ T6655] __vm_enough_memory: pid: 6655, comm: syz.1.1912, bytes: 281474976845824 not enough memory for the allocation [ 128.208995][ T6682] tap0: tun_chr_ioctl cmd 1074025677 [ 128.220212][ T6682] tap0: linktype set to 776 [ 128.231327][ T6684] tap0: tun_chr_ioctl cmd 1074025677 [ 128.236683][ T6684] tap0: linktype set to 776 [ 128.457155][ T6698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.457231][ T6698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 128.591846][ T6703] rust_binder: Write failure EFAULT in pid:688 [ 128.798221][ T1811] Bluetooth: hci0: command 0x1003 tx timeout [ 128.798326][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.001603][ T6721] rust_binder: Error in use_page_slow: ESRCH [ 129.001625][ T6721] rust_binder: use_range failure ESRCH [ 129.007739][ T6721] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 129.019007][ T6721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.040567][ T6721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:40 [ 129.078643][ T6724] binder: Unknown parameter 'dont_hash' [ 129.149707][ T36] kauditd_printk_skb: 808 callbacks suppressed [ 129.149724][ T36] audit: type=1400 audit(1750399618.569:1507): avc: denied { read } for pid=6726 comm="syz.4.1935" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.237394][ T6731] kvm: user requested TSC rate below hardware speed [ 129.237662][ T36] audit: type=1400 audit(1750399618.569:1508): avc: denied { read open } for pid=6726 comm="syz.4.1935" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.256874][ T6731] kvm: user requested TSC rate below hardware speed [ 129.308785][ T6736] rust_binder: Write failure EINVAL in pid:459 [ 129.332529][ T36] audit: type=1400 audit(1750399618.569:1509): avc: denied { read write } for pid=4923 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.336888][ T6737] input: syz1 as /devices/virtual/input/input95 [ 129.348753][ T36] audit: type=1400 audit(1750399618.569:1510): avc: denied { ioctl } for pid=6726 comm="syz.4.1935" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.378314][ T6737] rust_binder: Write failure EFAULT in pid:867 [ 129.429129][ T36] audit: type=1400 audit(1750399618.569:1511): avc: denied { read write open } for pid=4923 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.464113][ T36] audit: type=1400 audit(1750399618.569:1512): avc: denied { ioctl } for pid=4923 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.516647][ T4923] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.529800][ T4923] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 129.537471][ T4923] audit: backlog limit exceeded [ 129.543656][ T2673] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.698299][ T6749] kvm: kvm [6746]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 129.751687][ T6749] rust_binder: Write failure EINVAL in pid:704 [ 129.781866][ T6752] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.806837][ T6752] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 129.951928][ T6759] binder: Binderfs stats mode cannot be changed during a remount [ 130.101687][ T6776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 130.145004][ T6776] rust_binder: Read failure Err(EFAULT) in pid:53 [ 130.180565][ T6774] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 130.419648][ T6783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.479528][ T6785] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 130.715277][ T6796] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 130.715299][ T6796] rust_binder: Error while translating object. [ 130.755411][ T6796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.773028][ T6796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 130.824455][ T6802] binder: Unknown parameter '18446744073709551615' [ 130.884008][ T6803] input: syz0 as /devices/virtual/input/input96 [ 131.322547][ T6824] rust_binder: Write failure EINVAL in pid:66 [ 131.322878][ T6824] rust_binder: Write failure EINVAL in pid:66 [ 131.559433][ T6831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:881 [ 131.573108][ T6833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.616505][ T6833] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 131.679969][ T6837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.685498][ T6845] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 131.743657][ T6845] rust_binder: Write failure EINVAL in pid:492 [ 131.838209][ T6850] binder: Unknown parameter 'defcontext01777777777777777777777' [ 132.070957][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.077379][ T1811] Bluetooth: hci0: unexpected event 0x0b length: 0 < 11 [ 132.118163][ T6856] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.168159][ T6865] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.254063][ T6856] rust_binder: Error in use_page_slow: ESRCH [ 132.254092][ T6856] rust_binder: use_range failure ESRCH [ 132.262679][ T6863] rust_binder: Error in use_page_slow: ESRCH [ 132.303598][ T6856] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 132.314331][ T6853] binder: Unknown parameter 'non' [ 132.327056][ T6856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.327255][ T6856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:78 [ 132.348712][ T6863] rust_binder: use_range failure ESRCH [ 132.357782][ T6863] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 132.396680][ T6853] rust_binder: Read failure Err(EAGAIN) in pid:495 [ 132.408184][ T6863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.427188][ T6863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:78 [ 132.451766][ T6853] binder: Bad value for 'max' [ 132.504241][ T6877] input: syz1 as /devices/virtual/input/input97 [ 132.588567][ T6877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:738 [ 132.799581][ T6893] binder: Unknown parameter '/dev/snd/timer' [ 132.841096][ T6891] rust_binder: Write failure EFAULT in pid:504 [ 132.980843][ T6897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.006716][ T6897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:904 [ 133.228951][ T6908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.408249][ T6920] kvm: kvm [6919]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 133.598188][ T6930] rust_binder: Write failure EFAULT in pid:916 [ 133.748072][ T6942] binder: Bad value for 'defcontext' [ 133.760338][ T6941] binder: Bad value for 'defcontext' [ 133.915213][ T311] Bluetooth: hci1: Frame reassembly failed (-84) [ 133.926556][ T6951] Bluetooth: hci1: Frame reassembly failed (-90) [ 134.078174][ T2149] Bluetooth: hci0: command 0x1003 tx timeout [ 134.084316][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.166605][ T36] kauditd_printk_skb: 994 callbacks suppressed [ 134.166623][ T36] audit: type=1400 audit(1750399623.579:2505): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.209697][ T340] hid-generic C98F:0003:0000.000D: unknown main item tag 0x0 [ 134.229277][ T6964] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.229316][ T6963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.243853][ T6963] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 134.248208][ T340] hid-generic C98F:0003:0000.000D: unknown main item tag 0x0 [ 134.251943][ T6963] audit: backlog limit exceeded [ 134.261743][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.264387][ T6963] audit: audit_backlog=65 > audit_backlog_limit=64 [ 134.270479][ T36] audit: type=1400 audit(1750399623.619:2506): avc: denied { read write open } for pid=2673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.270506][ T36] audit: type=1400 audit(1750399623.619:2507): avc: denied { ioctl } for pid=2673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=488 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.270529][ T36] audit: type=1400 audit(1750399623.619:2508): avc: denied { read write } for pid=6957 comm="syz.3.2008" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.352536][ T6967] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 134.352555][ T6967] rust_binder: Read failure Err(EFAULT) in pid:937 [ 134.354344][ T340] hid-generic C98F:0003:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.579672][ T6975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 134.581344][ T6975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 134.603813][ T6971] fido_id[6971]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.855984][ T6990] input: syz1 as /devices/virtual/input/input99 [ 135.112186][ T7000] binder: Bad value for 'max' [ 135.200800][ T340] hid-generic C98F:0003:0000.000E: unknown main item tag 0x0 [ 135.221245][ T340] hid-generic C98F:0003:0000.000E: unknown main item tag 0x0 [ 135.249598][ T340] hid-generic C98F:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.421505][ T7012] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 135.426957][ T7012] input: syz0 as /devices/virtual/input/input100 [ 135.918475][ T1811] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 136.129273][ T7032] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 136.129295][ T7032] rust_binder: Read failure Err(EFAULT) in pid:956 [ 136.540999][ T7060] binder: Unknown parameter 'fscontext?}' [ 136.663915][ T7066] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 136.745289][ T7079] binder: Bad value for 'max' [ 136.892369][ T7080] binder: Unknown parameter '00000000000000000000000' [ 137.068923][ T7094] rust_binder: Error while translating object. [ 137.068953][ T7094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 137.075154][ T7094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:972 [ 137.084947][ T7101] input: syz1 as /devices/virtual/input/input101 [ 137.188693][ T7104] rust_binder: Write failure EFAULT in pid:792 [ 137.404906][ T12] Bluetooth: hci1: Frame reassembly failed (-90) [ 137.648731][ T7142] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 137.840515][ T7150] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 138.111477][ T7167] binder: Bad value for 'max' [ 138.145065][ T7171] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 138.237083][ T7175] rust_binder: Write failure EINVAL in pid:835 [ 138.465291][ T12] Bluetooth: hci2: Frame reassembly failed (-84) [ 138.479048][ T7190] Bluetooth: hci2: Frame reassembly failed (-84) [ 138.958207][ T1811] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.958963][ T7191] Bluetooth: hci0: command 0x1003 tx timeout [ 139.006850][ T7193] input: syz0 as /devices/virtual/input/input102 [ 139.031103][ T7193] rust_binder: Write failure EINVAL in pid:976 [ 139.167900][ T7198] binder: Unknown parameter 'fscontext?}' [ 139.211848][ T36] kauditd_printk_skb: 1159 callbacks suppressed [ 139.211864][ T36] audit: type=1400 audit(1750399628.629:3518): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.242687][ T36] audit: type=1400 audit(1750399628.629:3519): avc: denied { read write open } for pid=2673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.271196][ T36] audit: type=1400 audit(1750399628.629:3520): avc: denied { ioctl } for pid=2673 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=488 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.297509][ T36] audit: type=1400 audit(1750399628.639:3521): avc: denied { read write } for pid=7199 comm="syz.0.2090" name="binder0" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.324568][ T36] audit: type=1400 audit(1750399628.639:3522): avc: denied { read write open } for pid=7199 comm="syz.0.2090" path="/dev/binderfs/binder0" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.332873][ T7203] kvm: user requested TSC rate below hardware speed [ 139.362465][ T36] audit: type=1400 audit(1750399628.639:3523): avc: denied { map } for pid=7199 comm="syz.0.2090" path="/dev/binderfs/binder0" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.387051][ T36] audit: type=1400 audit(1750399628.639:3524): avc: denied { read } for pid=7199 comm="syz.0.2090" path="/dev/binderfs/binder0" dev="binder" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.411114][ T36] audit: type=1400 audit(1750399628.639:3525): avc: denied { read } for pid=7199 comm="syz.0.2090" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.434113][ T36] audit: type=1400 audit(1750399628.639:3526): avc: denied { read open } for pid=7199 comm="syz.0.2090" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.457684][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 139.457756][ T1811] Bluetooth: hci1: command 0x1003 tx timeout [ 139.470857][ T36] audit: type=1400 audit(1750399628.639:3527): avc: denied { ioctl } for pid=7199 comm="syz.0.2090" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 139.518431][ T7205] SELinux: syz.1.2092 (7205) set checkreqprot to 1. This is no longer supported. [ 139.652198][ T7212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.672123][ T7212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.822263][ T7228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.098206][ T7247] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 140.106192][ T7248] binder: Bad value for 'stats' [ 140.160871][ T7250] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 140.160895][ T7250] rust_binder: Error while translating object. [ 140.171952][ T7250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 140.182809][ T7250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 140.399470][ T7254] SELinux: failed to load policy [ 140.478211][ T52] Bluetooth: hci2: command 0x1003 tx timeout [ 140.478211][ T2149] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 140.989219][ T7282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 140.989251][ T7282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:602 [ 141.011915][ T7282] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.048400][ T7282] rust_binder: Read failure Err(EFAULT) in pid:602 [ 141.619615][ T311] bridge_slave_1: left allmulticast mode [ 141.646766][ T7333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 141.647864][ T7333] binder: Bad value for 'defcontext' [ 141.679051][ T311] bridge_slave_1: left promiscuous mode [ 141.684722][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.734951][ T311] bridge_slave_0: left allmulticast mode [ 141.744048][ T311] bridge_slave_0: left promiscuous mode [ 141.749818][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.960656][ T311] veth1_macvtap: left promiscuous mode [ 141.968994][ T311] veth0_vlan: left promiscuous mode [ 142.165869][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.184643][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.199024][ T7342] bridge_slave_0: entered allmulticast mode [ 142.226465][ T7342] bridge_slave_0: entered promiscuous mode [ 142.243897][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.261295][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.278208][ T7342] bridge_slave_1: entered allmulticast mode [ 142.289231][ T7342] bridge_slave_1: entered promiscuous mode [ 142.626592][ T7366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.792169][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.806432][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.844393][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.852115][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.981236][ T7342] veth0_vlan: entered promiscuous mode [ 143.039490][ T7342] veth1_macvtap: entered promiscuous mode [ 143.248611][ T7379] rust_binder: Error while translating object. [ 143.248638][ T7379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 143.271700][ T7379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 143.743160][ T7385] KVM: debugfs: duplicate directory 7385-8 [ 143.954035][ T7393] rust_binder: Error in use_page_slow: ESRCH [ 143.954052][ T7393] rust_binder: use_range failure ESRCH [ 143.970492][ T7393] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 143.970513][ T7393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 143.986243][ T7393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:630 [ 144.100116][ T7399] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 144.228115][ T36] kauditd_printk_skb: 1123 callbacks suppressed [ 144.236044][ T7404] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 144.236068][ T7404] rust_binder: Error while translating object. [ 144.255830][ T36] audit: type=1400 audit(1750399633.639:4651): avc: denied { set_context_mgr } for pid=7403 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.282690][ T7404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.282723][ T7404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:635 [ 144.298920][ T36] audit: type=1400 audit(1750399633.639:4652): avc: denied { map } for pid=7403 comm="syz.3.2148" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.347165][ T36] audit: type=1400 audit(1750399633.639:4653): avc: denied { read } for pid=7403 comm="syz.3.2148" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.372472][ T36] audit: type=1400 audit(1750399633.639:4654): avc: denied { read } for pid=7403 comm="syz.3.2148" name="binder1" dev="binder" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.395855][ T36] audit: type=1400 audit(1750399633.639:4655): avc: denied { read open } for pid=7403 comm="syz.3.2148" path="/dev/binderfs/binder1" dev="binder" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.456639][ T36] audit: type=1400 audit(1750399633.639:4656): avc: denied { mounton } for pid=7403 comm="syz.3.2148" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.503227][ T36] audit: type=1400 audit(1750399633.649:4657): avc: denied { ioctl } for pid=7403 comm="syz.3.2148" path="/dev/binderfs/binder0" dev="binder" ino=54 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.560173][ T36] audit: type=1400 audit(1750399633.649:4658): avc: denied { call } for pid=7403 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.598206][ T36] audit: type=1400 audit(1750399633.649:4659): avc: denied { transfer } for pid=7403 comm="syz.3.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 144.631163][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.631397][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.645758][ T36] audit: type=1400 audit(1750399633.649:4660): avc: denied { read } for pid=7403 comm="syz.3.2148" path="/dev/binderfs/binder1" dev="binder" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 144.676120][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.676365][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.688767][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.689437][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.701941][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.714460][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.722158][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.731296][ T7416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.752009][ T7421] input: syz1 as /devices/virtual/input/input104 [ 144.981533][ T7430] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 144.981558][ T7430] rust_binder: Error while translating object. [ 145.008180][ T7430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.015580][ T7430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 145.055956][ T7434] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 145.088231][ T7434] rust_binder: Error while translating object. [ 145.121646][ T7434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 145.127863][ T7434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 145.367326][ T7454] rust_binder: Write failure EFAULT in pid:1036 [ 145.398714][ T7459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.839433][ T7469] binder: Bad value for 'max' [ 145.901756][ T7471] rust_binder: Write failure EINVAL in pid:658 [ 146.001558][ T7479] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 18446744073709551217) [ 146.007772][ T7479] rust_binder: Error while translating object. [ 146.045380][ T7479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.052502][ T7479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1043 [ 146.068161][ T7479] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 146.090329][ T7479] rust_binder: Read failure Err(EFAULT) in pid:1043 [ 146.157949][ T7481] rust_binder: Error in use_page_slow: ESRCH [ 146.157973][ T7481] rust_binder: use_range failure ESRCH [ 146.178199][ T7481] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 146.178225][ T7481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 146.192123][ T7481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 146.313178][ T7489] kvm: user requested TSC rate below hardware speed [ 146.326942][ T7492] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 146.795852][ T7500] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 146.818181][ T7500] rust_binder: Error while translating object. [ 146.836312][ T7500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.846429][ T7500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665 [ 146.976079][ T7506] SELinux: policydb string length 14080 does not match expected length 8 [ 147.024831][ T7506] SELinux: failed to load policy [ 147.125964][ T7510] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 147.136453][ T7507] binder: Unknown parameter 'Œÿ|ù' [ 147.367031][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1062 [ 147.513867][ T7533] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 147.588213][ T7533] SELinux: failed to load policy [ 147.729312][ T7315] syz.4.2123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 147.978199][ T7315] CPU: 0 UID: 0 PID: 7315 Comm: syz.4.2123 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 147.978229][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.978241][ T7315] Call Trace: [ 147.978248][ T7315] [ 147.978256][ T7315] __dump_stack+0x21/0x30 [ 147.978282][ T7315] dump_stack_lvl+0x10c/0x190 [ 147.978302][ T7315] ? __cfi_dump_stack_lvl+0x10/0x10 [ 147.978321][ T7315] ? ___ratelimit+0x3f7/0x5a0 [ 147.978354][ T7315] dump_stack+0x19/0x20 [ 147.978372][ T7315] dump_header+0xd7/0x490 [ 147.978394][ T7315] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 147.978412][ T7315] oom_kill_process+0x4c0/0x7e0 [ 147.978435][ T7315] ? sched_clock_cpu+0x75/0x400 [ 147.978454][ T7315] out_of_memory+0x7ee/0xbd0 [ 147.978477][ T7315] ? __cfi_out_of_memory+0x10/0x10 [ 147.978499][ T7315] ? mutex_lock_killable+0x92/0x1c0 [ 147.978517][ T7315] ? __cfi_mutex_lock_killable+0x10/0x10 [ 147.978536][ T7315] mem_cgroup_out_of_memory+0x279/0x350 [ 147.978557][ T7315] ? drain_obj_stock+0xed0/0xed0 [ 147.978577][ T7315] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 147.978597][ T7315] try_charge_memcg+0x8f7/0xde0 [ 147.978615][ T7315] ? __cfi_try_charge_memcg+0x10/0x10 [ 147.978632][ T7315] ? __alloc_pages_noprof+0x30d/0x6c0 [ 147.978650][ T7315] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 147.978669][ T7315] __mem_cgroup_charge+0xf6/0x410 [ 147.978688][ T7315] ? _raw_spin_lock+0x8c/0x120 [ 147.978708][ T7315] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 147.978727][ T7315] shmem_alloc_and_add_folio+0x86d/0x1050 [ 147.978753][ T7315] ? put_swap_device+0x130/0x130 [ 147.978775][ T7315] ? shmem_huge_global_enabled+0x2da/0x360 [ 147.978801][ T7315] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 147.978822][ T7315] ? __kasan_check_write+0x18/0x20 [ 147.978841][ T7315] ? _raw_spin_lock+0x8c/0x120 [ 147.978861][ T7315] shmem_get_folio_gfp+0x5f0/0x1380 [ 147.978886][ T7315] ? shmem_get_folio+0xc0/0xc0 [ 147.978905][ T7315] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 147.978925][ T7315] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 147.978943][ T7315] ? inode_to_bdi+0x6d/0x100 [ 147.978961][ T7315] shmem_write_begin+0xf4/0x270 [ 147.978983][ T7315] generic_perform_write+0x32d/0x960 [ 147.979003][ T7315] ? __cfi_generic_perform_write+0x10/0x10 [ 147.979021][ T7315] ? down_write+0xe9/0x2a0 [ 147.979038][ T7315] ? mnt_get_write_access_file+0x1af/0x3b0 [ 147.979062][ T7315] ? mnt_put_write_access_file+0xc2/0x100 [ 147.979079][ T7315] ? file_update_time+0x1ef/0x220 [ 147.979096][ T7315] shmem_file_write_iter+0x105/0x130 [ 147.979114][ T7315] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 147.979132][ T7315] __kernel_write_iter+0x392/0x830 [ 147.979152][ T7315] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 147.979169][ T7315] ? __cfi___kernel_write_iter+0x10/0x10 [ 147.979187][ T7315] ? get_dump_page+0x160/0x220 [ 147.979211][ T7315] ? __asan_memset+0x39/0x50 [ 147.979229][ T7315] ? iov_iter_bvec+0xc0/0x180 [ 147.979252][ T7315] dump_user_range+0xb06/0xdf0 [ 147.979272][ T7315] ? __cfi_dump_emit+0x10/0x10 [ 147.979291][ T7315] ? __cfi_dump_user_range+0x10/0x10 [ 147.979310][ T7315] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 147.979337][ T7315] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 147.979358][ T7315] elf_core_dump+0x2cd9/0x3810 [ 147.979382][ T7315] ? __cfi_elf_core_dump+0x10/0x10 [ 147.979409][ T7315] ? dump_interrupted+0xf0/0xf0 [ 147.979429][ T7315] ? 0xffffffffff600000 [ 147.979456][ T7315] ? freezing_slow_path+0x113/0x160 [ 147.979476][ T7315] do_coredump+0x1bf7/0x2bd0 [ 147.979498][ T7315] ? __cfi_do_coredump+0x10/0x10 [ 147.979515][ T7315] ? asm_exc_page_fault+0x2b/0x30 [ 147.979544][ T7315] ? __kasan_slab_free+0x6a/0x80 [ 147.979565][ T7315] ? kmem_cache_free+0x1c1/0x4c0 [ 147.979686][ T7315] get_signal+0x11fd/0x14f0 [ 147.979712][ T7315] arch_do_signal_or_restart+0x96/0x720 [ 147.979745][ T7315] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 147.979769][ T7315] irqentry_exit_to_user_mode+0x4e/0xb0 [ 147.979789][ T7315] irqentry_exit+0x16/0x60 [ 147.979806][ T7315] exc_page_fault+0x66/0xc0 [ 147.979823][ T7315] asm_exc_page_fault+0x2b/0x30 [ 147.979844][ T7315] RIP: 0033:0x0 [ 147.979856][ T7315] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 147.979866][ T7315] RSP: 002b:0000200000000048 EFLAGS: 00010217 [ 147.979896][ T7315] RAX: 0000000000000000 RBX: 00007f81935b5fa0 RCX: 00007f819338e929 [ 147.979909][ T7315] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000802400 [ 147.979920][ T7315] RBP: 00007f8193410b39 R08: 0000000000000000 R09: 0000000000000000 [ 147.979931][ T7315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.979944][ T7315] R13: 0000000000000000 R14: 00007f81935b5fa0 R15: 00007ffc858c2298 [ 147.979959][ T7315] [ 147.979968][ T7315] memory: usage 301112kB, limit 307200kB, failcnt 20129 [ 148.138162][ T7315] memory+swap: usage 414640kB, limit 9007199254740988kB, failcnt 0 [ 148.325982][ T7554] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 148.328916][ T7315] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 148.648169][ T7315] Memory cgroup stats for /syz4: [ 148.648308][ T7315] cache 246845440 [ 148.687728][ T7315] rss 36864 [ 148.738797][ T7556] rust_binder: Write failure EFAULT in pid:1073 [ 148.745014][ T7315] rss_huge 0 [ 148.830116][ T7315] shmem 246669312 [ 148.834014][ T7315] mapped_file 0 [ 148.837485][ T7315] dirty 0 [ 148.998233][ T7315] writeback 286720 [ 149.014039][ T7315] workingset_refault_anon 67 [ 149.061671][ T7315] workingset_refault_file 0 [ 149.073619][ T7565] binder: Bad value for 'max' [ 149.108212][ T7315] swap 110276608 [ 149.142404][ T7315] swapcached 421888 [ 149.151070][ T7315] pgpgin 161620 [ 149.154560][ T7315] pgpgout 101239 [ 149.199547][ T7315] pgfault 20898 [ 149.211758][ T7315] pgmajfault 62 [ 149.218798][ T7315] inactive_anon 154222592 [ 149.256082][ T7315] active_anon 92413952 [ 149.260289][ T7315] inactive_file 0 [ 149.263926][ T7315] active_file 176128 [ 149.299390][ T7315] unevictable 0 [ 149.308868][ T36] kauditd_printk_skb: 629 callbacks suppressed [ 149.308884][ T36] audit: type=1400 audit(1750399638.729:5290): avc: denied { read write } for pid=7573 comm="syz.4.2198" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.314766][ T7315] hierarchical_memory_limit 314572800 [ 149.315905][ T36] audit: type=1400 audit(1750399638.729:5291): avc: denied { read write open } for pid=7573 comm="syz.4.2198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.371608][ T36] audit: type=1400 audit(1750399638.729:5292): avc: denied { ioctl } for pid=7573 comm="syz.4.2198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.403590][ T36] audit: type=1400 audit(1750399638.759:5293): avc: denied { read write } for pid=7342 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.427738][ T36] audit: type=1400 audit(1750399638.759:5294): avc: denied { read write open } for pid=7342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.508975][ T7315] hierarchical_memsw_limit 9223372036854771712 [ 149.544324][ T36] audit: type=1400 audit(1750399638.759:5295): avc: denied { ioctl } for pid=7342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.556043][ T7583] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 149.592008][ T7315] total_cache 246845440 [ 149.597644][ T7580] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 149.622382][ T36] audit: type=1400 audit(1750399638.799:5296): avc: denied { ioctl } for pid=7573 comm="syz.4.2198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.678206][ T7315] total_rss 36864 [ 149.680873][ T36] audit: type=1400 audit(1750399638.799:5297): avc: denied { ioctl } for pid=7573 comm="syz.4.2198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.681877][ T7315] total_rss_huge 0 [ 149.681886][ T7315] total_shmem 246669312 [ 149.753416][ T36] audit: type=1400 audit(1750399638.799:5298): avc: denied { ioctl } for pid=7573 comm="syz.4.2198" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.786686][ T36] audit: type=1400 audit(1750399638.799:5299): avc: denied { read write } for pid=7573 comm="syz.4.2198" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.820755][ T7315] total_mapped_file 0 [ 149.905784][ T7315] total_dirty 0 [ 149.984186][ T7315] total_writeback 286720 [ 150.006424][ T7604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 150.006457][ T7604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1077 [ 150.036359][ T7604] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 150.038166][ T7315] total_workingset_refault_anon 67 [ 150.054299][ T7604] rust_binder: Read failure Err(EFAULT) in pid:1077 [ 150.112775][ T7610] binder: Unknown parameter '00000000000000000000005' [ 150.214813][ T7315] total_workingset_refault_file 0 [ 150.274145][ T7315] total_swap 110276608 [ 150.278786][ T7614] rust_binder: Write failure EFAULT in pid:89 [ 150.308988][ T7315] total_swapcached 421888 [ 150.332071][ T311] Bluetooth: hci0: Frame reassembly failed (-90) [ 150.339459][ T7612] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.404777][ T7315] total_pgpgin 161620 [ 150.448622][ T7315] total_pgpgout 101239 [ 150.509478][ T7315] total_pgfault 20898 [ 150.513588][ T7315] total_pgmajfault 62 [ 150.517570][ T7315] total_inactive_anon 154222592 [ 150.524277][ T7624] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 150.524299][ T7624] rust_binder: Error while translating object. [ 150.538228][ T7624] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.563219][ T7624] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 150.578513][ T7626] rust_binder: Write failure EINVAL in pid:707 [ 150.610877][ T7315] total_active_anon 92413952 [ 150.633901][ T7315] total_inactive_file 0 [ 150.677801][ T7315] total_active_file 176128 [ 150.697742][ T7315] total_unevictable 0 [ 150.714407][ T7631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.734109][ T7315] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2123,pid=7315,uid=0 [ 150.751785][ T7631] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 150.751806][ T7631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 150.760927][ T7631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:709 [ 150.797305][ T7315] Memory cgroup out of memory: Killed process 7315 (syz.4.2123) total-vm:90092kB, anon-rss:948kB, file-rss:54912kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 [ 151.031270][ T7643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.683083][ T7671] rust_binder: Error in use_page_slow: ESRCH [ 151.683107][ T7671] rust_binder: use_range failure ESRCH [ 151.689353][ T7671] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 151.696141][ T7676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:718 [ 151.704058][ T7671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 151.713503][ T7671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:104 [ 152.270834][ T7696] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 152.280289][ T7696] rust_binder: Error in use_page_slow: EBUSY [ 152.291638][ T7696] rust_binder: use_range failure EBUSY [ 152.297699][ T7696] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 152.304281][ T7696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 152.312918][ T7696] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 152.323019][ T7696] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:113 [ 152.398157][ T2149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.398188][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 153.231292][ T7759] kvm: kvm [7757]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 153.471409][ T7767] random: crng reseeded on system resumption [ 153.473998][ T7765] rust_binder: Write failure EFAULT in pid:1105 [ 153.527576][ T7767] SELinux: security_context_str_to_sid () failed with errno=-22 [ 153.603249][ T7771] rust_binder: Got transaction with invalid offset. [ 153.603294][ T7771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.620213][ T7771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 153.804610][ T7785] binder: Bad value for 'max' [ 153.941068][ T7794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:731 [ 153.943066][ T7793] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 153.986677][ T7793] rust_binder: Error while translating object. [ 154.018307][ T7793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.024533][ T7793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1111 [ 154.049781][ T7805] __vm_enough_memory: pid: 7805, comm: syz.1.2266, bytes: 281474976845824 not enough memory for the allocation [ 154.217079][ T7814] binder: Bad value for 'max' [ 154.331792][ T36] kauditd_printk_skb: 1215 callbacks suppressed [ 154.331809][ T36] audit: type=1400 audit(1750399643.749:6515): avc: denied { read } for pid=7823 comm="syz.0.2274" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.360958][ T36] audit: type=1400 audit(1750399643.749:6516): avc: denied { read open } for pid=7823 comm="syz.0.2274" path="/dev/binderfs/binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.395169][ T36] audit: type=1400 audit(1750399643.809:6517): avc: denied { ioctl } for pid=7823 comm="syz.0.2274" path="/dev/binderfs/binder1" dev="binder" ino=16 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.423362][ T36] audit: type=1400 audit(1750399643.809:6518): avc: denied { read write } for pid=7342 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.447562][ T36] audit: type=1400 audit(1750399643.809:6519): avc: denied { read write open } for pid=7342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.484713][ T36] audit: type=1400 audit(1750399643.809:6520): avc: denied { ioctl } for pid=7342 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.489069][ T7829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 154.511042][ T36] audit: type=1400 audit(1750399643.809:6521): avc: denied { read write } for pid=6365 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.511071][ T36] audit: type=1400 audit(1750399643.809:6522): avc: denied { read write open } for pid=6365 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.613089][ T36] audit: type=1400 audit(1750399643.839:6523): avc: denied { ioctl } for pid=6365 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.644679][ T7829] rust_binder: Write failure EINVAL in pid:139 [ 154.655095][ T36] audit: type=1400 audit(1750399643.839:6524): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.738495][ T7837] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.945874][ T7848] input: syz0 as /devices/virtual/input/input111 [ 154.979008][ T7848] input: failed to attach handler leds to device input111, error: -6 [ 155.138596][ T7857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.180624][ T7855] rust_binder: Error in use_page_slow: ESRCH [ 155.198188][ T7855] rust_binder: use_range failure ESRCH [ 155.204217][ T7855] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 155.225244][ T7855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 155.258178][ T7855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1129 [ 155.371306][ T7873] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 155.434120][ T7873] rust_binder: Write failure EINVAL in pid:143 [ 155.593054][ T7884] binder: Unknown parameter 'non' [ 155.630563][ T7888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.749573][ T45] hid-generic C98F:0003:0000.000F: unknown main item tag 0x0 [ 155.788173][ T45] hid-generic C98F:0003:0000.000F: unknown main item tag 0x0 [ 155.801817][ T7894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.809662][ T45] hid-generic C98F:0003:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 155.975286][ T7906] binder: Bad value for 'max' [ 156.010689][ T7906] binder: Bad value for 'max' [ 156.091297][ T7903] fido_id[7903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 156.130660][ T7912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.168191][ T7912] input: syz1 as /devices/virtual/input/input112 [ 156.207081][ T7912] rust_binder: Error while translating object. [ 156.207130][ T7912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.217600][ T7912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1145 [ 156.246095][ T7910] kvm: Disabled LAPIC found during irq injection [ 156.382003][ T7918] SELinux: failed to load policy [ 156.401023][ T7919] SELinux: failed to load policy [ 156.407196][ T7918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.427746][ T7918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1147 [ 156.558200][ T7926] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 156.588192][ T7926] rust_binder: Write failure EINVAL in pid:751 [ 156.589842][ T7928] binder: Unknown parameter '0xffffffffffffffff' [ 156.757316][ T7942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.761270][ T7943] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 156.802964][ T7942] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 156.818216][ T7942] rust_binder: Write failure EINVAL in pid:1153 [ 156.818287][ T7943] rust_binder: Write failure EINVAL in pid:1153 [ 156.960551][ T7952] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 156.998182][ T7952] SELinux: failed to load policy [ 157.004509][ T7952] SELinux: policydb version -1108309496 does not match my version range 15-33 [ 157.041225][ T7952] SELinux: failed to load policy [ 157.111262][ T7961] KVM: debugfs: duplicate directory 7961-5 [ 157.152317][ T7949] binder: Bad value for 'max' [ 157.656506][ T7979] binder: Bad value for 'max' [ 157.918948][ T7993] rust_binder: Write failure EFAULT in pid:176 [ 157.925485][ T7995] binder: Bad value for 'stats' [ 157.925485][ T7992] binder: Bad value for 'stats' [ 158.015726][ T7999] rust_binder: Error while translating object. [ 158.015757][ T7999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 158.028159][ T7999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:763 [ 158.039765][ T8000] input: syz0 as /devices/virtual/input/input114 [ 158.084055][ T8000] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 158.301406][ T8006] rust_binder: Write failure EFAULT in pid:180 [ 158.697968][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.719310][ T8024] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.725849][ T8025] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.911759][ T8032] input: syz0 as /devices/virtual/input/input116 [ 158.918187][ T8031] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 158.918209][ T8031] rust_binder: Error while translating object. [ 158.939291][ T8031] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.952326][ T8031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187 [ 159.076409][ T8036] rust_binder: Got transaction with invalid offset. [ 159.088646][ T8036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.095345][ T8036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:770 [ 159.339885][ T36] kauditd_printk_skb: 829 callbacks suppressed [ 159.339903][ T36] audit: type=1400 audit(1750399648.759:7354): avc: denied { read } for pid=8045 comm="syz.1.2343" name="binder0" dev="binder" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.379882][ T36] audit: type=1400 audit(1750399648.759:7355): avc: denied { read open } for pid=8045 comm="syz.1.2343" path="/dev/binderfs/binder0" dev="binder" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.405074][ T36] audit: type=1400 audit(1750399648.769:7356): avc: denied { read write } for pid=8045 comm="syz.1.2343" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.428668][ T36] audit: type=1400 audit(1750399648.769:7357): avc: denied { read write open } for pid=8045 comm="syz.1.2343" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.470783][ T8051] input: syz0 as /devices/virtual/input/input117 [ 159.491599][ T8053] binder: Unknown parameter 'nXI' [ 159.497315][ T36] audit: type=1400 audit(1750399648.769:7358): avc: denied { read write } for pid=8045 comm="syz.1.2343" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.522020][ T36] audit: type=1400 audit(1750399648.769:7359): avc: denied { read write open } for pid=8045 comm="syz.1.2343" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.548628][ T36] audit: type=1400 audit(1750399648.769:7360): avc: denied { ioctl } for pid=8045 comm="syz.1.2343" path="/dev/binderfs/binder0" dev="binder" ino=274 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 159.586805][ T36] audit: type=1400 audit(1750399648.769:7361): avc: denied { set_context_mgr } for pid=8045 comm="syz.1.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 159.648797][ T36] audit: type=1400 audit(1750399648.769:7362): avc: denied { read } for pid=8045 comm="syz.1.2343" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.680617][ T36] audit: type=1400 audit(1750399648.769:7363): avc: denied { read open } for pid=8045 comm="syz.1.2343" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 159.755505][ T8059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.833793][ T8068] input: syz0 as /devices/virtual/input/input118 [ 159.885729][ T8070] rust_binder: Error while translating object. [ 159.885761][ T8070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.892836][ T8070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:783 [ 159.919390][ T8072] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.081048][ T8084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.110194][ T8084] rust_binder: Write failure EINVAL in pid:1190 [ 160.137997][ T8085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 160.145956][ T8086] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.195944][ T8090] rust_binder: Write failure EINVAL in pid:206 [ 160.227780][ T8093] random: crng reseeded on system resumption [ 160.287648][ T8099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.293638][ T8093] rust_binder: Error in use_page_slow: ESRCH [ 160.310379][ T8093] rust_binder: use_range failure ESRCH [ 160.316417][ T8093] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 160.338834][ T8093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 160.365991][ T8093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:209 [ 160.368657][ T8104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 160.433656][ T8104] rust_binder: Error while translating object. [ 160.448209][ T8104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.454500][ T8104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1195 [ 160.621037][ T8109] kvm: kvm [8108]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 160.692215][ T8116] rust_binder: Error while translating object. [ 160.692255][ T8116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 160.698895][ T8116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:801 [ 160.718233][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 160.720634][ T2149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.869871][ T8126] binder: Unknown parameter 'conext' [ 160.939112][ T8129] random: crng reseeded on system resumption [ 161.120098][ T8141] __vm_enough_memory: pid: 8141, comm: syz.4.2371, bytes: 281474976845824 not enough memory for the allocation [ 161.321759][ T8153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:810 [ 161.429373][ T8162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.446275][ T8162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:815 [ 161.478156][ T8162] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 161.487316][ T8162] rust_binder: Read failure Err(EFAULT) in pid:815 [ 161.943205][ T8183] binder: Unknown parameter 'seÙŸÞÕ7p' [ 162.174784][ T8196] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.229359][ T8199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1218 [ 162.251735][ T8199] rust_binder: Read failure Err(EFAULT) in pid:1218 [ 162.406094][ T8201] rust_binder: Error while translating object. [ 162.431461][ T8201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 162.441130][ T8201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:831 [ 162.451592][ T8209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1223 [ 162.577356][ T8214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.599282][ T8213] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 162.639256][ T8213] rust_binder: Error while translating object. [ 162.648004][ T8213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.688175][ T8213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 162.693034][ T8220] rust_binder: Write failure EFAULT in pid:836 [ 162.870674][ T8224] rust_binder: Error while translating object. [ 162.876897][ T8224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.903158][ T8224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:838 [ 162.934006][ T8228] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.956106][ T8231] SELinux: security_context_str_to_sid (unconf_uÿ) failed with errno=-22 [ 162.973638][ T8229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.997402][ T8232] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 163.026892][ T8229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1232 [ 163.208948][ T8243] rust_binder: Write failure EINVAL in pid:246 [ 163.229562][ T8244] rust_binder: Write failure EINVAL in pid:246 [ 163.497797][ T8269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.512518][ T8269] random: crng reseeded on system resumption [ 163.564669][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.577197][ T8274] rust_binder: Got transaction with invalid offset. [ 163.577250][ T8274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.624565][ T8274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1242 [ 163.791592][ T8282] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 163.964550][ T8290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1253 [ 164.252395][ T8295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.336145][ T8298] rust_binder: got new transaction with bad transaction stack [ 164.349165][ T36] kauditd_printk_skb: 2951 callbacks suppressed [ 164.349182][ T36] audit: type=1400 audit(1750399653.769:10315): avc: denied { setattr } for pid=6365 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.385980][ T8298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1256 [ 164.436134][ T36] audit: type=1400 audit(1750399653.799:10316): avc: denied { read } for pid=8294 comm="syz.0.2418" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.483166][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.483223][ T7342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.491019][ T8302] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.496270][ T36] audit: type=1400 audit(1750399653.799:10317): avc: denied { read open } for pid=8294 comm="syz.0.2418" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.507920][ T6365] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 164.528681][ T7342] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64 [ 164.542899][ T7342] audit: backlog limit exceeded [ 164.548149][ T8302] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 165.138645][ T8332] binder: Bad value for 'stats' [ 165.282364][ T8336] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 165.293728][ T8340] binder: Unknown parameter 'rw:Sý-÷' [ 165.598177][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 165.604229][ T2149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 165.612026][ T8349] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.634203][ T8350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 165.731277][ T8359] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 165.912392][ T8372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1295 [ 166.227205][ T8381] rust_binder: Read failure Err(EAGAIN) in pid:1304 [ 166.877477][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.586633][ T8414] random: crng reseeded on system resumption [ 167.630488][ T8417] rust_binder: Write failure EFAULT in pid:308 [ 167.667285][ T8414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1324 [ 167.710661][ T8423] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.405294][ T8445] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 168.415571][ T8444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.424288][ T8445] rust_binder: Error while translating object. [ 168.438196][ T8445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.444485][ T8445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 168.573535][ T8444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.878163][ T2149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.001889][ T8462] binder: Unknown parameter 'rw ã/kvm' [ 169.039756][ T8462] rust_binder: Write failure EFAULT in pid:336 [ 169.041168][ T8463] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 1 [ 169.099761][ T1198] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 169.107247][ T1198] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 169.118267][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.257266][ T8469] rust_binder: Write failure EINVAL in pid:339 [ 169.359402][ T36] kauditd_printk_skb: 4476 callbacks suppressed [ 169.359419][ T36] audit: type=1400 audit(1750399658.779:14768): avc: denied { setattr } for pid=6365 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.419193][ T8471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1343 [ 169.430609][ T36] audit: type=1400 audit(1750399658.779:14769): avc: denied { ioctl } for pid=8472 comm="syz.1.2469" path="/dev/binderfs/binder0" dev="binder" ino=274 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.444144][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.466843][ T36] audit: type=1400 audit(1750399658.779:14770): avc: denied { set_context_mgr } for pid=8472 comm="syz.1.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.492092][ T6365] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 169.501852][ T6365] audit: backlog limit exceeded [ 169.503479][ T7342] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.507416][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 169.513764][ T7342] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 169.521180][ T6365] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 169.535904][ T8471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.538314][ T8471] rust_binder: Error in use_page_slow: ESRCH [ 169.551577][ T8471] rust_binder: use_range failure ESRCH [ 169.557681][ T8471] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 169.565085][ T8471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.574944][ T8471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1343 [ 169.702561][ T8483] rust_binder: Error while translating object. [ 169.703562][ T8484] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 169.727354][ T8483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.727382][ T8483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1345 [ 169.802968][ T8488] rust_binder: Write failure EFAULT in pid:1350 [ 169.823396][ T8488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.833286][ T8488] rust_binder: Error in use_page_slow: ESRCH [ 169.840490][ T8488] rust_binder: use_range failure ESRCH [ 169.846655][ T8488] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 169.853097][ T8488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 169.861873][ T8488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1350 [ 170.773862][ T8503] binder: Bad value for 'max' [ 171.017759][ T8505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.017792][ T8505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1356 [ 171.086462][ T8505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1356 [ 171.088447][ T8509] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 171.110031][ T8508] rust_binder: Write failure EINVAL in pid:361 [ 171.120588][ T2149] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.279389][ T8513] binder: Bad value for 'defcontext' [ 171.313424][ T8516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.433758][ T8522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.433788][ T8522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870 [ 171.590719][ T8539] binder: Unknown parameter 'defcontext01777777777777777777777' [ 171.747440][ T8546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379 [ 171.747789][ T8546] rust_binder: Write failure EINVAL in pid:379 [ 171.929705][ T8551] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 171.959365][ T8555] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 171.991594][ T1198] Bluetooth: hci0: Frame reassembly failed (-84) [ 172.110633][ T8557] rust_binder: Error in use_page_slow: ESRCH [ 172.110659][ T8557] rust_binder: use_range failure ESRCH [ 172.126338][ T8557] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 172.137576][ T8557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 172.155866][ T8557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:881 [ 172.720108][ T8591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:890 [ 172.745213][ T8594] rust_binder: Write failure EINVAL in pid:408 [ 172.901946][ T8598] binder: Bad value for 'max' [ 173.010610][ T8600] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 173.012046][ T8600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:412 [ 173.017542][ T8603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.048523][ T8603] rust_binder: Write failure EINVAL in pid:895 [ 173.089057][ T8605] rust_binder: Write failure EINVAL in pid:897 [ 173.235478][ T8612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.998169][ T2149] Bluetooth: hci0: command 0x1003 tx timeout [ 174.004351][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.045926][ T8627] binder: Bad value for 'max' [ 174.234767][ T8637] binder: Bad value for 'stats' [ 174.298684][ T8640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.302500][ T8640] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 174.307836][ T8637] binder: Bad value for 'stats' [ 174.318298][ T8640] rust_binder: Error while translating object. [ 174.322613][ T8640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.348995][ T8640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1379 [ 174.368191][ T36] kauditd_printk_skb: 6076 callbacks suppressed [ 174.368208][ T36] audit: type=1400 audit(1750399663.779:20845): avc: denied { setattr } for pid=6365 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.459472][ T36] audit: type=1400 audit(1750399663.809:20846): avc: denied { read } for pid=8646 comm="syz.1.2522" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.495867][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.512037][ T6365] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 174.519185][ T8649] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.519982][ T36] audit: type=1400 audit(1750399663.809:20847): avc: denied { read open } for pid=8646 comm="syz.1.2522" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.531137][ T8649] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 174.550054][ T6365] audit: backlog limit exceeded [ 174.566258][ T6365] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.576832][ T8650] audit: audit_backlog=65 > audit_backlog_limit=64 [ 174.660160][ T8652] binder: Unknown parameter 'context' [ 174.727540][ T8650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.747878][ T8658] rust_binder: Error in use_page_slow: ESRCH [ 174.747901][ T8658] rust_binder: use_range failure ESRCH [ 174.754467][ T8658] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 174.761217][ T8658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 174.769292][ T8658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:910 [ 174.843171][ T8665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 174.868656][ T8665] rust_binder: Read failure Err(EFAULT) in pid:447 [ 174.996741][ T8667] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 175.010687][ T8667] rust_binder: Write failure EINVAL in pid:449 [ 175.042734][ T8669] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 175.480348][ T8676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.482263][ T8676] rust_binder: Write failure EINVAL in pid:1386 [ 175.490768][ T8677] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.604428][ T8686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.645822][ T8686] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 175.652997][ T8684] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 175.681141][ T8684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 175.690375][ T8684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1391 [ 175.704503][ T8686] rust_binder: Error while translating object. [ 175.715169][ T8686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.724299][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1391 [ 175.769036][ T8691] rust_binder: Error while translating object. [ 175.779205][ T8691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 175.785401][ T8691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:461 [ 175.876052][ T8700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.908210][ T8700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:918 [ 175.958781][ T8704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 175.967957][ T8704] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 176.018182][ T8704] rust_binder: Read failure Err(EFAULT) in pid:468 [ 176.018443][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.072044][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.124691][ T8710] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 176.154038][ T8710] rust_binder: Write failure EINVAL in pid:471 [ 176.204628][ T8715] binder: Unknown parameter 'fowner<00000000000000000000' [ 176.448874][ T8725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:477 [ 176.451997][ T8729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.498229][ T8730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.982988][ T292] bridge_slave_1: left allmulticast mode [ 177.013812][ T292] bridge_slave_1: left promiscuous mode [ 177.034572][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.050610][ T8747] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1228962300 (78653587200 ns) > initial count (47912438336 ns). Using initial count to start timer. [ 177.070798][ T292] bridge_slave_0: left allmulticast mode [ 177.076460][ T292] bridge_slave_0: left promiscuous mode [ 177.094793][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.107457][ T8750] rust_binder: Write failure EINVAL in pid:928 [ 177.313823][ T8763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.338314][ T8764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.358996][ T292] veth1_macvtap: left promiscuous mode [ 177.364571][ T292] veth0_vlan: left promiscuous mode [ 177.372027][ T8763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1412 [ 177.483058][ T8773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:497 [ 177.548515][ T8778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.569916][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.585576][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.594297][ T8751] bridge_slave_0: entered allmulticast mode [ 177.601066][ T8751] bridge_slave_0: entered promiscuous mode [ 177.608007][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.615105][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.622272][ T8751] bridge_slave_1: entered allmulticast mode [ 177.629578][ T8751] bridge_slave_1: entered promiscuous mode [ 177.680564][ T8779] random: crng reseeded on system resumption [ 177.768189][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.775302][ T8751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.782610][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.789697][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.851997][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.860634][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.879553][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.886624][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.897844][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.905023][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.015612][ T8751] veth0_vlan: entered promiscuous mode [ 178.060873][ T8751] veth1_macvtap: entered promiscuous mode [ 178.207507][ T292] bridge_slave_1: left allmulticast mode [ 178.227550][ T292] bridge_slave_1: left promiscuous mode [ 178.233350][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.241199][ T292] bridge_slave_0: left allmulticast mode [ 178.246976][ T292] bridge_slave_0: left promiscuous mode [ 178.252798][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.362953][ T292] veth1_macvtap: left promiscuous mode [ 178.368661][ T292] veth0_vlan: left promiscuous mode [ 179.843299][ T36] kauditd_printk_skb: 2705 callbacks suppressed [ 179.843317][ T36] audit: type=1400 audit(1750399669.259:23545): avc: denied { execmem } for pid=8841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 179.876812][ T36] audit: type=1400 audit(1750399669.269:23546): avc: denied { read } for pid=8843 comm="syz.0.2580" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 179.899898][ T36] audit: type=1400 audit(1750399669.289:23547): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 179.924339][ T36] audit: type=1326 audit(1750399669.289:23548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8844 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169778e929 code=0x7ffc0000 [ 179.947843][ T36] audit: type=1326 audit(1750399669.289:23549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8844 comm="syz.1.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169778e929 code=0x7ffc0000 [ 179.971445][ T36] audit: type=1400 audit(1750399669.299:23550): avc: denied { read write } for pid=8842 comm="syz.3.2582" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 179.995299][ T36] audit: type=1400 audit(1750399669.299:23551): avc: denied { read } for pid=8842 comm="syz.3.2582" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 180.018037][ T36] audit: type=1400 audit(1750399669.299:23552): avc: denied { read } for pid=8842 comm="syz.3.2582" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 180.042504][ T36] audit: type=1400 audit(1750399669.299:23553): avc: denied { read write } for pid=8842 comm="syz.3.2582" name="binder1" dev="binder" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 180.065896][ T36] audit: type=1400 audit(1750399669.309:23554): avc: denied { read write } for pid=4923 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.664307][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 185.664325][ T36] audit: type=1400 audit(1750399675.079:23667): avc: denied { execmem } for pid=8893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 185.697251][ T36] audit: type=1400 audit(1750399675.089:23668): avc: denied { read } for pid=8895 comm="syz.3.2600" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 185.721955][ T36] audit: type=1400 audit(1750399675.089:23669): avc: denied { read } for pid=8895 comm="syz.3.2600" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 185.744767][ T36] audit: type=1400 audit(1750399675.109:23670): avc: denied { read write } for pid=8894 comm="syz.0.2598" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 185.768975][ T36] audit: type=1400 audit(1750399675.109:23671): avc: denied { read } for pid=8897 comm="syz.1.2599" name="binder1" dev="binder" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 185.791942][ T36] audit: type=1400 audit(1750399675.109:23672): avc: denied { read write } for pid=4923 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 185.816174][ T36] audit: type=1400 audit(1750399675.109:23673): avc: denied { read } for pid=8900 comm="syz.3.2601" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 185.839425][ T36] audit: type=1400 audit(1750399675.109:23674): avc: denied { read append } for pid=8900 comm="syz.3.2601" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 185.862902][ T36] audit: type=1400 audit(1750399675.139:23675): avc: denied { read write } for pid=8897 comm="syz.1.2599" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 185.887260][ T36] audit: type=1400 audit(1750399675.139:23676): avc: denied { read write } for pid=4923 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.557314][ T36] kauditd_printk_skb: 238 callbacks suppressed [ 191.557333][ T36] audit: type=1400 audit(1750399680.969:23915): avc: denied { execmem } for pid=8932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 191.580993][ T8939] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 191.584253][ T36] audit: type=1400 audit(1750399680.989:23916): avc: denied { read } for pid=8934 comm="syz.0.2611" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 191.591807][ T8939] pim6reg0: linktype set to 769 [ 191.612790][ T36] audit: type=1400 audit(1750399680.989:23917): avc: denied { read } for pid=8934 comm="syz.0.2611" name="binder1" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 191.651733][ T36] audit: type=1400 audit(1750399680.989:23918): avc: denied { read } for pid=8934 comm="syz.0.2611" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 191.674536][ T36] audit: type=1400 audit(1750399680.999:23919): avc: denied { read } for pid=8933 comm="syz.1.2612" name="binder1" dev="binder" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 191.697461][ T36] audit: type=1400 audit(1750399681.029:23920): avc: denied { read } for pid=8934 comm="syz.0.2611" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 191.720338][ T36] audit: type=1400 audit(1750399681.029:23921): avc: denied { read } for pid=8935 comm="syz.3.2613" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=0 [ 191.744590][ T36] audit: type=1400 audit(1750399681.059:23922): avc: denied { read write } for pid=7342 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.769254][ T36] audit: type=1400 audit(1750399681.069:23923): avc: denied { read write } for pid=4923 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 191.805081][ T36] audit: type=1400 audit(1750399681.219:23924): avc: denied { read write } for pid=2673 comm="syz-executor" name="loop0" dev="devtmpfs" ino=488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 195.096055][ T8953] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 195.106067][ T8953] pim6reg0: linktype set to 513 [ 197.000842][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 197.000859][ T36] audit: type=1400 audit(1750399686.419:23945): avc: denied { execmem } for pid=8956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 197.033715][ T36] audit: type=1400 audit(1750399686.429:23946): avc: denied { read } for pid=8958 comm="syz.1.2621" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 197.058267][ T36] audit: type=1400 audit(1750399686.429:23947): avc: denied { read write } for pid=8957 comm="syz.0.2620" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 197.082656][ T36] audit: type=1400 audit(1750399686.429:23948): avc: denied { read write } for pid=8957 comm="syz.0.2620" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 197.106085][ T36] audit: type=1400 audit(1750399686.439:23949): avc: denied { read } for pid=8957 comm="syz.0.2620" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 197.129162][ T36] audit: type=1400 audit(1750399686.439:23950): avc: denied { mounton } for pid=8958 comm="syz.1.2621" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 197.152220][ T36] audit: type=1400 audit(1750399686.439:23951): avc: denied { read write } for pid=8957 comm="syz.0.2620" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 197.175448][ T36] audit: type=1400 audit(1750399686.439:23952): avc: denied { read } for pid=8957 comm="syz.0.2620" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 197.198253][ T36] audit: type=1400 audit(1750399686.439:23953): avc: denied { read } for pid=8957 comm="syz.0.2620" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 197.221155][ T36] audit: type=1400 audit(1750399686.439:23954): avc: denied { read } for pid=8957 comm="syz.0.2620" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 199.187614][ T311] bridge_slave_1: left allmulticast mode [ 199.193333][ T311] bridge_slave_1: left promiscuous mode [ 199.199046][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.207909][ T311] bridge_slave_0: left allmulticast mode [ 199.213676][ T311] bridge_slave_0: left promiscuous mode [ 199.220315][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.360987][ T311] veth1_macvtap: left promiscuous mode [ 199.366591][ T311] veth0_vlan: left promiscuous mode [ 199.630976][ T311] bridge_slave_1: left allmulticast mode [ 199.636816][ T311] bridge_slave_1: left promiscuous mode [ 199.642621][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.650280][ T311] bridge_slave_0: left allmulticast mode [ 199.655918][ T311] bridge_slave_0: left promiscuous mode [ 199.661751][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.669272][ T311] bridge_slave_1: left allmulticast mode [ 199.674901][ T311] bridge_slave_1: left promiscuous mode [ 199.680638][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.688027][ T311] bridge_slave_0: left allmulticast mode [ 199.693763][ T311] bridge_slave_0: left promiscuous mode [ 199.699465][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.872225][ T311] veth1_macvtap: left promiscuous mode [ 199.877765][ T311] veth0_vlan: left promiscuous mode [ 199.883292][ T311] veth1_macvtap: left promiscuous mode [ 199.888842][ T311] veth0_vlan: left promiscuous mode