last executing test programs: 55.120290413s ago: executing program 3 (id=663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008c04"]) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xe7, 0x0, 0x3}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 55.068307023s ago: executing program 3 (id=667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0x390}]}) (async, rerun: 64) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000002c0)) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32) 54.994333694s ago: executing program 3 (id=669): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) read(r1, &(0x7f0000000080)=""/56, 0x38) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) 54.912278666s ago: executing program 3 (id=671): syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x6, 0x0, [{0xac7, 0x0, 0x2}, {0xa0c, 0x0, 0x2}, {0x38c, 0x0, 0x3}, {0x30b, 0x0, 0x100000000}, {0x8b4, 0x0, 0x10000}, {0x2b1, 0x0, 0x5}]}) syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r4, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x6, 0x0, [{0xac7, 0x0, 0x2}, {0xa0c, 0x0, 0x2}, {0x38c, 0x0, 0x3}, {0x30b, 0x0, 0x100000000}, {0x8b4, 0x0, 0x10000}, {0x2b1, 0x0, 0x5}]}) (async) 54.696225179s ago: executing program 3 (id=675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) ioctl$TCFLSH(r9, 0x800455ca, 0x1) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000080)={[0x6000, 0xf000, 0x6000, 0x3000], 0x800000000000000, 0x2}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101001, 0x40) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000280)={0xa4, 0x0, 0x1}) unlinkat(r12, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x60, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/162, 0x0, 0x1, 0x33}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @release, @acquire_done={0x40106309, 0x6}], 0xffffffffffffffd3, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r12, 0x80585414, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 54.560840831s ago: executing program 3 (id=676): prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000000000/0x3000)=nil) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe8) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x10, 0x7c, 0x1, 0x81, 0x5, 0x8, 0x0, 0x2, 0xfc, 0x3, 0xfd, 0x5}, {0x5b5d, 0xd4, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x0, 0x38, 0x8, 0x40, 0x2, 0x8}, {0x5, 0x9, 0x1, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x2, 0x7f, 0x7e, 0xa, 0xc}], 0x5}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xc, 0x1, 0x9, 0x2, 0x1, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x9, 0x80000001, 0x5, 0x8a99, 0x3, 0x4, 0x1, 0x10000, 0x8000000000000000, 0x10, 0x4, 0xfffffffffffffe39, 0x7, 0x8, 0x1], 0xd000, 0x80d0}) 39.585438742s ago: executing program 32 (id=676): prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000000000/0x3000)=nil) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe8) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140)) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x10, 0x7c, 0x1, 0x81, 0x5, 0x8, 0x0, 0x2, 0xfc, 0x3, 0xfd, 0x5}, {0x5b5d, 0xd4, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x0, 0x38, 0x8, 0x40, 0x2, 0x8}, {0x5, 0x9, 0x1, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x2, 0x7f, 0x7e, 0xa, 0xc}], 0x5}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xc, 0x1, 0x9, 0x2, 0x1, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x9, 0x80000001, 0x5, 0x8a99, 0x3, 0x4, 0x1, 0x10000, 0x8000000000000000, 0x10, 0x4, 0xfffffffffffffe39, 0x7, 0x8, 0x1], 0xd000, 0x80d0}) 23.284185982s ago: executing program 0 (id=1447): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)=0x1}) 23.239573563s ago: executing program 0 (id=1449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 23.116107035s ago: executing program 0 (id=1452): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x291, 0x0, 0x10000}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000002080)=ANY=[@ANYBLOB="0a00000000000000f5020000000000000100000000000000720a0000000000000900000000000000c3020000000000000900000000000000c20d0000000000000800000000000000dc090000000000000500000000000000860400000000000000000700000000000000e00b0000000000009b05000000000000f20a0000000000007f00000000000000570a000000000000010000000100"/168]) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002800)={0x2020}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) 22.964719827s ago: executing program 0 (id=1455): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x1, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x4056000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0xfe, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0xdddd1000, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x1, 0xb, 0x6, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000, 0xfffc}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1, 0xfffffffffffffffe]}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{0x1, 0x8080000, 0x8, 0x9, 0xf9, 0x3, 0xdc, 0x0, 0x0, 0x8, 0x1, 0x10}, {0x5000, 0xeeee6000, 0x8, 0x3, 0x3, 0x94, 0x9, 0x3, 0x0, 0xfb, 0x2, 0x3}, {0xd000, 0x0, 0x3, 0xc, 0x9, 0xb0, 0xf, 0xfb, 0x9, 0x8, 0x3, 0x8}, {0x2000, 0x10000, 0xd, 0x9, 0xc, 0x10, 0x2, 0x9, 0x9, 0x0, 0x5, 0x9}, {0x3000, 0x80a0000, 0x10, 0x3, 0xd, 0x2, 0x5, 0x7f, 0x2, 0x3e, 0x72, 0x4}, {0x0, 0x0, 0x8, 0x40, 0x5, 0x6, 0x9, 0x7, 0xec, 0x9, 0x2, 0x4}, {0x8080000, 0x2, 0xa, 0x40, 0xfb, 0xc, 0xa, 0x6b, 0x0, 0x4, 0x1, 0x5}, {0x2000, 0xdddd1000, 0x3, 0x0, 0x4, 0xf6, 0x3, 0x5, 0x0, 0x86, 0x4, 0x36}, {0xeeef0000}, {0x8080000, 0x5}, 0x10000, 0x0, 0x5000, 0x30, 0xf, 0x2900, 0xf000, [0x49, 0xe, 0x1, 0xbd]}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000780)={0x3700, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0xa, 0x0, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xbb}, {0x11, 0xb}, {}, {0xfe, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {0x6f}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0xff}, {0x3, 0x0, 0xfc}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x8, 0x0, 0xd}, {0x0, 0x80}, {0x4, 0x2, 0x0, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3}]}}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000008000000008a0800000a0a32880300000000000000"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f00000001c0)={0xf, 0x8}) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000540)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r10}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/228, 0xe4, 0x2, 0x11}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r12, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 22.848952619s ago: executing program 0 (id=1457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4188aea7, 0x0) write(r0, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8000000000000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0xd1383000) ioctl$RTC_WKALM_RD(r5, 0x80287010, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000000)=0x3d) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) 22.724039411s ago: executing program 0 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="00115d1701000065000000000000000000000000000000000ce49065390013139de00c01557cfd2a5184f419e7a24e09d9be03312ae282dc1e05be2f0f7d5edef9070bacc69169efdaa6fffa"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x44, 0x6}, {0x6, 0x1}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) 7.695441212s ago: executing program 33 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="00115d1701000065000000000000000000000000000000000ce49065390013139de00c01557cfd2a5184f419e7a24e09d9be03312ae282dc1e05be2f0f7d5edef9070bacc69169efdaa6fffa"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x44, 0x6}, {0x6, 0x1}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1.053461504s ago: executing program 4 (id=1717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000099}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x80a}) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000180)=""/64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000003c0)) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f00000000c0)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa3ef41021d76bc69, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000400)={0xbe, "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"}) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000100)={0xff, 0x5, 0x10}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r6, &(0x7f0000000300)=ANY=[@ANYRES32=r6], 0xf) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) 1.049413294s ago: executing program 5 (id=1718): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r0, &(0x7f00000004c0)=""/92, 0x1001) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 1.044442114s ago: executing program 2 (id=1720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x30, 0xcf, 0x5, 0xfffff000}, {0x6}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000001c0)=""/215) 836.865227ms ago: executing program 2 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r2, 0x0, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r1, 0x2000) 734.359509ms ago: executing program 2 (id=1723): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x11000}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000002140)={0x5, 0x0, [{0x0, 0x5, 0x6, 0x2, 0x9b, 0x9, 0x401}, {0xc0000001, 0x4ba, 0x6, 0x0, 0x4, 0xfffffff0, 0x81}, {0x4, 0x3, 0x3, 0x4721, 0x7, 0x3, 0x8}, {0x80000019, 0x8ee1, 0x7, 0x7, 0x0, 0x3, 0x9}, {0x6, 0x80, 0x2, 0x6, 0x80000000, 0x9, 0x4}]}) close_range(r0, r1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000002240)={0x73, "0e9e386b06a2f2765655e8f4b1ff0418583d610af32831dd38c435138b50d4fe93af1e0ae463c5e23ebc6787f05ebb5615981750bfc9351965bbd8db8283168ef7afab867304d67dca18e3f560934ee4009bca1a2e1be6f70d029df21a93a3f11b6a74254db2dc5d09b5ca9afb085aef368e8e"}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000022c0)={0x1ff, 0x3, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil, 0xff, r0}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000002380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=""/62, &(0x7f0000002440)=""/20, &(0x7f0000002480)=""/91, 0x5000}) write$vga_arbiter(r0, &(0x7f0000002540)=@other={'lock', ' ', 'none'}, 0xa) r3 = openat$cgroup_ro(r0, &(0x7f0000002580)='memory.events\x00', 0x0, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000025c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000002600)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write$vga_arbiter(r0, &(0x7f0000002640)=@unlock_all, 0xb) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000002680)={0x9, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000002700)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000026c0)=0x6}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000002740)={'ipvlan0\x00', @local}) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000002780)={0x22, 0x3, 0x0, {0x5, 0x1, 0x0, ' '}}, 0x22) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000027c0)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002800), 0x8000, 0x0) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000002840)) 698.164559ms ago: executing program 5 (id=1724): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'perf_event'}]}, 0xc) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_devices(r2, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'w\x00'}, 0x8) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000da6000/0x4000)=nil, 0x4000, 0x7, 0x810, r1, 0x7b722000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) (async) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r7, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f3a000/0x4000)=nil, 0x4000, &(0x7f0000000180)='!\x00') 644.89156ms ago: executing program 4 (id=1725): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f00000024c0)={{0x1, 0x0, 0x80, {0x2000, 0x100000, 0x1}}, "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", "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"}) (async) ioctl$RNDADDENTROPY(r1, 0x40045201, &(0x7f0000000000)=ANY=[]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000368a6640000000000100000000000040"]) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0xc0603d0f, &(0x7f0000000040)={{0x0, 0x20}}) (async) r6 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}, {0x6, 0x9, 0x81, 0x5}]}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)}) 639.77222ms ago: executing program 2 (id=1727): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008f"]) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0x800}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r8, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0xd1383000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r7, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r7, 0x0) 624.0506ms ago: executing program 5 (id=1728): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0x28003, 0x0, [0x40, 0x4, 0x3, 0x10e3, 0xfffffffffffffffc, 0x3ff, 0x200000001, 0x9]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x4, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x20e10000) ioctl$UI_DEV_CREATE(r0, 0x5501) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r0]) 591.372581ms ago: executing program 1 (id=1729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x1}], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1ce, 0x0, &(0x7f0000000580)="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"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xac, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @decrefs={0x40046307, 0x3}, @acquire_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x200a82, 0x0) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000002080)={{0x3, 0x0, 0x4, 0x1, 0x7}, 0x9, 0x6, 0x3}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000003c0)=[@register_looper], 0x0, 0x0, 0x0}) 493.044822ms ago: executing program 1 (id=1730): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0xaa, 0x3870}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) 492.603222ms ago: executing program 4 (id=1731): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x9d41199a6f951eeb, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) 479.504533ms ago: executing program 1 (id=1732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0xe0}]}) mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 450.490893ms ago: executing program 4 (id=1733): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046210, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x80010, r0, 0xffffd000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x100000c, 0x110, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046210, 0xffffffffffffffff) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x80010, r0, 0xffffd000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x100000c, 0x110, r1, 0x0) (async) 381.045354ms ago: executing program 5 (id=1734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0) 380.387124ms ago: executing program 2 (id=1735): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@fda={0x66646185, 0x8, 0x1, 0x16}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x38}}, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffd98}}, 0x40}, @register_looper], 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/71, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000500)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000240)={0x6, 0x208000, 0x0, 0x0, 0x6}) 379.515264ms ago: executing program 5 (id=1736): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) ioctl$KVM_SET_MSRS(r3, 0x5000aea5, 0x0) (async, rerun: 32) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f00000001c0)=0x401) (async, rerun: 32) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async, rerun: 32) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) (rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) write$UHID_INPUT(r0, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000150001c0"]) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) 341.691235ms ago: executing program 4 (id=1737): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 252.246576ms ago: executing program 4 (id=1738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001a00000000"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 136.914918ms ago: executing program 1 (id=1739): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) 130.486088ms ago: executing program 1 (id=1740): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000e99000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 122.868798ms ago: executing program 2 (id=1741): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7ffffffff000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x2, 0x12c, @pic={0x0, 0x2, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x2, 0xf00, 0x0, @adapter={0x60, 0x5, 0x3, 0x7, 0x2}}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 16.81146ms ago: executing program 5 (id=1742): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x439528b}}) (async) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000240)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x439528b}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x40, 0x81, 0x0, 0xf43f, 0xb, 0x49, 0x7, 0x2, 0xfb, 0x3, 0xa4, 0x0, 0x4, 0x6bd, 0x2, 0x8, 0x1, 0x7, '\x00', 0x2, 0x5}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000680)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x2000000000000004, 0x9, 0x100000000000009, 0x4, 0x80, 0x1, 0x794, 0x1, 0x18a1, 0xc976, 0x6], 0xeeee0000, 0x20200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="a81d891b810362939c50c1a14bc15f2051ac7de00284252251a520a92ff25272e69ab2"], 0x6) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="ba00620000000000a001000000000000070000000000000090b7c1a85d816ed6fc2c997f152e0a069dd088228928578e7ddb2cbee27e00"/68]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 0s ago: executing program 1 (id=1743): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4800000000000000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r3, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4800000000000000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r3, 0x2000) (async) kernel console output (not intermixed with test programs): [ 7.066371][ T36] audit: type=1400 audit(1750393423.230:58): avc: denied { read } for pid=202 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 14.877034][ T36] audit: type=1400 audit(1750393431.060:59): avc: denied { transition } for pid=232 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.880212][ T36] audit: type=1400 audit(1750393431.060:60): avc: denied { noatsecure } for pid=232 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.883216][ T36] audit: type=1400 audit(1750393431.060:61): avc: denied { write } for pid=232 comm="sh" path="pipe:[2773]" dev="pipefs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.886370][ T36] audit: type=1400 audit(1750393431.060:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.889061][ T36] audit: type=1400 audit(1750393431.060:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 22.371174][ T36] audit: type=1400 audit(1750393438.550:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.372355][ T282] cgroup: Unknown subsys name 'net' [ 22.394107][ T36] audit: type=1400 audit(1750393438.550:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.421315][ T36] audit: type=1400 audit(1750393438.580:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.421496][ T282] cgroup: Unknown subsys name 'devices' [ 22.625813][ T282] cgroup: Unknown subsys name 'hugetlb' [ 22.631527][ T282] cgroup: Unknown subsys name 'rlimit' [ 22.724030][ T36] audit: type=1400 audit(1750393438.910:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.747399][ T36] audit: type=1400 audit(1750393438.910:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.764395][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.772411][ T36] audit: type=1400 audit(1750393438.910:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.804090][ T36] audit: type=1400 audit(1750393438.970:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.817997][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.829464][ T36] audit: type=1400 audit(1750393438.970:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.864210][ T36] audit: type=1400 audit(1750393439.010:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.890006][ T36] audit: type=1400 audit(1750393439.010:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.085877][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092934][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.100230][ T290] bridge_slave_0: entered allmulticast mode [ 24.106756][ T290] bridge_slave_0: entered promiscuous mode [ 24.118593][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.125672][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.132754][ T290] bridge_slave_1: entered allmulticast mode [ 24.139273][ T290] bridge_slave_1: entered promiscuous mode [ 24.178025][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.185466][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.192570][ T292] bridge_slave_0: entered allmulticast mode [ 24.199068][ T292] bridge_slave_0: entered promiscuous mode [ 24.205419][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.212461][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.219770][ T292] bridge_slave_1: entered allmulticast mode [ 24.225982][ T292] bridge_slave_1: entered promiscuous mode [ 24.232084][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.239293][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.246631][ T291] bridge_slave_0: entered allmulticast mode [ 24.252792][ T291] bridge_slave_0: entered promiscuous mode [ 24.267332][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.274650][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.281775][ T291] bridge_slave_1: entered allmulticast mode [ 24.288195][ T291] bridge_slave_1: entered promiscuous mode [ 24.302146][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.309253][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.316435][ T289] bridge_slave_0: entered allmulticast mode [ 24.322645][ T289] bridge_slave_0: entered promiscuous mode [ 24.340874][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.347968][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.355218][ T289] bridge_slave_1: entered allmulticast mode [ 24.361460][ T289] bridge_slave_1: entered promiscuous mode [ 24.497555][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.504635][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.511881][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.518911][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.529895][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.537152][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.544440][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.551465][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.566206][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.573262][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.580556][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.587593][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.603017][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.610183][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.617484][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.624523][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.670734][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.678969][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.686680][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.694462][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.701642][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.709079][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.716627][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.723985][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.747317][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.754380][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.762096][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.769154][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.777051][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.784084][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.791602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.798629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.806912][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.814151][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.830046][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.837124][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.849288][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.856456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.869630][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.876797][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.920218][ T292] veth0_vlan: entered promiscuous mode [ 24.926913][ T290] veth0_vlan: entered promiscuous mode [ 24.935390][ T289] veth0_vlan: entered promiscuous mode [ 24.949383][ T291] veth0_vlan: entered promiscuous mode [ 24.963961][ T289] veth1_macvtap: entered promiscuous mode [ 24.972243][ T292] veth1_macvtap: entered promiscuous mode [ 24.991415][ T290] veth1_macvtap: entered promiscuous mode [ 25.001295][ T291] veth1_macvtap: entered promiscuous mode [ 25.036267][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.090999][ T310] binder: Unknown parameter 'nXIv/ttynull' [ 25.109916][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.143001][ T313] kvm: kvm [312]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 25.232892][ T330] input: syz0 as /devices/virtual/input/input5 [ 25.320658][ T333] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.724227][ T359] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.738536][ T358] SELinux: security_context_str_to_sid () failed with errno=-22 [ 26.085212][ T375] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 26.139138][ T395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 26.162254][ T377] cgroup: fork rejected by pids controller in /syz0 [ 26.238514][ T421] binder: Unknown parameter 'uid' [ 26.529107][ T458] binder: Unknown parameter 'context' [ 26.590081][ T461] rust_binder: Write failure EFAULT in pid:15 [ 26.806020][ T491] SELinux: truncated policydb string identifier [ 26.819297][ T491] SELinux: failed to load policy [ 26.965957][ T503] SELinux: security_context_str_to_sid () failed with errno=-22 [ 26.966123][ T504] SELinux: security_context_str_to_sid () failed with errno=-22 [ 26.983463][ T505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 26.991458][ T507] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 27.008871][ T507] SELinux: failed to load policy [ 27.228832][ T519] kvm: user requested TSC rate below hardware speed [ 27.238304][ T520] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 27.246024][ T520] rust_binder: Write failure EINVAL in pid:33 [ 27.394196][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.400399][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.426246][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.438205][ T535] rust_binder: Write failure EINVAL in pid:51 [ 27.457675][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.471276][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.479285][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.486263][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.494621][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.505182][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.512302][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.518985][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.525836][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.532338][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.542966][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.551919][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.560221][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.566970][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.580722][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.596635][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.603119][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.609642][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.619235][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.625899][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.632365][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.638947][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 27.638962][ T36] audit: type=1400 audit(1750393443.830:157): avc: denied { transfer } for pid=551 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.646798][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.651672][ T552] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 27.670672][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.677321][ T552] rust_binder: Error while translating object. [ 27.686604][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.693253][ T552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.698829][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.705357][ T552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51 [ 27.714883][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.734501][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.740956][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.747469][ T536] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.766122][ T36] audit: type=1400 audit(1750393443.950:158): avc: denied { block_suspend } for pid=553 comm="syz.1.60" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.861749][ T36] audit: type=1400 audit(1750393444.040:159): avc: denied { read } for pid=563 comm="syz.0.63" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.885464][ T36] audit: type=1400 audit(1750393444.040:160): avc: denied { open } for pid=563 comm="syz.0.63" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.908334][ T36] audit: type=1400 audit(1750393444.060:161): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 27.950800][ T36] audit: type=1400 audit(1750393444.130:162): avc: denied { append } for pid=572 comm="syz.2.66" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.996436][ T583] binder: Bad value for 'max' [ 28.001920][ T585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 28.002857][ T36] audit: type=1400 audit(1750393444.180:163): avc: denied { ioctl } for pid=581 comm="syz.1.68" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.084964][ T592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.084992][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:103 [ 28.099329][ T588] binder: Bad value for 'max' [ 28.133033][ T599] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 28.187217][ T36] audit: type=1400 audit(1750393444.370:164): avc: denied { write } for pid=602 comm="syz.1.76" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.348428][ T36] audit: type=1400 audit(1750393444.530:165): avc: denied { append } for pid=628 comm="syz.1.82" name="pfkey" dev="proc" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.456843][ T644] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 28.468338][ T644] SELinux: failed to load policy [ 28.489051][ T652] binder: Unknown parameter 'L{stŠ‘ÖaŒh'¯-ÅΛ ' [ 28.504892][ T36] audit: type=1326 audit(1750393444.690:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.0.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa799f8e929 code=0x0 [ 28.942682][ T672] rust_binder: Write failure EINVAL in pid:90 [ 28.984977][ T679] __vm_enough_memory: pid: 679, comm: syz.1.96, bytes: 281474976845824 not enough memory for the allocation [ 29.148000][ T693] rust_binder: Error while translating object. [ 29.148030][ T693] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.155596][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:107 [ 29.227048][ T696] binder: Bad value for 'max' [ 29.326931][ T699] rust_binder: Write failure EINVAL in pid:110 [ 29.383597][ T711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.391238][ T711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:90 [ 29.402558][ T711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 29.412354][ T711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.422068][ T711] rust_binder: Error while translating object. [ 29.428677][ T711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 29.435128][ T711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:90 [ 29.794271][ T736] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 29.794291][ T736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.802854][ T736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:74 [ 29.956197][ T750] binder: Bad value for 'max' [ 30.098817][ T757] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 30.108689][ T757] SELinux: failed to load policy [ 30.223843][ T767] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 30.340633][ T781] kvm: kvm [778]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 30.359065][ T781] input: syz1 as /devices/virtual/input/input11 [ 30.515277][ T801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 30.604050][ T809] rust_binder: Error while translating object. [ 30.607950][ T807] rust_binder: Write failure EFAULT in pid:119 [ 30.625570][ T807] ======================================================= [ 30.625570][ T807] WARNING: The mand mount option has been deprecated and [ 30.625570][ T807] and is ignored by this kernel. Remove the mand [ 30.625570][ T807] option from the mount to silence this warning. [ 30.625570][ T807] ======================================================= [ 30.630158][ T809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.632177][ T807] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 30.699966][ T809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:100 [ 30.952077][ T829] binder: Unknown parameter 'st' [ 30.982469][ T833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 30.982498][ T833] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.991888][ T826] SELinux: failed to load policy [ 30.992849][ T833] rust_binder: Read failure Err(EFAULT) in pid:123 [ 31.037333][ T833] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 31.188164][ T837] input: syz1 as /devices/virtual/input/input12 [ 31.272383][ T848] binder: Unknown parameter 'defcontext01777777777777777777777' [ 31.299005][ T850] input: syz0 as /devices/virtual/input/input13 [ 31.373151][ T861] rust_binder: Write failure EINVAL in pid:130 [ 31.387638][ T866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 31.401622][ T868] binder: Unknown parameter 'smackfsdef' [ 31.439091][ T866] rust_binder: Read failure Err(EFAULT) in pid:133 [ 31.558999][ T884] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 31.559026][ T884] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 31.561999][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 31.582535][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 31.583251][ T884] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 31.596578][ T31] hid-generic 0000:0000:0000.0001: unknown main item tag 0x3 [ 31.607582][ T890] rust_binder: Read failure Err(EAGAIN) in pid:141 [ 31.615457][ T31] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 31.664762][ T899] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß< >Páÿœ'•) failed with errno=-22 [ 31.761631][ T892] fido_id[892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.792064][ T905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143 [ 31.834606][ T911] rust_binder: Write failure EFAULT in pid:134 [ 31.851278][ T915] binder: Unknown parameter 'nXI' [ 31.943926][ T918] kvm: kvm [916]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 32.198979][ T927] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 32.323360][ T939] binder: Unknown parameter '•tats' [ 32.396808][ T941] binder: Binderfs stats mode cannot be changed during a remount [ 32.407732][ T941] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.439651][ T948] tap0: tun_chr_ioctl cmd 1074025677 [ 32.445192][ T948] tap0: linktype set to 774 [ 32.452203][ T948] tap0: tun_chr_ioctl cmd 1074025681 [ 32.463908][ T948] binder: Bad value for 'max' [ 32.469391][ T948] tap0: tun_chr_ioctl cmd 1074025677 [ 32.474905][ T948] tap0: linktype set to 774 [ 32.679704][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 32.679719][ T36] audit: type=1400 audit(1750393448.860:242): avc: denied { read } for pid=959 comm="syz.3.179" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.708769][ T36] audit: type=1400 audit(1750393448.860:243): avc: denied { open } for pid=959 comm="syz.3.179" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 32.784173][ T971] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 32.791792][ T971] SELinux: failed to load policy [ 32.797860][ T964] rust_binder: Write failure EINVAL in pid:168 [ 33.023581][ T991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 33.069412][ T36] audit: type=1400 audit(1750393449.250:244): avc: denied { append } for pid=1001 comm="syz.1.190" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.071258][ T1002] kvm: kvm [1001]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 33.224023][ T36] audit: type=1400 audit(1750393449.410:245): avc: denied { read write } for pid=1008 comm="syz.2.192" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.247439][ T36] audit: type=1400 audit(1750393449.410:246): avc: denied { open } for pid=1008 comm="syz.2.192" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.324701][ T1012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.324724][ T1012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 33.343735][ T1015] rust_binder: Write failure EFAULT in pid:161 [ 33.510405][ T36] audit: type=1400 audit(1750393449.690:247): avc: denied { map } for pid=1026 comm="syz.2.198" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.540347][ T36] audit: type=1400 audit(1750393449.690:248): avc: denied { execute } for pid=1026 comm="syz.2.198" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.649603][ T1035] binder: Bad value for 'stats' [ 33.682481][ T1039] input: syz0 as /devices/virtual/input/input15 [ 33.689321][ T36] audit: type=1400 audit(1750393449.880:249): avc: denied { execute } for pid=1036 comm="syz.0.203" path="/selinux/user" dev="selinuxfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 33.720358][ T1039] binder: Unknown parameter 'fowner>00000000000000000000' [ 33.731462][ T1042] rust_binder: Write failure EINVAL in pid:173 [ 34.276016][ T1080] rust_binder: Read failure Err(EAGAIN) in pid:190 [ 34.276280][ T1079] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 34.350359][ T1084] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿßÿÿÿÿÿÿþÿÿÿÿÿÿÿ) failed with errno=-22 [ 34.414272][ T1092] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 34.454874][ T1101] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.454904][ T1101] rust_binder: Read failure Err(EFAULT) in pid:189 [ 34.479282][ T1104] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.486353][ T1104] rust_binder: Read failure Err(EFAULT) in pid:232 [ 34.496243][ T1103] rust_binder: Write failure EINVAL in pid:232 [ 34.522996][ T1104] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 34.537233][ T1104] SELinux: failed to load policy [ 34.693827][ T1123] rust_binder: Error while translating object. [ 34.693872][ T1123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.696431][ T1121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.701135][ T1123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 34.724393][ T1121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:204 [ 34.754351][ T1130] binder: Unknown parameter 'fscontext?}0' [ 34.905682][ T1136] rust_binder: Error while translating object. [ 34.905704][ T1136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.912083][ T1136] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 34.921757][ T1136] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:207 [ 34.989829][ T1133] rust_binder: Read failure Err(EFAULT) in pid:200 [ 35.168312][ T1146] rust_binder: Write failure EINVAL in pid:204 [ 35.179524][ T1149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 35.222522][ T36] audit: type=1400 audit(1750393451.400:250): avc: denied { write } for pid=1151 comm="syz.1.242" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 35.364546][ T1158] rust_binder: Failed to allocate buffer. len:4294971296, is_oneway:false [ 35.364576][ T1158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.384451][ T1158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:207 [ 35.592514][ T1173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 35.694319][ T1175] rust_binder: Write failure EINVAL in pid:217 [ 35.876158][ T1180] rust_binder: Write failure EINVAL in pid:218 [ 35.951526][ T1182] binder: Unknown parameter 'ÿÿÿÿ' [ 36.033988][ T1185] SELinux: policydb string does not match my string SE Linux [ 36.041803][ T1185] SELinux: failed to load policy [ 36.178969][ T36] audit: type=1400 audit(1750393452.360:251): avc: denied { setcurrent } for pid=1189 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 36.214994][ T1188] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 36.255262][ T1198] rust_binder: Write failure EINVAL in pid:233 [ 36.256557][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.271257][ T1198] SELinux: failed to load policy [ 36.276490][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.285055][ T1198] SELinux: failed to load policy [ 36.290120][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.297784][ T1198] SELinux: failed to load policy [ 36.302900][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.310508][ T1198] SELinux: failed to load policy [ 36.315593][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.323255][ T1198] SELinux: failed to load policy [ 36.328304][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.336033][ T1198] SELinux: failed to load policy [ 36.341160][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.349521][ T1198] SELinux: failed to load policy [ 36.354660][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.362252][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.369926][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.377599][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.385965][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.393624][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.404345][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 36.404777][ T1204] rust_binder: Error while translating object. [ 36.409065][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.422938][ T1205] rust_binder: Error while translating object. [ 36.428561][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.430388][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.435265][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.443200][ T1204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 36.453940][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.461947][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:193 [ 36.469411][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.476589][ T1204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:193 [ 36.493804][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.510959][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.520236][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.530265][ T1207] rust_binder: Read failure Err(EAGAIN) in pid:245 [ 36.537434][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.555905][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.563775][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.571775][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.579608][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.587987][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.596051][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.604292][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.614625][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.623583][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.631372][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.639171][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.651419][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.659536][ T1220] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 36.670596][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.689564][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.698040][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.705812][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.713588][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.721258][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.730334][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.741848][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.753109][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.761408][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.762806][ T1237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 36.769354][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.786889][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.799309][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.810277][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.818459][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.826419][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.836018][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.844918][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.853051][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.862250][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.870013][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.878503][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.886508][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.894621][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.902528][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.910683][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.918395][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.926107][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.933782][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.941404][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.949215][ T1198] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 36.995076][ T1250] binder: Bad value for 'max' [ 37.009043][ T1252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235 [ 37.053018][ T1254] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 37.070457][ T1254] rust_binder: Write failure EINVAL in pid:237 [ 37.140188][ T1264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 37.140220][ T1264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247 [ 37.186500][ T1270] binder: Unknown parameter 'cótt¦® ·ystem_5' [ 37.334642][ T1282] binder: Unknown parameter 'ðr~Ð½Š§Š^¶' [ 37.364037][ T1282] binder: Bad value for 'max' [ 37.384191][ T1287] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 37.392955][ T1287] rust_binder: Write failure EINVAL in pid:275 [ 37.636308][ T1305] rust_binder: Write failure EINVAL in pid:244 [ 37.708157][ T1301] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234274794 (67748396704 ns) > initial count (26801589552 ns). Using initial count to start timer. [ 37.756722][ T1318] binder: Bad value for 'stats' [ 37.767367][ T1318] binder: Bad value for 'stats' [ 38.021719][ T1330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:256 [ 38.047514][ T1334] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 38.154630][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 38.154757][ T1346] rust_binder: Write failure EINVAL in pid:214 [ 38.168808][ T1345] rust_binder: Read failure Err(EFAULT) in pid:271 [ 38.273587][ T1351] binder: Binderfs stats mode cannot be changed during a remount [ 38.381301][ T1359] binder: Unknown parameter 'fowner>18446744073709551615è.' [ 38.417145][ T1364] rust_binder: Write failure EINVAL in pid:220 [ 38.446777][ T1366] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.453194][ T1366] rust_binder: Read failure Err(EFAULT) in pid:222 [ 38.461954][ T1366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 38.527655][ T1371] random: crng reseeded on system resumption [ 38.542870][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 38.542888][ T36] audit: type=1400 audit(1750393454.710:255): avc: denied { write } for pid=1370 comm="syz.3.310" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.603551][ T1373] Restarting kernel threads ... [ 38.603688][ T36] audit: type=1400 audit(1750393454.780:256): avc: denied { ioctl } for pid=1370 comm="syz.3.310" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 38.605566][ T1373] done. [ 38.615695][ T1380] rust_binder: Write failure EFAULT in pid:283 [ 38.651641][ T1380] rust_binder: Write failure EINVAL in pid:283 [ 38.658999][ T1380] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 38.665508][ T1380] rust_binder: Error while translating object. [ 38.686509][ T1380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.692972][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 38.701857][ T1382] input: syz1 as /devices/virtual/input/input17 [ 38.855177][ T1389] rust_binder: Error while translating object. [ 38.855219][ T1389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.861471][ T1389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 38.997531][ T1396] rust_binder: Write failure EINVAL in pid:238 [ 39.101513][ T1407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 39.149349][ T1412] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 39.161736][ T1412] sel_write_load: 58 callbacks suppressed [ 39.161752][ T1412] SELinux: failed to load policy [ 39.218737][ T1415] binder: Unknown parameter 'non' [ 39.319867][ T1425] rust_binder: Error while translating object. [ 39.319906][ T1425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.321593][ T1426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.336050][ T1425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298 [ 39.356272][ T1426] rust_binder: Error while translating object. [ 39.373408][ T1426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.383508][ T1426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 39.383684][ T36] audit: type=1400 audit(1750393455.570:257): avc: denied { ioctl } for pid=1427 comm="syz.1.328" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 39.404161][ T1426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.596200][ T1446] binder: Bad value for 'stats' [ 39.793857][ T1452] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 39.803546][ T1454] rust_binder: Got transaction with invalid offset. [ 39.803585][ T1454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.813933][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.841324][ T1454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 39.866677][ T1462] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 39.937643][ T1469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:317 [ 40.099847][ T1474] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 40.099880][ T1474] rust_binder: Error in use_page_slow: EBUSY [ 40.109423][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.113743][ T1474] rust_binder: use_range failure EBUSY [ 40.117598][ T1478] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 40.129378][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.131956][ T1474] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 40.140614][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.151457][ T1474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 40.155792][ T1478] rust_binder: Error while translating object. [ 40.172809][ T1474] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 40.174961][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.179635][ T1474] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:310 [ 40.192931][ T1478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.210641][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.224055][ T1478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 40.228305][ T1484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.248658][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 40.262935][ T1483] random: crng reseeded on system resumption [ 40.262935][ T36] audit: type=1400 audit(1750393456.450:258): avc: denied { append } for pid=1482 comm="syz.1.347" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 40.308801][ T1483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 40.308830][ T1483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:321 [ 40.318575][ T1483] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.325376][ T1486] fido_id[1486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.327952][ T1483] rust_binder: Read failure Err(EFAULT) in pid:321 [ 40.558017][ T1495] can0: slcan on ttyS3. [ 40.569002][ T36] audit: type=1400 audit(1750393456.750:259): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 40.591963][ T36] audit: type=1400 audit(1750393456.750:260): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.617488][ T36] audit: type=1400 audit(1750393456.750:261): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.658922][ T36] audit: type=1400 audit(1750393456.750:262): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.691338][ T1494] can0 (unregistered): slcan off ttyS3. [ 40.713679][ T36] audit: type=1400 audit(1750393456.890:263): avc: denied { create } for pid=1498 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.746577][ T36] audit: type=1400 audit(1750393456.890:264): avc: denied { write } for pid=1498 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.148842][ T1555] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 41.148859][ T1555] rust_binder: Error while translating object. [ 41.161458][ T1555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.168042][ T1555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:330 [ 41.189000][ T1558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:267 [ 41.208417][ T1561] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 41.225012][ T1561] rust_binder: Write failure EINVAL in pid:333 [ 41.592781][ T1571] rust_binder: Write failure EFAULT in pid:340 [ 41.629165][ T1579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.636209][ T1579] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 41.833775][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 41.833814][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.139084][ T1594] kvm: user requested TSC rate below hardware speed [ 42.279354][ T1615] rust_binder: Write failure EINVAL in pid:359 [ 42.418457][ T1624] syz.1.383: attempt to access beyond end of device [ 42.418457][ T1624] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 42.532643][ T1646] input: syz0 as /devices/virtual/input/input21 [ 42.657270][ T1656] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 42.657305][ T1656] rust_binder: Error while translating object. [ 42.670403][ T1656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.677064][ T1656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:371 [ 42.692151][ T1660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.711113][ T1658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.718427][ T1660] rust_binder: Error in use_page_slow: ESRCH [ 42.721616][ T1658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:351 [ 42.741215][ T1660] rust_binder: use_range failure ESRCH [ 42.753690][ T1660] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 42.764835][ T1660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 42.782411][ T1660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:307 [ 42.839059][ T1669] can0: slcan on ptm0. [ 42.896084][ T1668] can0 (unregistered): slcan off ptm0. [ 43.031891][ T1699] rust_binder: Write failure EFAULT in pid:286 [ 43.162801][ T1689] rust_binder: Write failure EINVAL in pid:380 [ 43.202453][ T1714] binder: Unknown parameter 'fscoíntext' [ 43.215526][ T1718] binder: Unknown parameter 'fscoíntext' [ 43.256650][ T1712] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 43.256684][ T1712] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 43.271626][ T1712] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 43.325681][ T1730] rust_binder: Write failure EINVAL in pid:383 [ 43.336515][ T1730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 43.342716][ T1730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:383 [ 43.360710][ T1729] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 43.371153][ T1729] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.413068][ T1733] SELinux: ebitmap: truncated map [ 43.420727][ T1733] SELinux: failed to load policy [ 43.436033][ T1735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:325 [ 43.453354][ T1738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 43.487043][ T1742] rust_binder: Write failure EINVAL in pid:329 [ 43.496686][ T1745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.504034][ T1745] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 43.518267][ T1745] rust_binder: Write failure EINVAL in pid:332 [ 43.533477][ T1747] binder: Bad value for 'stats' [ 43.560853][ T1750] rust_binder: Write failure EINVAL in pid:337 [ 43.599918][ T1758] rust_binder: Write failure EFAULT in pid:345 [ 43.748540][ T1760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.755784][ T1760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 43.764541][ T1762] SELinux: policydb version 1552022346 does not match my version range 15-33 [ 43.787702][ T1762] SELinux: failed to load policy [ 43.803460][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 43.803475][ T36] audit: type=1326 audit(1750393459.980:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1763 comm="syz.0.419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa799f8e929 code=0x0 [ 43.855499][ T1772] binder: Bad value for 'max' [ 43.862677][ T36] audit: type=1400 audit(1750393460.040:274): avc: denied { map } for pid=1769 comm="syz.3.420" path="/proc/297/task/298/attr/current" dev="proc" ino=30940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 43.898912][ T1774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 43.899256][ T1774] rust_binder: Error while translating object. [ 43.909531][ T1774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.910092][ T1770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 43.915814][ T1774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:299 [ 43.929942][ T1770] rust_binder: Read failure Err(EAGAIN) in pid:364 [ 44.035576][ T1795] input: syz1 as /devices/virtual/input/input24 [ 44.204155][ T1819] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 44.222706][ T1819] rust_binder: Write failure EINVAL in pid:312 [ 44.238239][ T1823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 44.245500][ T1823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:399 [ 44.271137][ T36] audit: type=1326 audit(1750393460.450:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1825 comm="syz.3.437" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74dd8e929 code=0x0 [ 44.305180][ T1810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.334377][ T1830] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 44.361033][ T1833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.413994][ T1839] binder: Unknown parameter 'dont_hash' [ 44.420633][ T1839] binder: Unknown parameter 'dont_hash' [ 44.439162][ T1832] rust_binder: Error in use_page_slow: ESRCH [ 44.439177][ T1832] rust_binder: use_range failure ESRCH [ 44.447463][ T1832] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 44.448820][ T1833] rust_binder: Error in use_page_slow: ESRCH [ 44.453336][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.461984][ T1833] rust_binder: use_range failure ESRCH [ 44.467230][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:374 [ 44.476810][ T1833] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 44.493828][ T1833] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.498928][ T36] audit: type=1400 audit(1750393460.680:276): avc: denied { map } for pid=1842 comm="syz.1.442" path="pipe:[1648]" dev="pipefs" ino=1648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 44.502015][ T1833] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:374 [ 44.651401][ T1853] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 44.726359][ T1855] geneve1: tun_chr_ioctl cmd 1074025672 [ 44.739905][ T1855] geneve1: ignored: set checksum enabled [ 44.779610][ T1859] rust_binder: Write failure EFAULT in pid:414 [ 44.922784][ T1875] rust_binder: Error while translating object. [ 44.929436][ T1875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.936052][ T1875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 45.034979][ T1880] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 45.035011][ T1880] rust_binder: Error while translating object. [ 45.057658][ T1880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.057689][ T1880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 45.078480][ T1880] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.206243][ T1892] rust_binder: Error in use_page_slow: ESRCH [ 45.206268][ T1892] rust_binder: use_range failure ESRCH [ 45.212260][ T1892] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 45.233696][ T1892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.241751][ T1892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:395 [ 45.378026][ T1899] binder: Unknown parameter 'processor : 0 [ 45.378026][ T1899] vendor_id : GenuineIntel [ 45.378026][ T1899] cpu family : 6 [ 45.378026][ T1899] model : 79 [ 45.378026][ T1899] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 45.378026][ T1899] stepping : 0 [ 45.378026][ T1899] microcode : 0xffffffff [ 45.378026][ T1899] cpu MHz : 2200.148 [ 45.378026][ T1899] cache size : 56320 KB [ 45.378026][ T1899] physical id : 0 [ 45.378026][ T1899] siblings : 2 [ 45.378026][ T1899] core id : 0 [ 45.378026][ T1899] cpu cores : 1 [ 45.378026][ T1899] apicid : 0 [ 45.378026][ T1899] initial apicid : 0 [ 45.378026][ T1899] fpu : yes [ 45.378026][ T1899] fpu_exception : yes [ 45.378026][ T1899] cpuid level : 13 [ 45.378026][ T1899] wp : yes [ 45.378026][ T1899] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 45.378026][ T1899] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 45.400485][ T1895] binder: Bad value for 'max' [ 45.553949][ T1895] kvm: kvm [1894]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 45.563481][ T1908] rust_binder: Write failure EFAULT in pid:324 [ 45.684649][ T1914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.745257][ T1923] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 45.758130][ T1923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404 [ 45.778545][ T1924] binder: Unknown parameter 'dont_hash' [ 45.800290][ T1926] rust_binder: Error while translating object. [ 45.800331][ T1926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 45.807181][ T1926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:333 [ 45.882814][ T36] audit: type=1400 audit(1750393462.060:277): avc: denied { map } for pid=1921 comm="syz.2.469" path="/proc/383/task/384" dev="proc" ino=33429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 45.921793][ T1928] rust_binder: Error while translating object. [ 45.921827][ T1928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 45.929826][ T1928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:335 [ 46.074570][ T1934] rust_binder: Got transaction with invalid offset. [ 46.084143][ T1934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.091019][ T1934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429 [ 46.204320][ T1941] Restarting kernel threads ... done. [ 46.265436][ T1945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:440 [ 46.387998][ T1951] binder: Unknown parameter 'nXIÿ' [ 46.417063][ T1953] binder: Unknown parameter 'nXI' [ 46.498619][ T1961] input: syz0 as /devices/virtual/input/input26 [ 46.521163][ T1960] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.557255][ T1964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 46.829975][ T1992] rust_binder: Error while translating object. [ 46.830011][ T1992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.836482][ T1992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:409 [ 46.846951][ T1994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.085318][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.134588][ T2007] rust_binder: Error while translating object. [ 47.141418][ T2007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.147888][ T2007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 47.207973][ T2011] KVM: debugfs: duplicate directory 2011-4 [ 47.304097][ T2013] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 47.312702][ T2013] rust_binder: Write failure EINVAL in pid:418 [ 47.350702][ T2021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.370329][ T2023] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 47.371307][ T2021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.381236][ T2021] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 47.388504][ T2021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 47.397114][ T2021] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 47.406499][ T2021] rust_binder: Error while translating object. [ 47.415645][ T2021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.421847][ T2021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 47.481498][ T46] bridge_slave_1: left allmulticast mode [ 47.511635][ T46] bridge_slave_1: left promiscuous mode [ 47.517622][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.526370][ T46] bridge_slave_0: left allmulticast mode [ 47.532028][ T46] bridge_slave_0: left promiscuous mode [ 47.537818][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.632117][ T36] audit: type=1400 audit(1750393463.810:278): avc: denied { mounton } for pid=2038 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.665904][ T46] veth1_macvtap: left promiscuous mode [ 47.671532][ T46] veth0_vlan: left promiscuous mode [ 47.745839][ T2042] kvm: kvm [2041]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 47.775165][ T2038] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.783078][ T2038] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.790286][ T2038] bridge_slave_0: entered allmulticast mode [ 47.796572][ T2038] bridge_slave_0: entered promiscuous mode [ 47.803131][ T2038] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.811307][ T2038] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.818900][ T2038] bridge_slave_1: entered allmulticast mode [ 47.826273][ T2038] bridge_slave_1: entered promiscuous mode [ 47.833703][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.833735][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 47.873368][ T64] hid-generic 0003:0002:0008.0003: item fetching failed at offset 5/32 [ 47.882325][ T64] hid-generic 0003:0002:0008.0003: probe with driver hid-generic failed with error -22 [ 47.902461][ T2047] rust_binder: Error while translating object. [ 47.902510][ T2047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.922358][ T2047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 47.965871][ T36] audit: type=1400 audit(1750393464.150:279): avc: denied { create } for pid=2038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.997795][ T36] audit: type=1400 audit(1750393464.150:280): avc: denied { write } for pid=2038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.020945][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.028806][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.036167][ T36] audit: type=1400 audit(1750393464.150:281): avc: denied { read } for pid=2038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.037000][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.063760][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.082626][ T2038] veth0_vlan: entered promiscuous mode [ 48.092898][ T2038] veth1_macvtap: entered promiscuous mode [ 48.111578][ T36] audit: type=1400 audit(1750393464.290:282): avc: denied { unmount } for pid=2038 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.267550][ T2072] rust_binder: Write failure EINVAL in pid:484 [ 48.383301][ T2077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 48.389627][ T2077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:490 [ 48.399623][ T2077] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.408798][ T2077] rust_binder: Read failure Err(EFAULT) in pid:490 [ 48.481797][ T2079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:492 [ 48.595125][ T2090] rust_binder: Error while translating object. [ 48.604535][ T2090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 48.610966][ T2090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:11 [ 48.634376][ T2092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 48.657535][ T2095] rust_binder: Write failure EINVAL in pid:15 [ 48.657541][ T2094] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.673683][ T2094] rust_binder: Read failure Err(EFAULT) in pid:15 [ 48.741407][ T2098] rust_binder: Write failure EINVAL in pid:496 [ 48.848000][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 48.848018][ T36] audit: type=1326 audit(1750393465.030:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2101 comm="syz.3.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74dd8e929 code=0x0 [ 48.857474][ T2105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 48.898049][ T2105] rust_binder: Error while translating object. [ 48.909169][ T2105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 48.915503][ T2105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 48.961140][ T2112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 49.046411][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.046829][ T2124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.069372][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.074481][ T2119] rust_binder: Write failure EINVAL in pid:25 [ 49.075677][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.081503][ T2124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.105805][ T2124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.114486][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.114510][ T2125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.119566][ T2124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.173066][ T2130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 49.344873][ T36] audit: type=1400 audit(1750393465.530:286): avc: denied { append } for pid=2135 comm="syz.2.539" name="binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.351936][ T2134] binder: Bad value for 'max' [ 49.637220][ T2143] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 49.659004][ T2146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:411 [ 49.726922][ T2148] rust_binder: Error while translating object. [ 49.736392][ T2148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 49.744903][ T2148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:516 [ 49.832516][ T9] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 49.854212][ T9] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 49.865155][ T9] hid-generic C98F:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 50.292251][ T2198] rust_binder: Write failure EFAULT in pid:532 [ 50.370667][ T2200] binder: Unknown parameter 'fsco“ntext' [ 50.457093][ T2203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.511554][ T2212] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.554755][ T2211] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 50.561287][ T2211] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 50.569126][ T2211] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 50.622100][ T2225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 50.632324][ T2225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:51 [ 50.659103][ T2230] input: syz1 as /devices/virtual/input/input30 [ 50.682086][ T2230] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 50.686399][ T2220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.732216][ T2220] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 50.732245][ T2220] rust_binder: Error while translating object. [ 50.741193][ T2220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.747494][ T2220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:540 [ 50.878486][ T2238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.975121][ T2249] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 51.085077][ T2252] rust_binder: Write failure EINVAL in pid:59 [ 51.134492][ T36] audit: type=1400 audit(1750393467.320:287): avc: denied { map } for pid=2253 comm="syz.0.575" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 51.135691][ T2254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.303313][ T2269] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 51.323088][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 51.360732][ T2271] binder: Unknown parameter 'defcontext01777777777777777777777' [ 51.360732][ T2272] binder: Unknown parameter 'defcontext01777777777777777777777' [ 51.576110][ T2281] input: syz1 as /devices/virtual/input/input31 [ 51.803766][ T2294] SELinux: policydb version 225069062 does not match my version range 15-33 [ 51.813418][ T2294] SELinux: failed to load policy [ 51.833918][ T2296] SELinux: policydb version 225069062 does not match my version range 15-33 [ 51.843846][ T2296] SELinux: failed to load policy [ 51.849771][ T2294] SELinux: failed to load policy [ 51.862017][ T2301] binder: Unknown parameter 'defcontextÿÿÿÿ' [ 52.353987][ T2322] input: syz0 as /devices/virtual/input/input32 [ 52.435060][ T2335] binder: Bad value for 'max' [ 52.540478][ T2346] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 52.540816][ T36] audit: type=1400 audit(1750393468.720:288): avc: denied { map } for pid=2342 comm="syz.1.602" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.575985][ T2346] binder: Unknown parameter 'smackfstransmute' [ 52.613821][ T2353] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 52.687075][ T2359] binder: Unknown parameter 'processor : 0 [ 52.687075][ T2359] vendor_id : GenuineIntel [ 52.687075][ T2359] cpu family : 6 [ 52.687075][ T2359] model : 79 [ 52.687075][ T2359] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 52.687075][ T2359] stepping : 0 [ 52.687075][ T2359] microcode : 0xffffffff [ 52.687075][ T2359] cpu MHz : 2200.148 [ 52.687075][ T2359] cache size : 56320 KB [ 52.687075][ T2359] phys/dev/kvm' [ 52.829074][ T2370] rust_binder: Error while translating object. [ 52.829105][ T2370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 52.836470][ T2370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:574 [ 52.850502][ T36] audit: type=1400 audit(1750393469.040:289): avc: denied { remount } for pid=2366 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.898547][ T2375] syz.0.613: attempt to access beyond end of device [ 52.898547][ T2375] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.933153][ T2380] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 52.933191][ T2380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:98 [ 52.959750][ T2380] input: syz0 as /devices/virtual/input/input33 [ 53.012672][ T2385] rust_binder: Error in use_page_slow: ESRCH [ 53.012693][ T2385] rust_binder: use_range failure ESRCH [ 53.023688][ T2385] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 53.029623][ T2385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.038481][ T2385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:100 [ 53.131927][ T2392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:582 [ 53.211040][ T2398] rust_binder: Error while translating object. [ 53.220325][ T2398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 53.226608][ T2398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:588 [ 53.354033][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.370496][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 53.404033][ T2412] __vm_enough_memory: pid: 2412, comm: syz.1.627, bytes: 281474976845824 not enough memory for the allocation [ 53.418358][ T2411] rust_binder: Write failure EFAULT in pid:431 [ 53.474223][ T2418] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 53.503809][ T2418] rust_binder: Write failure EINVAL in pid:110 [ 53.569496][ T2425] input: syz0 as /devices/virtual/input/input34 [ 53.634997][ T2425] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.675423][ T2431] SELinux: security_context_str_to_sid () failed with errno=-22 [ 53.694421][ T2429] __vm_enough_memory: pid: 2429, comm: syz.0.635, bytes: 281474976845824 not enough memory for the allocation [ 53.731433][ T2435] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.731454][ T2435] rust_binder: Read failure Err(EFAULT) in pid:116 [ 53.748900][ T2435] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 54.013762][ T36] audit: type=1400 audit(1750393470.190:290): avc: granted { setsecparam } for pid=2455 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 54.128757][ T2465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 54.129596][ T2465] serio: Serial port ttynull [ 54.202637][ T2471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.210107][ T2471] rust_binder: Error in use_page_slow: ESRCH [ 54.210123][ T2471] rust_binder: use_range failure ESRCH [ 54.216166][ T2471] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 54.222942][ T2471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 54.231722][ T2471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:451 [ 54.281322][ T2478] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 54.299173][ T2478] rust_binder: Write failure EINVAL in pid:457 [ 54.305328][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 54.337519][ T2480] binder: Unknown parameter 'processor : 0 [ 54.337519][ T2480] vendor_id : GenuineIntel [ 54.337519][ T2480] cpu family : 6 [ 54.337519][ T2480] model : 79 [ 54.337519][ T2480] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 54.337519][ T2480] stepping : 0 [ 54.337519][ T2480] microcode : 0xffffffff [ 54.337519][ T2480] cpu MHz : 2200.148 [ 54.337519][ T2480] cache size : 56320 KB [ 54.337519][ T2480] physical id : 0 [ 54.337519][ T2480] siblings : 2 [ 54.337519][ T2480] core id : 0 [ 54.337519][ T2480] cpu cores : 1 [ 54.337519][ T2480] apicid : 0 [ 54.337519][ T2480] initial apicid : 0 [ 54.337519][ T2480] fpu : yes [ 54.337519][ T2480] fpu_exception : yes [ 54.337519][ T2480] cpuid level : 13 [ 54.337519][ T2480] wp : yes [ 54.337519][ T2480] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 54.337519][ T2480] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 54.434424][ T2484] input: syz0 as /devices/virtual/input/input37 [ 54.703095][ T2491] rust_binder: Error while translating object. [ 54.703134][ T2491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 54.703258][ T2492] rust_binder: Error while translating object. [ 54.709712][ T2491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:462 [ 54.719826][ T2492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 54.735216][ T2492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:462 [ 54.757099][ T36] audit: type=1400 audit(1750393470.940:291): avc: denied { compute_member } for pid=2493 comm="syz.3.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.797198][ T2498] input: syz0 as /devices/virtual/input/input38 [ 55.108173][ T2528] rust_binder: Error while translating object. [ 55.108195][ T2528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 55.114548][ T2528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:467 [ 55.139330][ T2527] binder: Bad value for 'max' [ 55.171782][ T2531] binder: Bad value for 'max' [ 55.229398][ T2541] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 55.229424][ T2541] rust_binder: Read failure Err(EFAULT) in pid:143 [ 55.339687][ T2544] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 55.346707][ T2544] rust_binder: Error while translating object. [ 55.357340][ T2544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 55.363714][ T2544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 55.473690][ T36] audit: type=1400 audit(1750393471.650:292): avc: denied { setattr } for pid=291 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.602437][ T2548] SELinux: Context À²oýú}¨ xd is not valid (left unmapped). [ 55.738343][ T2552] rust_binder: Write failure EFAULT in pid:152 [ 55.773113][ T2555] binder: Bad value for 'stats' [ 55.876463][ T2559] rust_binder: Error in use_page_slow: ESRCH [ 55.876491][ T2559] rust_binder: use_range failure ESRCH [ 55.883183][ T2559] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 55.888996][ T2559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 55.897199][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:158 [ 55.911065][ T2559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 56.805360][ T2578] rust_binder: Error in use_page_slow: ESRCH [ 56.823701][ T2578] rust_binder: use_range failure ESRCH [ 56.829828][ T2578] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 56.844240][ T2578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 56.852369][ T2578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:487 [ 56.963798][ T2586] binder: Unknown parameter 'fscontext?}' [ 57.140192][ T2592] rust_binder: Write failure EFAULT in pid:496 [ 57.428870][ T2601] SELinux: security_context_str_to_sid (system_u+) failed with errno=-22 [ 57.586495][ T2603] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.586835][ T2604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:509 [ 57.618365][ T2603] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 57.618725][ T2604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 57.657770][ T36] audit: type=1400 audit(1750393473.830:293): avc: denied { execute } for pid=2611 comm="syz.1.699" path="/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs" dev="sysfs" ino=1880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 57.894634][ T36] audit: type=1400 audit(1750393474.080:294): avc: denied { setattr } for pid=2622 comm="syz.2.702" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.944718][ T36] audit: type=1400 audit(1750393474.130:295): avc: denied { write } for pid=2624 comm="syz.2.703" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.979538][ T2627] SELinux: policydb magic number 0x3 does not match expected magic number 0xf97cff8c [ 58.004546][ T2627] SELinux: failed to load policy [ 58.105061][ T36] audit: type=1400 audit(1750393474.290:296): avc: denied { append } for pid=2632 comm="syz.0.705" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 58.152540][ T2635] SELinux: policydb version 1087233408 does not match my version range 15-33 [ 58.192602][ T2635] SELinux: failed to load policy [ 58.426570][ T36] audit: type=1326 audit(1750393474.610:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2657 comm="syz.1.712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea91f8e929 code=0x0 [ 58.505469][ T2660] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 58.521179][ T2661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.551208][ T2661] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 58.633976][ T2668] rust_binder: Error in use_page_slow: ESRCH [ 58.634004][ T2668] rust_binder: use_range failure ESRCH [ 58.641547][ T2668] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 58.653707][ T2668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.662411][ T2668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:183 [ 58.720129][ T2673] rust_binder: Error in use_page_slow: ESRCH [ 58.720154][ T2673] rust_binder: use_range failure ESRCH [ 58.728233][ T2673] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 58.734506][ T2673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.743237][ T2673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:187 [ 58.799641][ T36] audit: type=1400 audit(1750393474.980:298): avc: denied { setattr } for pid=291 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.814938][ T2675] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 58.833561][ T36] audit: type=1400 audit(1750393474.990:299): avc: denied { map } for pid=2674 comm="syz.2.718" path="/dev/binderfs/binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.854175][ T2675] rust_binder: Error in use_page_slow: EBUSY [ 58.883864][ T2675] rust_binder: use_range failure EBUSY [ 58.892950][ T2675] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 58.898938][ T2675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 58.906982][ T2675] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 58.917046][ T2675] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:536 [ 59.004160][ T2682] rust_binder: Error while translating object. [ 59.013153][ T2682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 59.023226][ T2682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:540 [ 59.035391][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 59.035409][ T36] audit: type=1400 audit(1750393475.220:310): avc: denied { read } for pid=2683 comm="syz.0.721" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.077758][ T36] audit: type=1400 audit(1750393475.260:311): avc: denied { open } for pid=2683 comm="syz.0.721" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.114995][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.130864][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.153708][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.161689][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.173682][ T36] audit: type=1400 audit(1750393475.260:312): avc: denied { ioctl } for pid=2683 comm="syz.0.721" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.200418][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.223708][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.231696][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.247189][ T36] audit: type=1400 audit(1750393475.260:313): avc: denied { map } for pid=2683 comm="syz.0.721" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.247319][ T2693] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 59.271017][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.303728][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.311304][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.332104][ T2693] input: syz0 as /devices/virtual/input/input42 [ 59.334630][ T36] audit: type=1400 audit(1750393475.290:314): avc: denied { read write } for pid=2685 comm="syz.2.722" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.360051][ T2693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.365490][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.369801][ T2693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 59.372502][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.398381][ T36] audit: type=1400 audit(1750393475.290:315): avc: denied { open } for pid=2685 comm="syz.2.722" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.421982][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.429566][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.437601][ T36] audit: type=1400 audit(1750393475.290:316): avc: denied { execmem } for pid=2685 comm="syz.2.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.456758][ T9] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0 [ 59.473933][ T9] hid-generic 009C:0008:0003.0005: hidraw0: HID v0.05 Device [syz1] on syz0 [ 59.483513][ T36] audit: type=1400 audit(1750393475.340:317): avc: denied { write } for pid=2692 comm="syz.0.724" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.549175][ T36] audit: type=1400 audit(1750393475.340:318): avc: denied { open } for pid=2692 comm="syz.0.724" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.567846][ T2708] fido_id[2708]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 59.627638][ T36] audit: type=1400 audit(1750393475.340:319): avc: denied { ioctl } for pid=2692 comm="syz.0.724" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.662942][ T2710] input input43: cannot allocate more than FF_MAX_EFFECTS effects [ 59.735945][ T2719] random: crng reseeded on system resumption [ 59.946845][ T2723] input: syz0 as /devices/virtual/input/input44 [ 60.221223][ T2747] rust_binder: Error while translating object. [ 60.221280][ T2747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.235046][ T2747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 60.344063][ T2755] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 60.353809][ T2755] rust_binder: Error in use_page_slow: EBUSY [ 60.376126][ T2755] rust_binder: use_range failure EBUSY [ 60.382408][ T2755] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 60.388320][ T2755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 60.396684][ T2755] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 60.410182][ T2755] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:206 [ 60.504269][ T2762] kvm: Disabled LAPIC found during irq injection [ 60.519972][ T2758] random: crng reseeded on system resumption [ 60.574244][ T2770] rust_binder: Write failure EINVAL in pid:215 [ 60.586954][ T2758] binder: Unknown parameter 'fscontext?}z1' [ 60.726021][ T2775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.788713][ T2784] rust_binder: Error while translating object. [ 60.788746][ T2784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.808589][ T2784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:646 [ 60.853124][ T2792] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 60.904915][ T2793] rust_binder: Error in use_page_slow: ESRCH [ 60.904938][ T2793] rust_binder: use_range failure ESRCH [ 60.908550][ T2796] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.911483][ T2793] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 60.953729][ T2793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 60.971434][ T2793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:231 [ 61.015491][ T2801] rust_binder: Write failure EINVAL in pid:574 [ 61.182147][ T2813] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 61.235790][ T2813] binder: Bad value for 'stats' [ 61.266495][ T2818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 61.294093][ T2818] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 61.316902][ T2822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:577 [ 61.426615][ T2827] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 61.754639][ T2841] binder: Unknown parameter 'context' [ 61.768956][ T1552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x3 [ 61.787762][ T1552] hid-generic 0000:0000:0000.0006: unknown main item tag 0xd [ 61.798945][ T1552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x5 [ 61.812034][ T1552] hid-generic 0000:0000:0000.0006: item fetching failed at offset 26/229 [ 61.820978][ T1552] hid-generic 0000:0000:0000.0006: probe with driver hid-generic failed with error -22 [ 62.305796][ T2859] binder: Unknown parameter 'nXI' [ 62.668845][ T2866] input: syz1 as /devices/virtual/input/input47 [ 62.699255][ T2866] rust_binder: Error while translating object. [ 62.699297][ T2866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.709743][ T2866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 62.736204][ T2866] random: crng reseeded on system resumption [ 62.780826][ T2870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 62.780864][ T2870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 62.783470][ T2868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:589 [ 62.899021][ T2882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.924274][ T2882] rust_binder: Failed copying remainder into alloc: EFAULT [ 62.930841][ T2882] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 62.938388][ T2882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 62.948688][ T2882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:683 [ 62.994491][ T2886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 63.016251][ T2886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:685 [ 63.027876][ T2888] binder: Unknown parameter 'fscontext?}' [ 63.155083][ T2900] input: syz0 as /devices/virtual/input/input48 [ 63.493589][ T2922] binder: Unknown parameter 'maxv/net/tun' [ 63.592671][ T2928] serio: Serial port ttynull [ 63.800588][ T127] bridge_slave_1: left allmulticast mode [ 63.806449][ T127] bridge_slave_1: left promiscuous mode [ 63.812221][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.820372][ T127] bridge_slave_0: left allmulticast mode [ 63.826245][ T127] bridge_slave_0: left promiscuous mode [ 63.832032][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.990623][ T127] veth1_macvtap: left promiscuous mode [ 63.996390][ T127] veth0_vlan: left promiscuous mode [ 64.062916][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.070098][ T3036] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.077272][ T3036] bridge_slave_0: entered allmulticast mode [ 64.083751][ T3036] bridge_slave_0: entered promiscuous mode [ 64.090290][ T3036] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.097393][ T3036] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.104752][ T3036] bridge_slave_1: entered allmulticast mode [ 64.111164][ T3036] bridge_slave_1: entered promiscuous mode [ 64.173816][ T36] kauditd_printk_skb: 74 callbacks suppressed [ 64.173833][ T36] audit: type=1400 audit(1750393480.350:394): avc: denied { create } for pid=3036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.206310][ T3036] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.213379][ T3036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.220701][ T3036] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.227988][ T3036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.236116][ T36] audit: type=1400 audit(1750393480.360:395): avc: denied { write } for pid=3036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.270928][ T36] audit: type=1400 audit(1750393480.380:396): avc: denied { read } for pid=3036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.291838][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.304234][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.326317][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.333421][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.343479][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.350585][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.392191][ T3036] veth0_vlan: entered promiscuous mode [ 64.408621][ T3036] veth1_macvtap: entered promiscuous mode [ 64.430544][ T36] audit: type=1400 audit(1750393480.610:397): avc: denied { mounton } for pid=3036 comm="syz-executor" path="/root/syzkaller.dyCwbC/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.456135][ T36] audit: type=1400 audit(1750393480.610:398): avc: denied { mount } for pid=3036 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.479863][ T36] audit: type=1400 audit(1750393480.610:399): avc: denied { mounton } for pid=3036 comm="syz-executor" path="/root/syzkaller.dyCwbC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.513165][ T36] audit: type=1400 audit(1750393480.610:400): avc: denied { mount } for pid=3036 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.541819][ T36] audit: type=1400 audit(1750393480.610:401): avc: denied { mounton } for pid=3036 comm="syz-executor" path="/root/syzkaller.dyCwbC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.570419][ T3041] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 64.580444][ T3041] rust_binder: Write failure EINVAL in pid:2 [ 64.581066][ T1552] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 64.630655][ T3042] fido_id[3042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.630697][ T36] audit: type=1400 audit(1750393480.610:402): avc: denied { mounton } for pid=3036 comm="syz-executor" path="/root/syzkaller.dyCwbC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=58754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.684601][ T3047] can0: slcan on ttyS3. [ 64.691366][ T36] audit: type=1400 audit(1750393480.610:403): avc: denied { unmount } for pid=3036 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.765875][ T3047] can0 (unregistered): slcan off ttyS3. [ 64.867614][ T3056] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 176, size: 143) [ 64.867644][ T3056] rust_binder: Error while translating object. [ 64.895814][ T3056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.902275][ T3056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:623 [ 65.082530][ T3065] rust_binder: Error while translating object. [ 65.093397][ T3065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 65.099839][ T3065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:630 [ 65.136623][ T3067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 65.238838][ T3077] tap0: tun_chr_ioctl cmd 2148553947 [ 65.401227][ T3087] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.403244][ T3087] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 65.764102][ T3104] rust_binder: Error while translating object. [ 65.776204][ T3104] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 65.782421][ T3104] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 65.799117][ T3102] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 65.813789][ T3102] rust_binder: Read failure Err(EFAULT) in pid:642 [ 65.915291][ T3115] rust_binder: Error while translating object. [ 65.933719][ T3115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 65.939947][ T3115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:714 [ 66.028610][ T3117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.049309][ T3120] rust_binder: Write failure EFAULT in pid:645 [ 66.085466][ T3123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 66.091913][ T3123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:647 [ 66.285536][ T3137] block device autoloading is deprecated and will be removed. [ 66.436587][ T3146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45 [ 66.541960][ T3156] input: syz0 as /devices/virtual/input/input50 [ 67.019522][ T3163] rust_binder: Write failure EINVAL in pid:59 [ 67.026084][ T3165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.167618][ T3171] SELinux: failed to load policy [ 67.192187][ T3174] rust_binder: Read failure Err(EAGAIN) in pid:726 [ 67.449667][ T3189] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.473667][ T3189] rust_binder: Read failure Err(EFAULT) in pid:737 [ 67.518420][ T3192] input: syz0 as /devices/virtual/input/input51 [ 67.734837][ T3196] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.734863][ T3196] rust_binder: Read failure Err(EFAULT) in pid:69 [ 67.952329][ T290] cgroup: fork rejected by pids controller in /syz1 [ 68.003330][ T3206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 68.054778][ T3209] rust_binder: Write failure EINVAL in pid:77 [ 68.078212][ T46] bridge_slave_1: left allmulticast mode [ 68.091315][ T3210] rust_binder: Write failure EINVAL in pid:660 [ 68.101462][ T46] bridge_slave_1: left promiscuous mode [ 68.124839][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.144156][ T46] bridge_slave_0: left allmulticast mode [ 68.153148][ T46] bridge_slave_0: left promiscuous mode [ 68.165948][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.327933][ T46] veth1_macvtap: left promiscuous mode [ 68.336315][ T46] veth0_vlan: left promiscuous mode [ 68.402689][ T3212] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.409973][ T3212] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.418311][ T3212] bridge_slave_0: entered allmulticast mode [ 68.424789][ T3212] bridge_slave_0: entered promiscuous mode [ 68.431579][ T3212] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.446277][ T3212] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.453475][ T3212] bridge_slave_1: entered allmulticast mode [ 68.474191][ T3212] bridge_slave_1: entered promiscuous mode [ 68.560877][ T3212] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.568022][ T3212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.575479][ T3212] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.582618][ T3212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.613430][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.634402][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.646905][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.654011][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.664937][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.672087][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.717479][ T3212] veth0_vlan: entered promiscuous mode [ 68.740517][ T3212] veth1_macvtap: entered promiscuous mode [ 68.783546][ T3217] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 68.783578][ T3217] rust_binder: Error while translating object. [ 68.802849][ T3217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 68.809241][ T3217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 69.164515][ T3235] input: syz1 as /devices/virtual/input/input52 [ 69.405035][ T3242] binder: Bad value for 'stats' [ 69.666891][ T3256] kvm: kvm [3255]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 69.688345][ T3257] rust_binder: Write failure EFAULT in pid:678 [ 69.775326][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 69.775345][ T36] audit: type=1400 audit(1750393485.960:422): avc: denied { append } for pid=3259 comm="syz.0.860" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.098585][ T3275] rust_binder: Write failure EINVAL in pid:13 [ 70.205744][ T3282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.223719][ T3284] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 70.238337][ T3284] rust_binder: Write failure EINVAL in pid:103 [ 70.276492][ T3286] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.283060][ T36] audit: type=1400 audit(1750393486.460:423): avc: denied { read } for pid=3287 comm="syz.1.869" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.362424][ T36] audit: type=1400 audit(1750393486.460:424): avc: denied { open } for pid=3287 comm="syz.1.869" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.403764][ T36] audit: type=1400 audit(1750393486.500:425): avc: denied { ioctl } for pid=3287 comm="syz.1.869" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.552663][ T3296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.552920][ T36] audit: type=1326 audit(1750393486.730:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3295 comm="syz.0.873" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c31f8e929 code=0x0 [ 70.601909][ T3299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 70.601946][ T3299] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.612364][ T3299] rust_binder: Read failure Err(EFAULT) in pid:18 [ 70.621150][ T3299] rust_binder: Write failure EFAULT in pid:18 [ 70.639516][ T127] bridge_slave_1: left allmulticast mode [ 70.652812][ T127] bridge_slave_1: left promiscuous mode [ 70.659012][ T127] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.667584][ T127] bridge_slave_0: left allmulticast mode [ 70.673287][ T127] bridge_slave_0: left promiscuous mode [ 70.678972][ T127] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.761671][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.768926][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.776448][ T3297] bridge_slave_0: entered allmulticast mode [ 70.782819][ T3297] bridge_slave_0: entered promiscuous mode [ 70.805964][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.813376][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.820702][ T3297] bridge_slave_1: entered allmulticast mode [ 70.827296][ T3297] bridge_slave_1: entered promiscuous mode [ 70.837148][ T3305] random: crng reseeded on system resumption [ 70.849894][ T127] veth1_macvtap: left promiscuous mode [ 70.859284][ T127] veth0_vlan: left promiscuous mode [ 70.931071][ T3316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 70.931077][ T3315] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 70.958285][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.973449][ T3297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.980755][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.987797][ T3297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.006797][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.017207][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.027152][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.034214][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.043713][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.050845][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.089549][ T3297] veth0_vlan: entered promiscuous mode [ 71.102339][ T3297] veth1_macvtap: entered promiscuous mode [ 71.151146][ T36] audit: type=1400 audit(1750393487.330:427): avc: denied { write } for pid=3322 comm="syz.4.872" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 71.180086][ T3325] rust_binder: Write failure EFAULT in pid:4 [ 71.240821][ T3327] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 71.247000][ T3327] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 71.255119][ T3327] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 71.300094][ T3330] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 71.564174][ T3338] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 71.715102][ T3346] input: syz1 as /devices/virtual/input/input53 [ 71.845833][ T3356] rust_binder: Write failure EINVAL in pid:37 [ 71.898897][ T45] hid-generic C98F:0003:0000.0008: unknown main item tag 0x0 [ 71.915753][ T3362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.915855][ T3362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.928390][ T45] hid-generic C98F:0003:0000.0008: unknown main item tag 0x0 [ 71.951801][ T36] audit: type=1400 audit(1750393488.130:428): avc: granted { setsecparam } for pid=3363 comm="syz.0.893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 71.975191][ T45] hid-generic C98F:0003:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 72.028476][ T3372] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 166) [ 72.028505][ T3372] rust_binder: Error while translating object. [ 72.055258][ T3372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.061750][ T3372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 72.076140][ T3372] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.085788][ T3379] binder: Bad value for 'defcontext' [ 72.089078][ T3372] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 72.100976][ T3372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 72.109330][ T3372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:130 [ 72.137914][ T3384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.161434][ T3384] rust_binder: Write failure EFAULT in pid:132 [ 72.228910][ T3396] binder: Bad value for 'defcontext' [ 72.337395][ T3415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.371417][ T3422] rust_binder: Error while translating object. [ 72.378007][ T3422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.384561][ T3422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 72.402651][ T3424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.410287][ T3427] binder: Unknown parameter 'processor : 0 [ 72.410287][ T3427] vendor_id : GenuineIntel [ 72.410287][ T3427] cpu family : 6 [ 72.410287][ T3427] model : 79 [ 72.410287][ T3427] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 72.410287][ T3427] stepping : 0 [ 72.410287][ T3427] microcode : 0xffffffff [ 72.410287][ T3427] cpu MHz : 2200.148 [ 72.410287][ T3427] cache size : 56320 KB [ 72.410287][ T3427] physical id : 0 [ 72.410287][ T3427] siblings : 2 [ 72.410287][ T3427] core id : 0 [ 72.410287][ T3427] cpu cores : 1 [ 72.410287][ T3427] apicid : 0 [ 72.410287][ T3427] initial apicid : 0 [ 72.410287][ T3427] fpu : yes [ 72.410287][ T3427] fpu_exception : yes [ 72.410287][ T3427] cpuid level : 13 [ 72.410287][ T3427] wp : yes [ 72.410287][ T3427] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 72.410287][ T3427] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 72.422370][ T3424] rust_binder: Error while translating object. [ 72.556707][ T3432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 72.566345][ T3424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.585264][ T3424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 72.594850][ T3432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:66 [ 72.686786][ T36] audit: type=1400 audit(1750393488.860:429): avc: denied { execute } for pid=3444 comm="syz.4.917" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.724008][ T3442] rust_binder: Write failure EFAULT in pid:155 [ 72.724180][ T3452] rust_binder: Write failure EFAULT in pid:155 [ 72.732022][ T3442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.743595][ T3442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 72.805750][ T3461] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.822874][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.832498][ T3461] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.035313][ T3475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 73.035336][ T3475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:82 [ 73.194867][ T3479] binder: Bad value for 'stats' [ 73.272561][ T36] audit: type=1400 audit(1750393489.450:430): avc: denied { block_suspend } for pid=3480 comm="syz.2.930" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.321641][ T3486] random: crng reseeded on system resumption [ 73.344972][ T3486] rust_binder: Write failure EFAULT in pid:88 [ 73.395226][ T3489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:727 [ 73.402212][ T36] audit: type=1400 audit(1750393489.580:431): avc: denied { append } for pid=3488 comm="syz.2.933" name="pfkey" dev="proc" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.437550][ T3489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:727 [ 73.470317][ T3496] input: syz1 as /devices/virtual/input/input58 [ 73.520546][ T3496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 73.520575][ T3496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 73.553705][ T3496] rust_binder: Read failure Err(EFAULT) in pid:91 [ 73.574035][ T3510] kernel profiling enabled (shift: 0) [ 73.670372][ T3510] syz.0.939: vmalloc error: size 318767104, failed to allocated page array size 622592, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 73.688840][ T3510] CPU: 0 UID: 0 PID: 3510 Comm: syz.0.939 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 73.688868][ T3510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.688888][ T3510] Call Trace: [ 73.688894][ T3510] [ 73.688902][ T3510] __dump_stack+0x21/0x30 [ 73.688927][ T3510] dump_stack_lvl+0x10c/0x190 [ 73.688945][ T3510] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.688964][ T3510] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 73.688986][ T3510] dump_stack+0x19/0x20 [ 73.689004][ T3510] warn_alloc+0x1bc/0x2a0 [ 73.689019][ T3510] ? kasan_save_free_info+0x4a/0x60 [ 73.689033][ T3510] ? __cfi_warn_alloc+0x10/0x10 [ 73.689046][ T3510] ? __get_vm_area_node+0x1dc/0x3a0 [ 73.689059][ T3510] ? profile_init+0xdb/0x280 [ 73.689077][ T3510] __vmalloc_node_range_noprof+0x68e/0x1420 [ 73.689092][ T3510] ? irq_work_queue+0xc2/0x160 [ 73.689113][ T3510] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.689128][ T3510] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 73.689142][ T3510] ? __asan_memset+0x39/0x50 [ 73.689159][ T3510] ? __alloc_pages_noprof+0xba/0x6c0 [ 73.689175][ T3510] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 73.689192][ T3510] ? profile_init+0xdb/0x280 [ 73.689211][ T3510] vzalloc_noprof+0xfd/0x1d0 [ 73.689227][ T3510] ? profile_init+0xdb/0x280 [ 73.689246][ T3510] ? profile_init+0x81/0x280 [ 73.689265][ T3510] ? __cfi_vzalloc_noprof+0x10/0x10 [ 73.689282][ T3510] ? profile_init+0x81/0x280 [ 73.689301][ T3510] ? __kmalloc_noprof+0x2ad/0x450 [ 73.689319][ T3510] ? __cfi_profiling_store+0x10/0x10 [ 73.689340][ T3510] ? __cfi_profiling_store+0x10/0x10 [ 73.689358][ T3510] profile_init+0xdb/0x280 [ 73.689375][ T3510] ? __cfi_profiling_store+0x10/0x10 [ 73.689395][ T3510] profiling_store+0x76/0x100 [ 73.689415][ T3510] kobj_attr_store+0x73/0xa0 [ 73.689435][ T3510] ? __cfi_kobj_attr_store+0x10/0x10 [ 73.689455][ T3510] sysfs_kf_write+0x13e/0x160 [ 73.689473][ T3510] kernfs_fop_write_iter+0x2fb/0x4d0 [ 73.689488][ T3510] ? __cfi_sysfs_kf_write+0x10/0x10 [ 73.689581][ T3510] vfs_write+0x694/0xe80 [ 73.689601][ T3510] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 73.689624][ T3510] ? __cfi_vfs_write+0x10/0x10 [ 73.689642][ T3510] ? __cfi_mutex_lock+0x10/0x10 [ 73.689659][ T3510] ksys_write+0x141/0x250 [ 73.689676][ T3510] ? xfd_validate_state+0x68/0x150 [ 73.689694][ T3510] ? __cfi_ksys_write+0x10/0x10 [ 73.689712][ T3510] ? __kasan_check_write+0x18/0x20 [ 73.689730][ T3510] ? fpregs_restore_userregs+0x11d/0x260 [ 73.689753][ T3510] __x64_sys_write+0x7f/0x90 [ 73.689766][ T3510] x64_sys_call+0x271c/0x2ee0 [ 73.689784][ T3510] do_syscall_64+0x58/0xf0 [ 73.689803][ T3510] ? clear_bhb_loop+0x35/0x90 [ 73.689827][ T3510] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.689849][ T3510] RIP: 0033:0x7f1c31f8e929 [ 73.689879][ T3510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.689894][ T3510] RSP: 002b:00007f1c32d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.689913][ T3510] RAX: ffffffffffffffda RBX: 00007f1c321b5fa0 RCX: 00007f1c31f8e929 [ 73.689926][ T3510] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 0000000000000004 [ 73.689938][ T3510] RBP: 00007f1c32010b39 R08: 0000000000000000 R09: 0000000000000000 [ 73.689949][ T3510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.689960][ T3510] R13: 0000000000000000 R14: 00007f1c321b5fa0 R15: 00007ffe0126e718 [ 73.689974][ T3510] [ 73.690068][ T3510] Mem-Info: [ 73.764354][ T3518] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 73.773735][ T3510] active_anon:20046 inactive_anon:0 isolated_anon:0 [ 73.773735][ T3510] active_file:20559 inactive_file:2202 isolated_file:0 [ 73.773735][ T3510] unevictable:0 dirty:45 writeback:0 [ 73.773735][ T3510] slab_reclaimable:5878 slab_unreclaimable:70766 [ 73.773735][ T3510] mapped:32825 shmem:14464 pagetables:771 [ 73.773735][ T3510] sec_pagetables:0 bounce:0 [ 73.773735][ T3510] kernel_misc_reclaimable:0 [ 73.773735][ T3510] free:1507919 free_pcp:3916 free_cma:0 [ 73.793693][ T3518] SELinux: failed to load policy [ 73.796720][ T3510] Node 0 active_anon:82984kB inactive_anon:0kB active_file:84936kB inactive_file:8808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133900kB dirty:180kB writeback:0kB shmem:60656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4384kB pagetables:3084kB sec_pagetables:0kB all_unreclaimable? no [ 74.134595][ T3510] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 74.168148][ T3510] lowmem_reserve[]: 0 3921 3921 [ 74.173137][ T3510] Normal free:3099568kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22752kB inactive_anon:0kB active_file:93464kB inactive_file:8808kB unevictable:0kB writepending:180kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:29004kB local_pcp:16224kB free_cma:0kB [ 74.206716][ T3510] lowmem_reserve[]: 0 0 0 [ 74.211242][ T3510] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 74.227456][ T3510] Normal: 310*4kB (UME) 355*8kB (UME) 531*16kB (UME) 468*32kB (UME) 200*64kB (UME) 23*128kB (UME) 10*256kB (ME) 9*512kB (ME) 8*1024kB (UM) 5*2048kB (UM) 740*4096kB (M) = 3099936kB [ 74.245798][ T3510] 23922 total pagecache pages [ 74.250571][ T3510] 0 pages in swap cache [ 74.254739][ T3510] Free swap = 124996kB [ 74.259314][ T3510] Total swap = 124996kB [ 74.263685][ T3510] 2097051 pages RAM [ 74.267511][ T3510] 0 pages HighMem/MovableOnly [ 74.272317][ T3510] 351520 pages reserved [ 74.276558][ T3510] 0 pages cma reserved [ 74.282697][ T3510] Memory allocations: [ 74.287787][ T3510] 0 B 0 init/main.c:1370 func:do_initcalls [ 74.296113][ T3510] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 74.315402][ T3510] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 74.323239][ T3510] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 74.331316][ T3510] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 74.339371][ T3510] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 74.348472][ T3510] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 74.359221][ T3510] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 74.367731][ T3510] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 74.381118][ T3510] 0 B 0 init/initramfs.c:101 func:find_link [ 74.436534][ T3532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.441176][ T3534] rust_binder: Write failure EINVAL in pid:739 [ 74.450483][ T9] hid-generic 0000:0000:0000.0009: item fetching failed at offset 0/1 [ 74.465073][ T9] hid-generic 0000:0000:0000.0009: probe with driver hid-generic failed with error -22 [ 74.465162][ T3537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.477255][ T3538] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 74.483927][ T3537] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 74.492399][ T3537] rust_binder: Write failure EFAULT in pid:110 [ 74.501062][ T3537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.559296][ T3537] rust_binder: Write failure EINVAL in pid:110 [ 74.603005][ T3544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.609996][ T3544] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.873675][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 74.873859][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.964641][ T3556] binder: Unknown parameter 'uid' [ 74.987866][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 74.987884][ T36] audit: type=1326 audit(1750393491.170:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3558 comm="syz.4.953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64cb8e929 code=0x0 [ 75.039092][ T3560] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 75.039485][ T3561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.234797][ T3569] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 75.304291][ T3574] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 75.483710][ T3584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 75.495996][ T3584] rust_binder: Read failure Err(EFAULT) in pid:59 [ 75.561516][ T3588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:61 [ 75.570331][ T3590] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 89) [ 75.571226][ T3591] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 75.585405][ T3590] rust_binder: Error while translating object. [ 75.605612][ T3590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.623280][ T3590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 75.793900][ T3608] binder: Unknown parameter 'fscontext?}' [ 75.823472][ T3606] binder: Unknown parameter '0x70203a2020202020' [ 75.826325][ T3610] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.832286][ T3608] SELinux: policydb version -1271244966 does not match my version range 15-33 [ 75.858125][ T36] audit: type=1400 audit(1750393492.040:517): avc: denied { append } for pid=3609 comm="syz.4.966" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 75.860245][ T3610] rust_binder: Error in use_page_slow: ESRCH [ 75.883880][ T3608] SELinux: failed to load policy [ 75.895559][ T3610] rust_binder: use_range failure ESRCH [ 75.895582][ T3610] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 75.909363][ T3610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 75.909397][ T3610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:70 [ 75.965631][ T3608] rust_binder: Error while translating object. [ 75.965675][ T3608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.975315][ T3618] binder: Binderfs stats mode cannot be changed during a remount [ 75.978439][ T3608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 75.999267][ T3621] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.022632][ T3621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 76.069627][ T3623] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 76.108144][ T36] audit: type=1400 audit(1750393492.290:518): avc: denied { execute } for pid=3624 comm="syz.1.971" path="/dev/snd/timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 76.148430][ T36] audit: type=1400 audit(1750393492.310:519): avc: granted { setsecparam } for pid=3624 comm="syz.1.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 76.239459][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.245645][ T3635] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 76.254152][ T3637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.272049][ T3639] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.272072][ T3639] rust_binder: Read failure Err(EFAULT) in pid:133 [ 76.294576][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.333014][ T3644] SELinux: policydb magic number 0x993c0d8c does not match expected magic number 0xf97cff8c [ 76.355273][ T3644] SELinux: failed to load policy [ 76.479284][ T3659] binder: Bad value for 'max' [ 76.489127][ T36] audit: type=1326 audit(1750393492.670:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.0.982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c31f8e929 code=0x0 [ 76.525762][ T3660] rust_binder: got new transaction with bad transaction stack [ 76.525783][ T3660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 76.650291][ T3664] rust_binder: Write failure EFAULT in pid:87 [ 76.796889][ T3671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.803561][ T3671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.828337][ T3679] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 76.835148][ T3679] rust_binder: Read failure Err(EFAULT) in pid:99 [ 76.848995][ T36] audit: type=1400 audit(1750393493.030:521): avc: denied { setattr } for pid=3680 comm="syz.1.989" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 76.874366][ T3681] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 76.883809][ T3681] rust_binder: Error while translating object. [ 76.904703][ T3681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.910887][ T3681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 76.986604][ T36] audit: type=1400 audit(1750393493.170:522): avc: denied { setattr } for pid=3687 comm="syz.4.992" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 77.198180][ T3703] rust_binder: Error in use_page_slow: ESRCH [ 77.198203][ T3703] rust_binder: use_range failure ESRCH [ 77.204486][ T3703] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 77.210443][ T3703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.218723][ T3703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:111 [ 77.245127][ T36] audit: type=1400 audit(1750393493.430:523): avc: denied { execute } for pid=3704 comm="syz.2.997" path="/237/cpu.stat" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.354521][ T3721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.356460][ T36] audit: type=1400 audit(1750393493.540:524): avc: denied { map } for pid=3714 comm="syz.1.1001" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.414486][ T36] audit: type=1400 audit(1750393493.540:525): avc: denied { execute } for pid=3714 comm="syz.1.1001" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 78.880761][ T4085] syz.1.1133: attempt to access beyond end of device [ 78.880761][ T4085] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.236703][ T4149] can0: slcan on ptm0. [ 79.335250][ T4148] can0 (unregistered): slcan off ptm0. [ 79.420501][ T4169] ptm ptm35: ldisc open failed (-12), clearing slot 35 [ 79.836141][ T4256] syz.4.1194: attempt to access beyond end of device [ 79.836141][ T4256] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.994643][ T36] kauditd_printk_skb: 4912 callbacks suppressed [ 79.994714][ T36] audit: type=1400 audit(1750393496.180:5417): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.026001][ T36] audit: type=1400 audit(1750393496.180:5418): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.048303][ T36] audit: type=1400 audit(1750393496.180:5419): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.085673][ T149] audit: audit_backlog=66 > audit_backlog_limit=64 [ 80.091314][ T3036] audit: audit_backlog=66 > audit_backlog_limit=64 [ 80.099046][ T3036] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 80.103688][ T149] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 80.107906][ T3036] audit: backlog limit exceeded [ 80.114689][ T36] audit: type=1400 audit(1750393496.180:5420): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 80.128618][ T3297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.969073][ T3320] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.011281][ T36] kauditd_printk_skb: 17651 callbacks suppressed [ 85.011301][ T36] audit: type=1400 audit(1750393501.190:21137): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.039478][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.051343][ T149] audit: audit_lost=655 audit_rate_limit=0 audit_backlog_limit=64 [ 85.060959][ T4837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.067696][ T149] audit: backlog limit exceeded [ 85.073143][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.081072][ T4837] audit: audit_lost=656 audit_rate_limit=0 audit_backlog_limit=64 [ 85.089833][ T36] audit: type=1400 audit(1750393501.190:21138): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 85.100009][ T149] audit: audit_lost=657 audit_rate_limit=0 audit_backlog_limit=64 [ 85.119716][ T4837] audit: backlog limit exceeded [ 85.993661][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.993672][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 86.435320][ T4931] can0: slcan on ptm0. [ 86.550206][ T4930] can0 (unregistered): slcan off ptm0. [ 88.055292][ T5040] binfmt_misc: register: failed to install interpreter file ./cgroup [ 89.267640][ T5078] syzkaller0: tun_chr_ioctl cmd 21731 [ 89.561066][ T5096] rust_binder: Write failure EFAULT in pid:456 [ 90.014293][ T36] kauditd_printk_skb: 4926 callbacks suppressed [ 90.014310][ T36] audit: type=1400 audit(1750393506.200:26037): avc: denied { read } for pid=5113 comm="syz.2.1499" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.078747][ T36] audit: type=1400 audit(1750393506.200:26038): avc: denied { read open } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.150781][ T36] audit: type=1400 audit(1750393506.200:26039): avc: denied { ioctl } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.210663][ T36] audit: type=1400 audit(1750393506.210:26040): avc: denied { write } for pid=5113 comm="syz.2.1499" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.235062][ T36] audit: type=1400 audit(1750393506.210:26041): avc: denied { write open } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.305313][ T36] audit: type=1400 audit(1750393506.210:26042): avc: denied { ioctl } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.365956][ T36] audit: type=1400 audit(1750393506.230:26043): avc: denied { ioctl } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.433651][ T36] audit: type=1400 audit(1750393506.230:26044): avc: denied { read } for pid=5113 comm="syz.2.1499" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.505052][ T36] audit: type=1400 audit(1750393506.230:26045): avc: denied { read open } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.563681][ T36] audit: type=1400 audit(1750393506.250:26046): avc: denied { ioctl } for pid=5113 comm="syz.2.1499" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 90.703952][ T5133] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 90.733871][ T5134] binder: Unknown parameter 'fscontext?}' [ 90.873585][ T5138] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.910851][ T5138] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 90.957848][ T5138] rust_binder: Write failure EINVAL in pid:441 [ 91.214159][ T5155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.220390][ T5155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 91.366506][ T5166] binder: Unknown parameter 'dont_hash' [ 91.460120][ T5171] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.536453][ T5174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 91.565470][ T5170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.886539][ T5181] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 91.913726][ T5181] SELinux: failed to load policy [ 92.069007][ T5189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.407668][ T5203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.508729][ T5208] input: syz1 as /devices/virtual/input/input60 [ 92.594815][ T5208] rust_binder: Error while translating object. [ 92.594845][ T5208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 92.601043][ T5208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:457 [ 92.684050][ T5215] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.735983][ T5215] binder: Unknown parameter 'dont_measure' [ 92.754502][ T5213] rust_binder: Write failure EFAULT in pid:495 [ 92.837106][ T5217] binder: Bad value for 'max' [ 93.071178][ T5220] rust_binder: Write failure EINVAL in pid:1113 [ 93.380696][ T5232] rust_binder: Write failure EFAULT in pid:461 [ 93.431062][ T5233] rust_binder: Failed to allocate buffer. len:18446744073709551568, is_oneway:false [ 93.453679][ T5233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 93.484207][ T5233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1122 [ 93.531868][ T5238] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.621173][ T5238] rust_binder: Read failure Err(EFAULT) in pid:463 [ 93.673103][ T5247] dvmrp0: tun_chr_ioctl cmd 1074025677 [ 93.723698][ T5247] dvmrp0: linktype set to 776 [ 93.725589][ T5248] input: syz1 as /devices/virtual/input/input61 [ 93.773579][ T5251] input: syz1 as /devices/virtual/input/input62 [ 94.271338][ T5270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.326704][ T5275] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.335590][ T5275] rust_binder: Error in use_page_slow: ESRCH [ 94.367486][ T5275] rust_binder: use_range failure ESRCH [ 94.377582][ T5275] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 94.383182][ T5275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 94.431961][ T5275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:513 [ 94.603369][ T5280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 94.924405][ T5290] syz.4.1553: attempt to access beyond end of device [ 94.924405][ T5290] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.028615][ T36] kauditd_printk_skb: 670 callbacks suppressed [ 95.028631][ T36] audit: type=1400 audit(1750393511.210:26717): avc: denied { read write } for pid=3212 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.064647][ T36] audit: type=1400 audit(1750393511.250:26718): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.109377][ T5300] binder: Unknown parameter 'Û' [ 95.126817][ T36] audit: type=1400 audit(1750393511.280:26719): avc: denied { read write open } for pid=3297 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.183654][ T36] audit: type=1400 audit(1750393511.280:26720): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.259008][ T5309] rust_binder: Write failure EINVAL in pid:1144 [ 95.269515][ T5308] random: crng reseeded on system resumption [ 95.281864][ T36] audit: type=1400 audit(1750393511.280:26721): avc: denied { read write open } for pid=3212 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.334500][ T36] audit: type=1400 audit(1750393511.280:26722): avc: denied { ioctl } for pid=3212 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.365493][ T5308] Restarting kernel threads ... done. [ 95.384915][ T5308] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 95.392891][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.394864][ T5315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.408551][ T36] audit: type=1400 audit(1750393511.290:26723): avc: denied { mounton } for pid=5299 comm="syz.2.1555" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.413986][ T5317] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.432704][ T5308] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 95.438939][ T5315] rust_binder: Write failure EINVAL in pid:491 [ 95.449943][ T5308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:525 [ 95.468051][ T5315] rust_binder: Write failure EINVAL in pid:491 [ 95.468337][ T5315] rust_binder: Write failure EINVAL in pid:491 [ 95.494729][ T5315] rust_binder: Write failure EINVAL in pid:491 [ 95.570501][ T5323] SELinux: truncated policydb string identifier [ 95.603364][ T5323] SELinux: failed to load policy [ 95.787208][ T5339] binder: Unknown parameter 'context' [ 96.371568][ T5354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1161 [ 96.661753][ T5362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 96.875301][ T5374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 97.172600][ T5387] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.145569][ T5406] rust_binder: Error in use_page_slow: ESRCH [ 98.145587][ T5406] rust_binder: use_range failure ESRCH [ 98.151709][ T5406] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 98.152839][ T5404] rust_binder: Error in use_page_slow: ESRCH [ 98.202635][ T5406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.234596][ T5406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1196 [ 98.273697][ T5404] rust_binder: use_range failure ESRCH [ 98.293714][ T5404] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 98.299213][ T5404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.323679][ T5404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1196 [ 98.466730][ T5412] rust_binder: Write failure EFAULT in pid:557 [ 98.675505][ T5416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.703957][ T5418] rust_binder: Write failure EFAULT in pid:1204 [ 99.569683][ T5447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 99.577426][ T5449] PM: Enabling pm_trace changes system date and time during resume. [ 99.577426][ T5449] PM: Correct system time has to be restored manually after resume. [ 99.613287][ T5447] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 99.617284][ T5447] rust_binder: Got transaction with invalid offset. [ 99.633505][ T5447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.647317][ T5447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:580 [ 99.657858][ T5449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.668258][ T5449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:504 [ 100.090051][ T36] kauditd_printk_skb: 709 callbacks suppressed [ 100.090067][ T36] audit: type=1400 audit(1750393516.270:27406): avc: denied { read write } for pid=292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.190425][ T36] audit: type=1400 audit(1750393516.320:27407): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.253687][ T36] audit: type=1400 audit(1750393516.320:27408): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.327855][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.328087][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.346688][ T36] audit: type=1400 audit(1750393516.350:27409): avc: denied { read write } for pid=5460 comm="syz.4.1607" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.383976][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.384211][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 100.403764][ T36] audit: type=1400 audit(1750393516.350:27410): avc: denied { read write open } for pid=5460 comm="syz.4.1607" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.478999][ T36] audit: type=1400 audit(1750393516.350:27411): avc: denied { ioctl } for pid=5460 comm="syz.4.1607" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.532286][ T5473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 100.532316][ T5473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1221 [ 100.548029][ T36] audit: type=1400 audit(1750393516.370:27412): avc: denied { read } for pid=5462 comm="syz.2.1608" name="binder0" dev="binder" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.555724][ T5475] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.579910][ T36] audit: type=1400 audit(1750393516.370:27413): avc: denied { read open } for pid=5462 comm="syz.2.1608" path="/dev/binderfs/binder0" dev="binder" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.612084][ T36] audit: type=1400 audit(1750393516.370:27414): avc: denied { ioctl } for pid=5462 comm="syz.2.1608" path="/dev/binderfs/binder0" dev="binder" ino=241 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 100.887512][ T5484] input: syz0 as /devices/virtual/input/input64 [ 101.086702][ T5486] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 101.264526][ T5493] input: syz0 as /devices/virtual/input/input65 [ 101.354036][ T5495] SELinux: ebitmap: truncated map [ 101.359180][ T5495] SELinux: failed to load policy [ 101.624451][ T5507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1241 [ 101.632893][ T5510] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 101.862836][ T5514] rust_binder: Write failure EINVAL in pid:1243 [ 102.592231][ T3320] bridge_slave_1: left allmulticast mode [ 102.610666][ T5528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:609 [ 102.614453][ T3320] bridge_slave_1: left promiscuous mode [ 102.643711][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.662361][ T3320] bridge_slave_0: left allmulticast mode [ 102.683646][ T3320] bridge_slave_0: left promiscuous mode [ 102.689310][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.827786][ T3320] veth1_macvtap: left promiscuous mode [ 102.839704][ T5538] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 102.839728][ T5538] rust_binder: Error while translating object. [ 102.853711][ T3320] veth0_vlan: left promiscuous mode [ 102.873892][ T5538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 102.874059][ T5538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1257 [ 102.952580][ T5542] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 102.983003][ T5542] rust_binder: Error while translating object. [ 103.012467][ T5542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.032470][ T5542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517 [ 103.105118][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.148475][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.181407][ T5534] bridge_slave_0: entered allmulticast mode [ 103.208352][ T5534] bridge_slave_0: entered promiscuous mode [ 103.245448][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.272816][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.313682][ T5534] bridge_slave_1: entered allmulticast mode [ 103.320118][ T5534] bridge_slave_1: entered promiscuous mode [ 103.401488][ T5559] rust_binder: Error while translating object. [ 103.401519][ T5559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 103.407241][ T5557] rust_binder: Write failure EFAULT in pid:523 [ 103.426709][ T5559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:616 [ 103.464383][ T5563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1262 [ 103.792308][ T5577] binder: Unknown parameter 'defcontext01777777777777777777777' [ 103.843366][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.850915][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.884135][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.891224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state Stopping sshd: [ 104.086241][ T5595] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 104.086278][ T5595] rust_binder: Read failure Err(EFAULT) in pid:629 [ 104.105008][ T5593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1270 [ 104.116189][ T5595] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' stopped /usr/sbin/sshd (pid 201) OK [ 104.185133][ T5593] rust_binder: Read failure Err(EFAULT) in pid:1270 [ 104.274617][ T5534] veth0_vlan: entered promiscuous mode Stopping crond: [ 104.359939][ T5603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.417519][ T5534] veth1_macvtap: entered promiscuous mode stopped /usr/sbin/crond (pid 194) OK [ 104.430892][ T5609] rust_binder: Write failure EFAULT in pid:535 [ 104.551072][ T5615] binder: Unknown parameter '' Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 104.574282][ T5613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.767547][ T5625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 104.858970][ T5625] SELinux: failed to load policy Stopping network: [ 104.895430][ T5625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 105.100156][ T36] kauditd_printk_skb: 862 callbacks suppressed [ 105.100187][ T36] audit: type=1400 audit(1750393521.280:28275): avc: denied { read write } for pid=5534 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.191661][ T5655] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.199709][ T36] audit: type=1400 audit(1750393521.280:28276): avc: denied { read write open } for pid=5534 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.239151][ T5653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.255958][ T5655] audit: audit_lost=678 audit_rate_limit=0 audit_backlog_limit=64 [ 105.275770][ T5653] audit: audit_lost=679 audit_rate_limit=0 audit_backlog_limit=64 [ 105.277511][ T5661] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.291874][ T5663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.308110][ T5653] audit: backlog limit exceeded [ 105.313194][ T5653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 105.575654][ T5632] cgroup: fork rejected by pids controller in /syz4 [ 105.736957][ T5698] kvm: kvm [5697]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xa1 OK Stopping iptables: OK Stopping system message bus: [ 105.954916][ T5708] rust_binder: Write failure EFAULT in pid:1286 [ 106.146952][ T5715] rust_binder: Error while translating object. [ 106.171283][ T5715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 106.171324][ T5715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:554 [ 106.254919][ T5720] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 106.587540][ T5733] random: crng reseeded on system resumption [ 106.850134][ T5740] rust_binder: Failure when writing BR_NOOP at beginning of buffer. done [ 106.850162][ T5740] rust_binder: Read failure Err(EFAULT) in pid:22 [ 107.234870][ T5765] binder: Unknown parameter 'non' [ 107.279654][ T5765] binder: Unknown parameter 'uid>00000000000000000000' [ 107.293882][ T5771] binder: Unknown parameter 'uid>00000000000000000000' [ 107.415337][ T5781] rust_binder: Write failure EFAULT in pid:1310 [ 107.520634][ T5783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:562 [ 107.559140][ T5788] binder: Unknown parameter 'obj_role' [ 107.625103][ T5790] binder: Unknown parameter 'aÿÿÿÿ' [ 107.951250][ T5802] binder: Bad value for 'max' [ 108.096970][ T5810] SELinux: security_context_str_to_sid () failed with errno=-22 Stopping klogd: [ 108.234352][ T5831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 108.234383][ T5831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:690 [ 108.256401][ T5831] rust_binder: Failure when writing BR_NOOP at beginning of buffer. OK Stopping acpid: [ 108.268757][ T5831] rust_binder: Read failure Err(EFAULT) in pid:690 [ 108.582033][ T5869] rust_binder: Error in use_page_slow: ESRCH [ 108.582057][ T5869] rust_binder: use_range failure ESRCH [ 108.596462][ T5864] input: syz0 as /devices/virtual/input/input68 [ 108.609317][ T5869] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 108.609346][ T5869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 108.617855][ T5869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:573 [ 108.632040][ T5876] rust_binder: Write failure EINVAL in pid:696 [ 108.908686][ T5895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.920087][ T5895] rust_binder: Error in use_page_slow: ESRCH [ 108.927375][ T5895] rust_binder: use_range failure ESRCH [ 108.933419][ T5895] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 108.940567][ T5895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 108.948637][ T5895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:702 [ 109.056154][ T5902] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.096034][ T5908] rust_binder: Error while translating object. [ 109.102649][ T5908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.109188][ T5908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:586 [ 109.402277][ T5922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.511528][ T5938] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.525959][ T5935] kvm: Disabled LAPIC found during irq injection OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 109.714744][ T5958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:606 [ 109.751417][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 109.762795][ T5970] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.775146][ T5970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.781771][ T5970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718 [ 109.803925][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.855375][ T5973] rust_binder: BINDER_SET_CONTEXT_MGR already set umount: can't remount debugfs read-only [ 109.949733][ T5979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:720 [ 110.004206][ T5983] binder: Bad value for 'max' [ 110.027682][ T5983] binder: Bad value for 'stats' [ 110.081041][ T5985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. umount: sysfs busy - remounted r[ 110.094685][ T5986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. ead-only [ 110.104673][ T36] kauditd_printk_skb: 1096 callbacks suppressed [ 110.104689][ T36] audit: type=1400 audit(1750393526.290:29363): avc: denied { ioctl } for pid=5984 comm="syz.5.1742" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.1.128 closed by remote host. Sent SIGTERM to all processes [ 110.182978][ T36] audit: type=1400 audit(1750393526.290:29364): avc: denied { read write } for pid=5984 comm="syz.5.1742" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 110.212928][ T36] audit: type=1400 audit(1750393526.290:29365): avc: denied { read write open } for pid=5984 comm="syz.5.1742" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 110.279651][ T36] audit: type=1400 audit(1750393526.290:29366): avc: denied { read } for pid=5984 comm="syz.5.1742" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.302508][ T36] audit: type=1400 audit(1750393526.290:29367): avc: denied { read open } for pid=5984 comm="syz.5.1742" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.333711][ T36] audit: type=1400 audit(1750393526.290:29368): avc: denied { ioctl } for pid=5984 comm="syz.5.1742" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.358538][ T36] audit: type=1400 audit(1750393526.290:29369): avc: denied { map } for pid=5984 comm="syz.5.1742" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.381803][ T36] audit: type=1400 audit(1750393526.290:29370): avc: denied { read } for pid=5984 comm="syz.5.1742" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.405111][ T36] audit: type=1400 audit(1750393526.330:29371): avc: denied { read } for pid=5988 comm="syz.1.1743" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.427942][ T36] audit: type=1400 audit(1750393526.330:29372): avc: denied { read open } for pid=5988 comm="syz.1.1743" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.464758][ T13] bridge_slave_1: left allmulticast mode [ 110.470533][ T13] bridge_slave_1: left promiscuous mode [ 110.476247][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.485252][ T13] bridge_slave_0: left allmulticast mode [ 110.490896][ T13] bridge_slave_0: left promiscuous mode [ 110.496537][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.504527][ T13] bridge_slave_1: left allmulticast mode [ 110.510410][ T13] bridge_slave_1: left promiscuous mode [ 110.516197][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.523919][ T13] bridge_slave_0: left allmulticast mode [ 110.529567][ T13] bridge_slave_0: left promiscuous mode [ 110.535213][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.719135][ T13] veth1_macvtap: left promiscuous mode [ 110.724730][ T13] veth0_vlan: left promiscuous mode [ 110.730353][ T13] veth1_macvtap: left promiscuous mode [ 110.735943][ T13] veth0_vlan: left promiscuous mode [ 111.175949][ T13] bridge_slave_1: left allmulticast mode [ 111.181620][ T13] bridge_slave_1: left promiscuous mode [ 111.187292][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.194699][ T13] bridge_slave_0: left allmulticast mode [ 111.200347][ T13] bridge_slave_0: left promiscuous mode [ 111.206178][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.213760][ T13] bridge_slave_1: left allmulticast mode [ 111.219379][ T13] bridge_slave_1: left promiscuous mode [ 111.225002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.232496][ T13] bridge_slave_0: left allmulticast mode [ 111.238484][ T13] bridge_slave_0: left promiscuous mode [ 111.244226][ T13] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 111.406923][ T13] veth1_macvtap: left promiscuous mode [ 111.412566][ T13] veth0_vlan: left promiscuous mode [ 111.418412][ T13] veth1_macvtap: left promiscuous mode [ 111.424095][ T13] veth0_vlan: left promiscuous mode [ 112.282171][ T5991] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 112.288990][ T5991] ACPI: PM: Preparing to enter system sleep state S5 [ 112.295928][ T5991] kvm: exiting hardware virtualization [ 112.301509][ T5991] reboot: Power down serialport: VM disconnected.