last executing test programs: 32.600511665s ago: executing program 0 (id=641): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(r0) (async) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 32.587434046s ago: executing program 0 (id=642): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "0ae63a602b4f9335484d9d6e7470b56e89b19b"}, 0x5) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000002300)={@local}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 32.456994357s ago: executing program 0 (id=646): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 32.456603067s ago: executing program 0 (id=648): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) 32.443942917s ago: executing program 0 (id=649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000106, 0x0, 0x5}]}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x140002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) 32.28174657s ago: executing program 0 (id=654): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x6563b000) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 17.141153491s ago: executing program 32 (id=654): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x11, r0, 0x6563b000) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 2.004046751s ago: executing program 1 (id=1186): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r0, &(0x7f0000001600)="d93f", 0x2) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 1.943295932s ago: executing program 1 (id=1188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 1.786598114s ago: executing program 1 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000081aa83969926fb00008dd0ea82847e1be8ce299e8d3ac1359a189a48c4900e0000ff"]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x140, 0x0, 0x1}]}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000003000040000000000100000000000000e48b6b10497ccd9b375f48330f5e8b82c5d6bae116f1f9b8306b6d5097fe670fb8757521b4a725fb32e9b175b7a47bea35bdfd351e9efb33c4254bdc14854df5b78791f6d1f36f783f3a1d1696124af933e70fb764c7733055a544d0b11a112bc51e61c05011626a6cfa64f8bae76fb7efb9675f75c7e4a1199d9b4cf58d2dd4888bfeb7bd6e0e632c8e8ce029c453d23f15781c8ad483e877ba"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10200, 0x1, 0xeeef0000, 0x1000, &(0x7f0000250000/0x1000)=nil}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) mmap(&(0x7f0000035000/0x4000)=nil, 0x4000, 0x3000004, 0x30, r9, 0xf7d7a000) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r11, 0x0) 1.479318879s ago: executing program 3 (id=1199): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) syz_clone3(&(0x7f0000000040)={0x206361100, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x808000000, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x9], 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xe2) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000140)={0x1}) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, &(0x7f00000001c0)) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x22, 0x1, 0x13, 0x1, 0x4, 0x8932, 0x5, 0xca, 0xfffffffffffffffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r7, 0x557da000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0xc2a4a000) 1.361270591s ago: executing program 1 (id=1200): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010055, 0x0, 0x4}]}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010055, 0x0, 0x4}]}) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) (async) 1.256742132s ago: executing program 3 (id=1201): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x2000) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0xc2a4a000) 1.179673694s ago: executing program 3 (id=1204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x800) r2 = ioctl$TUNGETDEVNETNS(r0, 0xff05, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r4, &(0x7f0000000080)="9035d1a1facb75526d", 0x9) close(r4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00\x00\x00\x00\x02') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000140)={0x10004, 0x200, 0x240, 0x0}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000007c0)={0x2, 0x0, [{0xa29ce647c3f73f8e, 0x1000, &(0x7f0000001600)=""/4096}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) read$ptp(r3, &(0x7f0000000180)=""/51, 0x33) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) read$FUSE(r8, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f0000000200)='\x00\x00\x00\x00\x02') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1.120747624s ago: executing program 4 (id=1205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x2}) ioctl$TCSBRKP(r1, 0x5425, 0x0) syz_clone(0xb4011, 0x0, 0xfffffffffffffdad, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, "23f50000adb4004408020e90d1beaa82dc1ecf", 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x0, 0x0, 0x25}, @flat=@handle={0x73682a85, 0x100a, 0x1}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) close(r0) 1.119997714s ago: executing program 2 (id=1207): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r4, 0xfffff000) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000240)=@x86={0x0, 0x0, 0x80, 0x0, 0x3, 0x5, 0x3, 0x4, 0x80, 0x10, 0x2, 0xbe, 0x0, 0x7f, 0x4, 0xef, 0xd6, 0x8, 0x28, '\x00', 0x4, 0x21}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000000)={0x2, 0x0, 0x126}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x80, 0x200, 0xb, "65e11e03b4d62590c007a44750ce7c6c87df4b"}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7f) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6, 0x0, 0xffffb4d0, 0x5, 0x2, "0e5b632d3b4715db3e0292fb6d3627f01f56c7"}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x2000004, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 1.113304424s ago: executing program 1 (id=1208): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xffffffffffffffb6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3, 0x0, 0x6, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x48) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x76) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000100001c00000000000000000000000a9"]) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x800, 0xfff9, 0x4, 0x4}, 0x42, [0x5903, 0x7, 0x7, 0x2, 0x5, 0x7ff, 0xe3e0, 0x6, 0x3, 0xb1f, 0xce55, 0x6, 0xe, 0x1, 0x3, 0x9, 0x0, 0x10af9c90, 0x6, 0x3, 0x8, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x608a, 0x9, 0x1, 0x1, 0x5, 0x401, 0x2, 0x1, 0xa1, 0xfffffffa, 0x5, 0x5, 0x1000, 0x7f, 0x5, 0x1, 0xffffffff, 0x200, 0x0, 0x0, 0xf, 0x0, 0x4d8, 0x5, 0x8, 0x1, 0x3, 0x292, 0xfffeffff, 0x1baf, 0x2, 0x5, 0x1ff, 0x6, 0x2f, 0x6, 0x2], [0x3, 0x7, 0x3, 0x1, 0x2, 0xffff58d8, 0x9, 0x80, 0x1, 0x4d14, 0x2, 0x0, 0x8, 0x7, 0xe32b, 0x9, 0xce28, 0x407f, 0x2, 0x6, 0x6, 0x5, 0x2, 0xed, 0xb, 0x80000001, 0x6, 0x3000, 0x9, 0x2, 0x2, 0x4, 0x8000, 0x2, 0xbc, 0x1, 0x4, 0x97b0, 0x9, 0xc, 0x3, 0x2, 0x5, 0x7, 0x0, 0x9, 0x6, 0x5d, 0x5, 0x10000, 0x4, 0x3, 0x0, 0x3ff, 0x401, 0xfe5, 0x4, 0x9b8, 0x3, 0x2, 0x9, 0x42a7, 0x800, 0x9], [0x7, 0xfffff801, 0x7, 0xfff, 0x2, 0xdb, 0x0, 0x6, 0x7, 0x100, 0x9, 0x9, 0x101, 0x4c, 0x6, 0x5, 0xfff, 0x3, 0x7, 0x0, 0xf, 0x0, 0xfffffffa, 0x7, 0x4, 0x5, 0x10001, 0x5, 0x2, 0xe3a1, 0x6, 0x5, 0x6, 0xb1cc, 0x9, 0x2, 0x6, 0xc, 0x8, 0x0, 0x9, 0x6, 0xfffffffd, 0xa60d, 0x7, 0x1, 0x6, 0x7fff, 0x8, 0x0, 0x6, 0x9, 0x2, 0xa421, 0x9, 0x10, 0x7, 0x0, 0x95b2, 0x1, 0x195, 0x7fff, 0x5, 0x7b8c], [0x0, 0x788e, 0xfffffffb, 0x9, 0x5, 0x4, 0x9, 0x2, 0x1000, 0xf2, 0x8ec, 0xec, 0x43df1e02, 0x0, 0x4c6, 0x4, 0x7, 0x5, 0x3, 0x2, 0x51, 0x1, 0x6, 0x4, 0x4, 0x2f5, 0xf, 0x0, 0x2, 0x6, 0x28, 0x6, 0x1, 0x81, 0x1, 0x1, 0x5, 0x1, 0x0, 0x6, 0x3, 0xdd16, 0x1, 0x0, 0x10000, 0xfffffff7, 0x4, 0x4, 0xc, 0x1, 0xffffff83, 0xe, 0x7, 0x80000000, 0x6, 0xf, 0x200008, 0x7, 0x5, 0x80, 0x7, 0x0, 0x200, 0xb8e]}, 0x45c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$BLKSSZGET(r0, 0x1268, &(0x7f00000009c0)) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000980)={0xdddd1000, 0x3000, 0x1}) write$FUSE_DIRENTPLUS(r7, &(0x7f00000001c0)=ANY=[], 0xb0) write(r0, &(0x7f0000000000)="758cfb0e425190c9c1c78443278ee29429ac69cb3f0805aeddb7c6bbccde4dc193b86ba6d724f14e97b75dbbca912ddef51e6573df3fbf629956288c7eab51d50f5a2832050d7ee0e54c38468a43b321fe8b70b6bec77b903e4ce3b87bfc7c910ddcc011bc49952617de98225cf45635de3fcaac4ee93238ed88fc6fff3820ddddf9579d295a6cc12ed2e8aa7a4c9bbc6bb4310afa11c0210a2511fa3d28ac2332cfc2ce220094d160fb1e6c155696ed35eeccc4fbb6e141092c35a96670695cc02fccdd97c07eb28593af96f52ebfbd2c2b3a87616fb201c5aea8aabc2d474fb13af3b1017acaee", 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 877.974118ms ago: executing program 3 (id=1209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003dc0)={0x2020}, 0x2020) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mount$binderfs(&(0x7f00000021c0), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0) 768.777659ms ago: executing program 2 (id=1210): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) read(r0, &(0x7f0000000040)=""/30, 0x1e) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x80a0000, 0x0, 0xffffffff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xff}, {}, {}, {}, {0x0, 0x0, 0x40}, {0x0, 0xff}, {}, {}, {0x0, 0x0, 0x3a}, {0x0, 0xff}, {0x80, 0x0, 0x81}, {}, {}, {0x0, 0x0, 0xd4}, {}, {0x0, 0xff}]}}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x0, 0x5}) (async) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x1d, 0xd, 0x13, 0x15, 0x5, 0xc, 0x5, 0xc1, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 768.345629ms ago: executing program 4 (id=1211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r1}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) (fail_nth: 3) 667.753311ms ago: executing program 3 (id=1212): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r2, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r1, 0xa4792000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x70, 0x0, &(0x7f0000000200)=[@increfs_done={0x40106308, 0x1}, @register_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x8, 0x0, 0xd}, @fd, @flat=@weak_handle={0x77682a85, 0x1101, 0x1}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @enter_looper], 0x94, 0x0, &(0x7f0000000280)="05e74401f6f90b93b6fe58953a3169cced9cb11b18122388dd934cb193b8ee4a50319fc5b69ce98fefc2a68809ad93b2dda192b11d0e83ab0c3a7655a0776db39cd81e9e2f372dca0b6d3a8bf32782dd17cc04445329ad3e6d6a065f6e62bc7bf0054aeeefba85293bed4f4add78cde7155ed2d05f5ef99365bf0ae682497e3566f4c4384ce462f7233768973f3b9484d374d1c0"}) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 620.440181ms ago: executing program 4 (id=1213): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x111101, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 524.809743ms ago: executing program 2 (id=1214): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x2}, @fda={0x66646185, 0x5, 0x2, 0x21}, @flat=@weak_handle={0x77682a85, 0x9, 0x1}}, &(0x7f0000000080)}}, @register_looper, @register_looper], 0x33, 0x0, 0x0}) 504.568823ms ago: executing program 4 (id=1215): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') (async) 389.780775ms ago: executing program 4 (id=1216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1cd, 0xfffffff9}}, 0x30) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 268.631567ms ago: executing program 2 (id=1217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0x5, 0x8, 0x4, 0x7ff}, 0x1f, [0x2, 0x0, 0x40, 0x9, 0x2, 0x81, 0x1000, 0x6, 0x1, 0x6, 0x0, 0x4, 0x2, 0x6, 0x9, 0x2, 0x80000000, 0xaa000000, 0x5370, 0x9955, 0x9, 0x7, 0x2, 0x7, 0xc44d, 0x7, 0x7, 0x80, 0xfff, 0x7ff, 0x1000, 0x4, 0x36a, 0x5, 0xfffffff8, 0x7fff, 0x8, 0x180000, 0x1, 0x6, 0x4, 0x1, 0x1, 0x9, 0x7f, 0xfff, 0x4a, 0xfffffffc, 0xfffffff9, 0x80000000, 0xfffffff9, 0x8e, 0x3, 0x4, 0xffffffff, 0x1, 0x2, 0xc906, 0x80, 0x6, 0x8000, 0x3, 0x10000, 0x20000000], [0x1, 0x0, 0x7, 0x10, 0xfffffff8, 0x3e, 0x9, 0x3ff, 0x4, 0xa17, 0x4, 0xb, 0xd5b4d631, 0x10, 0x24, 0x29, 0x74, 0x1, 0x8, 0xf8, 0x7, 0x7fffffff, 0x3, 0x3c, 0x9, 0x901, 0xffffffb3, 0x2, 0x10000, 0x0, 0x3, 0x0, 0x6, 0x773, 0x5, 0x0, 0x3, 0xaf5c, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0x4, 0x2, 0x8e, 0x18, 0x2, 0x1, 0xf6e0, 0x4, 0x3ff, 0x1, 0xdf5e, 0xd1, 0x1, 0x0, 0x9, 0x854d, 0x1ff, 0x9, 0x8000, 0xe114, 0x5], [0x0, 0x6, 0x7, 0x3, 0xd, 0x1, 0x7e002851, 0x1ff, 0x5, 0xd, 0x6, 0xda, 0x9, 0x710a0080, 0x8, 0x4, 0x516, 0x7, 0x10, 0x1ff, 0x4, 0x10, 0x38b6, 0x3, 0x8, 0x7fff, 0x7ff, 0x0, 0x3, 0xd, 0xd, 0x5d7, 0x2, 0x8, 0x5, 0x2, 0x4, 0xa, 0x3493d9de, 0x6, 0x6, 0x8, 0xf2f3, 0x1200000, 0x400, 0x5, 0x10000, 0x7, 0x2, 0x9, 0x200, 0x0, 0x6b, 0xa, 0x1, 0x6, 0x1, 0x3, 0x7711, 0x0, 0x53e, 0x4, 0x0, 0x100], [0xfffffff9, 0x0, 0x800, 0x5, 0x10000, 0x1, 0xfffff001, 0x101, 0x2, 0x1, 0x1, 0xffffffff, 0xfffffe01, 0x19, 0x4, 0x851, 0xd69, 0xff, 0x1, 0x6, 0xb55, 0x8, 0x4, 0xd, 0x9, 0x6, 0x80000001, 0x80, 0xf8e4, 0x3, 0x3, 0xa7e2, 0xa1, 0x5607, 0x8, 0xb0e, 0x1, 0x3000000, 0x2000000, 0x1, 0xffffff9f, 0x5, 0x3, 0x10001, 0x100, 0x200, 0x0, 0x6, 0x80000000, 0x80, 0x7, 0x5, 0x7, 0x7, 0x8, 0xe29, 0xc47d, 0xffffffff, 0x2, 0x20000, 0xa01, 0x8, 0x8, 0x10]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000004c0)={{0x40, 0x8, 0xd1, 0x609}, 'syz0\x00', 0x1a}) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000580)={0x2, 0xa, {0x57, 0x1ff, 0x5, {0x4, 0x1}, {0x0, 0x4}, @cond=[{0x5, 0x1b, 0xffff, 0x7, 0xd13, 0x9}, {0x8, 0x6, 0xff, 0x8, 0x6, 0x1}]}, {0x51, 0x800, 0x6, {0x9, 0x5}, {0xf, 0xba25}, @period={0x5b, 0x1, 0x6, 0x9, 0x7ff, {0x3, 0x5, 0xfe00, 0x800}, 0x1, &(0x7f0000000540)=[0x0]}}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x97f5d000) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000640), 0x4) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680), 0x4, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000006c0)='syz1\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) write$UHID_CREATE2(r1, &(0x7f0000000700)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x48, 0x7, 0x7, 0xff, 0x7, 0x8, "18ed2ad1a1b8321279d52cb3401dc8ba451cff2b8efa4e72833160f6b0957f52d6bb08f47d635f84575eef1d288564475e3facafcde736db7f4201053cf1ec94689c9e9d4108d9b6"}}, 0x160) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000880)=':\\\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000008c0)=0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000900)=0x1) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000940)=0xb9c9) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000980)={0x3c4, 0x9, 0x5, 0x985, 0x1, 0x0, [{0x80000001, 0x4, 0x1, '\x00', 0x83}]}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) write$UHID_INPUT(r2, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 255.911577ms ago: executing program 4 (id=1218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x561}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000200)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @acquire={0x40046305, 0x1}, @decrefs], 0x0, 0x0, 0x0}) 227.742767ms ago: executing program 2 (id=1219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000d40)={0x2020}, 0x2020) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 44.75023ms ago: executing program 1 (id=1220): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x561, 0x0, 0x9}]}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 41.86338ms ago: executing program 2 (id=1221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="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"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r1}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) (fail_nth: 4) 0s ago: executing program 3 (id=1222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f00000004c0)=""/92, 0x5c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r6, 0x8002f515, &(0x7f0000000200)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0x390}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r9, 0x4068aea3, &(0x7f00000002c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r10, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r12, 0x5457, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r11, 0x4018aee3, &(0x7f00000006c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r13, 0xf518, 0x0) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r14, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x0, 0xfffffffe, 0x20000000, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x1, 0x8f, "aceef5e892cbb450cf8d006ba75dc70519990f85ba9d8e929a8da028140388967720570add8f8c1df41bd17522b2d649ed0176187a9874ebe79e9425f6739bc1bffff66d2ba62881e97d5f8bd4b7a32bd9693cb38e2c1b22f3b6530cbd015559cc8828a0a5449dce4cb8fe857c6df115d3501239b400f30b543d678454a6fa6d4d753df3eb9c3dca8f4b80d3154fbe"}) kernel console output (not intermixed with test programs): m_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.959702][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.960038][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.001808][ T1487] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 48.013707][ T1487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.015331][ T1485] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.025052][ T36] audit: type=1400 audit(1750385012.990:3110): avc: denied { read write } for pid=288 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.050211][ T1485] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 48.070725][ T1487] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 48.080062][ T1487] audit: backlog limit exceeded [ 48.107295][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.107977][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.139314][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.180716][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.217740][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.236235][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.251032][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.259067][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.265948][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.275243][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.282921][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.291181][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.298718][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.311240][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.326654][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.333605][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.340440][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.348181][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.355107][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.362004][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.368818][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.375705][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.383339][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.390563][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.397794][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.404651][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.412573][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.419398][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.441088][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.456861][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.469473][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.472572][ T1495] rust_binder: validate_parent_fixup: new_min_offset=4611686018427387934, sg_entry.length=49 [ 48.477694][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.494643][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.502088][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.503207][ T1495] rust_binder: Error while translating object. [ 48.508970][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.531494][ T1495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.535838][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.553267][ T1495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235 [ 48.553696][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.570211][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.577625][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.585232][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.592675][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.599653][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.607480][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.615477][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.623027][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.629930][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.648743][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.656384][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.676577][ T1485] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.825152][ T1503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 48.884110][ T1505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.902442][ T1505] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 48.947998][ T1505] rust_binder: Write failure EINVAL in pid:239 [ 49.167069][ T1517] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 49.188171][ T1517] SELinux: failed to load policy [ 49.266041][ T1521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 49.324652][ T1524] SELinux: failed to load policy [ 49.345825][ T1523] SELinux: failed to load policy [ 49.562440][ T1526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 49.630524][ T1529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 49.640154][ T1529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:255 [ 49.749537][ T1531] binder: Unknown parameter 'obj_type' [ 50.484201][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 50.492840][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 50.506820][ T1556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 50.513060][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x3 [ 50.562627][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.622306][ T1570] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 50.638107][ T1568] binder: Unknown parameter 'contextrfs/binder0' [ 50.645236][ T1570] rust_binder: Write failure EINVAL in pid:305 [ 50.914741][ T1577] fido_id[1577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.094812][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 51.167502][ T1601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.211417][ T1601] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 51.235516][ T1601] rust_binder: Write failure EINVAL in pid:260 [ 51.618341][ T1626] input: syz1 as /devices/virtual/input/input57 [ 51.840216][ T1634] rust_binder: Write failure EFAULT in pid:267 [ 51.972527][ T1639] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 52.113290][ T1644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.153682][ T1644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 52.195648][ T1650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.233379][ T1650] rust_binder: Error in use_page_slow: ESRCH [ 52.239930][ T1650] rust_binder: use_range failure ESRCH [ 52.247457][ T1650] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 52.253922][ T1650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 52.279348][ T1650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:273 [ 52.416601][ T1656] binder: Binderfs stats mode cannot be changed during a remount [ 52.454131][ T1659] rust_binder: Read failure Err(EAGAIN) in pid:331 [ 52.479571][ T1660] rust_binder: Write failure EINVAL in pid:331 [ 52.701129][ T36] kauditd_printk_skb: 967 callbacks suppressed [ 52.701148][ T36] audit: type=1400 audit(1750385017.980:4077): avc: denied { ioctl } for pid=1663 comm="syz.1.381" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.774223][ T36] audit: type=1400 audit(1750385018.000:4078): avc: denied { read write } for pid=1668 comm="syz.2.383" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.797844][ T36] audit: type=1400 audit(1750385018.020:4079): avc: denied { read write open } for pid=1668 comm="syz.2.383" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.841297][ T1664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.895958][ T1673] rust_binder: Write failure EINVAL in pid:297 [ 52.905952][ T1664] rust_binder: Write failure EINVAL in pid:277 [ 52.910863][ T36] audit: type=1400 audit(1750385018.020:4080): avc: denied { ioctl } for pid=1663 comm="syz.1.381" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.922061][ T1673] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.993981][ T36] audit: type=1400 audit(1750385018.020:4081): avc: denied { read } for pid=1666 comm="syz.3.382" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.002844][ T1673] rust_binder: Read failure Err(EFAULT) in pid:297 [ 53.025989][ T1675] kvm: kvm [1674]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 53.072680][ T1678] rust_binder: Write failure EINVAL in pid:297 [ 53.074316][ T1675] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.101669][ T1678] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.107499][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 53.108235][ T1678] audit: audit_lost=39 audit_rate_limit=0 audit_backlog_limit=64 [ 53.122919][ T1675] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 53.135117][ T1679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:291 [ 53.385969][ T1685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 53.623451][ T305] hid (null): report_id 2176829567 is invalid [ 53.642422][ T305] hid-generic 0008:0000:10000.0004: unknown main item tag 0x4 [ 53.650059][ T305] hid-generic 0008:0000:10000.0004: unknown main item tag 0x6 [ 53.660102][ T313] hid-generic 0E65:0000:0002.0005: item fetching failed at offset 3/27 [ 53.670869][ T313] hid-generic 0E65:0000:0002.0005: probe with driver hid-generic failed with error -22 [ 53.680734][ T305] hid-generic 0008:0000:10000.0004: report_id 2176829567 is invalid [ 53.688750][ T305] hid-generic 0008:0000:10000.0004: item 0 4 1 8 parsing failed [ 53.698429][ T305] hid-generic 0008:0000:10000.0004: probe with driver hid-generic failed with error -22 [ 53.956509][ T1709] rust_binder: Write failure EINVAL in pid:293 [ 54.316845][ T1723] binder: Unknown parameter '0x0000000000000003' [ 54.485872][ T1739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.596173][ T1746] rust_binder: Got transaction with invalid offset. [ 54.603430][ T1746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.620757][ T1746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310 [ 54.780890][ T1753] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 54.936173][ T1764] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 54.989252][ T1764] SELinux: failed to load policy [ 55.021130][ T1766] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.032789][ T1766] SELinux: failed to load policy [ 55.039160][ T1764] binder: Unknown parameter '000000000000000000030x0000000000000000' [ 55.165821][ T1778] kernel profiling enabled (shift: 63) [ 55.174314][ T1778] profiling shift: 63 too large [ 55.183912][ T1778] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 55.202188][ T1778] rust_binder: Write failure EINVAL in pid:317 [ 55.218992][ T1780] SELinux: unknown common r [ 55.269486][ T1780] SELinux: failed to load policy [ 55.370758][ T1783] kvm_intel: kvm [1782]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 55.424311][ T1791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.424630][ T1791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.431140][ T1787] binder: Bad value for 'defcontext' [ 55.664712][ T1808] rust_binder: Write failure EINVAL in pid:369 [ 55.850046][ T1811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 55.881635][ T1811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:371 [ 56.344100][ T1830] binder: Unknown parameter 'mD ^ 000000017777777777' [ 56.362111][ T1828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 56.372252][ T1828] rust_binder: Error while translating object. [ 56.398361][ T1828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.441276][ T1828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324 [ 56.487993][ T1832] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.543163][ T1832] rust_binder: Error in use_page_slow: ESRCH [ 56.549649][ T1832] rust_binder: use_range failure ESRCH [ 56.581078][ T1832] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 56.586666][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 56.611569][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:323 [ 56.637593][ T1838] binder: Bad value for 'stats' [ 56.815572][ T1842] input: syz1 as /devices/virtual/input/input59 [ 56.864141][ T1842] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.950425][ T1843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:328 [ 57.707154][ T1859] binder: Unknown parameter 'j0@[y&uU] [ 57.707154][ T1859] K9᥃iΞXCJ"vCe8ћ@sE/o6.EĆUXczD^1P#ޒHV|00000000000000000003' [ 57.735463][ T36] kauditd_printk_skb: 860 callbacks suppressed [ 57.735480][ T36] audit: type=1400 audit(1750385022.980:4926): avc: denied { mounton } for pid=1858 comm="syz.0.443" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.792295][ T1863] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 57.837507][ T36] audit: type=1400 audit(1750385023.050:4927): avc: denied { ioctl } for pid=1856 comm="syz.3.442" path="/dev/binderfs/binder0" dev="binder" ino=362 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.905776][ T36] audit: type=1400 audit(1750385023.050:4928): avc: denied { set_context_mgr } for pid=1856 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.973426][ T36] audit: type=1400 audit(1750385023.060:4929): avc: denied { map } for pid=1856 comm="syz.3.442" path="/dev/binderfs/binder0" dev="binder" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.066475][ T36] audit: type=1400 audit(1750385023.060:4930): avc: denied { read } for pid=1856 comm="syz.3.442" path="/dev/binderfs/binder0" dev="binder" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.153894][ T36] audit: type=1400 audit(1750385023.070:4931): avc: denied { remount } for pid=1862 comm="syz.2.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.197679][ T1873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.208291][ T1871] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.216225][ T1870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 58.222914][ T1873] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 58.263559][ T1873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.266271][ T1873] rust_binder: Write failure EINVAL in pid:335 [ 58.510087][ T1879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.570758][ T1879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 58.686444][ T1890] binder: Unknown parameter 'non' [ 58.781576][ T1892] rust_binder: Write failure EINVAL in pid:345 [ 58.821322][ T1894] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 58.873305][ T1896] binder: Unknown parameter 'non' [ 58.876562][ T1898] input: syz1 as /devices/virtual/input/input61 [ 58.911312][ T1894] rust_binder: Write failure EINVAL in pid:394 [ 58.933384][ T1898] input: syz0 as /devices/virtual/input/input62 [ 59.271477][ T1909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.356368][ T1914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.456320][ T1918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 59.470796][ T1917] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 59.546593][ T1923] rust_binder: Error while translating object. [ 59.546632][ T1923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 59.560761][ T1923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:352 [ 60.333085][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.352857][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.361345][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.369503][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.370947][ T1968] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 60.378109][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.397110][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.405201][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.415045][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.423127][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.439076][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.455794][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.464514][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.472599][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.481223][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.496800][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.504974][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.513083][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.527163][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.535151][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.543791][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.551718][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.559723][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.570855][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.579274][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.595502][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.605796][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.614043][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.623456][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.631437][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.639510][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.647422][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.655301][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.663221][ T1965] binder: Binderfs stats mode cannot be changed during a remount [ 60.672746][ T1980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 60.683946][ T1982] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.700445][ T1982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 61.116726][ T1992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:372 [ 61.231400][ T1996] binder: Unknown parameter 'ct8]"T͈.U&KjcUJ' [ 61.537174][ T2009] binder: Unknown parameter 'dont_hash' [ 61.630345][ T2026] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.682216][ T2029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 61.682366][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:368 [ 61.808118][ T2036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.817722][ T2036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.925097][ T2038] SELinux: security_context_str_to_sid () failed with errno=-22 [ 62.135176][ T2043] binder: Unknown parameter 'statal' [ 62.153003][ T2047] random: crng reseeded on system resumption [ 62.478970][ T2063] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 62.523021][ T2071] rust_binder: Error while translating object. [ 62.523066][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 62.529672][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:396 [ 62.539376][ T2073] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.557960][ T2073] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 62.564917][ T2073] rust_binder: Error while translating object. [ 62.571492][ T2075] rust_binder: Write failure EINVAL in pid:399 [ 62.573669][ T2073] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.580802][ T2075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.586020][ T2073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:373 [ 62.602477][ T2076] rust_binder: Write failure EINVAL in pid:399 [ 62.612565][ T2079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.657826][ T2084] rust_binder: Error while translating object. [ 62.670124][ T2084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.678141][ T2084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 62.688078][ T2084] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 62.697277][ T2084] rust_binder: Read failure Err(EFAULT) in pid:403 [ 62.724361][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.790978][ T2091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378 [ 62.809914][ T2094] SELinux: Context is not valid (left unmapped). [ 62.810430][ T36] kauditd_printk_skb: 452 callbacks suppressed [ 62.810450][ T36] audit: type=1400 audit(1750385028.080:5352): avc: denied { mac_admin } for pid=2093 comm="syz.0.526" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.840513][ T2094] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 62.860745][ T2094] rust_binder: Write failure EINVAL in pid:406 [ 62.870379][ T36] audit: type=1400 audit(1750385028.140:5353): avc: denied { create } for pid=2093 comm="syz.0.526" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=A2D8 [ 62.901623][ T36] audit: type=1400 audit(1750385028.140:5354): avc: denied { associate } for pid=2093 comm="syz.0.526" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=A2D8 [ 62.927015][ T36] audit: type=1400 audit(1750385028.140:5355): avc: denied { read append open } for pid=2093 comm="syz.0.526" path="/131/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=A2D8 [ 62.955869][ T36] audit: type=1400 audit(1750385028.140:5356): avc: denied { ioctl } for pid=2093 comm="syz.0.526" path="/131/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=693 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=A2D8 [ 62.986965][ T36] audit: type=1400 audit(1750385028.140:5357): avc: denied { map } for pid=2093 comm="syz.0.526" path="/131/hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=A2D8 [ 63.155086][ T2099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.157818][ T2099] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 63.164538][ T2099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 63.174578][ T2099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:387 [ 63.187602][ T36] audit: type=1400 audit(1750385028.470:5358): avc: denied { unlink } for pid=471 comm="syz-executor" name="hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=A2D8 [ 63.293080][ T2110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:389 [ 63.364553][ T36] audit: type=1326 audit(1750385028.640:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2111 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b318e929 code=0x7ffc0000 [ 63.398123][ T2113] binder: Unknown parameter '' [ 63.403620][ T2113] binder: Unknown parameter '' [ 63.408750][ T2113] binder: Unknown parameter '' [ 63.417581][ T36] audit: type=1326 audit(1750385028.640:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2111 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b318e929 code=0x7ffc0000 [ 63.441973][ T2113] binder: Unknown parameter '' [ 63.447007][ T2113] binder: Unknown parameter '' [ 63.452182][ T2113] binder: Unknown parameter '' [ 63.457304][ T2113] binder: Unknown parameter '' [ 63.462342][ T36] audit: type=1326 audit(1750385028.640:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2111 comm="syz.0.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4b318e929 code=0x7ffc0000 [ 63.471114][ T2113] binder: Unknown parameter '' [ 63.491456][ T2113] binder: Unknown parameter '' [ 63.496951][ T2113] binder: Unknown parameter '' [ 63.502254][ T2113] binder: Unknown parameter '' [ 63.507620][ T2113] binder: Unknown parameter '' [ 63.513091][ T2113] binder: Unknown parameter '' [ 63.518288][ T2113] binder: Unknown parameter '' [ 63.525396][ T2113] binder: Unknown parameter '' [ 63.531538][ T2113] binder: Unknown parameter '' [ 63.537271][ T2113] binder: Unknown parameter '' [ 63.542543][ T2113] binder: Unknown parameter '' [ 63.548426][ T2113] binder: Unknown parameter '' [ 63.554417][ T2113] binder: Unknown parameter '' [ 63.559806][ T2113] binder: Unknown parameter '' [ 63.565173][ T2113] binder: Unknown parameter '' [ 63.570874][ T2113] binder: Unknown parameter '' [ 63.576490][ T2113] binder: Unknown parameter '' [ 63.590842][ T2113] binder: Unknown parameter '' [ 63.598851][ T2113] binder: Unknown parameter '' [ 63.605927][ T2113] binder: Unknown parameter '' [ 63.611509][ T2113] binder: Unknown parameter '' [ 63.616748][ T2113] binder: Unknown parameter '' [ 63.623952][ T2113] binder: Unknown parameter '' [ 63.629275][ T2113] binder: Unknown parameter '' [ 63.650899][ T2113] binder: Unknown parameter '' [ 63.662016][ T2113] binder: Unknown parameter '' [ 63.702843][ T2129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.923407][ T2142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.981724][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:390 [ 64.081095][ T2149] rust_binder: Write failure EFAULT in pid:470 [ 64.319468][ T2166] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 64.333439][ T2166] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 64.356888][ T2166] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 64.446630][ T2173] rust_binder: Write failure EFAULT in pid:427 [ 64.463109][ T2172] rust_binder: Error while translating object. [ 64.469377][ T2172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 64.506132][ T2172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:482 [ 64.569244][ T2175] rust_binder: Error while translating object. [ 64.580249][ T2175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 64.592201][ T2175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:429 [ 64.635109][ T2181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.721819][ T2188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:489 [ 64.800962][ T2195] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 64.832796][ T2195] rust_binder: Write failure EINVAL in pid:491 [ 64.885820][ T2203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.892223][ T2201] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.940773][ T2204] rust_binder: Error while translating object. [ 64.940827][ T2204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 64.947056][ T2204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:398 [ 65.005012][ T2213] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 65.137064][ T2219] binder: Unknown parameter 'dont_hash' [ 65.145894][ T2224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:498 [ 65.236846][ T2232] rust_binder: Got transaction with invalid offset. [ 65.250790][ T2232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.260940][ T2232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:441 [ 65.354863][ T2235] binder: Bad value for 'defcontext' [ 65.483781][ T2255] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.808371][ T2296] rust_binder: Write failure EFAULT in pid:459 [ 65.896378][ T2308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.898151][ T2306] rust_binder: Error while translating object. [ 65.904925][ T2306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.911161][ T2306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 65.927046][ T2311] rust_binder: Error while translating object. [ 65.973380][ T2311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.973408][ T2311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434 [ 66.067166][ T2326] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 66.076633][ T2326] rust_binder: Error in use_page_slow: EBUSY [ 66.087427][ T2326] rust_binder: use_range failure EBUSY [ 66.093901][ T2326] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 66.106179][ T2326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 66.120186][ T2326] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 66.132087][ T2326] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:506 [ 66.237027][ T2358] rust_binder: Write failure EFAULT in pid:467 [ 66.252447][ T2358] rust_binder: Write failure EFAULT in pid:467 [ 66.302090][ T2360] rust_binder: Error while translating object. [ 66.308479][ T2360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 66.330746][ T2360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:511 [ 66.539671][ T2397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 66.565523][ T2399] SELinux: security_context_str_to_sid (systgm_u) failed with errno=-22 [ 66.673528][ T2402] binder: Bad value for 'defcontext' [ 66.708943][ T2408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.734961][ T2411] binder: Bad value for 'stats' [ 66.818635][ T2417] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.818660][ T2417] rust_binder: Read failure Err(EFAULT) in pid:526 [ 66.932141][ T2426] rust_binder: Write failure EINVAL in pid:531 [ 66.981710][ T2428] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 66.988776][ T2428] rust_binder: Read failure Err(EFAULT) in pid:507 [ 67.017947][ T2430] rust_binder: Write failure EFAULT in pid:509 [ 67.072680][ T2435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 67.129203][ T2444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.141715][ T2443] rust_binder: Error while translating object. [ 67.162871][ T2442] rust_binder: Error while translating object. [ 67.174959][ T2449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.181452][ T2442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.187900][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:535 [ 67.197658][ T2443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 67.207730][ T2443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:535 [ 67.238713][ T2451] rust_binder: validate_parent_fixup: new_min_offset=1099511627811, sg_entry.length=74 [ 67.248513][ T2451] rust_binder: Error while translating object. [ 67.258703][ T2451] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.265173][ T2451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:539 [ 67.285519][ T2452] rust_binder: Error while translating object. [ 67.294848][ T2452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 67.303518][ T2452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:516 [ 67.315710][ T2454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 67.371502][ T2454] rust_binder: Error while translating object. [ 67.381316][ T2454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 67.400209][ T2454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 67.442519][ T2464] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.453337][ T2464] rust_binder: Read failure Err(EFAULT) in pid:451 [ 67.493884][ T2466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:482 [ 67.501061][ T2467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.657867][ T2476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 67.675294][ T2476] rust_binder: Read failure Err(EFAULT) in pid:454 [ 67.709357][ T2471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 67.716249][ T2471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:543 [ 67.790572][ T2484] random: crng reseeded on system resumption [ 67.888632][ T2490] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 67.896982][ T2490] rust_binder: Write failure EINVAL in pid:497 [ 67.983763][ T36] kauditd_printk_skb: 127 callbacks suppressed [ 67.983783][ T36] audit: type=1400 audit(1750385033.260:5489): avc: denied { load_policy } for pid=2494 comm="syz.0.642" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 67.983860][ T2495] SELinux: failed to load policy [ 68.065955][ T2501] rust_binder: Write failure EFAULT in pid:547 [ 68.081546][ T2503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.125866][ T2503] rust_binder: Write failure EINVAL in pid:459 [ 68.134950][ T2512] binder: Binderfs stats mode cannot be changed during a remount [ 68.160436][ T2517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 68.160469][ T2517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:552 [ 68.176666][ T2517] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 68.187549][ T2517] rust_binder: Read failure Err(EFAULT) in pid:552 [ 68.221158][ T36] audit: type=1400 audit(1750385033.500:5490): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.281923][ T36] audit: type=1400 audit(1750385033.560:5491): avc: denied { setattr } for pid=471 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.410864][ T2535] rust_binder: Write failure EFAULT in pid:561 [ 68.463390][ T2542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.470147][ T2542] rust_binder: Error while translating object. [ 68.479931][ T2542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.486575][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 68.519516][ T2546] binder: Bad value for 'stats' [ 68.541630][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:470 [ 68.679121][ T2537] rust_binder: Read failure Err(EFAULT) in pid:526 [ 68.690181][ T2551] rust_binder: Write failure EFAULT in pid:570 [ 68.726291][ T2558] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.745231][ T2558] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 68.769436][ T2558] rust_binder: Write failure EINVAL in pid:475 [ 68.813884][ T2565] binder: Unknown parameter 'font_hash' [ 68.820794][ T2567] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.840853][ T2566] rust_binder: Write failure EINVAL in pid:530 [ 68.936444][ T36] audit: type=1326 audit(1750385034.210:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 68.939564][ T2573] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 68.945112][ T36] audit: type=1326 audit(1750385034.210:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 68.980946][ T2571] binder: Unknown parameter 'context' [ 69.001430][ T2573] rust_binder: Error while translating object. [ 69.006844][ T2573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 69.013974][ T2573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 69.023675][ T36] audit: type=1326 audit(1750385034.210:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 69.063048][ T36] audit: type=1326 audit(1750385034.210:5495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 69.088852][ T36] audit: type=1326 audit(1750385034.210:5496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 69.113985][ T36] audit: type=1326 audit(1750385034.210:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 69.138128][ T36] audit: type=1326 audit(1750385034.250:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2570 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f736a58e929 code=0x7ffc0000 [ 69.161753][ T2578] rust_binder: Error while translating object. [ 69.161829][ T2578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 69.168070][ T2578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:539 [ 69.230958][ T2584] binder: Bad value for 'max' [ 69.306058][ T2592] kvm: user requested TSC rate below hardware speed [ 69.316369][ T2591] kvm: user requested TSC rate below hardware speed [ 69.325516][ T2591] kvm: user requested TSC rate below hardware speed [ 69.333438][ T2591] kvm: user requested TSC rate below hardware speed [ 69.341748][ T2591] kvm: user requested TSC rate below hardware speed [ 69.349156][ T2591] kvm: user requested TSC rate below hardware speed [ 69.356524][ T2591] kvm: user requested TSC rate below hardware speed [ 69.373269][ T2591] kvm: user requested TSC rate below hardware speed [ 69.380592][ T2591] kvm: user requested TSC rate below hardware speed [ 69.388145][ T2591] kvm: user requested TSC rate below hardware speed [ 69.549651][ T2599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:548 [ 69.674877][ T2605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.689336][ T2605] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 69.704117][ T2605] rust_binder: Write failure EINVAL in pid:485 [ 69.793394][ T2607] rust_binder: Write failure EFAULT in pid:487 [ 69.822658][ T2612] rust_binder: Write failure EFAULT in pid:589 [ 70.083850][ T2646] rust_binder: Error while translating object. [ 70.083901][ T2646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 70.090150][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 70.334737][ T2665] binder: Unknown parameter 'coyBLV"i5ntext' [ 70.488231][ T2670] binder: Unknown parameter '@' [ 70.499169][ T2674] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 70.666518][ T2680] binder: Bad value for 'max' [ 70.735072][ T2691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.840875][ T2696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 70.908894][ T2703] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 70.933395][ T2703] rust_binder: Write failure EINVAL in pid:601 [ 70.997356][ T2705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 71.165385][ T2720] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 72.333085][ T2735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:611 [ 72.407358][ T2743] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 72.407798][ T2742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.432990][ T2742] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 72.455389][ T2743] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 72.468970][ T2742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 72.571609][ T2748] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.611558][ T2762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:625 [ 72.793824][ T2778] input: syz1 as /devices/virtual/input/input69 [ 72.833514][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.834803][ T2778] rust_binder: Error in use_page_slow: ESRCH [ 72.841764][ T2778] rust_binder: use_range failure ESRCH [ 72.849049][ T2780] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.870835][ T2778] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 72.870865][ T2778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 72.882256][ T2780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.891911][ T2778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:641 [ 72.898639][ T2780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.966695][ T2783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.973641][ T2783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:643 [ 72.980370][ T2783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.081857][ T2793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.088663][ T2793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 73.090801][ T2794] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 73.095300][ T2793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:646 [ 73.114910][ T2793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.169539][ T2800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.182007][ T2801] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 73.203191][ T2801] SELinux: failed to load policy [ 73.204529][ T2800] rust_binder: Error in use_page_slow: ESRCH [ 73.210432][ T2804] rust_binder: Write failure EINVAL in pid:623 [ 73.217274][ T2800] rust_binder: use_range failure ESRCH [ 73.230748][ T2800] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 73.236282][ T2800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.245183][ T2800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:648 [ 73.361494][ T2812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.361888][ T2813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 73.617809][ T2823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.634337][ T2823] kvm: kvm [2822]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008a) = 0x0 [ 73.656896][ T2823] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 73.656929][ T2823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 73.670266][ T2823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:556 [ 73.794558][ T2826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.897400][ T2827] rust_binder: got new transaction with bad transaction stack [ 73.904008][ T2827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 73.926888][ T2831] SELinux: security_context_str_to_sid (system_tA) failed with errno=-22 [ 73.970221][ T2833] binder: Unknown parameter 'func' [ 74.116749][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 74.116770][ T36] audit: type=1400 audit(1750385039.390:5518): avc: denied { map } for pid=2838 comm="syz.3.756" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 74.349795][ T2854] rust_binder: Write failure EFAULT in pid:666 [ 74.371667][ T36] audit: type=1326 audit(1750385039.650:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2855 comm="syz.3.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa669f8e929 code=0x0 [ 74.520335][ T2860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.554457][ T2860] rust_binder: Error in use_page_slow: ESRCH [ 74.554475][ T2860] rust_binder: use_range failure ESRCH [ 74.560479][ T2860] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 74.580728][ T2860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.590767][ T2860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:668 [ 74.840993][ T2865] binder: Unknown parameter '' [ 74.922490][ T2872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.923388][ T2872] rust_binder: Failed to allocate buffer. len:18446744073709551192, is_oneway:false [ 74.938826][ T2872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 74.948444][ T2872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:562 [ 75.065999][ T2885] binder: Unknown parameter 'defcontext01777777777777777777777' [ 75.092002][ T2890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.092271][ T2890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:571 [ 75.148693][ T2896] binder: Unknown parameter 'subj_role' [ 75.270749][ T2907] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.270775][ T2907] rust_binder: Read failure Err(EFAULT) in pid:653 [ 75.300820][ T2907] rust_binder: Write failure EINVAL in pid:653 [ 75.327653][ T2907] rust_binder: Write failure EINVAL in pid:653 [ 75.341559][ T2913] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.358072][ T2913] rust_binder: Read failure Err(EFAULT) in pid:653 [ 75.394708][ T36] audit: type=1400 audit(1750385040.670:5520): avc: denied { setcheckreqprot } for pid=2921 comm="syz.1.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.431277][ T2922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:590 [ 75.450288][ T36] audit: type=1400 audit(1750385040.710:5521): avc: denied { append } for pid=2921 comm="syz.1.783" name="binder0" dev="binder" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.537938][ T2924] rust_binder: Got transaction with invalid offset. [ 75.537989][ T2924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.556007][ T2924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:658 [ 75.723564][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 75.741098][ T2933] rust_binder: Error while translating object. [ 75.750450][ T2933] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.762632][ T2933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:661 [ 76.011643][ T2938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.033323][ T2938] rust_binder: Error while translating object. [ 76.039829][ T2938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 76.055469][ T2938] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:699 [ 76.092868][ T2940] random: crng reseeded on system resumption [ 76.096068][ T36] audit: type=1400 audit(1750385041.370:5522): avc: denied { append } for pid=2939 comm="syz.1.790" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 76.186858][ T2952] rust_binder: Write failure EFAULT in pid:672 [ 76.266798][ T2955] syz.2.794 (2955) used obsolete PPPIOCDETACH ioctl [ 76.382920][ T2962] binder: Unknown parameter 'processor : 0 [ 76.382920][ T2962] vendor_id : GenuineIntel [ 76.382920][ T2962] cpu family : 6 [ 76.382920][ T2962] model : 79 [ 76.382920][ T2962] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 76.382920][ T2962] stepping : 0 [ 76.382920][ T2962] microcode : 0xffffffff [ 76.382920][ T2962] cpu MHz : 2199.998 [ 76.382920][ T2962] cache size : 56320 KB [ 76.382920][ T2962] physical id : 0 [ 76.382920][ T2962] siblings : 2 [ 76.382920][ T2962] core id : 0 [ 76.382920][ T2962] cpu cores : 1 [ 76.382920][ T2962] apicid : 0 [ 76.382920][ T2962] initial apicid : 0 [ 76.382920][ T2962] fpu : yes [ 76.382920][ T2962] fpu_exception : yes [ 76.382920][ T2962] cpuid level : 13 [ 76.382920][ T2962] wp : yes [ 76.382920][ T2962] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 76.382920][ T2962] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 76.528786][ T2970] rust_binder: Error while translating object. [ 76.668733][ T2970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.679733][ T2970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 76.727386][ T36] audit: type=1326 audit(1750385042.000:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa669f8e929 code=0x7ffc0000 [ 76.762727][ T2972] binder: Unknown parameter 'context' [ 76.770453][ T2974] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.770623][ T2974] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.776765][ T36] audit: type=1326 audit(1750385042.000:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa669f8e929 code=0x7ffc0000 [ 76.777572][ T2974] rust_binder: Read failure Err(EFAULT) in pid:607 [ 76.785371][ T36] audit: type=1326 audit(1750385042.000:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa669f8e929 code=0x7ffc0000 [ 76.815386][ T2974] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 76.859296][ T36] audit: type=1326 audit(1750385042.000:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa669f8e929 code=0x7ffc0000 [ 76.877274][ T2974] rust_binder: Write failure EINVAL in pid:607 [ 76.883514][ T36] audit: type=1326 audit(1750385042.000:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2971 comm="syz.3.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa669f8e929 code=0x7ffc0000 [ 76.928327][ T2980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.027491][ T2990] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 77.063063][ T2990] rust_binder: Write failure EINVAL in pid:706 [ 77.065285][ T2993] input: syz0 as /devices/virtual/input/input75 [ 77.097601][ T2994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 77.097644][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.110330][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.118951][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.127259][ T2996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.140713][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.147465][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.176495][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.211033][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.217013][ T2999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.217681][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.217729][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.227597][ T2999] rust_binder: Error in use_page_slow: ESRCH [ 77.247401][ T2999] rust_binder: use_range failure ESRCH [ 77.253284][ T2996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:622 [ 77.253721][ T2999] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 77.268616][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.269190][ T2999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.286113][ T2999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:709 [ 77.288896][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.331590][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.350721][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.357287][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.366220][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.372873][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.381400][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.388289][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.397198][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.418585][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.427636][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.434723][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.465923][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.473641][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.482286][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.488995][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.498250][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.524358][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.532973][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.539724][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.547969][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.556079][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.564337][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.571026][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.579295][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.586288][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.605306][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.612144][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.634026][ T3011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.640490][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.647304][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.657182][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.663896][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.673267][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.679933][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.688140][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.694832][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.703514][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.710064][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.718591][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.725257][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.751646][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.761000][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.769264][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.775946][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.784592][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.791362][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.799620][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.806344][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.815250][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.821920][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.831054][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.837835][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.846046][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.861351][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.869593][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.876220][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 77.885133][ T2994] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 77.891761][ T2994] rust_binder: Read failure Err(EFAULT) in pid:683 [ 78.003906][ T3021] binder: Unknown parameter 'defcontext01777777777777777777777' [ 78.049913][ T3024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.120865][ T3031] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.371017][ T3054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.387018][ T3054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.574072][ T3069] binder: Unknown parameter '00000000000000000000' [ 78.654738][ T3072] kvm: kvm [3071]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 78.684687][ T3074] kvm_intel: kvm [3073]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 78.694703][ T3074] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 78.694742][ T3074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 78.704003][ T3074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:713 [ 78.827052][ T3082] serio: Serial port ttynull [ 78.873816][ T3084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:715 [ 78.898282][ T3086] SELinux: policydb string length 14080 does not match expected length 8 [ 78.934278][ T3086] SELinux: failed to load policy [ 79.016268][ T3098] rust_binder: Write failure EINVAL in pid:724 [ 79.135048][ T3106] SELinux: security_context_str_to_sid () failed with errno=-22 [ 79.182823][ T3108] rust_binder: Write failure EINVAL in pid:676 [ 79.299090][ T3118] kvm_intel: kvm [3116]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 79.369115][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 79.369135][ T36] audit: type=1400 audit(1750385044.640:5571): avc: denied { read } for pid=3120 comm="syz.3.846" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.461443][ T3125] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.643479][ T36] audit: type=1326 audit(1750385044.920:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3135 comm="syz.3.851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa669f8e929 code=0x0 [ 79.685188][ T3138] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 79.685229][ T3138] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:692 [ 79.987458][ T3158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.028151][ T3158] rust_binder: Write failure EINVAL in pid:730 [ 80.038469][ T3161] input: syz0 as /devices/virtual/input/input76 [ 80.081899][ T3161] binder: Bad value for 'defcontext' [ 80.422815][ T3187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.500216][ T3191] Restarting kernel threads ... [ 80.500216][ T36] audit: type=1400 audit(1750385045.770:5573): avc: denied { ioctl } for pid=3190 comm="syz.2.870" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.543102][ T3191] done. [ 80.559326][ T3191] rust_binder: Write failure EINVAL in pid:744 [ 80.559476][ T3191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.566902][ T3191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:744 [ 80.652789][ T3202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 80.662797][ T3202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:728 [ 80.681608][ T3204] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.779344][ T3211] kvm: kvm [3210]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 80.801967][ T3211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:749 [ 80.814016][ T3219] rust_binder: Error while translating object. [ 80.833749][ T3219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 80.840148][ T3219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:734 [ 80.868949][ T3219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.869119][ T3223] rust_binder: Error while translating object. [ 80.886006][ T3221] kernel profiling enabled (shift: 8) [ 80.886530][ T3223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 80.900509][ T3223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:734 [ 81.040412][ T3232] rust_binder: Write failure EINVAL in pid:759 [ 81.072957][ T3234] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 81.083917][ T3234] rust_binder: Read failure Err(EFAULT) in pid:741 [ 81.094498][ T3236] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 81.101872][ T3236] rust_binder: Error while translating object. [ 81.118194][ T3236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.141362][ T3236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753 [ 81.161296][ T3246] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.175085][ T3244] binder: Unknown parameter 'uid' [ 81.214191][ T3250] input: syz1 as /devices/virtual/input/input77 [ 81.222680][ T3253] random: crng reseeded on system resumption [ 81.242863][ T3250] SELinux: policydb magic number 0x40003 does not match expected magic number 0xf97cff8c [ 81.266145][ T3250] SELinux: failed to load policy [ 81.404396][ T3264] rust_binder: Write failure EINVAL in pid:772 [ 81.453379][ T3267] random: crng reseeded on system resumption [ 81.466229][ T3271] binder: Bad value for 'stats' [ 81.503766][ T3267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:747 [ 81.565745][ T3274] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 81.601475][ T3274] rust_binder: Write failure EINVAL in pid:766 [ 81.688536][ T3286] rust_binder: Write failure EFAULT in pid:773 [ 82.011061][ T3298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:781 [ 82.033869][ T3297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.081176][ T3299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.133930][ T3305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 82.134153][ T3302] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 82.149928][ T3302] rust_binder: Error in use_page_slow: EBUSY [ 82.160502][ T3302] rust_binder: use_range failure EBUSY [ 82.166891][ T3302] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 82.172812][ T3302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 82.180548][ T3302] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 82.204618][ T3302] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:756 [ 82.223764][ T3302] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 82.240439][ T3302] rust_binder: Write failure EINVAL in pid:756 [ 82.240898][ T3302] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 82.282764][ T3311] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000630b0000630b not found [ 82.298018][ T3311] rust_binder: Write failure EINVAL in pid:784 [ 82.299002][ T3311] rust_binder: Error while translating object. [ 82.305738][ T3311] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.335210][ T3311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:784 [ 82.464431][ T3327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.491088][ T3327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.677477][ T3336] rust_binder: Write failure EINVAL in pid:793 [ 82.812376][ T3347] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 82.850760][ T3347] SELinux: failed to load policy [ 83.072846][ T3372] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 83.094348][ T3372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 83.094383][ T3372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:784 [ 83.167073][ T3377] rust_binder: Write failure EFAULT in pid:814 [ 83.225849][ T3385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.301785][ T36] audit: type=1326 audit(1750385048.580:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3394 comm="syz.2.931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb8e929 code=0x0 [ 83.564163][ T36] audit: type=1400 audit(1750385048.840:5575): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.586058][ T36] audit: type=1400 audit(1750385048.840:5576): avc: denied { sys_module } for pid=3401 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.626552][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.634141][ T3401] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.641275][ T3401] bridge_slave_0: entered allmulticast mode [ 83.647609][ T3401] bridge_slave_0: entered promiscuous mode [ 83.655531][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.663579][ T3401] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.671609][ T3401] bridge_slave_1: entered allmulticast mode [ 83.678149][ T3401] bridge_slave_1: entered promiscuous mode [ 83.736837][ T3408] binder: Unknown parameter '0x0000000000000003' [ 83.756936][ T12] bridge_slave_1: left allmulticast mode [ 83.766130][ T12] bridge_slave_1: left promiscuous mode [ 83.772345][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.786429][ T12] bridge_slave_0: left allmulticast mode [ 83.792232][ T12] bridge_slave_0: left promiscuous mode [ 83.801569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.838031][ T3414] rust_binder: Write failure EFAULT in pid:808 [ 83.841303][ T3412] rust_binder: Write failure EFAULT in pid:797 [ 83.879256][ T3418] binder: Unknown parameter 'defcontext01777777777777777777777' [ 83.932441][ T36] audit: type=1400 audit(1750385049.200:5577): avc: denied { create } for pid=3401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.939485][ T3401] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.961181][ T3401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.968813][ T36] audit: type=1400 audit(1750385049.200:5578): avc: denied { write } for pid=3401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.968829][ T3401] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.968848][ T3401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.990479][ T36] audit: type=1400 audit(1750385049.200:5579): avc: denied { read } for pid=3401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.030380][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.040123][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.050578][ T64] hid-generic C98F:0003:0000.0006: unknown main item tag 0x0 [ 84.062951][ T64] hid-generic C98F:0003:0000.0006: unknown main item tag 0x0 [ 84.074308][ T12] veth1_macvtap: left promiscuous mode [ 84.080025][ T12] veth0_vlan: left promiscuous mode [ 84.086107][ T64] hid-generic C98F:0003:0000.0006: hidraw0: HID v0.03 Device [syz0] on syz1 [ 84.098084][ T3423] KVM: debugfs: duplicate directory 3423-8 [ 84.176109][ T3428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 84.185572][ T36] audit: type=1400 audit(1750385049.450:5580): avc: denied { map } for pid=3422 comm="syz.1.941" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.221062][ T3428] rust_binder: Write failure EINVAL in pid:802 [ 84.221288][ T3428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 84.246645][ T3428] rust_binder: Read failure Err(EFAULT) in pid:802 [ 84.260407][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.274176][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.293826][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.300953][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.349449][ T3401] veth0_vlan: entered promiscuous mode [ 84.364942][ T3401] veth1_macvtap: entered promiscuous mode [ 84.406849][ T36] audit: type=1400 audit(1750385049.680:5581): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/root/syzkaller.GGr3gF/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.432552][ T36] audit: type=1400 audit(1750385049.680:5582): avc: denied { mount } for pid=3401 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.455684][ T36] audit: type=1400 audit(1750385049.690:5583): avc: denied { mount } for pid=3401 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.478354][ T36] audit: type=1400 audit(1750385049.690:5584): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/root/syzkaller.GGr3gF/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.508140][ T36] audit: type=1400 audit(1750385049.690:5585): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/root/syzkaller.GGr3gF/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=54236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.538396][ T36] audit: type=1400 audit(1750385049.690:5586): avc: denied { unmount } for pid=3401 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.558691][ T36] audit: type=1400 audit(1750385049.710:5587): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.582661][ T36] audit: type=1400 audit(1750385049.710:5588): avc: denied { mounton } for pid=3401 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.611398][ T36] audit: type=1400 audit(1750385049.710:5589): avc: denied { mount } for pid=3401 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 84.674469][ T3453] SELinux: policydb version 51618937 does not match my version range 15-33 [ 84.683690][ T3453] SELinux: failed to load policy [ 84.754072][ T3462] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 84.846910][ T3465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.847055][ T3465] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 85.010882][ T3482] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 85.019050][ T3482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.028451][ T3482] rust_binder: Read failure Err(EFAULT) in pid:835 [ 85.250015][ T3502] rust_binder: Write failure EFAULT in pid:20 [ 85.312852][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:838 [ 85.319810][ T3508] rust_binder: Error while translating object. [ 85.337038][ T3508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.344136][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:838 [ 85.354690][ T3508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 85.364785][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:838 [ 85.386957][ T36] audit: type=1326 audit(1750385050.660:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3514 comm="syz.2.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3ffb8e929 code=0x0 [ 85.443030][ T3517] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.453085][ T3517] rust_binder: Write failure EFAULT in pid:818 [ 85.590488][ T3528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.597390][ T3529] rust_binder: Write failure EINVAL in pid:826 [ 85.852159][ T3545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831 [ 86.143580][ T3557] binder: Unknown parameter 'smackfsroot' [ 86.342596][ T3571] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 86.342619][ T3571] rust_binder: Error while translating object. [ 86.363266][ T3571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.378946][ T3571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:845 [ 86.612776][ T3584] rust_binder: Write failure EINVAL in pid:845 [ 86.868562][ T3602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.876326][ T3602] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 86.883043][ T3602] rust_binder: Error while translating object. [ 86.892057][ T3602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.898347][ T3602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:855 [ 86.926760][ T3604] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 86.945942][ T3604] SELinux: failed to load policy [ 87.056172][ T3617] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 87.056194][ T3617] rust_binder: Error while translating object. [ 87.070799][ T3617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.077290][ T3617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:854 [ 87.266611][ T3631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 87.275914][ T3631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:863 [ 87.288415][ T3631] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 87.292114][ T3632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.297648][ T3631] rust_binder: Read failure Err(EFAULT) in pid:863 [ 87.329798][ T3635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 87.357654][ T3637] rust_binder: Error while translating object. [ 87.367340][ T3637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.380715][ T3637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 87.422819][ T3641] input: syz0 as /devices/virtual/input/input80 [ 87.494805][ T3646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:870 [ 87.725259][ T3658] binder: Unknown parameter '' [ 87.742387][ T3660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 87.742422][ T3660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:875 [ 87.785866][ T3662] rust_binder: Failed to allocate buffer. len:18446744073709551392, is_oneway:false [ 87.795608][ T3662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 87.806510][ T3662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:877 [ 87.871007][ T3668] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 87.929208][ T3675] rust_binder: Write failure EINVAL in pid:63 [ 88.031773][ T3677] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 88.037978][ T3677] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 88.047091][ T3677] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 88.110490][ T3687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.122626][ T3689] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 56) [ 88.129320][ T3689] rust_binder: Error while translating object. [ 88.141475][ T3689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.147793][ T3689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:877 [ 88.211129][ T3697] rust_binder: Write failure EINVAL in pid:871 [ 88.224613][ T3699] random: crng reseeded on system resumption [ 88.244135][ T3701] rust_binder: Write failure EFAULT in pid:873 [ 88.340878][ T3715] binder: Unknown parameter 'dثsync' [ 88.390945][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.403203][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.415412][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.429007][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.444804][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.459112][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.477882][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.498940][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.513092][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.526288][ T3724] __vm_enough_memory: pid: 3724, comm: syz.1.1036, bytes: 281474976845824 not enough memory for the allocation [ 88.718250][ T3735] SELinux: security_context_str_to_sid (sytem_uGй :߲4444zzBB [ 88.718250][ T3735] [ 88.718250][ T3735] TTTTbb**tttt<<<<JJ\\\\$$$$jj22||||DDDD RRdddd,,,,rr::LLLLZZܤllll4444zzBB [ 88.718250][ T3735] [ 88.718250][ T3735] TTTTb) failed with errno=-22 [ 89.058151][ T3737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.151105][ T3737] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.221481][ T3737] rust_binder: Write failure EINVAL in pid:884 [ 89.265861][ T3744] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 89.320737][ T3744] rust_binder: Write failure EINVAL in pid:89 [ 89.345891][ T3744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 89.354451][ T3748] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.375105][ T3746] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 89.414119][ T3748] SELinux: failed to load policy [ 89.462785][ T3748] geneve1: tun_chr_ioctl cmd 1074025672 [ 89.480707][ T3748] geneve1: ignored: set checksum enabled [ 89.717934][ T3771] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.754449][ T3771] rust_binder: Error while translating object. [ 89.770773][ T3771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 89.778602][ T3771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:899 [ 89.958590][ T3789] binder: Bad value for 'stats' [ 89.976102][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 89.985706][ T3792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:904 [ 89.991096][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.018470][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.031195][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.044365][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.059350][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.072514][ T3798] binder: Bad value for 'max' [ 90.077304][ T3804] random: crng reseeded on system resumption [ 90.086380][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.100740][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.108478][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.121862][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.129635][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.150745][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.158425][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.172299][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.180021][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.187611][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.206139][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.225651][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.235491][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.247984][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.255537][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.268937][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.276925][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.284574][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.295330][ T3818] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 90.295364][ T3818] rust_binder: Error in use_page_slow: EBUSY [ 90.306095][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.319878][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.327697][ T3818] rust_binder: use_range failure EBUSY [ 90.327725][ T3818] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 90.330928][ T3826] rust_binder: Write failure EFAULT in pid:913 [ 90.333572][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.355833][ T3818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 90.355994][ T3818] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 90.366566][ T3818] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:104 [ 90.378631][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.379185][ T64] hid-generic 07FF:007F:1569BA67.0008: item fetching failed at offset 0/53 [ 90.387238][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.411559][ T64] hid-generic 07FF:007F:1569BA67.0008: probe with driver hid-generic failed with error -22 [ 90.412053][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.433177][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.443450][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.452137][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.468283][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.477110][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.485058][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.493623][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.502311][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.511927][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.540857][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.555918][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.564454][ T3836] binder: Unknown parameter 'rw' [ 90.571343][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.581467][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.597031][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.610517][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.618675][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.626923][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.646970][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.663398][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.678107][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.687259][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.696261][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.715053][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.723740][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.733664][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.741391][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.749187][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.757085][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.765282][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.773278][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.800934][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.808502][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.830719][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.839362][ T3857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.839449][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.840043][ T3856] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 90.850768][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.854810][ T3856] rust_binder: Error while translating object. [ 90.880464][ T3856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.886901][ T3856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:927 [ 90.890756][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.920951][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.928710][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.938016][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.946665][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.955128][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.963150][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.970970][ T3860] rust_binder: Failed to allocate buffer. len:4232, is_oneway:true [ 90.970994][ T3860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 90.971326][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 90.985334][ T3860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:930 [ 90.989314][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.014516][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.024180][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.032684][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.040607][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.049629][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.060854][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.069009][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.083431][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.092405][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.102139][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.110991][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.120138][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.128712][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.137540][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.145771][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.158040][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.167119][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.175326][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.183995][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.193346][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.207218][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.215649][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.223783][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.247316][ T3863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 91.247452][ T3863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:110 [ 91.250774][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.280711][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.298508][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.308613][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.323827][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.337391][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.345520][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.354331][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.362144][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.369738][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.379967][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.387912][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.396582][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.405664][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.413914][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.422542][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.430820][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.439206][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.449783][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.460779][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.468806][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.478988][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.487807][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.496989][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.505088][ T3887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.505162][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.519721][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.527701][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.535463][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.543338][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.553790][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.561556][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.569237][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.597444][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.609725][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.629209][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.636756][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.650711][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.669188][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.677089][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.710793][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.719021][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.739095][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.750746][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.759172][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.767530][ T3906] binder: Bad value for 'max' [ 91.774696][ T3906] binder: Bad value for 'max' [ 91.780770][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.788438][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.801798][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.811827][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.811940][ T3895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.818543][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.840882][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.853434][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.873068][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.880532][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.898265][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.915172][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.929692][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.938788][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.946757][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.954940][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.963738][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.971856][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.979528][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 91.993637][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.003524][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.013067][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.021740][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.029775][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.037663][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.045439][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.053651][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.065149][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.072731][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.080578][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.093661][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.101363][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.108922][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.117559][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.126052][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.126172][ T3922] rust_binder: Error while translating object. [ 92.133706][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.146308][ T3922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.148536][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.152805][ T3922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:943 [ 92.159050][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.185695][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.194724][ T305] hid-generic 0007:0001:0003.0007: unknown main item tag 0x0 [ 92.204605][ T305] hid-generic 0007:0001:0003.0007: hidraw0: HID v0.07 Device [syz0] on syz0 [ 92.265490][ T3933] binder: Unknown parameter '' [ 92.276830][ T3935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:949 [ 92.277966][ T3935] rust_binder: Read failure Err(EFAULT) in pid:949 [ 92.342642][ T3943] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.424062][ T3945] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 92.449026][ T3948] fido_id[3948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.494213][ T3942] binder: Unknown parameter '01777777777777777777777' [ 92.719005][ T3974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 92.719044][ T3974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:914 [ 92.732046][ T3974] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.741805][ T3974] rust_binder: Read failure Err(EFAULT) in pid:914 [ 92.800805][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 92.800828][ T36] audit: type=1400 audit(1750385058.070:5602): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 92.835254][ T3983] can0: slcan on ttyS3. [ 92.856753][ T36] audit: type=1400 audit(1750385058.120:5603): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.890757][ T36] audit: type=1400 audit(1750385058.120:5604): avc: denied { read } for pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=6675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.941146][ T36] audit: type=1400 audit(1750385058.120:5605): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 92.982978][ T3982] can0 (unregistered): slcan off ttyS3. [ 93.029116][ T36] audit: type=1400 audit(1750385058.120:5606): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=6675 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 93.059119][ T36] audit: type=1400 audit(1750385058.190:5607): avc: denied { read } for pid=3987 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.088034][ T4007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 93.088224][ T4007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 93.096448][ T36] audit: type=1400 audit(1750385058.190:5608): avc: denied { open } for pid=3987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.139799][ T4020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.139838][ T4020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984 [ 93.156427][ T36] audit: type=1400 audit(1750385058.190:5609): avc: denied { getattr } for pid=3987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.195370][ T36] audit: type=1400 audit(1750385058.310:5610): avc: denied { write } for pid=3986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.243864][ T4032] rust_binder: Error in use_page_slow: ESRCH [ 93.243882][ T4032] rust_binder: use_range failure ESRCH [ 93.251675][ T4032] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 93.257607][ T4032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 93.266680][ T4032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:988 [ 93.269791][ T36] audit: type=1400 audit(1750385058.310:5611): avc: denied { add_name } for pid=3986 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.364398][ T4049] binder: Unknown parameter 'defcontext01777777777777777777777' [ 93.499207][ T4062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:934 [ 93.510903][ T4058] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967294 [ 93.528694][ T4058] rust_binder: Write failure EINVAL in pid:971 [ 93.529056][ T4058] SELinux: security_context_str_to_sid () failed with errno=-22 [ 93.558249][ T4066] rust_binder: Error while translating object. [ 93.558287][ T4066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.566404][ T4066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:934 [ 93.951311][ T4088] input: syz0 as /devices/virtual/input/input81 [ 93.970120][ T4088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:981 [ 94.121613][ T4095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.131415][ T4095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:948 [ 94.142328][ T4095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:948 [ 94.468307][ T4103] rust_binder: Error in use_page_slow: ESRCH [ 94.468330][ T4103] rust_binder: use_range failure ESRCH [ 94.475024][ T4103] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 94.480629][ T4103] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.497113][ T4103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1002 [ 94.508531][ T4106] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 94.523624][ T4106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 94.533114][ T4106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:992 [ 94.582379][ T4118] rust_binder: Write failure EINVAL in pid:1011 [ 94.592729][ T4118] rust_binder: Write failure EINVAL in pid:1011 [ 94.611500][ T4120] rust_binder: Error while translating object. [ 94.617908][ T4120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.625346][ T4120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:998 [ 94.639057][ T4118] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 94.649456][ T4118] rust_binder: Read failure Err(EFAULT) in pid:1011 [ 94.854417][ T4129] cgroup: fork rejected by pids controller in /syz4 [ 95.141504][ T4143] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 95.141526][ T4143] rust_binder: Error while translating object. [ 95.152430][ T4143] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.159003][ T4143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:958 [ 95.201696][ T4147] rust_binder: Write failure EINVAL in pid:962 [ 95.274485][ T4147] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.281886][ T4147] rust_binder: Read failure Err(EFAULT) in pid:962 [ 95.283638][ T4150] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 95.308606][ T4150] SELinux: failed to load policy [ 95.327211][ T4150] binder: Bad value for 'stats' [ 95.369058][ T4152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.369381][ T4152] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 95.376500][ T4152] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.575142][ T4159] SELinux: policydb string ' does not match my string SE Linux [ 95.585673][ T4159] SELinux: failed to load policy [ 95.655224][ T4163] rust_binder: Error while translating object. [ 95.655256][ T4163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 95.662624][ T4163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1003 [ 95.672786][ T4163] binder: Bad value for 'defcontext' [ 95.951154][ T12] bridge_slave_1: left allmulticast mode [ 95.957123][ T12] bridge_slave_1: left promiscuous mode [ 95.965779][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.975109][ T12] bridge_slave_0: left allmulticast mode [ 95.990772][ T12] bridge_slave_0: left promiscuous mode [ 95.997973][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.160324][ T4181] input: syz0 as /devices/virtual/input/input82 [ 96.178661][ T12] veth1_macvtap: left promiscuous mode [ 96.186027][ T12] veth0_vlan: left promiscuous mode [ 96.202917][ T649] udevd[649]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 96.328785][ T4179] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 96.328812][ T4179] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 96.340787][ T4179] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 96.353209][ T4179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.371788][ T4179] rust_binder: Error while translating object. [ 96.380490][ T4179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 96.393213][ T4179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1011 [ 96.413608][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.420892][ T4179] rust_binder: Write failure EINVAL in pid:1011 [ 96.423175][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.443959][ T4184] bridge_slave_0: entered allmulticast mode [ 96.450990][ T4184] bridge_slave_0: entered promiscuous mode [ 96.458996][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.464513][ T4179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.466070][ T4179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1011 [ 96.466255][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.475740][ T4184] bridge_slave_1: entered allmulticast mode [ 96.500067][ T4184] bridge_slave_1: entered promiscuous mode [ 96.529421][ T4192] binder: Bad value for 'max' [ 96.595211][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.602520][ T4184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.609858][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.617609][ T4184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.664592][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.687620][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.707352][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.714916][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.736481][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.743618][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.772529][ T4184] veth0_vlan: entered promiscuous mode [ 96.791923][ T4184] veth1_macvtap: entered promiscuous mode [ 96.990631][ T4210] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 97.000394][ T4210] rust_binder: Write failure EINVAL in pid:2 [ 97.004099][ T4213] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 97.020727][ T4213] SELinux: failed to load policy [ 97.029098][ T4213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.036859][ T4213] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 97.203267][ T4220] binder: Unknown parameter 'nXI' [ 97.327746][ T4227] FAULT_INJECTION: forcing a failure. [ 97.327746][ T4227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.343071][ T4227] CPU: 0 UID: 0 PID: 4227 Comm: syz.1.1173 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 97.343109][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.343132][ T4227] Call Trace: [ 97.343141][ T4227] [ 97.343151][ T4227] __dump_stack+0x21/0x30 [ 97.343190][ T4227] dump_stack_lvl+0x10c/0x190 [ 97.343211][ T4227] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.343232][ T4227] dump_stack+0x19/0x20 [ 97.343250][ T4227] should_fail_ex+0x3d9/0x530 [ 97.343268][ T4227] should_fail+0xf/0x20 [ 97.343284][ T4227] should_fail_usercopy+0x1e/0x30 [ 97.343303][ T4227] _copy_from_user+0x22/0xb0 [ 97.343325][ T4227] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x440/0x9d20 [ 97.343366][ T4227] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 97.343411][ T4227] ? is_bpf_text_address+0x17b/0x1a0 [ 97.343436][ T4227] ? kernel_text_address+0xa9/0xe0 [ 97.343453][ T4227] ? __kernel_text_address+0x11/0x40 [ 97.343469][ T4227] ? unwind_get_return_address+0x51/0x90 [ 97.343484][ T4227] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.343505][ T4227] ? arch_stack_walk+0x10b/0x170 [ 97.343528][ T4227] ? stack_trace_save+0x9d/0xe0 [ 97.343546][ T4227] ? stack_depot_save_flags+0x38/0x800 [ 97.343567][ T4227] ? kasan_save_stack+0x4d/0x60 [ 97.343588][ T4227] ? kasan_save_stack+0x3e/0x60 [ 97.343608][ T4227] ? __kasan_record_aux_stack+0xb2/0xd0 [ 97.343624][ T4227] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 97.343641][ T4227] ? __call_rcu_common+0xcc/0x6f0 [ 97.343663][ T4227] ? call_rcu+0x14/0x20 [ 97.343683][ T4227] ? __kasan_check_write+0x18/0x20 [ 97.343700][ T4227] ? _raw_spin_trylock+0xaf/0x130 [ 97.343722][ T4227] ? __cfi__raw_spin_trylock+0x10/0x10 [ 97.343742][ T4227] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.343768][ T4227] ? _raw_spin_unlock+0x45/0x60 [ 97.343788][ T4227] ? call_rcu_nocb+0x6bd/0xc10 [ 97.343805][ T4227] ? swake_up_one_online_ipi+0x30/0x30 [ 97.343822][ T4227] ? __cfi_mt_free_rcu+0x10/0x10 [ 97.343841][ T4227] ? mas_leaf_max_gap+0x496/0x690 [ 97.343868][ T4227] ? is_bpf_text_address+0x17b/0x1a0 [ 97.343892][ T4227] ? kernel_text_address+0xa9/0xe0 [ 97.343922][ T4227] ? is_bpf_text_address+0x17b/0x1a0 [ 97.343945][ T4227] ? kernel_text_address+0xa9/0xe0 [ 97.343961][ T4227] ? __kernel_text_address+0x11/0x40 [ 97.343977][ T4227] ? unwind_get_return_address+0x51/0x90 [ 97.343992][ T4227] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.344012][ T4227] ? arch_stack_walk+0x10b/0x170 [ 97.344037][ T4227] ? is_bpf_text_address+0x17b/0x1a0 [ 97.344060][ T4227] ? kernel_text_address+0xa9/0xe0 [ 97.344076][ T4227] ? __kernel_text_address+0x11/0x40 [ 97.344092][ T4227] ? unwind_get_return_address+0x51/0x90 [ 97.344106][ T4227] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 97.344126][ T4227] ? arch_stack_walk+0x10b/0x170 [ 97.344148][ T4227] ? __kasan_check_write+0x18/0x20 [ 97.344165][ T4227] ? _raw_spin_lock+0x8c/0x120 [ 97.344185][ T4227] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.344206][ T4227] ? stack_depot_save_flags+0x38/0x800 [ 97.344225][ T4227] ? _raw_spin_unlock+0x45/0x60 [ 97.344245][ T4227] ? rust_helper_spin_unlock+0x19/0x30 [ 97.344262][ T4227] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x934/0x1440 [ 97.344285][ T4227] ? __kasan_slab_alloc+0x73/0x90 [ 97.344307][ T4227] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 97.344326][ T4227] ? security_inode_alloc+0x51/0x200 [ 97.344345][ T4227] ? inode_init_always_gfp+0x756/0x9e0 [ 97.344386][ T4227] ? proc_pid_make_inode+0x25/0x140 [ 97.344407][ T4227] ? proc_pident_instantiate+0x6d/0x2c0 [ 97.344428][ T4227] ? proc_tid_base_lookup+0x2f/0x40 [ 97.344443][ T4227] ? do_filp_open+0x1c6/0x3e0 [ 97.344465][ T4227] ? do_sys_openat2+0x12c/0x1c0 [ 97.344480][ T4227] ? __x64_sys_openat+0x13a/0x170 [ 97.344495][ T4227] ? x64_sys_call+0xe69/0x2ee0 [ 97.344515][ T4227] ? do_syscall_64+0x58/0xf0 [ 97.344534][ T4227] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.344558][ T4227] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 97.344580][ T4227] ? avc_has_perm_noaudit+0x268/0x360 [ 97.344595][ T4227] ? __asan_memcpy+0x5a/0x80 [ 97.344612][ T4227] ? avc_has_perm_noaudit+0x286/0x360 [ 97.344629][ T4227] ? avc_has_perm+0x144/0x220 [ 97.344644][ T4227] ? __cfi_avc_has_perm+0x10/0x10 [ 97.344661][ T4227] ? selinux_file_open+0x457/0x610 [ 97.344684][ T4227] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 97.344708][ T4227] ? avc_has_extended_perms+0x7c7/0xdd0 [ 97.344723][ T4227] ? __asan_memcpy+0x5a/0x80 [ 97.344740][ T4227] ? avc_has_extended_perms+0x921/0xdd0 [ 97.344756][ T4227] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 97.344778][ T4227] ? do_vfs_ioctl+0xeda/0x1e30 [ 97.344799][ T4227] ? arch_stack_walk+0x10b/0x170 [ 97.344819][ T4227] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 97.344842][ T4227] ? _parse_integer+0x2e/0x40 [ 97.344860][ T4227] ? ioctl_has_perm+0x384/0x4d0 [ 97.344882][ T4227] ? has_cap_mac_admin+0xd0/0xd0 [ 97.344947][ T4227] ? proc_fail_nth_write+0x17e/0x210 [ 97.344962][ T4227] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 97.344977][ T4227] ? selinux_file_ioctl+0x6e0/0x1360 [ 97.344999][ T4227] ? vfs_write+0x8ba/0xe80 [ 97.345016][ T4227] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 97.345038][ T4227] ? __cfi_vfs_write+0x10/0x10 [ 97.345056][ T4227] ? __kasan_check_write+0x18/0x20 [ 97.345073][ T4227] ? mutex_unlock+0x8b/0x240 [ 97.345087][ T4227] ? __cfi_mutex_unlock+0x10/0x10 [ 97.345100][ T4227] ? __fget_files+0x2c5/0x340 [ 97.345128][ T4227] ? __fget_files+0x2c5/0x340 [ 97.345149][ T4227] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 97.345174][ T4227] ? __se_sys_ioctl+0x114/0x1b0 [ 97.345195][ T4227] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 97.345218][ T4227] __se_sys_ioctl+0x132/0x1b0 [ 97.345240][ T4227] __x64_sys_ioctl+0x7f/0xa0 [ 97.345261][ T4227] x64_sys_call+0x1878/0x2ee0 [ 97.345281][ T4227] do_syscall_64+0x58/0xf0 [ 97.345300][ T4227] ? clear_bhb_loop+0x35/0x90 [ 97.345323][ T4227] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.345346][ T4227] RIP: 0033:0x7f736a58e929 [ 97.345365][ T4227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.345379][ T4227] RSP: 002b:00007f736b32b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.345396][ T4227] RAX: ffffffffffffffda RBX: 00007f736a7b6080 RCX: 00007f736a58e929 [ 97.345408][ T4227] RDX: 00002000000004c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 97.345419][ T4227] RBP: 00007f736b32b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.345429][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.345438][ T4227] R13: 0000000000000000 R14: 00007f736a7b6080 R15: 00007ffedf65b3b8 [ 97.345451][ T4227] [ 98.097997][ T4229] rust_binder: Write failure EFAULT in pid:1038 [ 98.122635][ T4231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 98.129150][ T4231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:5 [ 98.302798][ T4240] rust_binder: Read failure Err(EAGAIN) in pid:7 [ 98.341036][ T4245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.354799][ T4238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1042 [ 98.387540][ T4249] rust_binder: Write failure EINVAL in pid:992 [ 98.575544][ T4260] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 98.596160][ T4260] rust_binder: Write failure EINVAL in pid:1046 [ 98.625618][ T4265] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 98.632786][ T4265] rust_binder: Error while translating object. [ 98.653392][ T4265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.660514][ T4265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1049 [ 98.727281][ T4271] random: crng reseeded on system resumption [ 98.800475][ T4277] rust_binder: Write failure EINVAL in pid:22 [ 98.807336][ T4277] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.946708][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 98.946737][ T36] audit: type=1400 audit(1750385064.220:5620): avc: granted { setsecparam } for pid=4278 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 98.979383][ T36] audit: type=1400 audit(1750385064.260:5621): avc: granted { setsecparam } for pid=4278 comm="syz.3.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.017965][ T4286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.018635][ T4285] rust_binder: got new transaction with bad transaction stack [ 99.025456][ T4285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 99.280770][ T4302] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.341805][ T36] audit: type=1400 audit(1750385064.620:5622): avc: granted { setsecparam } for pid=4306 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.460353][ T4321] input: syz0 as /devices/virtual/input/input84 [ 99.489004][ T36] audit: type=1400 audit(1750385064.760:5623): avc: denied { mounton } for pid=4316 comm="syz.2.1207" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.489294][ T4319] binder: Unknown parameter 'maxv/kvm' [ 99.526202][ T4325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 99.526269][ T36] audit: type=1400 audit(1750385064.800:5624): avc: denied { ioctl } for pid=4310 comm="syz.4.1205" path="/dev/binderfs/binder0" dev="binder" ino=158 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.569266][ T36] audit: type=1400 audit(1750385064.800:5625): avc: denied { ioctl } for pid=4320 comm="syz.1.1208" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.612187][ T36] audit: type=1400 audit(1750385064.810:5626): avc: denied { map } for pid=4320 comm="syz.1.1208" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.638765][ T36] audit: type=1400 audit(1750385064.810:5627): avc: denied { read } for pid=4320 comm="syz.1.1208" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.688626][ T36] audit: type=1400 audit(1750385064.960:5628): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.755963][ T36] audit: type=1400 audit(1750385064.990:5629): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.058672][ T4339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1024 [ 100.403971][ T4356] rust_binder: Error while translating object. [ 100.420742][ T4356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 100.435410][ T4356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1042 [ 100.480282][ T4353] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 100.480282][ T4353] attempt to subtract with overflow [ 100.527481][ T4353] ------------[ cut here ]------------ [ 100.533416][ T4353] kernel BUG at rust/helpers/bug.c:7! [ 100.560963][ T4353] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 100.567989][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: syz.4.1218 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 100.581757][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.591857][ T4353] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 100.597228][ T4353] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0d 10 f5 e6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 47 d4 bc 6a 90 90 90 90 90 90 90 90 90 [ 100.616893][ T4353] RSP: 0018:ffffc90004d15a90 EFLAGS: 00010246 [ 100.623211][ T4353] RAX: 0000000000000061 RBX: 1ffff920009a2b54 RCX: 81812510585e3000 [ 100.631394][ T4353] RDX: ffffc9000c231000 RSI: 0000000000005498 RDI: 0000000000005499 [ 100.639418][ T4353] RBP: ffffc90004d15a90 R08: ffffc90004d15787 R09: 1ffff920009a2af0 [ 100.647457][ T4353] R10: dffffc0000000000 R11: fffff520009a2af1 R12: 0000000000000000 [ 100.655476][ T4353] R13: dffffc0000000000 R14: ffffc90004d15ac0 R15: ffffc90004d15af0 [ 100.663584][ T4353] FS: 00007ff7328186c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 100.672645][ T4353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.679444][ T4353] CR2: 00007f736b34bf98 CR3: 0000000108ab6000 CR4: 00000000003526b0 [ 100.687993][ T4353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.688273][ T4362] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 100.696092][ T4353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.696117][ T4353] Call Trace: [ 100.696125][ T4353] [ 100.696135][ T4353] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 100.729974][ T4353] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 100.738098][ T4353] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 100.748495][ T4353] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 100.762124][ T4353] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 100.772785][ T4353] ? __kasan_check_write+0x18/0x20 [ 100.777949][ T4353] ? _raw_spin_lock+0x8c/0x120 [ 100.782856][ T4353] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.788205][ T4353] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 100.795457][ T4353] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 100.803547][ T4353] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 100.813569][ T4353] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 100.824381][ T4353] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 100.833342][ T4361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.834208][ T4353] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 100.850746][ T4353] ? __kasan_check_write+0x18/0x20 [ 100.855904][ T4353] ? _raw_spin_lock+0x8c/0x120 [ 100.860703][ T4353] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.866034][ T4353] ? __kasan_check_write+0x18/0x20 [ 100.871280][ T4353] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 100.880979][ T4353] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 100.890942][ T4353] ? unwind_next_frame+0x3c2/0x750 [ 100.896090][ T4353] ? security_file_open+0x44/0xd0 [ 100.901206][ T4353] ? security_file_open+0x44/0xd0 [ 100.906284][ T4353] ? __kernel_text_address+0x11/0x40 [ 100.911592][ T4353] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 100.917781][ T4353] ? arch_stack_walk+0x12a/0x170 [ 100.922847][ T4353] ? security_file_open+0x44/0xd0 [ 100.927910][ T4353] ? unwind_next_frame+0x3c2/0x750 [ 100.933094][ T4353] ? __se_sys_ioctl+0x53/0x1b0 [ 100.937880][ T4353] ? __se_sys_ioctl+0x53/0x1b0 [ 100.942757][ T4353] ? __kernel_text_address+0x11/0x40 [ 100.948050][ T4353] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 100.954286][ T4353] ? arch_stack_walk+0x12a/0x170 [ 100.959264][ T4353] ? __se_sys_ioctl+0x53/0x1b0 [ 100.964541][ T4353] ? stack_depot_save_flags+0x38/0x800 [ 100.970035][ T4353] ? stack_depot_save+0x12/0x20 [ 100.974989][ T4353] ? save_stack+0x11c/0x1f0 [ 100.979613][ T4353] ? __kasan_check_read+0x15/0x20 [ 100.984845][ T4353] ? read_word_at_a_time+0x12/0x20 [ 100.990520][ T4353] ? sized_strscpy+0x9f/0x2a0 [ 100.996467][ T4353] ? is_bpf_text_address+0x17b/0x1a0 [ 101.002581][ T4353] ? kernel_text_address+0xa9/0xe0 [ 101.007831][ T4353] ? unwind_get_return_address+0x51/0x90 [ 101.014560][ T4353] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 101.021190][ T4353] ? arch_stack_walk+0x10b/0x170 [ 101.026255][ T4353] ? stack_depot_save_flags+0x38/0x800 [ 101.031759][ T4353] ? kasan_save_alloc_info+0x40/0x50 [ 101.037075][ T4353] ? kasan_save_track+0x4f/0x80 [ 101.042573][ T4353] ? kasan_save_track+0x3e/0x80 [ 101.047651][ T4353] ? kasan_save_alloc_info+0x40/0x50 [ 101.053230][ T4353] ? __kasan_kmalloc+0x96/0xb0 [ 101.058189][ T4353] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 101.064832][ T4353] ? krealloc_noprof+0x8d/0x130 [ 101.069791][ T4353] ? rust_helper_krealloc+0x33/0xd0 [ 101.075009][ T4353] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 101.084693][ T4353] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 101.095226][ T4353] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 101.104573][ T4353] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 101.113502][ T4353] ? __se_sys_ioctl+0x132/0x1b0 [ 101.118447][ T4353] ? __x64_sys_ioctl+0x7f/0xa0 [ 101.123250][ T4353] ? do_syscall_64+0x58/0xf0 [ 101.128053][ T4353] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.134520][ T4353] ? __kasan_kmalloc+0x96/0xb0 [ 101.139310][ T4353] ? kasan_save_alloc_info+0x40/0x50 [ 101.144605][ T4353] ? __kasan_kmalloc+0x96/0xb0 [ 101.149476][ T4353] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 101.156087][ T4353] ? __kasan_check_write+0x18/0x20 [ 101.161309][ T4353] ? _raw_spin_lock+0x8c/0x120 [ 101.166113][ T4353] ? __cfi__raw_spin_lock+0x10/0x10 [ 101.171322][ T4353] ? __asan_memset+0x39/0x50 [ 101.175924][ T4353] ? _raw_spin_unlock+0x45/0x60 [ 101.180791][ T4353] ? rust_helper_spin_unlock+0x19/0x30 [ 101.186372][ T4353] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 101.197104][ T4353] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 101.208126][ T4353] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 101.214332][ T4353] ? common_lsm_audit+0x148c/0x1860 [ 101.219630][ T4353] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 101.225898][ T4353] ? slow_avc_audit+0x18d/0x1f0 [ 101.231146][ T4353] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 101.240374][ T4353] ? avc_denied+0x112/0x180 [ 101.244927][ T4353] ? avc_has_extended_perms+0x895/0xdd0 [ 101.250492][ T4353] ? avc_has_extended_perms+0x91a/0xdd0 [ 101.256049][ T4353] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 101.265701][ T4353] ? do_vfs_ioctl+0xeda/0x1e30 [ 101.270509][ T4353] ? preempt_schedule_common+0x2d/0x60 [ 101.276017][ T4353] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 101.281678][ T4353] ? __cfi_preempt_schedule+0x10/0x10 [ 101.287091][ T4353] ? preempt_schedule_thunk+0x1a/0x40 [ 101.292570][ T4353] ? try_to_wake_up+0xe17/0x1aa0 [ 101.297558][ T4353] ? ioctl_has_perm+0x384/0x4d0 [ 101.302539][ T4353] ? has_cap_mac_admin+0xd0/0xd0 [ 101.307515][ T4353] ? futex_wake+0x63a/0x900 [ 101.312044][ T4353] ? __cfi_futex_wake+0x10/0x10 [ 101.316938][ T4353] ? selinux_file_ioctl+0x6e0/0x1360 [ 101.322369][ T4353] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 101.328055][ T4353] ? do_futex+0x356/0x500 [ 101.332540][ T4353] ? __cfi_do_futex+0x10/0x10 [ 101.337267][ T4353] ? __fget_files+0x2c5/0x340 [ 101.341970][ T4353] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 101.350514][ T4353] ? __se_sys_ioctl+0x114/0x1b0 [ 101.355387][ T4353] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 101.364880][ T4353] __se_sys_ioctl+0x132/0x1b0 [ 101.369800][ T4353] __x64_sys_ioctl+0x7f/0xa0 [ 101.374817][ T4353] x64_sys_call+0x1878/0x2ee0 [ 101.379728][ T4353] do_syscall_64+0x58/0xf0 [ 101.385396][ T4353] ? clear_bhb_loop+0x35/0x90 [ 101.390476][ T4353] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.396482][ T4353] RIP: 0033:0x7ff73198e929 [ 101.401629][ T4353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.422921][ T4353] RSP: 002b:00007ff732818038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.431990][ T4353] RAX: ffffffffffffffda RBX: 00007ff731bb5fa0 RCX: 00007ff73198e929 [ 101.440344][ T4353] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 101.448345][ T4353] RBP: 00007ff731a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 101.456346][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.464985][ T4353] R13: 0000000000000000 R14: 00007ff731bb5fa0 R15: 00007ffc31d6ad78 [ 101.473175][ T4353] [ 101.476212][ T4353] Modules linked in: [ 101.480909][ T4353] ---[ end trace 0000000000000000 ]--- [ 101.590743][ T4353] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 101.596162][ T4353] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 0d 10 f5 e6 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 47 d4 bc 6a 90 90 90 90 90 90 90 90 90 [ 101.625331][ T4353] RSP: 0018:ffffc90004d15a90 EFLAGS: 00010246 [ 101.632580][ T4353] RAX: 0000000000000061 RBX: 1ffff920009a2b54 RCX: 81812510585e3000 [ 101.642041][ T4353] RDX: ffffc9000c231000 RSI: 0000000000005498 RDI: 0000000000005499 [ 101.651979][ T4353] RBP: ffffc90004d15a90 R08: ffffc90004d15787 R09: 1ffff920009a2af0 [ 101.661542][ T4353] R10: dffffc0000000000 R11: fffff520009a2af1 R12: 0000000000000000 [ 101.670007][ T4353] R13: dffffc0000000000 R14: ffffc90004d15ac0 R15: ffffc90004d15af0 [ 101.701048][ T4353] FS: 00007ff7328186c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.721658][ T4353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.736741][ T4353] CR2: 00007f736a781178 CR3: 0000000108ab6000 CR4: 00000000003526b0 [ 101.750283][ T4353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.758929][ T4353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.769291][ T4353] Kernel panic - not syncing: Fatal exception [ 101.775732][ T4353] Kernel Offset: disabled [ 101.780306][ T4353] Rebooting in 86400 seconds..