last executing test programs: 21.130160861s ago: executing program 0 (id=1464): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r1, 0x0, 0x0) (async) read(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r5]) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r5]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r5]) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r5]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f0000000000)={0x8d, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 21.126652641s ago: executing program 0 (id=1465): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2b) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000900)={0x6, 0x3f60b569, 0x3ff, 0x200, 0x5, "cf17bc00", 0x5}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x2, 0x2000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) syz_clone3(&(0x7f0000000580)={0x280110500, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0d07a2123b1ffffc2b5877ed2f506d04eb3c4c94cca1ae106"}, 0x38) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1b) read(r0, &(0x7f0000000000)=""/188, 0xbc) 21.026210093s ago: executing program 0 (id=1468): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_int(r2, &(0x7f0000000240), 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0xff0a, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x3, 0x0, 0x98, &(0x7f00000002c0)={0x10000, 0x4, 0x6}}) 21.024031362s ago: executing program 0 (id=1469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) (async, rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000580)) (rerun: 32) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000540)={{0x0, 0x0, 0x80}}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x91, 0x0, 0x3, 0x85, 0x2, 0x1, 0x2, 0x6, 0x4, 0x7, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x59, 0x1, 0x4, 0x7, 0x81, 0x7, 0x5, 0x6, 0x3, 0xffffffffffffffff}, {0x3, 0x5, 0x81, 0xa, 0x6, 0x46, 0x88, 0x4f, 0xc, 0x98, 0xf4, 0x1, 0x8}], 0x3}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x100000001) (async, rerun: 64) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) (rerun: 64) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 20.966618103s ago: executing program 0 (id=1471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000100)=ANY=[@ANYBLOB="00a0"]) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x140002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0xc) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004140)={0x2020}, 0x2020) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2020) mmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x10010, r3, 0xeab2d000) read(r6, &(0x7f00000004c0)=""/92, 0x1001) 20.880364184s ago: executing program 0 (id=1475): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) mount$binderfs(&(0x7f0000000080), &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000140), 0x1084, &(0x7f00000001c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c90746174733d676c6f62616c2c73746174733d676c6f62616c9e8e2c6f626ab0bce1ac3f2e4fa55fe2642bb2ee9c0b2a018a6ca110ae6d6d6f72792e6576656e7473002c00"]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000500)}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x516) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.074557533s ago: executing program 1 (id=1509): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x101000, 0x82) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) 9.068573713s ago: executing program 2 (id=1510): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161040, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) 9.068088543s ago: executing program 3 (id=1511): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xaa03, 0xf5) mmap(&(0x7f000051c000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r0, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x81007702, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x921, 0x0, &(0x7f00000014c0)="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"}) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) (async, rerun: 64) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0xb9582000) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r4, 0x0) 7.499584357s ago: executing program 1 (id=1512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x43cb, 0xad5, &(0x7f00000002c0), &(0x7f0000000340)="b7eb6c", 0x0, 0x3}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1dd, 0x0, 0x390}]}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 7.496553487s ago: executing program 2 (id=1513): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4008af00, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r2, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 7.496013067s ago: executing program 3 (id=1514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x68, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/235, 0xeb, 0x2, 0x25}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/36, 0x24, 0x1, 0x36}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/134, 0x86, 0x0, 0x2a}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}, @clear_death, @exit_looper, @register_looper, @enter_looper], 0x7f, 0x0, &(0x7f0000000500)="1d3a7e4162760a9b4b176cf11953e43c7477f17a7b1e13f1dfe506ef722efdb66643ba885056260e801fc872c274cb1366944af96bed3e7f927bff00881d461875ba1d2638b9bb5e24c4f961d0ab0ed2eb30354c5b5dfe8eda47c8c7c9a4e316edea9046d2720d6c309574735490ab0db164c51b9f8ca8975b8c90d457803d"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x482, 0x0, 0x7ff}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 5.782909603s ago: executing program 1 (id=1515): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async) 5.738533724s ago: executing program 2 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x98, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x0, 0x1b}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0x10b, 0x1}, @fda={0x66646185, 0x8, 0x0, 0x1c}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 5.737781633s ago: executing program 3 (id=1517): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) write(r0, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f5f7521480ed9bb21e3aad8044a0229fe79b5ebce0ec53ff51b7bb71c7ef63354a141a1175a5d73838de92212b50415851acc8cffa6d14d4982b957e8021f5eb8afd1a57f8fd33be3a7829ac14e2d19e069c73f6ff392d38c0174e2891c6c0ae8df5338d8", 0x96) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002a000040000000002400000000000000d7565cd440626c9435dedea6be6e323668f247e42b6148df53b78831323a2ae0"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x2, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xeffffffffffffffc, 0xb, 0x0, 0x8000000000000003, 0x0, 0x2000000000009, 0x3, 0x1, 0x8000000000000000, 0xff], 0x1000, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x240000, 0x0) ioctl$TIOCEXCL(r6, 0x540c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x404202, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 3.96860685s ago: executing program 1 (id=1518): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x12000, 0x80) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000001c0)=':\x00') mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8880, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xd000, 0x22dff8f9, 0x80, 0x8, 0x0, [{0x7, 0x5, 0x9, '\x00', 0xff}, {0xe7, 0x9, 0x40, '\x00', 0x1}, {0x80, 0x4, 0xd, '\x00', 0x7}, {0x8, 0x6, 0x8}, {0x4, 0xee, 0x2, '\x00', 0x8}, {0xd3, 0x6}, {0xa5, 0xd8, 0x2, '\x00', 0x7}, {0xc, 0xf8, 0xf8, '\x00', 0x7}, {0xd, 0x8, 0x4, '\x00', 0x9}, {0x4, 0x6, 0x80, '\x00', 0x4}, {0x3, 0x1, 0x10}, {0x9, 0x58, 0x77, '\x00', 0x4}, {0x80, 0x9, 0x5, '\x00', 0x2}, {0x2, 0x0, 0x7f, '\x00', 0x2}, {0x9, 0x9, 0xfd, '\x00', 0x2}, {0xe8, 0x4, 0x5, '\x00', 0x3}, {0x3, 0x0, 0x7, '\x00', 0xf2}, {0x6, 0x0, 0x6, '\x00', 0xe}, {0x6, 0x0, 0x7, '\x00', 0x8}, {0x7, 0x59, 0x1, '\x00', 0xe}, {0x3, 0xf2, 0x3, '\x00', 0x7}, {0x4, 0x7, 0x7, '\x00', 0x1}, {0x0, 0x8, 0x9, '\x00', 0x49}, {0x5, 0x4, 0x9, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x8137, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f00000000c0)={0xb, 0x6a}) 3.96514111s ago: executing program 2 (id=1519): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x10200, 0x2c0, 0x0, &(0x7f0000000680)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x1, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x8, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x1, 0x6, 0x7, 0x5, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0x5, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0xb, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x4, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x4, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0x6, 0x10, 0x8, 0x8, 0x10, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffb, 0xb692, 0x3ffc00000, 0x8, 0x3]}) (async) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x5, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x2, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x4, 0x7}], 0xfbffffff}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0xfffffffffffffffd, 0x8000000043, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0xffffffffffffffff, 0x800000000000], 0x1, 0x296}) (async) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000600)={[{0x9570000, 0x3, 0x0, 0x0, 0x5, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0x3, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x5, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r3, 0x5a8e3000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f00000001c0)) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @flat=@weak_binder={0x77622a85, 0x91ba0ee69f3969e2, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3.96393306s ago: executing program 3 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {}]}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x200}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xa0, 0x0, &(0x7f0000001280)=[@dead_binder_done, @acquire={0x40046305, 0x2}, @enter_looper, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) 1.987859601s ago: executing program 1 (id=1521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000140)={0x32, 0x2, {0x5, @struct={0x80000000, 0x100}, 0x0, 0x1, 0x8000000000000001, 0x100000000000000, 0x3, 0x401, 0x2, @usage=0xfffffffffffffffc, 0xb4b, 0x6, [0x5, 0x8, 0xd, 0x1, 0x3, 0x7fffffffffffffff]}, {0x0, @struct={0x7, 0x5}, 0x0, 0x2, 0x5, 0x0, 0xba, 0x1, 0x0, @usage=0x1, 0x4, 0x6, [0x80000000, 0x5, 0x100000001, 0x66, 0xf, 0x4]}, {0x800, @usage, 0x0, 0x101, 0x7, 0x76c0, 0x0, 0x3, 0x8, @struct={0x2, 0x1ff}, 0x1, 0x800, [0x1ff, 0x8001, 0x7ff, 0xfff, 0x100000001, 0x5]}, {0x3, 0xb1d6, 0x2c68}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r2, 0x40047440, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 1.985927861s ago: executing program 2 (id=1522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000001180)={0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x3}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000000)=""/209) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r3, 0x81c7a000) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000100000077ce08000003000000f9ffffff020000000000000007000000ffffff7fd6070000963300000600000000000000"]) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000180)) 1.985431741s ago: executing program 3 (id=1523): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006140)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="9a29cd1fb4ccd347afc934b1ef3922299c16637f5766dd4f2e5497f28b98b220ceaa8df22e1f4e2e83f31d76ecb812966cb2cc5590b2dbd9496a895f52df578a2b2897f00914e3bfa2b9ea55c39cd5b7"}) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xdf) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0}) 8.253911ms ago: executing program 1 (id=1524): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x204c0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r0, 0x4068aea3, &(0x7f0000000100)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000010000000000000006000000000000000500000080"], 0x119) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x400101, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x101b82, 0x5f) write$cgroup_int(r2, &(0x7f0000000280)=0x900000000001, 0x12) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x4010, r0, 0x38ae4000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, r1, 0x8afaa000) close(0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x404000, 0x8) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2014869, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) 4.76874ms ago: executing program 2 (id=1525): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'allow_other', 0x3a, '', 0x3a, './cgroup.cpu/cpuset.cpus', 0x3a, [0x46, 0x46]}, 0x45) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1526): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x661a80, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x680, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000140)) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000180)) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000001c0)) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{0x0, 0x7, 0x5, 0x100, 0x3, 0x4, 0x1, 0x4, 0x5, 0x322, 0x3, 0x3, 0x1ff, 0x5, 0x9}}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001240)={{r2}, "f41c15feaf8ef0b07a80e59843692889d49ab193c2ad699b11c0ecb37aaa8136bc1c2fbd4e1b180cac0f3580a414a75a719e8b24f6d4bfdb42189c0b334ddab121929e6a55268f0ea225e7f00781b279cb12d284ee1f642eca7b42c59bb3f4c428fc54be6ccd4a25cecca475ccf73add9e189102d3d6062f258f5dba8f12ff13d43108cb95d9d8b7d97391ad261067227615636da3859f23fd3a30757b173681ff2961c27e8f7c8b351a0bfab68d0fc173851661c20d6c584c327968264abfeda8d76a83870bde230f817aad03e4e71b92016744f8a297ed4928eb7f0befe08487a458d605efbdc127dda36cd243f9d12f04bc9976003bb5021bd2ef6e7b60bbe066cb454b2cb6da86a6a16b654cace6844849d80aade6b8f8e8e83529e35e9f030f9169f3bb2aa6c3216b3c320b5a8e581ad73ead24e7ba114e29a160a4e742114c4801352a98984d3e5b78f7504b1e081596927d04af954d4f4e75eec56e0db314d7ab87a0aaf850b67988c0d87f34bb95fc6243451b7b11356c3b434b84601a47f45d89f7d65e6aa1506d0811ef9370bfd2c6f747c7ccafd8a4dfec262a70974481ce078626ae0bf571a017759fc562188cd49a930033d763bfa55ccfe090a231d0accfab9067c2526abc77b2d03a99f9da98189fd3a5023f57d4c92e5caf2b2005ada6bfabe440c80eef7586d74655aaab428201165d7e417803dad3c3bcc50580c1812784a24a858389c205357c39128c53e08d9698fd8cf827877fd1a58fe85f4a15e00ef42b220a43dae4f480f79c4a7907431729e8ac211ad31a0564f4289954b9d7d3fa2fd8c78af5d16a5c78ad0535f9a277c847de290e0dcb7c403a1e1445216eb5291632e892de174f42a864a89a58f13cbbb93d69f332410f3b50eb534b7e5c52c78a46b51150eba6f5fea66bea3248d3197606ac84bae2c310260f2927ed87556af196c9ab609e9ff6826ac96fee6bb4f12a4dbb0d540b39c7c1b6d7f8a1e5b9ceff7bd88b9c96ac7ea83434a483d5dbb5f7200cf9ce76c6a46ba1c57072f156ac1994ed7de53150d3c48e8ea93345e2a91e713e8a07ab07d76fb76c2ad1fe8d4c788a3b2e90ea943641db6743cfed7fd1d4c4eeaad382f3dd53a396135fbfb0a519773afc0c6f9b63a7f72d57edacce581c16a21632bb687c254f734f69c4053e078b18f45dcdeb3469b0c10f54f58dd51601c83506568c4bc244f25161b07cfd6ee9498e5abab1008883f71ef30726ad12fe6711763db6535239ce9b558298ffdd257a9cff8ccf67562729007065166315b4e716b5372eb74247a7a015cae12058d27fa4d40600cc26bca2a72c9c1ca2b9400cb771ceac520b5a155110986305a7a3d67be6d33ff55dbe181a3ebd60ca036bb71cd720f7c6c59d92bd9c59334557488d140bbd0a36633e68bcb83abe0685bd73daa30fa1e818455d952f59f4ed9e901255ffa6706aeffc8b07bdd23265b0372f98fd707a3768128836ef5f5542233f80655ca4bc8dd62e3cafb33264b3e5704b042a681ec784aca5d31798910f212b06179d0a02be26d091f5517f2284807f8ff3c72189b13aea724337d897d75b9a8a8a3a3bd2c55d4e97d3def848798a6711d10e2b6041e9e8ce0cff01fc52d01d4142f66abdadf09cb3d6df6dac80abfe3f4eb604f1c48fef7be3d84360453cdd3edce72093a665477da1428c9229ff81e08d7051463bea3a02c315e2c632d5a2d3ebcec11154b7b3f46e424c541d42119609bdf50f90e0b10a97769085ea10b97d07077d16f66c3087c4056f73aa4c03cc48f7cfce30468d6656430da4b09d4e69d47842052453e1b54b00e44b1f3b5a9e6660396d3220c7f42dec76a131e189c3cc2faaef236b9cb60b0cca154c622f394fdc2248282f9c9faea10adf7d47d3ed30357b3ce3561255d819fa41b0805fb50dc3a5e1717592fa63f4dfcc9a0ebcae1fdd5c57cb8da22d4130b7aa6c9b49445e0c2d182669f462f7928f9e61f1c5631d40a98f07381640bbb9cd5a1869723374fd5ee6e3fc63eb1c9ae4abb30cc3f39d1ba2395a7451fed0d86619774604124433736b56ea5798df51bf8a0113490f3a472251cfbee258f5cb3c8fd8313cb449288514638e864f4af1da4b3142bdae95968c5d65b70ab27afd8cf49b9ff8cf323f3535593d14d19d8ee790cb7dcca8a14ef89bf4ede83593f260b05ef0a906dba32595117e6833c5e364e9f3c311d58539a02ecbf139e133ea4d40a49d99a59aed2670b4c0fd59526540106c94f044440de659ac67975857e85f10643bbbad9140d6645429b3a885320ee7e04192b5b5b3340fd16e009ab83526447cd23e54ac905793bfdd15d91ca185f9cdab1cafa102c9bbef54a5a31529f64283d23dc98e865f7113b4dee957534bdc7b446f89d07fff1d0cb38e583d9cbc682c339bb6bbbea5547444e79435a96f3e7511d18f4c800539c9a4822a77d799391569251a1d66a7633ab78def57f7c78f60f5727faab3e63304ff425c2eb79d5bf630820b659a8750ed5433ed8abe5ed23178ddd4b652d3dc9aa0bab5142921108f4d5d5918f29533862eefac4b75b8938500c394d59cb47a4dc473d7751238812c045a1a937a48300e7cfbd058c36f38515e1aa0ad18031cdce548c15fc2d8ea5d7061383b13db179f3acded9c658c10adb3a48f26d446fab736dffea8697d2d233adff816ee21672f98622e862ed6572605950a8456807bff5c9420e5e7b6d15cfde46b8bc34bf2ea8bf353451f08748a56c06dfe09c343c7260ab6035195fb5ddafa7d4d766071929faef14c1c695777e8e2bb94171570e1167229c5ec53dcd9be562f9b7a992ca2bd0779bd0675fb2adacc425bc7f5af9c50f848a82551e0f8d229e77d0999c93067eb5ff713635068ba231f2708d4e1c53f5304c5f1d7d518358a220829be29c6f2399a07d3b42324d85c98a13a4464f26887e577880590c4c2b40dbd5ab01708d313bdc8505d69c4e9b3f0b120d8aee8192f75cde4b80ad7492d4ce0e34d5d5af1b6e5504752a4672918028733afd005886f61e0fd15ea0157b97f334b6957791f69a4e20d5271f135106432b61ced58697a9518d46f7bf4bfab30f7abc7343bfdb6e78625f822664c412978711df85982e44b3ca52f6daf450351add46d176d7ace8fe91139753def8faf31818532df933966277361e529b53d8f4cecabd54ef6ef8fca4ae62187f66df7326535888047611ca3b349f9cd67a35bc9bb3809637a3a4f9cf402cc24685cf9667d26a67dbec028fbb37b90840471deddcc5c4826add389ae352f4de7eac5d7a20e6387cd481cb071a10dc98c49f37afe489e7e1c7f57dfdc3f17658637425ec0a38db5164a2f427565ab549a47f5188a3871c5031b06ba332bb6e982b51ee39fb3bfe8fd15a6ca0e7258e1f2c58330f51c6735fef534bad698909bebc4eb8e1be7c5b71becf6dfb61a8f7e764b50a3df7be62b6a5439d259880cc0d90f605848fbc8a41a83bf16a95e105592c7857c3d5489bd32276f81b0c9b5dd2054d52925f4cf254e4c7977f8673f5cb01ce8a69d52e9b5cb42c1c095feca87ebbec0c1e5cc67ab32e217d576801c421e6b61f8bb7d572014749ba63cab27d34f8dd5a1648cffff2f6d313ea131f05fa71fe5a96fc7eeb9452bb00d45650bf37866bf05f6f33d3d5e98d699760111090b3d1a60513b3a0544d5c2dab7e79c37a4598c4e42f4f83acf14c800052e1f0f38af1ebf675a6cbe1d02a92755d9b6140fbe661c205e1a36045720ccab0b01cf1f0cd7260d5ddc86da37afae9ec2957cba4f5d246b3981599d86daac42dc29545e9fd2a8e9ccffce8a2faabf2f14845468293b01c3b729cf4499ca07b71192e309075c403c96582295d068105dfc03787fabca0cb0ec248e45a288507fc6b4b634dad408758f4b4944b8f15c844ad83092c0811b5cba40411e45d8da940479bf4696eeb76cad01a2a8e9ca9dfb6fa3838f5f95da6ad875b0a2f9c0d84c6c19d71953df8376d2a46c7afdfc1b4fdaa72d4f37ce162bf5f9ce4c7e92d780a64a34a8b6f50cf2a2c98b344e27a0e45d2399ff79354cc687c4bb4da6f1658d00e06a9f47b4560a7afd5bb50a6464f407fb447794a9853c8e00e97cdd2ba5dad1693b18809d44e87ca640e4d8e0ce01da58e8b9e4e37a3470e4aacff7e7214fab8c21c6adc95c6d09b79dd8f466b7eb5a41af8ca0fd924c77821618ba722025db691e9b5d41c539347d2cea4b53fe336efb159927eafbf3fc7e56383c9b7782b6def63e02dbbf29172123847a5d5fe80f619f7b2069f0f03b4767363b97a77613c94e7be264619643e6aa9658173262a0c453cea6ef37b335511b2567ff74fc0bc4354b14dbd22ff495a8d8127a70a101493a2bef7d057746f7f2b8f475f4828f37574a38dd6c6914aac4110e3e27d54a2e35f26878dbd9594dfc6e4b249e2101a041056172f0ca1da7d830e84d2d11b5d430f875e919e2097a2dc9e7480596e466a2635d3d194d2b4745152cea700ae6c4e2a1d886933725ba05d8ba7157d013e36426d34535b66f76297f91d19f08ece3307a52fb0b51654487b2a1f46be60a69795eaa5f65ecb8359f18c2e1c7fadcef78dc01796224536b81830a17fe0a353d1a22714df858d082598de7ea393a183298459b2647f9aa70bea95e26a03b1264c03e4dc953bcef09d196e1fbc7bcfb683178b6e32819bf122b446060ce43f484cd5a2ae72bcd0b57e6ec8e785d70008443e015208bbe5383db4a6062f93655b87e14fff8f295c28f3caba950f93f5bbfca18cc533927a956c80ae9e8d32b4f0a74cce120e588dafcf5e538e91f0dc4842fa09a3cdcc940ce49d2f0c099992a8dee83d7f960eb8776f42bc50297e03e11b6d93273690e47f994c4a7036a17551a6d9897e4783501b1ee54005b56b5f3ade3dd5c200bbd7b2ac4cf71f75f9fe95683782ea806864ec0f9911606e872e14fe10e08309cf4eca2b27c4368bc99641708f9794561dfcb944f5a64d819d9631ef7fe06eb82693d7b5250750939e5c63af9450ff89350b04849b3101612fa7dc1f0603cdf15ca3e06228c090220a22519038fb97c1d5c96ecfd76975e943d3f0a1ef54526db274c628f228805fa134ff6c246bcd549a3df770755a8bf4b0998f5339e7eefe82ddc29c5784251c60d08aa3bac7c2de97d0d54ec21221b4a74f0a2d81bbb19d31adaf6225de4ade52bd1facf447c6c6bd15ee8a65c4c60629ae365b8dd01dc70a6e37a2fe9a0ba852718955beeb79edd7db90c0aa203ced9b5458b0dd61072bdd283fd1f3a789e7c575534b2444f4cea2865545aac1d9e081474194ef861488b10017c8ae0d91c9ccdd983b23f4c217dc73b32b7df67b473a25d46b9e07f0d7d8799d16d0accbca92dbdc744cb433ba2f1e067fbe422141225c8f7b44b411b49f99538fbeaa77bfc1c64f6209bc0a2ccce00de1ee46dd0fcfc929ef604081ca171c8186f088e9669c97b592c8f423e7facaaa5f0770dc23f1346e73b5e6d04cef4139d21667c48fa5d6d58348168d1acd837adc0a673090ec2753a22f290a446a99039984d81f15f3ff9bdfd0303e7e7df71c0e3b0d5411de6af15dbe564082abf543a3307be4697b8536179b8d6f47233352025d9399afae0e6e2ae2741f1c586d38116f48ad6fa28bfba57eff6f5fb98ce78e2582497ab40db85d54d812c152af7af264a6db63833a1639d26f1c1331286f6a74fe371fcdbde8f5de5b2b530c4c1d0f65ee3d2cbc8bccadf50"}) write(r2, &(0x7f0000002240)="22719cdaa0a5a0ec4ef91d1ba4376cdb81b4fb7c4b6fe3f447a198ba8fc911f090eedd6c460529cb5c96b970b35b624d2a6a61149a97704a6afb6c051872d4e1a76fcce77357327ac5a7bc27fcf6658146a7064d3f2c4b5601547f3c5c50317d8e42771f5e", 0x65) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000022c0)) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002300), 0x121000, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) ioctl$RTC_UIE_OFF(r1, 0x7004) close_range(0xffffffffffffffff, r2, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000002340)) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000002380), 0x20140, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0xfffffffffffffffc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000023c0)={0x141e4c3f, 0x6, 0x1, 0xc75, 0x281b}) openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x4c140, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000002440)={0xfffffff0, 0xb473, 0x60, 0x0, 0xff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000002480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BLKCRYPTOGENERATEKEY(r4, 0xc030128a, &(0x7f0000002700)={&(0x7f00000026c0)=""/25, 0x19}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002740)={[{0x2d, 'net_prio'}, {0x2d, 'net_prio'}, {0x2d, 'io'}, {0x2d, 'cpuacct'}, {0x2d, 'memory'}]}, 0x29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 20.861850][ T36] audit: type=1400 audit(1750383156.580:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.862920][ T281] cgroup: Unknown subsys name 'net' [ 20.884612][ T36] audit: type=1400 audit(1750383156.580:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.912108][ T36] audit: type=1400 audit(1750383156.610:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.912297][ T281] cgroup: Unknown subsys name 'devices' [ 21.075752][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.081499][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.274327][ T36] audit: type=1400 audit(1750383157.000:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.297669][ T36] audit: type=1400 audit(1750383157.000:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.319494][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.322643][ T36] audit: type=1400 audit(1750383157.000:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.354482][ T36] audit: type=1400 audit(1750383157.060:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.380526][ T36] audit: type=1400 audit(1750383157.060:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.410990][ T36] audit: type=1400 audit(1750383157.140:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.436893][ T36] audit: type=1400 audit(1750383157.140:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.436966][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.785428][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.792592][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.799912][ T290] bridge_slave_0: entered allmulticast mode [ 22.806311][ T290] bridge_slave_0: entered promiscuous mode [ 22.812714][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.819789][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.826893][ T290] bridge_slave_1: entered allmulticast mode [ 22.833201][ T290] bridge_slave_1: entered promiscuous mode [ 22.848862][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.855957][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.863278][ T291] bridge_slave_0: entered allmulticast mode [ 22.869967][ T291] bridge_slave_0: entered promiscuous mode [ 22.877193][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.884496][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.891606][ T291] bridge_slave_1: entered allmulticast mode [ 22.898101][ T291] bridge_slave_1: entered promiscuous mode [ 22.947802][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.955289][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.962911][ T289] bridge_slave_0: entered allmulticast mode [ 22.969449][ T289] bridge_slave_0: entered promiscuous mode [ 22.984650][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.991789][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.999057][ T289] bridge_slave_1: entered allmulticast mode [ 23.005585][ T289] bridge_slave_1: entered promiscuous mode [ 23.033055][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.040264][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.047414][ T288] bridge_slave_0: entered allmulticast mode [ 23.053678][ T288] bridge_slave_0: entered promiscuous mode [ 23.060036][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.067197][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.074510][ T288] bridge_slave_1: entered allmulticast mode [ 23.080794][ T288] bridge_slave_1: entered promiscuous mode [ 23.218726][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.226130][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.233445][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.240509][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.249438][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.256542][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.263875][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.271046][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.297397][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.304489][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.311886][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.319034][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.346633][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.353894][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.361432][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.368476][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.381754][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.389115][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.396500][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.404804][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.412227][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.419443][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.426992][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.434238][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.466584][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.473773][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.481315][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.488388][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.495940][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.502965][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.516030][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.523103][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.550261][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.557360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.569485][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.576852][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.596363][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.603573][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.611125][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.618403][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.651433][ T290] veth0_vlan: entered promiscuous mode [ 23.665720][ T289] veth0_vlan: entered promiscuous mode [ 23.682291][ T289] veth1_macvtap: entered promiscuous mode [ 23.696651][ T288] veth0_vlan: entered promiscuous mode [ 23.705914][ T291] veth0_vlan: entered promiscuous mode [ 23.718811][ T290] veth1_macvtap: entered promiscuous mode [ 23.739507][ T291] veth1_macvtap: entered promiscuous mode [ 23.757967][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.776286][ T288] veth1_macvtap: entered promiscuous mode [ 23.804234][ T306] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.919959][ T314] rust_binder: Error while translating object. [ 23.919990][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 23.932764][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 23.992675][ T329] cgroup: fork rejected by pids controller in /syz0 [ 24.039984][ T333] rust_binder: Error while translating object. [ 24.040014][ T333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.047971][ T333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10 [ 24.058823][ T434] rust_binder: Error while translating object. [ 24.071705][ T434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.089183][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 24.119378][ T441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.167214][ T304] bridge_slave_1: left allmulticast mode [ 24.173039][ T304] bridge_slave_1: left promiscuous mode [ 24.179012][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.188160][ T304] bridge_slave_0: left allmulticast mode [ 24.194061][ T304] bridge_slave_0: left promiscuous mode [ 24.199756][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.254343][ T449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:15 [ 24.294239][ T453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.380833][ T453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.409425][ T304] veth1_macvtap: left promiscuous mode [ 24.422011][ T304] veth0_vlan: left promiscuous mode [ 24.460196][ T459] rust_binder: Error while translating object. [ 24.460236][ T459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.467627][ T459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 24.519747][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.536584][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.543855][ T451] bridge_slave_0: entered allmulticast mode [ 24.550373][ T451] bridge_slave_0: entered promiscuous mode [ 24.557608][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.564988][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.572989][ T451] bridge_slave_1: entered allmulticast mode [ 24.579685][ T451] bridge_slave_1: entered promiscuous mode [ 24.637939][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.645108][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.652372][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.659477][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.700703][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.711014][ T477] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 24.711770][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 24.721656][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.741578][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 24.741626][ T477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 24.744195][ T479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17 [ 24.771370][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.787647][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.796368][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.803564][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.830886][ T451] veth0_vlan: entered promiscuous mode [ 24.844854][ T451] veth1_macvtap: entered promiscuous mode [ 24.932694][ T492] input: syz1 as /devices/virtual/input/input4 [ 24.945867][ T492] rust_binder: Write failure EINVAL in pid:19 [ 24.972538][ T496] rust_binder: Error while translating object. [ 24.980933][ T496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 24.989509][ T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 25.034013][ T501] rust_binder: Write failure EINVAL in pid:30 [ 25.046263][ T501] rust_binder: Write failure EFAULT in pid:30 [ 25.108408][ T485] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 25.122305][ T485] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 25.130583][ T485] hid-generic C98F:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 25.180125][ T508] fido_id[508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 25.296417][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 25.319546][ T514] input: syz1 as /devices/virtual/input/input5 [ 25.373677][ T514] rust_binder: Write failure EFAULT in pid:13 [ 25.439123][ T526] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 25.449643][ T526] rust_binder: Error while translating object. [ 25.463941][ T532] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 25.470502][ T526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.470539][ T526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 25.479876][ T534] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.494168][ T532] rust_binder: Write failure EINVAL in pid:43 [ 25.498734][ T534] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.577192][ T545] binder: Unknown parameter 'donÁdhash' [ 25.617519][ T554] rust_binder: Error while translating object. [ 25.617555][ T554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 25.629714][ T554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:20 [ 25.695399][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.706298][ T559] rust_binder: Error in use_page_slow: ESRCH [ 25.712911][ T559] rust_binder: use_range failure ESRCH [ 25.719077][ T559] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 25.724706][ T559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.738944][ T559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:40 [ 25.749615][ T559] SELinux: policydb string does not match my string SE Linux [ 25.766324][ T559] SELinux: failed to load policy [ 25.787568][ T561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.841331][ T562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.879664][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 25.879683][ T36] audit: type=1400 audit(1750383161.600:151): avc: denied { execute } for pid=565 comm="syz.3.50" path="/selinux/validatetrans" dev="selinuxfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 25.911048][ T573] rust_binder: Write failure EINVAL in pid:24 [ 25.942807][ T10] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 25.957956][ T10] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 25.966413][ T10] hid-generic C98F:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 26.019780][ T578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 26.074876][ T580] binder: Unknown parameter 'dont_hash' [ 26.100810][ T582] rust_binder: Failed copying remainder into alloc: EFAULT [ 26.100828][ T582] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 26.108432][ T582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 26.118679][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:32 [ 26.136532][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.154198][ T584] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.161907][ T584] rust_binder: Error while translating object. [ 26.162803][ T36] audit: type=1400 audit(1750383161.880:152): avc: denied { ioctl } for pid=583 comm="syz.3.56" path="net:[4026532307]" dev="nsfs" ino=4026532307 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.175571][ T584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.203416][ T584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 26.258816][ T594] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 26.275920][ T467] Bluetooth: hci1: Frame reassembly failed (-84) [ 26.535319][ T605] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 26.535339][ T605] rust_binder: Error while translating object. [ 26.544298][ T605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.551210][ T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 26.560711][ T36] audit: type=1326 audit(1750383162.270:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=606 comm="syz.2.61" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6e9f8e929 code=0x0 [ 26.618495][ T36] audit: type=1400 audit(1750383162.340:154): avc: denied { setcheckreqprot } for pid=617 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 26.693307][ T36] audit: type=1400 audit(1750383162.410:155): avc: denied { read } for pid=624 comm="syz.2.67" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 26.726804][ T36] audit: type=1400 audit(1750383162.420:156): avc: denied { associate } for pid=624 comm="syz.2.67" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.749492][ T36] audit: type=1400 audit(1750383162.430:157): avc: denied { append } for pid=624 comm="syz.2.67" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.867820][ T36] audit: type=1400 audit(1750383162.590:158): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.874382][ T632] binder: Bad value for 'context' [ 26.923081][ T635] binder: Bad value for 'max' [ 27.035258][ T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 27.035816][ T641] rust_binder: Error while translating object. [ 27.045103][ T641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.051390][ T641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 27.174813][ T645] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 27.193222][ T645] rust_binder: Write failure EINVAL in pid:53 [ 27.255876][ T649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 27.456602][ T653] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.821552][ T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 27.821589][ T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:73 [ 27.845514][ T36] audit: type=1326 audit(1750383163.570:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=668 comm="syz.1.82" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x0 [ 28.183614][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 28.183713][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.256961][ T681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 28.256993][ T681] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.266276][ T586] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 28.271916][ T681] rust_binder: Read failure Err(EFAULT) in pid:72 [ 28.314818][ T686] binder: Unknown parameter 'max±4/χ¦'7›)·¡"•-;E'ó¾°CÞñW' [ 28.333345][ T36] audit: type=1326 audit(1750383164.060:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=687 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e9f8e929 code=0x7ffc0000 [ 28.333482][ T689] binder: Unknown parameter 'smackfsroot' [ 28.364686][ T688] binder: Unknown parameter 'smackfsroot' [ 28.370917][ T687] cgroup: fork rejected by pids controller in /syz2 [ 28.545520][ T13] bridge_slave_1: left allmulticast mode [ 28.551338][ T13] bridge_slave_1: left promiscuous mode [ 28.557215][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.566071][ T13] bridge_slave_0: left allmulticast mode [ 28.572009][ T13] bridge_slave_0: left promiscuous mode [ 28.580287][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.658181][ T799] rust_binder: Write failure EFAULT in pid:64 [ 28.706478][ T804] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 28.730946][ T804] SELinux: failed to load policy [ 28.792813][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.800765][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.808232][ T810] bridge_slave_0: entered allmulticast mode [ 28.814738][ T810] bridge_slave_0: entered promiscuous mode [ 28.829358][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.836653][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.843907][ T810] bridge_slave_1: entered allmulticast mode [ 28.850639][ T810] bridge_slave_1: entered promiscuous mode [ 28.858587][ T13] veth1_macvtap: left promiscuous mode [ 28.865050][ T13] veth0_vlan: left promiscuous mode [ 28.885927][ T821] rust_binder: Write failure EFAULT in pid:80 [ 29.001676][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.015046][ T810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.022456][ T810] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.029621][ T810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.055701][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.063487][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.072793][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.080017][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.089285][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.096477][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.124692][ T828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:86 [ 29.135088][ T810] veth0_vlan: entered promiscuous mode [ 29.159559][ T810] veth1_macvtap: entered promiscuous mode [ 29.198009][ T834] SELinux: failed to load policy [ 29.214240][ T837] binder: Bad value for 'stats' [ 29.234375][ T839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 29.234461][ T839] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 29.251247][ T839] rust_binder: Write failure EINVAL in pid:9 [ 29.299249][ T851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.306293][ T851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.312901][ T851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:70 [ 29.445148][ T855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.495849][ T857] input: syz0 as /devices/virtual/input/input7 [ 29.556836][ T863] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.608039][ T872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.765969][ T878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.827879][ T885] rust_binder: Write failure EINVAL in pid:107 [ 30.587581][ T890] ======================================================= [ 30.587581][ T890] WARNING: The mand mount option has been deprecated and [ 30.587581][ T890] and is ignored by this kernel. Remove the mand [ 30.587581][ T890] option from the mount to silence this warning. [ 30.587581][ T890] ======================================================= [ 30.629794][ T890] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 30.823426][ T898] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.823452][ T898] rust_binder: Read failure Err(EFAULT) in pid:65 [ 30.911632][ T906] input: syz0 as /devices/virtual/input/input8 [ 31.163071][ T918] rust_binder: Error while translating object. [ 31.163105][ T918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.169602][ T918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 31.212374][ T923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 31.347777][ T929] kvm: user requested TSC rate below hardware speed [ 31.447853][ T939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 31.447895][ T939] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.457230][ T939] rust_binder: Read failure Err(EFAULT) in pid:92 [ 31.476874][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 31.476897][ T36] audit: type=1326 audit(1750383167.200:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.499051][ T946] binder: Bad value for 'defcontext' [ 31.513700][ T36] audit: type=1326 audit(1750383167.200:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.551777][ T36] audit: type=1326 audit(1750383167.200:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.578643][ T36] audit: type=1326 audit(1750383167.200:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.602743][ T36] audit: type=1326 audit(1750383167.200:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.627706][ T36] audit: type=1326 audit(1750383167.200:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=940 comm="syz.0.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 31.651699][ T959] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.686528][ T962] binder: Bad value for 'stats' [ 31.696658][ T959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.698000][ T959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 31.708975][ T963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.718651][ T963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 31.759746][ T968] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 196) [ 31.759785][ T968] rust_binder: Error while translating object. [ 31.760831][ T965] rust_binder: Error in use_page_slow: ESRCH [ 31.777010][ T967] rust_binder: Error in use_page_slow: ESRCH [ 31.785323][ T968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.791840][ T967] rust_binder: use_range failure ESRCH [ 31.801666][ T968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 31.802094][ T967] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 31.817185][ T965] rust_binder: use_range failure ESRCH [ 31.843605][ T965] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 31.846772][ T967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.849218][ T965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.849238][ T965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128 [ 31.879662][ T967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128 [ 32.011672][ T36] audit: type=1400 audit(1750383167.730:185): avc: denied { execute } for pid=975 comm="syz.2.147" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.030760][ T978] rust_binder: Write failure EINVAL in pid:39 [ 32.168738][ T980] rust_binder: Error while translating object. [ 32.179899][ T980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.186405][ T980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 32.283891][ T990] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 32.393719][ T996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.396073][ T998] rust_binder: Error while translating object. [ 32.402696][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.408875][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.420499][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:86 [ 32.428920][ T999] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 32.445437][ T994] rust_binder: Write failure EFAULT in pid:119 [ 32.454681][ T994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.461125][ T994] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.462681][ T1002] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.468244][ T994] rust_binder: Write failure EINVAL in pid:119 [ 32.488337][ T1002] rust_binder: Write failure EINVAL in pid:90 [ 32.495861][ T992] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 32.507594][ T992] rust_binder: Error while translating object. [ 32.520211][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.533622][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 32.584135][ T1019] rust_binder: Got transaction with invalid offset. [ 32.593487][ T1019] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.600335][ T1019] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 32.659678][ T36] audit: type=1400 audit(1750383168.380:186): avc: denied { write } for pid=1024 comm="syz.2.164" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.659769][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.700380][ T1025] rust_binder: Write failure EINVAL in pid:51 [ 32.716176][ T36] audit: type=1400 audit(1750383168.440:187): avc: denied { relabelfrom } for pid=1029 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.742801][ T36] audit: type=1400 audit(1750383168.440:188): avc: denied { relabelto } for pid=1029 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.820620][ T1040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 32.831004][ T1042] random: crng reseeded on system resumption [ 32.847050][ T1044] rust_binder: Write failure EINVAL in pid:133 [ 32.891824][ T1042] rust_binder: Write failure EFAULT in pid:144 [ 32.900562][ T1048] rust_binder: Error while translating object. [ 32.906758][ T1042] rust_binder: Write failure EFAULT in pid:144 [ 32.913494][ T1048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.921708][ T1048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:137 [ 33.030759][ T1063] SELinux: security_context_str_to_sid (yte) failed with errno=-22 [ 33.087044][ T13] Bluetooth: hci1: Frame reassembly failed (-90) [ 33.093613][ T1068] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.100218][ T1068] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.304366][ T1082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.304508][ T1082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.201460][ T1093] rust_binder: Read failure Err(EFAULT) in pid:162 [ 34.663611][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 34.669712][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.685308][ T1135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:177 [ 34.768329][ T1142] rust_binder: Write failure EINVAL in pid:180 [ 34.799122][ T1150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.804057][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 34.813365][ T1147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189 [ 34.823339][ T1153] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ01777777777777777777777À initial count (25964891200 ns). Using initial count to start timer. [ 41.632877][ T1648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.632917][ T1648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.741969][ T1656] binder: Unknown parameter '00000000000000000000004ŸË®Bþ0µŽöÅ¡%ºŠšúÌCR' [ 41.939051][ T36] kauditd_printk_skb: 121 callbacks suppressed [ 41.939073][ T36] audit: type=1326 audit(1750383177.660:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.2.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4406d8e929 code=0x0 [ 42.009961][ T1668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.010047][ T1668] rust_binder: Write failure EINVAL in pid:215 [ 42.030049][ T36] audit: type=1400 audit(1750383177.750:334): avc: granted { setsecparam } for pid=1667 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 42.083599][ T36] audit: type=1400 audit(1750383177.800:335): avc: granted { setsecparam } for pid=1667 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 42.373638][ T1676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.389543][ T1678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.397721][ T1678] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 42.404697][ T1678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:325 [ 42.446588][ T1683] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 42.507166][ T1690] binder: Bad value for 'max' [ 42.587656][ T1694] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 42.812494][ T1708] input: syz0 as /devices/virtual/input/input23 [ 42.882406][ T1716] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.901816][ T1712] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 42.910276][ T1712] rust_binder: Error in use_page_slow: EBUSY [ 42.921421][ T1712] rust_binder: use_range failure EBUSY [ 42.931331][ T1712] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 42.937349][ T1712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 42.956328][ T1712] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 42.966916][ T1712] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:219 [ 42.979261][ T1719] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.988358][ T1719] rust_binder: Write failure EINVAL in pid:325 [ 42.995001][ T36] audit: type=1400 audit(1750383178.710:336): avc: denied { map } for pid=1720 comm="syz.3.390" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=18944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 43.030983][ T36] audit: type=1400 audit(1750383178.710:337): avc: denied { execute } for pid=1720 comm="syz.3.390" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=18944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 43.063953][ T1717] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.069936][ T36] audit: type=1326 audit(1750383178.710:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1711 comm="syz.2.386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4406d8e929 code=0x0 [ 43.110828][ T36] audit: type=1400 audit(1750383178.830:339): avc: denied { setattr } for pid=1729 comm="syz.3.393" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 43.114704][ T1728] SELinux: failed to load policy [ 43.161271][ T1734] __vm_enough_memory: pid: 1734, comm: syz.3.394, bytes: 281474976845824 not enough memory for the allocation [ 43.173977][ T1728] SELinux: failed to load policy [ 43.313754][ T1747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.330381][ T1743] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 43.336939][ T1743] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 43.345055][ T1743] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 43.365686][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 43.453502][ T1754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 43.465971][ T1756] rust_binder: Write failure EFAULT in pid:339 [ 43.571704][ T1767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.578412][ T1767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 43.613554][ T1772] input: syz1 as /devices/virtual/input/input24 [ 43.633688][ T1772] input: syz1 as /devices/virtual/input/input25 [ 43.642830][ T1772] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 43.650695][ T1772] binder: Bad value for 'max' [ 43.682101][ T1774] kernel profiling enabled (shift: 8) [ 43.752545][ T1782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 43.846619][ T1788] rust_binder: Error while translating object. [ 43.856956][ T1788] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 43.863227][ T1788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:224 [ 43.880065][ T1789] binder: Bad value for 'max' [ 44.028661][ T1802] deleting an unspecified loop device is not supported. [ 44.044989][ T1804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.045073][ T1804] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.057660][ T36] audit: type=1326 audit(1750383179.780:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1805 comm="syz.0.419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x0 [ 44.158590][ T1810] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.158701][ T1810] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.286999][ T1814] rust_binder: Write failure EFAULT in pid:241 [ 44.328739][ T1818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.352590][ T1821] input: syz0 as /devices/virtual/input/input27 [ 44.397573][ T1823] binder: Bad value for 'max' [ 44.400317][ T36] audit: type=1326 audit(1750383180.120:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1824 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4406d8e929 code=0x0 [ 44.495113][ T1828] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.499137][ T1828] rust_binder: Error while translating object. [ 44.506252][ T1828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.513656][ T1828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 44.823059][ T1844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 44.856241][ T1846] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.866795][ T1846] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.874788][ T1848] rust_binder: Error while translating object. [ 44.887902][ T1848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.894402][ T1848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:360 [ 44.983546][ T36] audit: type=1400 audit(1750383180.700:342): avc: denied { write } for pid=1853 comm="syz.0.437" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.333721][ T1876] binder: Bad value for 'max' [ 45.415086][ T1887] binder: Unknown parameter 'context' [ 45.505662][ T1891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 45.532678][ T1893] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 89) [ 45.541916][ T1893] rust_binder: Error while translating object. [ 45.552581][ T1893] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.559619][ T1893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 45.605054][ T1895] binder: Bad value for 'stats' [ 45.720076][ T1898] binder: Unknown parameter 'permit_directio' [ 45.807418][ T1910] rust_binder: Got transaction with invalid offset. [ 45.807452][ T1910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.814374][ T1910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268 [ 46.060204][ T1919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.080353][ T1925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 46.111450][ T1929] binder: Bad value for 'stats' [ 46.158443][ T1934] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 46.164346][ T1934] pim6reg0: linktype set to 769 [ 46.175770][ T1934] binder: Bad value for 'max' [ 46.260960][ T1939] binder: Bad value for 'defcontext' [ 46.453803][ T2118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 46.453855][ T2118] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.466864][ T2118] rust_binder: Read failure Err(EFAULT) in pid:376 [ 46.577602][ T2194] input: syz1 as /devices/virtual/input/input30 [ 46.599116][ T2195] binder: Unknown parameter 'max1' [ 46.620155][ T2083] rust_binder: Read failure Err(EFAULT) in pid:281 [ 46.747185][ T2206] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.829072][ T2211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276 [ 46.904145][ T2217] rust_binder: Write failure EINVAL in pid:276 [ 47.336587][ T2221] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.664886][ T2234] binder: Unknown parameter 'non' [ 47.743244][ T2236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:650 [ 47.743292][ T2236] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.752571][ T2236] rust_binder: Read failure Err(EFAULT) in pid:650 [ 48.039393][ T2261] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 48.181429][ T2269] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 48.181470][ T2269] rust_binder: Error while translating object. [ 48.192544][ T2269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.199242][ T2269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301 [ 48.415356][ T2281] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.421012][ T2279] rust_binder: Error in use_page_slow: ESRCH [ 48.433230][ T2279] rust_binder: use_range failure ESRCH [ 48.439695][ T2279] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 48.446436][ T2279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 48.460294][ T2279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:309 [ 48.905678][ T2307] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 48.915041][ T2307] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 48.932914][ T2307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:315 [ 48.975439][ T2314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:324 [ 49.025625][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 49.025646][ T36] audit: type=1326 audit(1750383184.750:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.2.513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4406d8e929 code=0x0 [ 49.273213][ T2335] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 49.464327][ T2344] binder: Unknown parameter 'ÿÿ' [ 49.491346][ T36] audit: type=1400 audit(1750383185.210:356): avc: denied { map } for pid=2345 comm="syz.3.520" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.491855][ T2346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.593014][ T2353] binder: Bad value for 'stats' [ 49.847298][ T2361] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 49.847335][ T2361] rust_binder: Error while translating object. [ 49.859943][ T2361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.866333][ T2361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 49.894657][ T2364] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 49.903927][ T2364] rust_binder: Error while translating object. [ 49.912638][ T2364] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.919310][ T2364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 49.974486][ T2377] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 49.999940][ T2377] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 50.144772][ T2380] binder: Unknown parameter '18446744073709551615' [ 50.213192][ T36] audit: type=1326 audit(1750383185.930:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2386 comm="syz.3.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x0 [ 50.218865][ T2389] binder: Bad value for 'stats' [ 50.749928][ T2401] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 50.749959][ T2401] rust_binder: Error while translating object. [ 50.758909][ T2401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 50.765510][ T2401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 50.859314][ T2404] cgroup: fork rejected by pids controller in /syz3 [ 51.074296][ T36] audit: type=1400 audit(1750383186.790:358): avc: denied { append } for pid=2444 comm="syz.1.542" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.245563][ T2452] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 51.245611][ T2452] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 51.253766][ T2452] rust_binder: Read failure Err(EFAULT) in pid:344 [ 51.356474][ T2458] __vm_enough_memory: pid: 2458, comm: syz.1.547, bytes: 281474976845824 not enough memory for the allocation [ 51.393724][ T2460] input: syz0 as /devices/virtual/input/input31 [ 51.402402][ T2460] binder: Bad value for 'stats' [ 51.863342][ T2484] binder: Unknown parameter '/dev/tty /dev/tty 5 0 system:/dev/tty [ 51.863342][ T2484] /dev/console /dev/console 5 1 system:console [ 51.863342][ T2484] /dev/ptmx /dev/ptmx 5 2 system [ 51.863342][ T2484] rfcomm /dev/rfcomm 216 0-255 serial [ 51.863342][ T2484] g_serial /dev/ttyGS 509 0-7 serial [ 51.863342][ T2484] usbserial /dev/ttyUSB 188 0-511 serial [ 51.863342][ T2484] acm /dev/ttyACM 166 0-255 serial [ 51.863342][ T2484] ttynull /dev/ttynull 238 0 console [ 51.863342][ T2484] serial €ý /dev/ttyS 4 64-95 serial [ 51.863342][ T2484] pty_slave /dev/pts 136 0-1048575 pty:slave [ 51.863342][ T2484] pty_master /dev/ptm 128 0-1048575 pty:master [ 51.863342][ T2484] ' [ 51.899105][ T2486] SELinux: policydb version -740644428 does not match my version range 15-33 [ 51.955734][ T2486] SELinux: failed to load policy [ 52.079201][ T2496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:401 [ 52.125671][ T2509] rust_binder: Error while translating object. [ 52.134965][ T2509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.141349][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367 [ 52.387042][ T2527] rust_binder: Write failure EFAULT in pid:407 [ 52.401861][ T2531] binder: Bad value for 'stats' [ 52.442371][ T2533] input: syz0 as /devices/virtual/input/input33 [ 52.525026][ T2543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.584195][ T36] audit: type=1400 audit(1750383188.310:359): avc: granted { setsecparam } for pid=2547 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.630586][ T2550] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.794629][ T2560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:414 [ 52.794930][ T2560] binder: Unknown parameter 'pcr' [ 52.820263][ T36] audit: type=1326 audit(1750383188.540:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 52.830918][ T2562] binder: Unknown parameter 'context' [ 52.844871][ T36] audit: type=1326 audit(1750383188.540:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 52.873934][ T36] audit: type=1326 audit(1750383188.540:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 52.897395][ T36] audit: type=1326 audit(1750383188.570:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 52.922120][ T36] audit: type=1326 audit(1750383188.570:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 53.026382][ T2568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.048785][ T2572] rust_binder: Error while translating object. [ 53.048824][ T2572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 53.055329][ T2572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:423 [ 53.284995][ T2587] input: syz0 as /devices/virtual/input/input34 [ 53.399413][ T2599] binder: Unknown parameter 'context00000000000' [ 53.416118][ T2604] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 53.868845][ T2628] binder: Unknown parameter 'dont_hash' [ 53.880387][ T2627] binder: Unknown parameter 'dont_hash' [ 54.375218][ T2680] SELinux: failed to load policy [ 54.453912][ T2690] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 54.470901][ T2694] input: syz1 as /devices/virtual/input/input36 [ 54.480477][ T2700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:445 [ 54.751632][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 54.751650][ T36] audit: type=1326 audit(1750383190.470:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2717 comm="syz.1.632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x0 [ 54.865542][ T2732] binder: Unknown parameter '/proc/partitions' [ 54.892938][ T2737] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.955047][ T2742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.990958][ T2742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:468 [ 55.305814][ T2761] rust_binder: Write failure EINVAL in pid:471 [ 55.318026][ T2761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 55.628546][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.638176][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.644769][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.651312][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.657913][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.664490][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.671947][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.679524][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.690751][ T2778] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.719471][ T2781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139160704 (136906285056 ns) > initial count (109639582592 ns). Using initial count to start timer. [ 55.744017][ T2783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 55.767693][ T2781] binder: Bad value for 'stats' [ 55.864831][ T36] audit: type=1326 audit(1750383191.590:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2785 comm="syz.0.653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x0 [ 55.935742][ T2788] rust_binder: Write failure EINVAL in pid:475 [ 55.947876][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 55.954377][ T2791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.961779][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 55.976986][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 55.985425][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 55.993311][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.001013][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.008576][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.016040][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.024145][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.031582][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.039249][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.046738][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.054669][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.062344][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.069877][ T308] hid-generic C98F:0003:0003.0003: unknown main item tag 0x0 [ 56.078199][ T308] hid-generic C98F:0003:0003.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 56.115125][ T2799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 56.193054][ T36] audit: type=1400 audit(1750383191.910:460): avc: denied { execute } for pid=2811 comm="syz.2.659" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 56.830661][ T2864] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 56.991247][ T36] audit: type=1400 audit(1750383192.710:461): avc: denied { append } for pid=2878 comm="syz.2.681" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 57.010195][ T2884] binder: Bad value for 'stats' [ 57.113208][ T2877] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 57.123457][ T2877] SELinux: failed to load policy [ 57.132758][ T2893] kvm: kvm [2892]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253 [ 57.182357][ T2912] can0: slcan on ttyS3. [ 57.189446][ T36] audit: type=1400 audit(1750383192.920:462): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.239294][ T36] audit: type=1400 audit(1750383192.920:463): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.272848][ T2915] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 57.281604][ T36] audit: type=1400 audit(1750383192.920:464): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=4908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.309667][ T2925] rust_binder: Write failure EFAULT in pid:508 [ 57.321806][ T2912] can0 (unregistered): slcan off ttyS3. [ 57.329958][ T36] audit: type=1400 audit(1750383192.920:465): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.389355][ T36] audit: type=1400 audit(1750383192.920:466): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4908 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.422029][ T2926] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 57.454571][ T36] audit: type=1400 audit(1750383193.020:467): avc: denied { read } for pid=2922 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.489749][ T2940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 57.674204][ T2953] random: crng reseeded on system resumption [ 57.869818][ T2979] kvm: user requested TSC rate below hardware speed [ 57.910686][ T2979] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 57.931030][ T2979] SELinux: failed to load policy [ 58.192540][ T2995] rust_binder: Read failure Err(EAGAIN) in pid:522 [ 58.397182][ T3006] binder: Bad value for 'max' [ 58.474315][ T3017] binder: Bad value for 'stats' [ 58.615553][ T3022] random: crng reseeded on system resumption [ 59.067807][ T3052] binder: Unknown parameter '' [ 59.252168][ T3065] rust_binder: Error while translating object. [ 59.252215][ T3065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.258635][ T3065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 59.435090][ T3096] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 59.451971][ T3096] rust_binder: Write failure EINVAL in pid:495 [ 59.490281][ T3101] kvm: kvm [3100]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 59.506832][ T3101] binder: Bad value for 'max' [ 59.614235][ T3105] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.614264][ T3105] rust_binder: Read failure Err(EFAULT) in pid:497 [ 59.660412][ T3110] binder: Bad value for 'max' [ 59.900983][ T3134] SELinux: unknown common r [ 59.918484][ T3134] SELinux: failed to load policy [ 59.992826][ T3150] random: crng reseeded on system resumption [ 60.098431][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 60.098455][ T36] audit: type=1326 audit(1750383195.820:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3149 comm="syz.2.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4406d8e929 code=0x0 [ 60.209548][ T3167] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 60.299750][ T3184] SELinux: security_context_str_to_sid () failed with errno=-22 [ 60.423949][ T3204] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 60.589683][ T3213] rust_binder: Write failure EINVAL in pid:523 [ 60.709368][ T3231] rust_binder: Write failure EINVAL in pid:578 [ 60.709604][ T3230] rust_binder: Write failure EFAULT in pid:578 [ 60.842388][ T3239] input: syz0 as /devices/virtual/input/input42 [ 60.864965][ T3239] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 61.049219][ T36] audit: type=1326 audit(1750383196.770:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3251 comm="syz.1.791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa61898e929 code=0x0 [ 61.100155][ T3252] rust_binder: Error while translating object. [ 61.100183][ T3252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 61.108868][ T3252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:587 [ 61.137419][ T3260] rust_binder: Write failure EFAULT in pid:592 [ 61.149015][ T3260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4238625171 (8477250342 ns) > initial count (5054086112 ns). Using initial count to start timer. [ 61.212223][ T3262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:916 [ 61.220504][ T3265] binder: Unknown parameter '00000000000000000007' [ 61.249374][ T3267] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 61.249400][ T3267] rust_binder: Error while translating object. [ 61.262148][ T3267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.269944][ T3267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 61.329468][ T3272] Bluetooth: hci0: Frame reassembly failed (-90) [ 61.333612][ T3276] block device autoloading is deprecated and will be removed. [ 61.342511][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.345718][ T3276] syz.1.800: attempt to access beyond end of device [ 61.345718][ T3276] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 63.383679][ T586] Bluetooth: hci0: command 0x1003 tx timeout [ 63.383708][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 64.186471][ T3289] rust_binder: Write failure EFAULT in pid:532 [ 64.187256][ T3288] rust_binder: Error while translating object. [ 64.193898][ T3288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.201657][ T3288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:575 [ 64.211013][ T3295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 64.224054][ T3295] rust_binder: Error while translating object. [ 64.230191][ T3295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 64.236479][ T3296] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.244902][ T3295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 64.279890][ T3302] rust_binder: Write failure EINVAL in pid:580 [ 64.287650][ T3306] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.297750][ T3306] rust_binder: Read failure Err(EFAULT) in pid:536 [ 64.300104][ T3304] kvm: kvm [3303]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 64.307507][ T3306] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 64.330773][ T3309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 64.408265][ T3313] SELinux: truncated policydb string identifier [ 64.414552][ T36] audit: type=1326 audit(1750383200.140:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.415713][ T3325] binder: Unknown parameter 'defcontext01777777777777777777777' [ 64.425316][ T36] audit: type=1326 audit(1750383200.140:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.445315][ T3313] SELinux: failed to load policy [ 64.463948][ T36] audit: type=1326 audit(1750383200.140:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.481634][ T36] audit: type=1326 audit(1750383200.140:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.530731][ T36] audit: type=1326 audit(1750383200.140:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.536529][ T3331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:612 [ 64.568197][ T36] audit: type=1326 audit(1750383200.140:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.611863][ T36] audit: type=1326 audit(1750383200.140:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.635447][ T36] audit: type=1326 audit(1750383200.140:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3322 comm="syz.0.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x7ffc0000 [ 64.703543][ T3338] rust_binder: Write failure EINVAL in pid:548 [ 64.758623][ T3342] rust_binder: Failed copying remainder into alloc: EFAULT [ 64.766476][ T3342] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 64.780702][ T3342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 64.792070][ T3344] rust_binder: Error while translating object. [ 64.802109][ T3342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:584 [ 64.808742][ T3344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 64.827053][ T3344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:552 [ 64.914638][ T3351] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.971302][ T3351] SELinux: failed to load policy [ 64.983187][ T3354] rust_binder: Error while translating object. [ 64.983228][ T3354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 64.989777][ T3354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:586 [ 65.047701][ T3358] binder: Bad value for 'stats' [ 65.185883][ T3363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 65.314771][ T3372] SELinux: policydb version 1869770769 does not match my version range 15-33 [ 65.330359][ T3372] SELinux: failed to load policy [ 65.463639][ T3377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:595 [ 65.481255][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 65.481279][ T36] audit: type=1400 audit(1750383201.200:497): avc: granted { setsecparam } for pid=3381 comm="syz.1.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 65.481373][ T3382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 65.611136][ T3395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:625 [ 65.668017][ T45] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 65.689239][ T45] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 65.701196][ T45] hid-generic C98F:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 65.716030][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.717376][ T36] audit: type=1326 audit(1750383201.440:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3396 comm="syz.2.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4406d8e929 code=0x0 [ 65.813654][ T3421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:953 [ 65.851297][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.878021][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.888175][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.896248][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.909728][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.917494][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.925727][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.939138][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.947529][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.955507][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.963338][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.970852][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.978373][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 65.993559][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.001054][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.009481][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.017170][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.024754][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.032169][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.039599][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.047144][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.054731][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.062151][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.069603][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.077035][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.084452][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.091848][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.099287][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.106898][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.114354][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.122030][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.129440][ T45] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 66.137509][ T45] hid-generic 0001:0000:0000.0005: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 66.184115][ T3437] fido_id[3437]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.214378][ T3441] input: syz1 as /devices/virtual/input/input46 [ 66.224420][ T3441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:606 [ 66.301364][ T3455] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.321198][ T3455] rust_binder: Write failure EFAULT in pid:619 [ 66.333194][ T3457] binder: Unknown parameter 'fscontext?}' [ 66.351810][ T3457] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 66.498406][ T3463] binder: Unknown parameter 'sta' [ 66.573487][ T36] audit: type=1400 audit(1750383202.290:499): avc: denied { append } for pid=3468 comm="syz.1.857" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.598643][ T59] Bluetooth: hci1: Frame reassembly failed (-84) [ 66.605566][ T3471] Bluetooth: hci1: Frame reassembly failed (-84) [ 66.614676][ T3471] SELinux: syz.1.858 (3471) set checkreqprot to 1. This is no longer supported. [ 66.617215][ T59] Bluetooth: hci1: Frame reassembly failed (-84) [ 66.624487][ T3471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 66.632988][ T3471] rust_binder: Error while translating object. [ 66.641681][ T36] audit: type=1400 audit(1750383202.360:500): avc: denied { associate } for pid=3472 comm="syz.0.859" name="syz0" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.644827][ T3471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 66.670361][ T3471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:644 [ 66.706889][ T3481] rust_binder: Write failure EFAULT in pid:981 [ 66.811604][ T36] audit: type=1400 audit(1750383202.530:501): avc: denied { setattr } for pid=3486 comm="syz.0.864" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 66.917753][ T3503] SELinux: failed to load policy [ 66.968356][ T3508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1009 [ 67.041943][ T3514] input: syz1 as /devices/virtual/input/input47 [ 67.065053][ T3514] binder: Unknown parameter 'dont_hash' [ 67.255304][ T3520] __vm_enough_memory: pid: 3520, comm: syz.0.877, bytes: 281474976845824 not enough memory for the allocation [ 67.334112][ T3530] rust_binder: Error while translating object. [ 67.334174][ T3530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 67.340503][ T3530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:634 [ 67.393119][ T3532] rust_binder: Write failure EFAULT in pid:1022 [ 67.489864][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.503781][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.511369][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.519053][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.526538][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.534248][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.541650][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.549960][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.558135][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.565656][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.573195][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.580957][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.588477][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.595993][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.603422][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.611497][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.618986][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.626624][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.631662][ T3537] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 67.634475][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.650109][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.657676][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.665342][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.672741][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.681006][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.688658][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.696480][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.703911][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.711295][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.719090][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.726886][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.734503][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.741957][ T568] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 67.750059][ T568] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 67.783552][ T585] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.783594][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 67.814481][ T3540] fido_id[3540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 67.865203][ T36] audit: type=1326 audit(1750383203.590:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.0.886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd06dd8e929 code=0x0 [ 67.986951][ T3551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:639 [ 68.663620][ T585] Bluetooth: hci1: command 0x1003 tx timeout [ 68.663627][ T586] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 68.713168][ T3557] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 68.736472][ T3564] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 68.746249][ T3564] SELinux: failed to load policy [ 68.753163][ T3564] input: syz1 as /devices/virtual/input/input48 [ 68.773999][ T3564] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 68.785305][ T3564] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.799575][ T3570] random: crng reseeded on system resumption [ 68.839421][ T3576] SELinux: failed to load policy [ 68.860621][ T3576] SELinux: failed to load policy [ 68.871520][ T3576] SELinux: failed to load policy [ 68.876828][ T3576] SELinux: failed to load policy [ 68.883908][ T3576] SELinux: failed to load policy [ 68.889007][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 68.898619][ T3575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1037 [ 68.901334][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 68.902506][ T3582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1037 [ 68.923410][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 68.929627][ T3584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587 [ 68.933374][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 68.948075][ T3584] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.962700][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 68.970869][ T3584] rust_binder: Read failure Err(EFAULT) in pid:587 [ 68.979394][ T467] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.979681][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.003013][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.015898][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.026505][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.037217][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.047660][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.058054][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.068716][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.079187][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.092517][ T3586] rust_binder: Error while translating object. [ 69.092549][ T3586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.095371][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.099444][ T3586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:657 [ 69.109210][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.128671][ T3587] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.139139][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.160985][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.173273][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.184981][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.195290][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.205580][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.216109][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.226536][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.227867][ T3595] SELinux: security_context_str_to_sid () failed with errno=-22 [ 69.236836][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.255593][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.267280][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.278258][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.289078][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.299482][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.310082][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.340951][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.351384][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.363191][ T3602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:667 [ 69.371659][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.381947][ T3600] input: syz0 as /devices/virtual/input/input49 [ 69.397648][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.408053][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.418580][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.429731][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.442686][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.459495][ T3576] sel_write_load: 38 callbacks suppressed [ 69.459513][ T3576] SELinux: failed to load policy [ 69.473664][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.484827][ T3576] SELinux: failed to load policy [ 69.491132][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.502672][ T3576] SELinux: failed to load policy [ 69.507911][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.518538][ T3576] SELinux: failed to load policy [ 69.523682][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.534343][ T3576] SELinux: failed to load policy [ 69.539441][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.549865][ T3576] SELinux: failed to load policy [ 69.555155][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.565627][ T3576] SELinux: failed to load policy [ 69.571297][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.581806][ T3576] SELinux: failed to load policy [ 69.587060][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.597792][ T3576] SELinux: failed to load policy [ 69.602845][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.613420][ T3576] SELinux: failed to load policy [ 69.618683][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.635539][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.646471][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.659714][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.660451][ T3612] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 69.670928][ T3576] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 69.675979][ T3612] rust_binder: Write failure EINVAL in pid:676 [ 69.730156][ T3618] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿßdor=0001 Product=0001 Version=abba [ 69.730156][ T3618] N: Name=AT Translated Set 2 keyboard [ 69.730156][ T3618] P: Phys=isa0060/serio0/input0 [ 69.730156][ T3618] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 69.730156][ T3618] U: Uniq= [ 69.730156][ T3618] H: Handlers=leds event2 [ 69.730156][ T3618] B: PROP=0 [ 69.730156][ T3618] B: EV=120013 [ 69.730156][ T3618] B: KEY=402000002 3803078f800d001 feffffdfffefffff fffffffffffffffe [ 69.730156][ T3618] B: MSC=10 [ 69.730156][ T3618] B: LED=7 [ 69.730156][ T3618] [ 69.730156][ T3618] ) failed with errno=-22 [ 69.798631][ T3620] rust_binder: Error while translating object. [ 69.798661][ T3620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 69.812057][ T3620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:678 [ 69.963224][ T3646] rust_binder: Error in use_page_slow: ESRCH [ 69.963257][ T3646] rust_binder: use_range failure ESRCH [ 69.969581][ T3646] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 69.975484][ T3646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 69.984234][ T3646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:667 [ 70.117850][ T36] audit: type=1326 audit(1750383205.840:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3664 comm="syz.0.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06dd8e929 code=0x0 [ 70.167070][ T3674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.167109][ T3674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:688 [ 70.177046][ T3674] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.186502][ T3674] rust_binder: Read failure Err(EFAULT) in pid:688 [ 70.218267][ T3679] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 70.229729][ T3679] rust_binder: Read failure Err(EFAULT) in pid:684 [ 70.263674][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.288123][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.304751][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.311067][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.333611][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.342079][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.360656][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.373666][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.393660][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.410082][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.411058][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.426267][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.443742][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.444724][ T3693] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.450009][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.450036][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.493602][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.503562][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.515184][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.532452][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.541756][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.549590][ T3701] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 70.562133][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.562534][ T3701] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:709 [ 70.573586][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.594132][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.600412][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.606655][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.613162][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.619503][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.625766][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.631972][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.638449][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.644839][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.651159][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.657546][ T3678] rust_binder: Write failure EINVAL in pid:684 [ 70.746309][ T3719] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 70.868659][ T3723] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 70.868656][ T3724] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 70.910383][ T36] audit: type=1326 audit(1750383206.630:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x7ffc0000 [ 70.949302][ T3728] binder: Bad value for 'context' [ 70.956382][ T36] audit: type=1326 audit(1750383206.630:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x7ffc0000 [ 70.960071][ T3730] binder: Bad value for 'context' [ 70.980391][ T36] audit: type=1326 audit(1750383206.670:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa61898e929 code=0x7ffc0000 [ 70.985149][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 71.009373][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.021591][ T36] audit: type=1326 audit(1750383206.680:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x7ffc0000 [ 71.083718][ T36] audit: type=1326 audit(1750383206.680:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x7ffc0000 [ 71.125188][ T36] audit: type=1326 audit(1750383206.850:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa61898e929 code=0x0 [ 71.499068][ T3774] rust_binder: Write failure EFAULT in pid:605 [ 71.805727][ T3780] rust_binder: Error while translating object. [ 71.812619][ T3780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.819212][ T3780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:610 [ 72.469115][ T3822] binder: Unknown parameter 'nXI' [ 72.569230][ T36] audit: type=1326 audit(1750383208.290:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.3.974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x0 [ 72.603666][ T36] audit: type=1326 audit(1750383208.290:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3831 comm="syz.3.974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x0 [ 72.622274][ T3834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.796714][ T3845] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 72.829908][ T3846] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 72.848802][ T3856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:737 [ 72.866848][ T3859] rust_binder: inc_ref_done called when no active inc_refs [ 73.046030][ T3866] binder: Bad value for 'max' [ 73.537619][ T3884] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 73.537647][ T3884] rust_binder: Error while translating object. [ 73.548648][ T3884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.555038][ T3884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:754 [ 73.643265][ T2464] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 73.661232][ T2464] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 73.669048][ T2464] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 73.676928][ T2464] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 73.684481][ T2464] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 73.692934][ T2464] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 73.716420][ T3899] fido_id[3899]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 73.920342][ T3906] binder: Unknown parameter 'dont_hash' [ 74.027214][ T3910] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 74.031085][ T3919] input: syz0 as /devices/virtual/input/input52 [ 74.085019][ T3923] binder: Bad value for 'max' [ 74.335981][ T3935] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 74.336016][ T3935] rust_binder: Error while translating object. [ 74.357897][ T3935] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.375535][ T3935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1122 [ 74.587957][ T3943] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 74.599104][ T3943] rust_binder: Error while translating object. [ 74.623661][ T3943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.636144][ T3943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 74.905760][ T3969] binder: Binderfs stats mode cannot be changed during a remount [ 74.941039][ T3972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.941076][ T3972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1133 [ 74.952386][ T3972] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 74.970232][ T3972] rust_binder: Read failure Err(EFAULT) in pid:1133 [ 75.177888][ T3983] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 75.209685][ T3983] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 75.252669][ T36] audit: type=1400 audit(1750383210.970:512): avc: granted { setsecparam } for pid=3984 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 75.296267][ T36] audit: type=1400 audit(1750383210.970:513): avc: denied { execute } for pid=3989 comm="syz.0.1026" path=2F3330312F08 dev="tmpfs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.410292][ T4004] rust_binder: Write failure EFAULT in pid:787 [ 75.429924][ T4002] kvm: user requested TSC rate below hardware speed [ 75.453825][ T4002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:651 [ 77.248201][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 77.248223][ T36] audit: type=1400 audit(1750383212.970:520): avc: denied { read } for pid=4020 comm="syz.0.1038" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.318002][ T36] audit: type=1400 audit(1750383212.970:521): avc: denied { read open } for pid=4020 comm="syz.0.1038" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.343767][ T4024] rust_binder: Write failure EINVAL in pid:797 [ 77.365661][ T4026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 77.380204][ T36] audit: type=1400 audit(1750383212.970:522): avc: denied { ioctl } for pid=4020 comm="syz.0.1038" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.440258][ T36] audit: type=1400 audit(1750383213.010:523): avc: denied { read } for pid=4021 comm="syz.1.1039" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.456355][ T4031] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:656 [ 77.492165][ T36] audit: type=1400 audit(1750383213.010:524): avc: denied { read open } for pid=4021 comm="syz.1.1039" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 77.526604][ T4034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.533224][ T4034] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 77.543004][ T4034] audit: backlog limit exceeded [ 77.548713][ T36] audit: type=1400 audit(1750383213.010:525): avc: denied { read } for pid=4022 comm="syz.3.1041" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.563757][ T4037] audit: audit_backlog=65 > audit_backlog_limit=64 [ 77.607864][ T4037] rust_binder: Write failure EFAULT in pid:1149 [ 77.659667][ T4035] rust_binder: Write failure EINVAL in pid:799 [ 77.794054][ T4049] kvm: apic: phys broadcast and lowest prio [ 77.849313][ T4052] binder: Bad value for 'max' [ 77.965090][ T4056] input: syz0 as /devices/virtual/input/input54 [ 77.996144][ T4056] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 77.996170][ T4056] rust_binder: Error while translating object. [ 78.004946][ T4043] rust_binder: Read failure Err(EFAULT) in pid:658 [ 78.027033][ T4057] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 78.029992][ T4056] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.061634][ T4056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 78.063352][ T4057] rust_binder: Error while translating object. [ 78.093881][ T4057] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.100438][ T4057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:805 [ 78.671678][ T4085] rust_binder: Error while translating object. [ 78.681659][ T4085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 78.711427][ T4085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:813 [ 78.783534][ T4083] binder: Bad value for 'max' [ 79.006092][ T4097] binder: Unknown parameter 'maxV000777777' [ 79.028201][ T4095] rust_binder: Write failure EFAULT in pid:1162 [ 79.121295][ T4101] binder: Bad value for 'stats' [ 79.163308][ T4101] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 79.420513][ T4121] input: syz1 as /devices/virtual/input/input56 [ 79.506602][ T4129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.691526][ T4136] rust_binder: Error while translating object. [ 79.722916][ T4132] rust_binder: Error while translating object. [ 79.765549][ T4132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.765589][ T4132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 79.792180][ T4136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.819293][ T4136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 80.015215][ T4154] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 80.138986][ T4165] kvm: kvm [4162]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 80.213776][ T4165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:806 [ 80.261853][ T4171] binder: Unknown parameter '01777777777777777777777' [ 80.334048][ T4173] rust_binder: Write failure EINVAL in pid:681 [ 80.345578][ T4174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.791527][ T4199] rust_binder: Error while translating object. [ 80.791581][ T4199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 80.808352][ T4199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1191 [ 80.855302][ T4200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.894120][ T4200] rust_binder: Write failure EINVAL in pid:691 [ 81.195185][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.288644][ T4222] input: syz0 as /devices/virtual/input/input58 [ 81.534229][ T4230] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 81.635940][ T4230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.683199][ T4234] rust_binder: Write failure EINVAL in pid:702 [ 81.820463][ T4244] rust_binder: Write failure EINVAL in pid:709 [ 81.889919][ T4248] input: syz0 as /devices/virtual/input/input60 [ 81.928090][ T4250] rust_binder: Error while translating object. [ 81.928137][ T4250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.948565][ T4250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:711 [ 82.071403][ T4257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:851 [ 82.277742][ T36] kauditd_printk_skb: 977 callbacks suppressed [ 82.277764][ T36] audit: type=1400 audit(1750383218.000:1501): avc: denied { read } for pid=4271 comm="syz.1.1119" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.324093][ T4273] random: crng reseeded on system resumption [ 82.332259][ T36] audit: type=1400 audit(1750383218.000:1502): avc: denied { read open } for pid=4271 comm="syz.1.1119" path="/dev/binderfs/binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.377808][ T4276] rust_binder: Write failure EFAULT in pid:853 [ 82.383585][ T36] audit: type=1400 audit(1750383218.040:1503): avc: denied { read } for pid=4270 comm="syz.2.1118" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.405999][ T4277] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1222 [ 82.453572][ T36] audit: type=1400 audit(1750383218.040:1504): avc: denied { read open } for pid=4270 comm="syz.2.1118" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.507677][ T4272] rust_binder: Write failure EFAULT in pid:723 [ 82.530442][ T36] audit: type=1400 audit(1750383218.040:1505): avc: denied { ioctl } for pid=4270 comm="syz.2.1118" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.620868][ T36] audit: type=1400 audit(1750383218.040:1506): avc: denied { associate } for pid=4271 comm="syz.1.1119" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 82.669522][ T36] audit: type=1400 audit(1750383218.040:1507): avc: denied { write } for pid=4271 comm="syz.1.1119" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.725241][ T36] audit: type=1400 audit(1750383218.050:1508): avc: denied { write open } for pid=4271 comm="syz.1.1119" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 82.789114][ T36] audit: type=1400 audit(1750383218.100:1509): avc: denied { ioctl } for pid=4271 comm="syz.1.1119" path="/dev/binderfs/binder0" dev="binder" ino=46 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.873644][ T36] audit: type=1400 audit(1750383218.110:1510): avc: denied { read } for pid=4275 comm="syz.0.1120" name="binder1" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.043862][ T4285] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 83.043893][ T4285] rust_binder: Error while translating object. [ 83.085295][ T4285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 83.106164][ T4285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 83.223627][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.239099][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 83.484616][ T4309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:863 [ 83.535736][ T4316] binder: Unknown parameter 'fowner>00000000000000060928' [ 83.651781][ T4319] input: syz0 as /devices/virtual/input/input62 [ 83.910433][ T4337] input: syz1 as /devices/virtual/input/input61 [ 84.173326][ T4348] rust_binder: Write failure EINVAL in pid:869 [ 84.173791][ T4349] rust_binder: Write failure EINVAL in pid:869 [ 84.321512][ T4353] binder: Unknown parameter '00000000000000000000005' [ 84.496905][ T4360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:874 [ 84.503757][ T4360] rust_binder: Read failure Err(EFAULT) in pid:874 [ 84.886675][ T4386] input: syz1 as /devices/virtual/input/input64 [ 85.057440][ T4394] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 85.247248][ T4401] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.247281][ T4401] rust_binder: Read failure Err(EFAULT) in pid:746 [ 86.184318][ T4434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:853 [ 86.527140][ T4447] binder: Unknown parameter 'dont`hash' [ 86.712454][ T4456] input: syz1 as /devices/virtual/input/input67 [ 86.780628][ T4456] SELinux: security_context_str_to_sid () failed with errno=-22 [ 87.028810][ T4471] SELinux: security_context_str_to_sid (system_uÝGй ‰:ÿß) failed with errno=-22 [ 87.087798][ T4475] input: syz0 as /devices/virtual/input/input69 [ 87.141587][ T4477] rust_binder: Error while translating object. [ 87.141636][ T4477] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 87.161662][ T4477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:859 [ 87.229926][ T4482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.241294][ T4482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.321405][ T36] kauditd_printk_skb: 739 callbacks suppressed [ 87.321427][ T36] audit: type=1400 audit(1750383223.040:2250): avc: denied { read write } for pid=4486 comm="syz.0.1187" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.359146][ T4487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.359294][ T4489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.382155][ T4487] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 87.402119][ T4487] audit: backlog limit exceeded [ 87.411963][ T36] audit: type=1400 audit(1750383223.040:2251): avc: denied { ioctl open } for pid=4486 comm="syz.0.1187" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 87.435583][ T4489] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 87.451228][ T4487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.458924][ T4487] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 87.468845][ T4489] audit: backlog limit exceeded [ 87.648410][ T4500] rust_binder: Write failure EFAULT in pid:893 [ 87.828416][ T4513] binder: Unknown parameter 'measure' [ 87.945959][ T4524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780 [ 88.054796][ T4524] rust_binder: Error while translating object. [ 88.083578][ T4524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.089881][ T4524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:780 [ 88.160432][ T4534] SELinux: ebitmap: truncated map [ 88.196499][ T4534] sel_write_load: 6 callbacks suppressed [ 88.196525][ T4534] SELinux: failed to load policy [ 88.313908][ T4534] rust_binder: Write failure EFAULT in pid:871 [ 88.320679][ T4544] input: syz1 as /devices/virtual/input/input70 [ 88.469616][ T4555] rust_binder: Read failure Err(EAGAIN) in pid:874 [ 88.544739][ T4553] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 88.649390][ T4561] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 88.654326][ T4559] rust_binder: Write failure EINVAL in pid:789 [ 88.657461][ T4561] rust_binder: Write failure EINVAL in pid:877 [ 88.728130][ T4563] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.788047][ T4563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1324 [ 88.825986][ T4563] rust_binder: Read failure Err(EFAULT) in pid:1324 [ 88.855383][ T4563] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 88.902461][ T4573] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.931613][ T4563] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 88.949545][ T4563] rust_binder: Write failure EINVAL in pid:1324 [ 88.970561][ T4575] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 88.996775][ T4575] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 89.194978][ T4583] rust_binder: Error while translating object. [ 89.195034][ T4583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.201292][ T4583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:888 [ 89.246613][ T4586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:915 [ 89.353856][ T4592] input: syz0 as /devices/virtual/input/input71 [ 89.386567][ T4591] rust_binder: Failed copying remainder into alloc: EFAULT [ 89.386592][ T4591] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 89.389473][ T4592] SELinux: policydb table sizes (4,0) do not match mine (8,7) [ 89.413411][ T4591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 89.413447][ T4591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:920 [ 89.435814][ T4595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:920 [ 89.498301][ T4592] SELinux: failed to load policy [ 89.628770][ T4605] rust_binder: Write failure EFAULT in pid:1331 [ 89.866948][ T4615] binder: Unknown parameter 'non' [ 89.893290][ T4614] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 89.893325][ T4614] rust_binder: Error in use_page_slow: EBUSY [ 89.912133][ T4614] rust_binder: use_range failure EBUSY [ 89.933220][ T4614] rust_binder: Failed to allocate buffer. len:56, is_oneway:true [ 89.943024][ T4614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 89.967260][ T4614] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 89.984102][ T4614] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:925 [ 91.344546][ T467] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.366910][ T4789] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.323904][ T36] kauditd_printk_skb: 1068 callbacks suppressed [ 92.323925][ T36] audit: type=1400 audit(1750383228.050:3319): avc: denied { read } for pid=4893 comm="syz.1.1331" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 92.374889][ T36] audit: type=1400 audit(1750383228.050:3320): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.400522][ T36] audit: type=1400 audit(1750383228.090:3321): avc: denied { read } for pid=4893 comm="syz.1.1331" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 92.424812][ T36] audit: type=1400 audit(1750383228.090:3322): avc: denied { read } for pid=4901 comm="syz.3.1332" name="binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 92.454429][ T36] audit: type=1400 audit(1750383228.100:3323): avc: denied { read } for pid=4893 comm="syz.1.1331" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 92.479197][ T36] audit: type=1400 audit(1750383228.110:3324): avc: denied { read write } for pid=810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.504992][ T36] audit: type=1400 audit(1750383228.130:3325): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 92.539933][ T36] audit: type=1400 audit(1750383228.150:3326): avc: denied { mounton } for pid=4904 comm="syz.2.1333" path="/284/binderfs2" dev="tmpfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 92.574179][ T36] audit: type=1400 audit(1750383228.170:3327): avc: denied { read } for pid=4901 comm="syz.3.1332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 92.599396][ T36] audit: type=1400 audit(1750383228.180:3328): avc: denied { read write } for pid=810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.383565][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 93.389678][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.230012][ T467] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.239523][ T467] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 95.585763][ T467] bridge_slave_1: left allmulticast mode [ 95.596791][ T467] bridge_slave_1: left promiscuous mode [ 95.611193][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.620320][ T467] bridge_slave_0: left allmulticast mode [ 95.626402][ T467] bridge_slave_0: left promiscuous mode [ 95.632205][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.846452][ T467] veth1_macvtap: left promiscuous mode [ 95.852096][ T467] veth0_vlan: left promiscuous mode [ 96.263562][ T585] Bluetooth: hci0: command 0x1003 tx timeout [ 96.263634][ T586] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.993528][ T36] kauditd_printk_skb: 680 callbacks suppressed [ 97.993549][ T36] audit: type=1400 audit(1750383233.710:4009): avc: denied { execmem } for pid=5427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 98.039237][ T36] audit: type=1400 audit(1750383233.720:4010): avc: denied { read } for pid=5430 comm="syz.2.1486" name="binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 98.062152][ T36] audit: type=1400 audit(1750383233.720:4011): avc: denied { read write } for pid=5429 comm="syz.3.1487" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 98.086382][ T36] audit: type=1400 audit(1750383233.720:4012): avc: denied { write } for pid=5430 comm="syz.2.1486" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 98.109968][ T36] audit: type=1400 audit(1750383233.720:4013): avc: denied { read } for pid=5429 comm="syz.3.1487" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 98.132791][ T36] audit: type=1400 audit(1750383233.720:4014): avc: denied { read } for pid=5429 comm="syz.3.1487" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 98.157028][ T36] audit: type=1400 audit(1750383233.720:4015): avc: denied { read } for pid=5429 comm="syz.3.1487" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 98.179854][ T36] audit: type=1400 audit(1750383233.720:4016): avc: denied { read } for pid=5429 comm="syz.3.1487" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 98.203165][ T36] audit: type=1400 audit(1750383233.720:4017): avc: denied { read write } for pid=810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.227937][ T36] audit: type=1400 audit(1750383233.750:4018): avc: denied { read append } for pid=5429 comm="syz.3.1487" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 103.105269][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 103.105291][ T36] audit: type=1400 audit(1750383238.820:4112): avc: denied { execmem } for pid=5475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 103.137410][ T36] audit: type=1326 audit(1750383238.860:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.193619][ T36] audit: type=1326 audit(1750383238.860:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.217450][ T36] audit: type=1326 audit(1750383238.890:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.241137][ T36] audit: type=1400 audit(1750383238.890:4116): avc: denied { mounton } for pid=5478 comm="syz.3.1502" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 103.264604][ T36] audit: type=1326 audit(1750383238.890:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.288125][ T36] audit: type=1326 audit(1750383238.890:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.311938][ T36] audit: type=1326 audit(1750383238.890:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 103.335447][ T36] audit: type=1400 audit(1750383238.890:4120): avc: denied { read write } for pid=5478 comm="syz.3.1502" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 103.358878][ T36] audit: type=1326 audit(1750383238.890:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f720d78e929 code=0x7ffc0000 [ 108.983542][ T36] kauditd_printk_skb: 120 callbacks suppressed [ 108.983566][ T36] audit: type=1400 audit(1750383244.700:4242): avc: denied { execmem } for pid=5515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 109.015792][ T36] audit: type=1400 audit(1750383244.710:4243): avc: denied { read } for pid=5517 comm="syz.3.1514" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 109.039992][ T36] audit: type=1400 audit(1750383244.710:4244): avc: denied { read } for pid=5517 comm="syz.3.1514" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 109.063887][ T36] audit: type=1400 audit(1750383244.720:4245): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.091412][ T36] audit: type=1400 audit(1750383244.740:4246): avc: denied { read write } for pid=5516 comm="syz.2.1513" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 109.115778][ T36] audit: type=1400 audit(1750383244.740:4247): avc: denied { read } for pid=5518 comm="syz.1.1512" name="binder0" dev="binder" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 109.138866][ T36] audit: type=1400 audit(1750383244.770:4248): avc: denied { read } for pid=5516 comm="syz.2.1513" name="binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 109.161985][ T36] audit: type=1400 audit(1750383244.770:4249): avc: denied { read write } for pid=810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 109.186190][ T36] audit: type=1400 audit(1750383244.790:4250): avc: denied { read append } for pid=5518 comm="syz.1.1512" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 109.209563][ T36] audit: type=1400 audit(1750383244.800:4251): avc: denied { read } for pid=5518 comm="syz.1.1512" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 114.429216][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 114.429234][ T36] audit: type=1400 audit(1750383250.150:4281): avc: denied { execmem } for pid=5549 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 114.459490][ T36] audit: type=1400 audit(1750383250.180:4282): avc: denied { read write } for pid=5551 comm="syz.2.1522" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 114.509842][ T36] audit: type=1400 audit(1750383250.190:4283): avc: denied { read } for pid=5550 comm="syz.1.1521" name="binder1" dev="binder" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 114.532845][ T36] audit: type=1400 audit(1750383250.190:4284): avc: denied { read } for pid=5551 comm="syz.2.1522" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 114.555756][ T36] audit: type=1400 audit(1750383250.200:4285): avc: denied { read append } for pid=5554 comm="syz.3.1523" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 114.579328][ T36] audit: type=1400 audit(1750383250.200:4286): avc: denied { read } for pid=5554 comm="syz.3.1523" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 114.602209][ T36] audit: type=1400 audit(1750383250.200:4287): avc: denied { read } for pid=5554 comm="syz.3.1523" name="binder0" dev="binder" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 114.625055][ T36] audit: type=1400 audit(1750383250.210:4288): avc: denied { read write } for pid=290 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.649275][ T36] audit: type=1400 audit(1750383250.220:4289): avc: denied { read write } for pid=5550 comm="syz.1.1521" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 114.672582][ T36] audit: type=1400 audit(1750383250.220:4290): avc: denied { read write } for pid=810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.505343][ T5562] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 116.615208][ T304] bridge_slave_1: left allmulticast mode [ 116.620918][ T304] bridge_slave_1: left promiscuous mode [ 116.643612][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.654951][ T304] bridge_slave_0: left allmulticast mode [ 116.660907][ T304] bridge_slave_0: left promiscuous mode [ 116.667881][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.796100][ T304] veth1_macvtap: left promiscuous mode [ 116.801656][ T304] veth0_vlan: left promiscuous mode [ 117.106198][ T304] bridge_slave_1: left allmulticast mode [ 117.111911][ T304] bridge_slave_1: left promiscuous mode [ 117.117919][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.125557][ T304] bridge_slave_0: left allmulticast mode [ 117.131724][ T304] bridge_slave_0: left promiscuous mode [ 117.137492][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.145380][ T304] bridge_slave_1: left allmulticast mode [ 117.151015][ T304] bridge_slave_1: left promiscuous mode [ 117.156753][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.164358][ T304] bridge_slave_0: left allmulticast mode [ 117.169991][ T304] bridge_slave_0: left promiscuous mode [ 117.176157][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.346959][ T304] veth1_macvtap: left promiscuous mode [ 117.352619][ T304] veth0_vlan: left promiscuous mode [ 117.358251][ T304] veth1_macvtap: left promiscuous mode [ 117.363884][ T304] veth0_vlan: left promiscuous mode