last executing test programs: 1m6.64205173s ago: executing program 1 (id=788): prctl$PR_SET_DUMPABLE(0x4, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 1m6.557861381s ago: executing program 1 (id=790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x4000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x100000000000, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x440) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00^;\x00']) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000002400)={0xb4, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0x3e}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @fd}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x3c}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x13e, 0x0, &(0x7f0000000380)="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"}) 1m6.337257844s ago: executing program 1 (id=792): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48}]}) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r9, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x8222, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000280)=0x3) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r13, 0x5000aea5, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SIGNAL_MSI(r11, 0x4020aea5, &(0x7f0000000000)={0xf000, 0x80a0000, 0x30}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000840)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRESHEX=r9, @ANYRES32=r7, @ANYRESOCT=r13, @ANYRES8=r13, @ANYRES16=r12, @ANYRES64=r5, @ANYRES16=r4, @ANYRESHEX=0x0, @ANYBLOB="de8ec6f9ec1058fb61e4d2415f2229045f0cd3a4e69586d6b375981725d0d45ed5ad133034b7a85a6b63620bdbc21cba2b0cdc1fcb331c81a70142cdc11c41788d7e4e82798269dacd75503c8584e5a64df3abb0d2bfd91fcdd029bee5f83e21f41782b2d7f82b8654bb00229e7f1fd9f070a41c01efc34fc368c8ba1ade7823fdc8b9995f54d85324a660c71ba234a814099efcbbeba8a0feb881c277ad84205eb8", @ANYBLOB="4b7411259eee820513b7f7b3be7ddb2b60ae49222c79ff0fe2e25d2de7e93dd7441bd785fc9494a0fe7897e759395cb7b1362bc1ff0d3df02fa7b0532fe0348a447d38bc1c3de739a0835ffbb325bdb05853bd4fe5176c869e530d0a550866ebd72be582c11042bff545d496999505f7ad6a41535d458a4324b5b0d6b18fac9cd4ed65f358f4b515637aff854a4f61073d1f7f12339194f5704c16a0c1b082f81d693b37311b7bdb6390a672e2c138ff6678b8f2a012e6376f3ef3368f98e3b9cdf576299ff0be1d"]) r14 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r16, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0xc0010005, 0x0, 0x1}]}) r17 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000200)={0x2, r17}) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r11, 0xf8) 1m5.794880493s ago: executing program 1 (id=797): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f00000000c0)={0x5, 0xe, 0x1, 0x2, 0x4}) (rerun: 32) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26ee, 0x6, 0xeeef0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88200, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0x4018aee3, &(0x7f00000001c0)=""/194) (async, rerun: 64) ioctl$BLKRRPART(r0, 0x125f, 0x0) (rerun: 64) 1m5.540472527s ago: executing program 1 (id=801): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x8) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'rlimit'}, {0x2d, 'freezer'}, {0x2b, 'freezer'}]}, 0x1a) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x18100, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r0, 0x0) 1m5.476495238s ago: executing program 1 (id=802): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f00000021c0)={0x20, 0x24, r1, {0x4, 0x0, 0x9, 0x2}}, 0x20) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) (async) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x10, 0x7c, 0x1, 0x81, 0x5, 0x8, 0x0, 0x2, 0xfc, 0x3, 0xfd, 0x5}, {0x5b5d, 0xd4, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x0, 0x38, 0x8, 0x40, 0x2, 0x8}, {0x5, 0x9, 0x1, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x2, 0x7f, 0x7e, 0xa, 0xc}], 0x5}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x209, 0x0, 0x100400}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000002300)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x104804, &(0x7f0000002200)=ANY=[@ANYRESHEX=r2]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) 1m1.214369333s ago: executing program 3 (id=839): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000001180)={0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x3}) 1m0.696884791s ago: executing program 3 (id=842): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x58, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 59.173866664s ago: executing program 3 (id=850): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000955000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r0, 0x85f36000) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_CAP_PMU_CAPABILITY(r0, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0x1}) 59.091905995s ago: executing program 3 (id=852): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0xeeee8000, 0x5, 0xfffff402, 0x1, 0x0, [{0x5, 0x9, 0x3, '\x00', 0x6}, {0x5, 0x0, 0x41, '\x00', 0x8}, {0x3, 0xb3, 0x1, '\x00', 0xdc}, {0x3, 0x4, 0x2, '\x00', 0x8}, {0x3, 0x7, 0x9f}, {0x40, 0xff, 0x0, '\x00', 0x7}, {0x7, 0x1, 0x4, '\x00', 0x2}, {0x3, 0x6, 0x4, '\x00', 0x3}, {0x4, 0x8, 0x2, '\x00', 0x6}, {0xcb, 0x4, 0x6, '\x00', 0x10}, {0xd, 0x10, 0x7, '\x00', 0xe}, {0xa4, 0x8, 0xb, '\x00', 0x9}, {0xc9, 0x0, 0x59, '\x00', 0x7f}, {0x85, 0xb, 0xa, '\x00', 0x9}, {0xe1, 0x59, 0x1, '\x00', 0x8}, {0x2, 0xa3, 0xa}, {0x0, 0x1, 0xf9, '\x00', 0x3}, {0x9, 0x2, 0x2c, '\x00', 0x5}, {0xf, 0x2, 0x80, '\x00', 0x9}, {0x0, 0x7, 0x3, '\x00', 0xb}, {0x8, 0x6, 0xf, '\x00', 0x5}, {0x5, 0x1a, 0x0, '\x00', 0xa3}, {0x4c, 0x0, 0xff, '\x00', 0x5}, {0xf9, 0x1, 0x4, '\x00', 0x7}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x40002], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0xeeee8000, 0x5, 0xfffff402, 0x1, 0x0, [{0x5, 0x9, 0x3, '\x00', 0x6}, {0x5, 0x0, 0x41, '\x00', 0x8}, {0x3, 0xb3, 0x1, '\x00', 0xdc}, {0x3, 0x4, 0x2, '\x00', 0x8}, {0x3, 0x7, 0x9f}, {0x40, 0xff, 0x0, '\x00', 0x7}, {0x7, 0x1, 0x4, '\x00', 0x2}, {0x3, 0x6, 0x4, '\x00', 0x3}, {0x4, 0x8, 0x2, '\x00', 0x6}, {0xcb, 0x4, 0x6, '\x00', 0x10}, {0xd, 0x10, 0x7, '\x00', 0xe}, {0xa4, 0x8, 0xb, '\x00', 0x9}, {0xc9, 0x0, 0x59, '\x00', 0x7f}, {0x85, 0xb, 0xa, '\x00', 0x9}, {0xe1, 0x59, 0x1, '\x00', 0x8}, {0x2, 0xa3, 0xa}, {0x0, 0x1, 0xf9, '\x00', 0x3}, {0x9, 0x2, 0x2c, '\x00', 0x5}, {0xf, 0x2, 0x80, '\x00', 0x9}, {0x0, 0x7, 0x3, '\x00', 0xb}, {0x8, 0x6, 0xf, '\x00', 0x5}, {0x5, 0x1a, 0x0, '\x00', 0xa3}, {0x4c, 0x0, 0xff, '\x00', 0x5}, {0xf9, 0x1, 0x4, '\x00', 0x7}]}}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x2, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x40002], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) (async) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) (async) 58.717229831s ago: executing program 3 (id=856): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x63761469321c3ff0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xaa, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x5, 0x2000008, 0x3}}, 0x30) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x400000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0xa0001, 0x0, [0x8, 0x8, 0x6, 0x4, 0x20000005, 0x801, 0xfffffffffffefffd, 0x3ff]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702f1ffe80000000000000ffffa1dce408db", @ANYRESDEC], 0xffdd) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="678e22374093f9bd296b404448107d"]) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000100)=ANY=[@ANYBLOB="678e22374093f9bd296b404448107d"]) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 58.341290467s ago: executing program 3 (id=859): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x14100, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002140)={0xb8, 0x0, r3, [{0x3, 0xf8d8, 0x4, 0x7b, ':$.\\'}, {0x6, 0x7, 0xa, 0xffff0001, '/dev/null\x00'}, {0x1, 0xfffffffffffffffa, 0x7, 0x1, '^.::\'\\$'}, {0x3, 0x9, 0x1, 0x2, '/'}, {0x2, 0xdb50, 0x1, 0x4, '&'}]}, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002300)={0xc, 0x0, &(0x7f0000002200)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x95, 0x0, &(0x7f0000002240)="65dd27065e897a3e201cf0e80c61971a5ea7d5a783ef8b0bcc27cfe9a8f45de039e6b80f4c94798480a4968e8dfebc3a76f40330f9bb19c873b7796d7114abff1f007f214853b752c4ac7ea39974ccaf19144472534ba90cef9e63fcbddcaf2d2a7b67bbe27744e228dedeb3c23b2948cd4bd52b3a82f2f76bf2e119d7e87646fb85dfc7bf18d5f4b690cdb79e62e37cf581748a1b"}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000002340)) write$FUSE_LSEEK(r2, &(0x7f0000002380)={0x18, 0x0, r3, {0x2}}, 0x18) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000023c0)) r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002600)={0x50, 0x0, &(0x7f0000002540)=[@free_buffer={0x40086303, r5}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002480)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/54, 0x36, 0x2, 0x2b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000002500)={0x0, 0x18, 0x40}}}], 0x0, 0x0, &(0x7f00000025c0)}) write$UHID_CREATE2(r1, &(0x7f0000002640)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x4d, 0x9, 0x4, 0x0, 0x3, 0x0, "f76b8e6b389152d4e84c1c012f426f6351b0ad9d991333e85e5ac253a2d27dc59081ae2f074218777df9b843558567a45490eb97da695d340d1add9db2afc523f6308b94bb812046eb339bf571"}}, 0x165) read(r1, &(0x7f00000027c0)=""/69, 0x45) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000002840)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f00000028c0)={0xd5, 0x0, 0x20}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002a80)={0x24, 0x0, &(0x7f0000002940)=[@exit_looper, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @register_looper], 0xed, 0x0, &(0x7f0000002980)="9aab3584515025b864d02311f07ed636e0c30c204a4dcd6b3b22e6c4381ecf27e6b500bb3b62ed0690438cd0ec3045979dd1734c28a7f097e869f268932ee71e37781537b73eb0eadb177ee9724d166c0d8d80e40926acf99aa5c9b73c136bc5f110ec5edcf54df825505faf2cf2bbfd15eae9ba5d59a6d896f618c190ec21dbc1c315eb4f2b790dbfb789973c69f1b56b5c7b9af53aa1c368ad107d6f4992c9a4bf52da77706044fda82e8762a70248264853c2a95ad9c74ce254f865a563105597851e8ba68a4ba2ba6f958bc8b7a0cea9ccfc98e391748e53d82412ecca6fbc48de918401388bafbf1cd968"}) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002b00)={0x0, "0441d967cb44b1a97b43f9b06ba7678e"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000003b00)={{r8}, {@val={r9}, @max}}) close(r6) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000003b40)=r4) 50.427988458s ago: executing program 32 (id=802): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f00000021c0)={0x20, 0x24, r1, {0x4, 0x0, 0x9, 0x2}}, 0x20) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) (async) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000100)={[{0x3, 0x10, 0x7c, 0x1, 0x81, 0x5, 0x8, 0x0, 0x2, 0xfc, 0x3, 0xfd, 0x5}, {0x5b5d, 0xd4, 0x7f, 0x3, 0x9, 0x8, 0x5, 0x0, 0x38, 0x8, 0x40, 0x2, 0x8}, {0x5, 0x9, 0x1, 0x0, 0x3, 0x7f, 0x8, 0x1, 0x2, 0x7f, 0x7e, 0xa, 0xc}], 0x5}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x209, 0x0, 0x100400}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000002300)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x104804, &(0x7f0000002200)=ANY=[@ANYRESHEX=r2]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) 43.345724727s ago: executing program 33 (id=859): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x14100, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f0000002140)={0xb8, 0x0, r3, [{0x3, 0xf8d8, 0x4, 0x7b, ':$.\\'}, {0x6, 0x7, 0xa, 0xffff0001, '/dev/null\x00'}, {0x1, 0xfffffffffffffffa, 0x7, 0x1, '^.::\'\\$'}, {0x3, 0x9, 0x1, 0x2, '/'}, {0x2, 0xdb50, 0x1, 0x4, '&'}]}, 0xb8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002300)={0xc, 0x0, &(0x7f0000002200)=[@exit_looper, @acquire={0x40046305, 0x3}], 0x95, 0x0, &(0x7f0000002240)="65dd27065e897a3e201cf0e80c61971a5ea7d5a783ef8b0bcc27cfe9a8f45de039e6b80f4c94798480a4968e8dfebc3a76f40330f9bb19c873b7796d7114abff1f007f214853b752c4ac7ea39974ccaf19144472534ba90cef9e63fcbddcaf2d2a7b67bbe27744e228dedeb3c23b2948cd4bd52b3a82f2f76bf2e119d7e87646fb85dfc7bf18d5f4b690cdb79e62e37cf581748a1b"}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000002340)) write$FUSE_LSEEK(r2, &(0x7f0000002380)={0x18, 0x0, r3, {0x2}}, 0x18) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000023c0)) r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000002400), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002600)={0x50, 0x0, &(0x7f0000002540)=[@free_buffer={0x40086303, r5}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002480)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/54, 0x36, 0x2, 0x2b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000002500)={0x0, 0x18, 0x40}}}], 0x0, 0x0, &(0x7f00000025c0)}) write$UHID_CREATE2(r1, &(0x7f0000002640)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x4d, 0x9, 0x4, 0x0, 0x3, 0x0, "f76b8e6b389152d4e84c1c012f426f6351b0ad9d991333e85e5ac253a2d27dc59081ae2f074218777df9b843558567a45490eb97da695d340d1add9db2afc523f6308b94bb812046eb339bf571"}}, 0x165) read(r1, &(0x7f00000027c0)=""/69, 0x45) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000002840)=0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f00000028c0)={0xd5, 0x0, 0x20}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002a80)={0x24, 0x0, &(0x7f0000002940)=[@exit_looper, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @register_looper], 0xed, 0x0, &(0x7f0000002980)="9aab3584515025b864d02311f07ed636e0c30c204a4dcd6b3b22e6c4381ecf27e6b500bb3b62ed0690438cd0ec3045979dd1734c28a7f097e869f268932ee71e37781537b73eb0eadb177ee9724d166c0d8d80e40926acf99aa5c9b73c136bc5f110ec5edcf54df825505faf2cf2bbfd15eae9ba5d59a6d896f618c190ec21dbc1c315eb4f2b790dbfb789973c69f1b56b5c7b9af53aa1c368ad107d6f4992c9a4bf52da77706044fda82e8762a70248264853c2a95ad9c74ce254f865a563105597851e8ba68a4ba2ba6f958bc8b7a0cea9ccfc98e391748e53d82412ecca6fbc48de918401388bafbf1cd968"}) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002b00)={0x0, "0441d967cb44b1a97b43f9b06ba7678e"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000003b00)={{r8}, {@val={r9}, @max}}) close(r6) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000003b40)=r4) 2.516606862s ago: executing program 2 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x20}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r1, 0x40045436, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='non']) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x8, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0xff, 0x7d}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0xc, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r5, 0x2000) 2.244179846s ago: executing program 0 (id=1648): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="646566636f6e746578743d0300"]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000000c0)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'memory'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}, {0x2b, 'pids'}]}, 0x30) 2.137307028s ago: executing program 2 (id=1649): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="dadfd69fad4158b7771a316ce75187cfc337105319591a38f5a8853ab4c772901d7cc32760f8ffb659806ccacd18d9693766870e212e3499a5f9d5dd289e0ca86e1f11b30ac86fdecdf242492f46f8e75068e6", 0x53) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, 0x0, 0xfffffdef) ioctl$FIBMAP(r3, 0x1, &(0x7f0000013c00)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x94, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x1}, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x8, 0x2, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/53, 0x35, 0x2, 0x21}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 2.021321189s ago: executing program 2 (id=1652): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 1.889175891s ago: executing program 2 (id=1653): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async, rerun: 32) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) write(r3, &(0x7f0000000300)="6e3a0ed5460b63402ab2195a3216bcb85c6c41dcae414e6b441abd66135b77d6f75f0ea999e2", 0x26) (async, rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) (rerun: 64) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000280)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0xffffff80}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) (async, rerun: 64) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x200], 0x10000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000041000000000000000003000000"]) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) 1.720297734s ago: executing program 0 (id=1655): prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200240, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) (async) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x58, 0x3, 0x2, 0x7, 0x9, "5bd79ce561577dae"}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x20, 0x8, '\x00', 0x6}) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x100000000000b8) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0xfffffffffffff800) (async) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0x3) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) 1.539619237s ago: executing program 0 (id=1658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1c1180, 0x80) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000140)=[@exit_looper], 0x0, 0x0, 0x0}) 1.473316378s ago: executing program 0 (id=1659): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010020, 0x0, 0x2}]}) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0x10, 0x1, {0x52, 0x8001, 0x7f2, {}, {0x2, 0x5}, @const={0x7, {0x100, 0x959, 0xf3, 0x8}}}, {0x56, 0xbd94, 0x45, {0x4, 0x6}, {0x4, 0x610}, @rumble={0x134, 0xea}}}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000001bc0)={0x0, 0x8000000000000001}) (async, rerun: 64) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "9862c2e5bfcafd54ffa0041f1eda7318"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) 1.30590788s ago: executing program 4 (id=1662): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x400033}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc8, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x100a}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @clear_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/173, 0xad, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/165, 0xa5, 0x2, 0x2c}, @fda={0x66646185, 0x8, 0x1, 0x3a}}, &(0x7f0000000640)={0x0, 0x28, 0x50}}}, @enter_looper, @register_looper, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$FIOCLEX(r0, 0x5451) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x400033}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc8, 0x0, &(0x7f0000000680)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x100a}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x0, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @clear_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/173, 0xad, 0x0, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/165, 0xa5, 0x2, 0x2c}, @fda={0x66646185, 0x8, 0x1, 0x3a}}, &(0x7f0000000640)={0x0, 0x28, 0x50}}}, @enter_looper, @register_looper, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) (async) 1.279916971s ago: executing program 0 (id=1663): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x12000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x3e, 0x0, 0x7, 0x2000000000044, 0x2000, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x3000007, 0x2012, r5, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r14, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000005004d564b"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) 1.207807012s ago: executing program 4 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4188aea7, &(0x7f0000000000)={0x2, 0x0, [{0x7}]}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000300)="9a29cd1fb4ccd347afc934b1ef3922299c16637f5766dd4f2e5497f28b98b220ceaa8df22e1f4e2e83f31d76ecb812966cb2cc5590b2dbd9496a895f52df578a2b2897f00914e3bfa2b9ea55c39cd5b7"}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x2) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4188aec6, &(0x7f00000012c0)={0x0, 0x0, @ioapic={0x2000, 0x1, 0x0, 0x1, 0x0, [{0x0, 0x5, 0xff, '\x00', 0x7}, {0xe, 0xf, 0x2, '\x00', 0x1}, {0x7f, 0x57, 0x8, '\x00', 0xff}, {0x4, 0xc8, 0xd, '\x00', 0x73}, {0x2, 0x3, 0x1, '\x00', 0x2}, {0x1, 0x81, 0x5, '\x00', 0x7}, {0x0, 0x4, 0x9, '\x00', 0x1}, {0x1, 0x3, 0xc9, '\x00', 0xcb}, {0x3, 0xa, 0x8, '\x00', 0x2}, {0x5, 0x4, 0xf7, '\x00', 0x6c}, {0x5, 0x0, 0x8, '\x00', 0x8}, {0x99, 0x43, 0x9, '\x00', 0xce}, {0x4, 0x90, 0x3, '\x00', 0xdc}, {0x8, 0x9, 0x80}, {0x8, 0xf9, 0x5, '\x00', 0x1}, {0xff, 0x0, 0xc7, '\x00', 0xc}, {0x2, 0x0, 0xd, '\x00', 0xb4}, {0x3f, 0x89, 0x0, '\x00', 0x9}, {0xff, 0x7f, 0x0, '\x00', 0x9}, {0xe, 0x10, 0x2, '\x00', 0xfc}, {0x40, 0x9, 0x5, '\x00', 0xa}, {0x3, 0x7f, 0x7, '\x00', 0x5}, {0x5, 0x0, 0xaa, '\x00', 0x1}, {0xfd, 0x9, 0x8, '\x00', 0x2}]}}) (async) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000100)={{0x4, 0xdddd1000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfe}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0x8, 0x6, 0x0, 0x0, 0x83}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5, 0x0, 0x3}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xd801, 0x0, [0x6, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r12, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xdddd0000, 0x5, 0x5, 0x7f}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000541c00008402000000000000090000000000"]) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) 1.207268072s ago: executing program 2 (id=1665): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000013c00)) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x25) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 1.134605463s ago: executing program 5 (id=1666): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) write$vga_arbiter(r0, &(0x7f0000000240)=@other={'trylock', ' ', 'mem'}, 0xc) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141080, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) 957.787786ms ago: executing program 5 (id=1667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030f00fd486af2c41ccf59f5057b452e373e414c9600", @ANYRES64], 0xffdd) ioctl$KVM_SET_PIT2(r3, 0xc008aeba, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4020ae46, &(0x7f0000000600)=ANY=[@ANYBLOB="01010000000000000000000000004002000000000200000000000000000014"]) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 889.192897ms ago: executing program 2 (id=1668): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000280)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) close(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000100)=""/58) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) close(0x3) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x7, 0x7, 0x4, 0x0, 0x1}]}) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd6) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000440)={0x4, 0x0, [{}, {}, {}, {}]}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x2802411, &(0x7f00000001c0)=ANY=[]) 743.005549ms ago: executing program 4 (id=1669): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x6, 0x40000101, 0x4, 0x0, 0x7, 0xa6, 0x0, 0x0, 0x10, 0x6}}, 0x50) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000008000080", @ANYRESDEC=r5]) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x0, 0x10, 0x80}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) (async) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x6, 0x40000101, 0x4, 0x0, 0x7, 0xa6, 0x0, 0x0, 0x10, 0x6}}, 0x50) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000008000080", @ANYRESDEC=r5]) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x0, 0x10, 0x80}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async) 616.399681ms ago: executing program 5 (id=1670): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000002140)=0xa) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f00000021c0)={0x18, 0x0, r4}, 0x18) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002200), 0x22e100, 0x0) getpid() ioctl$VT_ACTIVATE(r0, 0x5606, 0x80000000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000f, 0x10050, r1, 0x6807f000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000002240)={0x10001, 0x7, 0x100000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000002280)) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002300)={'netpci0', 0x32, 0x31}, 0xa) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$vga_arbiter(r0, &(0x7f0000002340)=@unlock_all, 0xb) close(r3) write$FUSE_GETXATTR(r5, &(0x7f0000002380)={0x18, 0x0, r4, {0x2}}, 0x18) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000002400)={0x3fffffff80, 0x18, '\x00', 0x0, &(0x7f00000023c0)=[0x0, 0x0, 0x0]}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002440)={r6, 0xffffffffffffff81, 0x3, 0x8}) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000002480)=0x8) r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000024c0)=0x4) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0xfffffffffffff001) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000002500)={0x3, 0x3}) close(r3) getpid() 485.332223ms ago: executing program 5 (id=1671): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r0, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0xbbef6000) 457.675703ms ago: executing program 4 (id=1672): mount$binderfs(0x0, 0x0, 0x0, 0x4e3e96b3d732ec48, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006680)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x400c6314}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 393.656704ms ago: executing program 5 (id=1673): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x100000000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xf) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r3, 0x5501) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) 221.471867ms ago: executing program 4 (id=1674): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000099}]}) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000180)=ANY=[@ANYBLOB="2e2e1cb9894460d9ce1903315266d65f9e"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 127.143208ms ago: executing program 5 (id=1675): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)='l'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @ioapic}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x3e2600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000600)='l'}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @ioapic}) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x3e2600, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) prctl$PR_SET_TSC(0x1a, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) (async) 35.06022ms ago: executing program 4 (id=1676): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f0000000040)=""/106, 0x6a) (async) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x10000) 0s ago: executing program 0 (id=1677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000180)={0x1ea, 0x1e, &(0x7f0000000580)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1001, 0x1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x1001, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. [ 21.337534][ T36] audit: type=1400 audit(1750359915.920:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.338639][ T281] cgroup: Unknown subsys name 'net' [ 21.360188][ T36] audit: type=1400 audit(1750359915.920:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.387490][ T36] audit: type=1400 audit(1750359915.960:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.387691][ T281] cgroup: Unknown subsys name 'devices' [ 21.555047][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.560667][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.652720][ T36] audit: type=1400 audit(1750359916.230:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.676006][ T36] audit: type=1400 audit(1750359916.230:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.700992][ T36] audit: type=1400 audit(1750359916.240:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.710559][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.732939][ T36] audit: type=1400 audit(1750359916.310:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.758348][ T36] audit: type=1400 audit(1750359916.320:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.828353][ T36] audit: type=1400 audit(1750359916.410:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.853998][ T36] audit: type=1400 audit(1750359916.410:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.854074][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.069618][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.076844][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.084027][ T288] bridge_slave_0: entered allmulticast mode [ 23.090377][ T288] bridge_slave_0: entered promiscuous mode [ 23.103822][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.110874][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.118232][ T288] bridge_slave_1: entered allmulticast mode [ 23.124512][ T288] bridge_slave_1: entered promiscuous mode [ 23.224350][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.231413][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.238537][ T292] bridge_slave_0: entered allmulticast mode [ 23.244790][ T292] bridge_slave_0: entered promiscuous mode [ 23.251956][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.259044][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.266464][ T292] bridge_slave_1: entered allmulticast mode [ 23.272679][ T292] bridge_slave_1: entered promiscuous mode [ 23.313674][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.320814][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.328083][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.335120][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.372354][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.379683][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.386808][ T293] bridge_slave_0: entered allmulticast mode [ 23.393316][ T293] bridge_slave_0: entered promiscuous mode [ 23.400687][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.407758][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.414902][ T293] bridge_slave_1: entered allmulticast mode [ 23.421625][ T293] bridge_slave_1: entered promiscuous mode [ 23.433705][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.440745][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.448059][ T294] bridge_slave_0: entered allmulticast mode [ 23.454198][ T294] bridge_slave_0: entered promiscuous mode [ 23.460465][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.467562][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.474897][ T294] bridge_slave_1: entered allmulticast mode [ 23.481021][ T294] bridge_slave_1: entered promiscuous mode [ 23.570300][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.577572][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.599311][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.606376][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.618416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.625481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.683933][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.690980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.705077][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.712122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.720221][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.727249][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.742030][ T288] veth0_vlan: entered promiscuous mode [ 23.752384][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.759452][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.776784][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.783837][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.792715][ T288] veth1_macvtap: entered promiscuous mode [ 23.805562][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.812600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.840371][ T292] veth0_vlan: entered promiscuous mode [ 23.869933][ T292] veth1_macvtap: entered promiscuous mode [ 23.879394][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.894030][ T294] veth0_vlan: entered promiscuous mode [ 23.914801][ T293] veth0_vlan: entered promiscuous mode [ 23.929294][ T294] veth1_macvtap: entered promiscuous mode [ 23.953729][ T293] veth1_macvtap: entered promiscuous mode [ 23.973312][ T311] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.050596][ T321] SELinux: Context is not valid (left unmapped). [ 24.069994][ T316] rust_binder: Error in use_page_slow: ESRCH [ 24.070025][ T316] rust_binder: use_range failure ESRCH [ 24.076137][ T314] rust_binder: Error in use_page_slow: ESRCH [ 24.081650][ T314] rust_binder: use_range failure ESRCH [ 24.088156][ T316] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 24.093830][ T316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 24.101876][ T316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 24.123205][ T314] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 24.132096][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 24.148720][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 24.151873][ T321] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 24.189377][ T321] rust_binder: Error while translating object. [ 24.204072][ T321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.210633][ T321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 24.252504][ T341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.275086][ T341] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.320612][ T344] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.419783][ T349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 24.523266][ T355] SELinux: truncated policydb string identifier [ 24.564315][ T362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.576592][ T363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 24.607341][ T355] SELinux: failed to load policy [ 24.838950][ T372] rust_binder: Got transaction with invalid offset. [ 24.839009][ T372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.853800][ T372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12 [ 25.635273][ T391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.644817][ T391] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 25.651276][ T391] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 25.663150][ T391] rust_binder: Read failure Err(EFAULT) in pid:15 [ 25.737514][ T400] rust_binder: Error in use_page_slow: ESRCH [ 25.737537][ T400] rust_binder: use_range failure ESRCH [ 25.745597][ T400] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 25.745644][ T401] rust_binder: Error in use_page_slow: ESRCH [ 25.751130][ T400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.751151][ T400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:14 [ 25.776612][ T401] rust_binder: use_range failure ESRCH [ 25.786004][ T401] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 25.791549][ T401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 25.800358][ T401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:14 [ 26.309188][ T422] rust_binder: Write failure EINVAL in pid:26 [ 26.494930][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 26.494946][ T36] audit: type=1400 audit(1750359921.080:144): avc: denied { read write } for pid=426 comm="syz.1.37" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.530966][ T36] audit: type=1400 audit(1750359921.080:145): avc: denied { open } for pid=426 comm="syz.1.37" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.554308][ T36] audit: type=1400 audit(1750359921.080:146): avc: denied { ioctl } for pid=426 comm="syz.1.37" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.686741][ T432] rust_binder: Read failure Err(EAGAIN) in pid:49 [ 26.689688][ T432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 26.697078][ T36] audit: type=1326 audit(1750359921.290:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 26.737587][ T432] input: syz1 as /devices/virtual/input/input5 [ 26.744139][ T36] audit: type=1326 audit(1750359921.290:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 26.770459][ T36] audit: type=1326 audit(1750359921.320:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 26.777101][ T434] rust_binder: Error while translating object. [ 26.794958][ T36] audit: type=1326 audit(1750359921.320:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=435 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94d09c11e5 code=0x7ffc0000 [ 26.824250][ T434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 26.824279][ T434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:29 [ 26.825190][ T36] audit: type=1326 audit(1750359921.320:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 26.865752][ T36] audit: type=1326 audit(1750359921.320:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 26.889013][ T36] audit: type=1326 audit(1750359921.320:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=431 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94d098e929 code=0x7ffc0000 [ 27.075045][ T441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.075067][ T441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 27.100356][ T12] Bluetooth: hci0: Frame reassembly failed (-90) [ 27.116196][ T443] Bluetooth: hci0: Frame reassembly failed (-84) [ 27.684745][ T454] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.684835][ T454] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 27.922937][ T477] input: syz1 as /devices/virtual/input/input6 [ 27.933152][ T480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.112061][ T491] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.115924][ T489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.119784][ T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57 [ 28.125134][ T489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 28.135108][ T488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 28.152723][ T488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 28.298859][ T500] binder: Unknown parameter 'defcontext01777777777777777777777' [ 28.750322][ T516] rust_binder: Got transaction with invalid offset. [ 28.750352][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.757580][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 28.767408][ T516] rust_binder: Read failure Err(EAGAIN) in pid:92 [ 28.873620][ T518] ======================================================= [ 28.873620][ T518] WARNING: The mand mount option has been deprecated and [ 28.873620][ T518] and is ignored by this kernel. Remove the mand [ 28.873620][ T518] option from the mount to silence this warning. [ 28.873620][ T518] ======================================================= [ 28.932678][ T518] input: syz0 as /devices/virtual/input/input7 [ 29.059602][ T528] rust_binder: Error in use_page_slow: ESRCH [ 29.059619][ T528] rust_binder: use_range failure ESRCH [ 29.065797][ T528] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 29.071247][ T528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.079846][ T528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:98 [ 29.090171][ T528] SELinux: security_context_str_to_sid () failed with errno=-22 [ 29.113040][ T530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.120965][ T530] rust_binder: Error while translating object. [ 29.127515][ T530] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.133869][ T530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 29.162946][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 29.163171][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.257639][ T540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 29.315558][ T545] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 29.355680][ T550] rust_binder: Error while translating object. [ 29.363625][ T550] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.369862][ T550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 29.423063][ T558] tap0: tun_chr_ioctl cmd 2148553947 [ 29.472520][ T562] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.472540][ T562] rust_binder: Read failure Err(EFAULT) in pid:105 [ 29.482199][ T562] rust_binder: Write failure EFAULT in pid:105 [ 29.550723][ T576] binder: Unknown parameter 'non44674407370955161518446744073709551615' [ 29.613674][ T579] rust_binder: Error while translating object. [ 29.613697][ T579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.620185][ T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 29.631925][ T571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:81 [ 29.771661][ T588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.827578][ T588] input: syz0 as /devices/virtual/input/input8 [ 29.853940][ T588] rust_binder: Error in use_page_slow: ESRCH [ 29.853960][ T588] rust_binder: use_range failure ESRCH [ 29.863138][ T588] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 29.870321][ T588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.878566][ T588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 29.994017][ T597] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 30.005641][ T604] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 30.006624][ T597] SELinux: failed to load policy [ 30.022402][ T604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 30.070443][ T607] block device autoloading is deprecated and will be removed. [ 30.093021][ T607] syz.0.95: attempt to access beyond end of device [ 30.093021][ T607] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 30.145876][ T565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.154099][ T565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.161498][ T565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.171852][ T565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.184160][ T565] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.194264][ T565] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 30.257422][ T612] fido_id[612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.309384][ T616] rust_binder: Write failure EFAULT in pid:114 [ 30.337580][ T624] rust_binder: Write failure EFAULT in pid:60 [ 30.351184][ T627] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.362469][ T626] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.370448][ T628] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.463034][ T644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.498154][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.523473][ T656] binder: Unknown parameter '' [ 30.805082][ T677] binder: Bad value for 'max' [ 30.805082][ T678] binder: Bad value for 'max' [ 30.872745][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 30.874028][ T687] kernel profiling enabled (shift: 8) [ 30.877368][ T684] rust_binder: Error while translating object. [ 30.884306][ T687] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.893000][ T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.898394][ T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 30.905780][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 31.026939][ T691] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 31.078470][ T693] random: crng reseeded on system resumption [ 31.095756][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 31.156205][ T695] binder: Unknown parameter '' [ 31.170330][ T696] binder: Unknown parameter '' [ 31.838224][ T705] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 32.062967][ T715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:140 [ 32.125603][ T719] binder: Bad value for 'stats' [ 32.168727][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 32.168743][ T36] audit: type=1400 audit(1750359926.750:210): avc: denied { block_suspend } for pid=723 comm="syz.0.133" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.439637][ T36] audit: type=1400 audit(1750359927.020:211): avc: denied { read open } for pid=739 comm="syz.1.139" path="uts:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.463557][ T740] rust_binder: Write failure EINVAL in pid:157 [ 32.463645][ T740] rust_binder: Write failure EINVAL in pid:157 [ 32.464141][ T36] audit: type=1400 audit(1750359927.050:212): avc: denied { ioctl } for pid=739 comm="syz.1.139" path="uts:[4026532296]" dev="nsfs" ino=4026532296 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.512926][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 32.512926][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.535689][ T36] audit: type=1400 audit(1750359927.120:213): avc: granted { setsecparam } for pid=744 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.637998][ T36] audit: type=1400 audit(1750359927.220:214): avc: granted { setsecparam } for pid=751 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.658009][ T36] audit: type=1400 audit(1750359927.230:215): avc: granted { setsecparam } for pid=751 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.687297][ T36] audit: type=1400 audit(1750359927.230:216): avc: granted { setsecparam } for pid=751 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 32.720725][ T758] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 32.720746][ T758] rust_binder: Error while translating object. [ 32.728673][ T760] tap0: tun_chr_ioctl cmd 2148553947 [ 32.729539][ T758] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.740944][ T758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 32.768230][ T762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 32.829060][ T764] binder: Bad value for 'stats' [ 32.843762][ T36] audit: type=1400 audit(1750359927.430:217): avc: denied { ioctl } for pid=769 comm="syz.1.150" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 32.868404][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.882146][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.890134][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.900155][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.908026][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.917414][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.919597][ T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110 [ 32.926581][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.943107][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.950673][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.961274][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.968834][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.969958][ T779] rust_binder: Write failure EINVAL in pid:110 [ 32.976489][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 32.985107][ T791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.996895][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.004607][ T791] rust_binder: Error in use_page_slow: ESRCH [ 33.004625][ T791] rust_binder: use_range failure ESRCH [ 33.010996][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.011031][ T791] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 33.017134][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.024076][ T791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.032041][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.054545][ T791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63 [ 33.058023][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.076022][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.083699][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.091135][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.098667][ T65] hid-generic 7FFF:000D:0009.0002: unknown main item tag 0x0 [ 33.109779][ T65] hid-generic 7FFF:000D:0009.0002: hidraw0: HID v0.05 Device [syz1] on syz1 [ 33.148769][ T36] audit: type=1400 audit(1750359927.730:218): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.156783][ T805] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 33.232646][ T803] fido_id[803]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.247503][ T36] audit: type=1400 audit(1750359927.730:219): avc: denied { open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.423652][ T812] KVM: debugfs: duplicate directory 812-11 [ 33.433084][ T812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 33.765460][ T824] rust_binder: Error while translating object. [ 33.781995][ T824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 33.788724][ T824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 33.871678][ T828] binder: Unknown parameter '0xffffffffffffffff' [ 34.015911][ T839] rust_binder: Write failure EINVAL in pid:83 [ 34.038322][ T838] rust_binder: Write failure EINVAL in pid:117 [ 34.107218][ T841] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 34.138747][ T848] rust_binder: Error while translating object. [ 34.148399][ T848] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 34.155576][ T848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:186 [ 34.463616][ T866] rust_binder: Write failure EFAULT in pid:194 [ 34.687174][ T883] input: syz0 as /devices/virtual/input/input11 [ 34.710139][ T884] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.710161][ T884] rust_binder: Read failure Err(EFAULT) in pid:92 [ 34.723134][ T878] binder: Unknown parameter 'coyBLV"i5ntext' [ 34.956329][ T888] binder: Unknown parameter 'coyBLV"i5ntext' [ 35.133560][ T901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.133797][ T901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.246086][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:104 [ 35.275389][ T911] rust_binder: Error while translating object. [ 35.309149][ T914] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.332979][ T911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.333012][ T911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 35.485742][ T922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.823634][ T943] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 36.428127][ T972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.508949][ T975] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 36.532933][ T975] rust_binder: Error while translating object. [ 36.558632][ T966] rust_binder: Read failure Err(EFAULT) in pid:156 [ 36.571812][ T975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.598641][ T975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 37.096845][ T996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 37.176090][ T36] kauditd_printk_skb: 1063 callbacks suppressed [ 37.176107][ T36] audit: type=1400 audit(1750359931.760:1283): avc: denied { read } for pid=997 comm="syz.0.220" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.192533][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:155 [ 37.223683][ T1000] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 37.247484][ T36] audit: type=1400 audit(1750359931.760:1284): avc: denied { read open } for pid=997 comm="syz.0.220" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.318051][ T36] audit: type=1400 audit(1750359931.770:1285): avc: denied { ioctl } for pid=997 comm="syz.0.220" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.366342][ T36] audit: type=1400 audit(1750359931.770:1286): avc: denied { set_context_mgr } for pid=997 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 37.404610][ T1008] binfmt_misc: register: failed to install interpreter file ./cgroup [ 37.434510][ T1008] input: syz0 as /devices/virtual/input/input15 [ 37.445279][ T36] audit: type=1400 audit(1750359931.770:1287): avc: denied { map } for pid=997 comm="syz.0.220" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.496761][ T1010] rust_binder: Write failure EFAULT in pid:233 [ 37.516406][ T36] audit: type=1400 audit(1750359931.770:1288): avc: denied { read } for pid=997 comm="syz.0.220" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.572414][ T36] audit: type=1400 audit(1750359931.770:1289): avc: denied { ioctl } for pid=997 comm="syz.0.220" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 37.601289][ T36] audit: type=1400 audit(1750359931.800:1290): avc: denied { read append } for pid=999 comm="syz.1.221" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.653190][ T1015] audit: audit_backlog=65 > audit_backlog_limit=64 [ 37.660314][ T1014] audit: audit_backlog=65 > audit_backlog_limit=64 [ 37.779021][ T1018] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 37.779043][ T1018] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 37.810374][ T1018] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 37.833317][ T1023] rust_binder: Error while translating object. [ 37.863696][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 37.869881][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:160 [ 37.934347][ T1026] rust_binder: Error while translating object. [ 37.943748][ T1026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 37.950955][ T1026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:162 [ 38.058163][ T1028] rust_binder: Write failure EFAULT in pid:238 [ 38.209189][ T1044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.424258][ T1053] binder: Unknown parameter 'coyBLV"i5ntext' [ 39.127880][ T1096] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 39.156387][ T1096] SELinux: failed to load policy [ 39.196728][ T1094] serio: Serial port ttynull [ 39.316476][ T1107] input: syz0 as /devices/virtual/input/input19 [ 39.638260][ T1121] random: crng reseeded on system resumption [ 39.647288][ T1107] rust_binder: Read failure Err(EFAULT) in pid:265 [ 39.718543][ T1121] Restarting kernel threads ... done. [ 39.762657][ T1123] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 232) [ 39.762679][ T1123] rust_binder: Error while translating object. [ 39.802957][ T1123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.809148][ T1123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 39.883254][ T1130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:199 [ 39.993034][ T1135] binder: Unknown parameter 'euid<18446744073709551615' [ 40.247275][ T1152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.271961][ T1152] rust_binder: Error in use_page_slow: ESRCH [ 40.271985][ T1152] rust_binder: use_range failure ESRCH [ 40.292949][ T1152] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 40.298433][ T1152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.337450][ T1152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:155 [ 40.372084][ T1160] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 40.390684][ T1160] rust_binder: Read failure Err(EFAULT) in pid:277 [ 40.401187][ T1157] rust_binder: Write failure EFAULT in pid:190 [ 40.595557][ T1170] rust_binder: Write failure EINVAL in pid:211 [ 40.622632][ T1170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:211 [ 40.933207][ T1179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.998100][ T1183] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.393716][ T1211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.415551][ T1208] binder: Bad value for 'stats' [ 41.542228][ T1220] binder: Unknown parameter 'x' [ 41.626691][ T1224] block device autoloading is deprecated and will be removed. [ 41.679519][ T1224] binder: Unknown parameter 'sta' [ 41.837434][ T1240] SELinux: policydb version -1064208763 does not match my version range 15-33 [ 41.873151][ T1240] SELinux: failed to load policy [ 42.055129][ T1255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.055158][ T1255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:211 [ 42.101710][ T1253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.114181][ T1262] rust_binder: Read failure Err(EAGAIN) in pid:186 [ 42.143918][ T1253] rust_binder: inc_ref_done called when no active inc_refs [ 42.157691][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.183229][ T36] kauditd_printk_skb: 1094 callbacks suppressed [ 42.183243][ T36] audit: type=1400 audit(1750359936.770:2312): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.224161][ T1267] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 42.233730][ T1262] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.242061][ T36] audit: type=1400 audit(1750359936.770:2313): avc: denied { read write } for pid=1261 comm="syz.2.303" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.263380][ T1262] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.273580][ T1262] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.275992][ T1269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.291891][ T1269] rust_binder: Error while translating object. [ 42.311080][ T36] audit: type=1400 audit(1750359936.770:2314): avc: denied { read write open } for pid=1261 comm="syz.2.303" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 42.347052][ T1269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 42.347083][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:233 [ 42.352693][ T36] audit: type=1400 audit(1750359936.800:2315): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.412309][ T36] audit: type=1400 audit(1750359936.810:2316): avc: denied { remount } for pid=1264 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 42.492965][ T36] audit: type=1400 audit(1750359936.860:2317): avc: denied { read } for pid=1268 comm="syz.0.305" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.571115][ T36] audit: type=1400 audit(1750359936.860:2318): avc: denied { read open } for pid=1268 comm="syz.0.305" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.583187][ T1278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.616617][ T1279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 42.626730][ T36] audit: type=1400 audit(1750359936.860:2319): avc: denied { ioctl } for pid=1268 comm="syz.0.305" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.665032][ T36] audit: type=1400 audit(1750359936.860:2320): avc: denied { map } for pid=1268 comm="syz.0.305" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.694398][ T36] audit: type=1400 audit(1750359936.860:2321): avc: denied { read } for pid=1268 comm="syz.0.305" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.779686][ T1278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 42.784211][ T1283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.814832][ T1282] binder: Bad value for 'max' [ 42.932489][ T1289] rust_binder: Write failure EFAULT in pid:241 [ 42.975262][ T1291] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 42.992283][ T1291] SELinux: failed to load policy [ 43.061408][ T1293] SELinux: security policydb version 17 (MLS) not backwards compatible [ 43.077497][ T1293] SELinux: failed to load policy [ 43.135241][ T1298] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.185272][ T1298] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 43.205690][ T1298] rust_binder: Write failure EINVAL in pid:245 [ 43.366469][ T1306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.527074][ T1314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.543194][ T1314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:253 [ 43.552774][ T1314] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.562458][ T1314] rust_binder: Read failure Err(EFAULT) in pid:253 [ 43.575408][ T1314] rust_binder: Error while translating object. [ 43.581997][ T1314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.589163][ T1314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:253 [ 43.734881][ T1320] input: syz1 as /devices/virtual/input/input20 [ 44.078253][ T1336] rust_binder: Write failure EINVAL in pid:263 [ 44.081862][ T1336] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 44.088188][ T1336] rust_binder: Error while translating object. [ 44.100942][ T1336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.107202][ T1336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263 [ 44.192943][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.193014][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 44.322189][ T1342] rust_binder: Error while translating object. [ 44.322214][ T1342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 44.334095][ T1342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265 [ 44.515905][ T1354] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 44.797580][ T1376] rust_binder: Write failure EINVAL in pid:202 [ 44.821991][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 44.871949][ T1383] SELinux: policydb version -845211227 does not match my version range 15-33 [ 44.899474][ T1383] SELinux: failed to load policy [ 44.922424][ T1385] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 44.954331][ T1386] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 44.969698][ T1385] can0: slcan on ttyS3. [ 45.074705][ T1384] can0 (unregistered): slcan off ttyS3. [ 45.354606][ T1400] rust_binder: Error in use_page_slow: ESRCH [ 45.354626][ T1400] rust_binder: use_range failure ESRCH [ 45.360641][ T1400] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 45.427115][ T1400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 45.435325][ T1408] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 45.475221][ T1400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:282 [ 45.483027][ T1408] rust_binder: Write failure EINVAL in pid:213 [ 45.883077][ T1428] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 45.889269][ T1428] rust_binder: Error while translating object. [ 45.943656][ T1428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.954382][ T1432] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.981583][ T1428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 46.262048][ T1439] binder: Unknown parameter 'binder' [ 46.373401][ T1456] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.444532][ T1456] rust_binder: Error in use_page_slow: ESRCH [ 46.444556][ T1456] rust_binder: use_range failure ESRCH [ 46.450561][ T1456] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 46.456899][ T1463] rust_binder: Write failure EFAULT in pid:237 [ 46.472952][ T1456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 46.523985][ T1456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:224 [ 46.563984][ T1465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 46.963663][ T1489] rust_binder: Write failure EFAULT in pid:231 [ 47.093590][ T1494] SELinux: ebitmap: truncated map [ 47.118260][ T1494] SELinux: failed to load policy [ 47.203807][ T36] kauditd_printk_skb: 1170 callbacks suppressed [ 47.203822][ T36] audit: type=1400 audit(1750359941.790:3492): avc: denied { read append } for pid=1498 comm="syz.1.371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.285944][ T36] audit: type=1400 audit(1750359941.790:3493): avc: denied { read append open } for pid=1498 comm="syz.1.371" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.325815][ T1506] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 47.357783][ T1506] SELinux: failed to load policy [ 47.402979][ T36] audit: type=1400 audit(1750359941.790:3494): avc: denied { read append } for pid=1498 comm="syz.1.371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.482961][ T36] audit: type=1400 audit(1750359941.790:3495): avc: denied { read append open } for pid=1498 comm="syz.1.371" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.552919][ T36] audit: type=1400 audit(1750359941.790:3496): avc: denied { ioctl } for pid=1498 comm="syz.1.371" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.630390][ T1522] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.634585][ T36] audit: type=1400 audit(1750359941.830:3497): avc: denied { read write } for pid=1495 comm="syz.2.370" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 47.665376][ T1525] SELinux: security_context_str_to_sid (382 [ 47.665376][ T1525] ) failed with errno=-22 [ 47.714870][ T1528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.721367][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 47.746869][ T1530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 47.753457][ T288] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 47.761230][ T288] audit: backlog limit exceeded [ 47.774109][ T1523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.784365][ T1530] input: syz1 as /devices/virtual/input/input23 [ 47.987798][ T1542] __vm_enough_memory: pid: 1542, comm: syz.3.383, bytes: 281474976845824 not enough memory for the allocation [ 48.086200][ T1540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 48.347885][ T1552] binder: Unknown parameter 'defcontext01777777777777777777777' [ 48.724293][ T1577] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 48.731456][ T1577] rust_binder: Write failure EINVAL in pid:258 [ 48.925568][ T1583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 49.053247][ T1587] rust_binder: Read failure Err(EAGAIN) in pid:246 [ 49.603925][ T1595] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 49.603954][ T1595] rust_binder: Error while translating object. [ 49.652020][ T1595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 49.678783][ T1595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 49.776835][ T1613] deleting an unspecified loop device is not supported. [ 50.032990][ T1630] SELinux: security_context_str_to_sid () failed with errno=-22 [ 50.192673][ T1640] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 50.214619][ T1637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.225214][ T1637] rust_binder: Write failure EINVAL in pid:272 [ 50.253887][ T1627] rust_binder: Read failure Err(EFAULT) in pid:258 [ 50.393429][ T1644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:338 [ 50.470184][ T1647] binder: Unknown parameter 'context' [ 50.736726][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.765111][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.789185][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.803838][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.811699][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.832954][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.845641][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.862962][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.870756][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.888960][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.901988][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.914275][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.942933][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.950729][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.965774][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.975797][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.988100][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 50.995992][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.004059][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.011881][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.028249][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.042771][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.060984][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.084240][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.102355][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.122529][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.130352][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.148255][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.156738][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.172937][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.180745][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.198680][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.225810][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.233815][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.241779][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.249570][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.257560][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.291825][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.302194][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.342980][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.351231][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.383419][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.391190][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.412925][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.438657][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.453513][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.468935][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.480389][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.488229][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.496171][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.507460][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.516199][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.524180][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.532128][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.540094][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.547934][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.557286][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.567970][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.575781][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.583619][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.591392][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.602736][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.611423][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.619362][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.627154][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.634939][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.642671][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.650479][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.658268][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.666037][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.674291][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.683921][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.693414][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.701313][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.710404][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.720786][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.728738][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.736574][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.744357][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.752099][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.759916][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.767870][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.776565][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.784902][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.792654][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.801375][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.809253][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.817769][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.825598][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.833445][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.844251][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.852010][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.859851][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.870628][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.879288][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.902952][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.910879][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.921157][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.928993][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.936847][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.948128][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.962924][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.972960][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.986088][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 51.993999][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.012952][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.020758][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.032591][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.041145][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.062125][ T1704] rust_binder: Write failure EFAULT in pid:279 [ 52.068171][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.084381][ T1706] tap0: tun_chr_ioctl cmd 2148553947 [ 52.090647][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.101073][ T31] hid-generic 009C:0008:0003.0004: unknown main item tag 0x7 [ 52.107999][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.115350][ T31] hid-generic 009C:0008:0003.0004: unknown main item tag 0x6 [ 52.132930][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.132940][ T31] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 52.132971][ T31] hid-generic 009C:0008:0003.0004: unknown main item tag 0x0 [ 52.140728][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.140750][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.140771][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.181611][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.184247][ T31] hid-generic 009C:0008:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 52.189425][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.206691][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.216057][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.223845][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.231574][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.239359][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.247108][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.254870][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.262830][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.270613][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.278270][ T36] kauditd_printk_skb: 724 callbacks suppressed [ 52.278284][ T36] audit: type=1400 audit(1750359946.860:4220): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.278513][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.286506][ T36] audit: type=1400 audit(1750359946.870:4221): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.308623][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.329605][ T36] audit: type=1400 audit(1750359946.910:4222): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.345629][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.383231][ T36] audit: type=1400 audit(1750359946.970:4223): avc: denied { read } for pid=1708 comm="syz.2.439" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.383316][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.416670][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.424419][ T36] audit: type=1400 audit(1750359947.000:4224): avc: denied { read open } for pid=1708 comm="syz.2.439" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.424444][ T36] audit: type=1400 audit(1750359947.000:4225): avc: denied { ioctl } for pid=1708 comm="syz.2.439" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.447921][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.480050][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.488268][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.496576][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.504835][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.512639][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.522472][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.530692][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.538529][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.549538][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.557360][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.565448][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.572206][ T36] audit: type=1400 audit(1750359947.160:4226): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.598737][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.607847][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.616782][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.639588][ T36] audit: type=1400 audit(1750359947.160:4227): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.644246][ T1714] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.682933][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.686715][ T36] audit: type=1400 audit(1750359947.160:4228): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.690703][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.722374][ T36] audit: type=1400 audit(1750359947.220:4229): avc: denied { read } for pid=1713 comm="syz.0.440" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.729553][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.754321][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.762241][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.778620][ T1722] binder: Bad value for 'stats' [ 52.801142][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.809045][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.816899][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.825825][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.833583][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.841312][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.849247][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.857015][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.864779][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.872596][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.880359][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.888137][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.895974][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.904568][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.912308][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.920071][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.927821][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.935721][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.943506][ T521] hid-generic 0006:80000001:0004.0003: unknown main item tag 0x0 [ 52.952315][ T521] hid-generic 0006:80000001:0004.0003: hidraw0: VIRTUAL HID v10.00 Device [syz0] on syz1 [ 53.087114][ T1735] SELinux: policydb version -845211227 does not match my version range 15-33 [ 53.102955][ T1735] SELinux: failed to load policy [ 53.293239][ T1750] rust_binder: Error in use_page_slow: ESRCH [ 53.293262][ T1750] rust_binder: use_range failure ESRCH [ 53.316161][ T1750] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 53.321939][ T1750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.336552][ T1750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 53.570651][ T1755] fido_id[1755]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.595591][ T1763] rust_binder: Write failure EFAULT in pid:378 [ 53.610731][ T1761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 53.629447][ T1761] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 53.652395][ T1761] rust_binder: Read failure Err(EFAULT) in pid:304 [ 53.915273][ T1777] fido_id[1777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.040706][ T1779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:385 [ 54.111961][ T1794] binder: Unknown parameter '' [ 54.414752][ T1807] random: crng reseeded on system resumption [ 54.443434][ T1804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:291 [ 54.476598][ T1807] Restarting kernel threads ... done. [ 54.558570][ T1812] binder: Binderfs stats mode cannot be changed during a remount [ 54.646528][ T1816] rust_binder: Error while translating object. [ 54.646568][ T1816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 54.652813][ T1816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:295 [ 54.819626][ T1825] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 54.838139][ T1820] binder: Binderfs stats mode cannot be changed during a remount [ 54.872294][ T1823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 55.105492][ T1839] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.499227][ T1873] input: syz0 as /devices/virtual/input/input25 [ 55.558063][ T1868] rust_binder: Error while translating object. [ 55.558104][ T1868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 55.580968][ T1868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:403 [ 55.675653][ T1884] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 55.714678][ T1885] rust_binder: Write failure EINVAL in pid:342 [ 55.715024][ T1885] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 55.762185][ T1885] rust_binder: Write failure EINVAL in pid:342 [ 56.222217][ T1908] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 56.287165][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:418 [ 56.451107][ T1914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:349 [ 56.477847][ T1914] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 57.056546][ T1942] rust_binder: inc_ref_done called when no active inc_refs [ 57.064967][ T1941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.082953][ T1941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 57.282549][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 57.282567][ T36] audit: type=1400 audit(1750359951.860:5074): avc: denied { read } for pid=1945 comm="syz.1.516" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.352924][ T36] audit: type=1400 audit(1750359951.910:5075): avc: denied { read open } for pid=1945 comm="syz.1.516" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.402911][ T36] audit: type=1400 audit(1750359951.910:5076): avc: denied { ioctl } for pid=1945 comm="syz.1.516" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.484799][ T36] audit: type=1400 audit(1750359951.950:5077): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.516335][ T36] audit: type=1400 audit(1750359951.950:5078): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.553425][ T36] audit: type=1400 audit(1750359951.950:5079): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.622716][ T36] audit: type=1400 audit(1750359952.170:5080): avc: denied { read write } for pid=1948 comm="syz.0.517" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.692149][ T36] audit: type=1400 audit(1750359952.170:5081): avc: denied { read write open } for pid=1948 comm="syz.0.517" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.750523][ T36] audit: type=1400 audit(1750359952.200:5082): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.838897][ T36] audit: type=1400 audit(1750359952.200:5083): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.924472][ T1958] binder: Unknown parameter 'nXI000000000000000' [ 58.000427][ T1962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 58.220809][ T1972] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.223358][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:314 [ 58.467002][ T1994] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 58.551015][ T1998] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.645079][ T2002] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.703074][ T2005] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 58.703095][ T2005] rust_binder: Read failure Err(EFAULT) in pid:452 [ 58.955446][ T2017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:459 [ 59.156439][ T2026] rust_binder: Write failure EFAULT in pid:317 [ 59.183731][ T2029] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 59.202804][ T2028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.278868][ T2032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.278899][ T2032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 59.400629][ T2036] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.436431][ T2036] SELinux: failed to load policy [ 59.458383][ T2036] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 59.560843][ T2039] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.560871][ T2039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322 [ 59.694758][ T2043] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 59.716442][ T2043] rust_binder: Error in use_page_slow: EBUSY [ 59.748291][ T2043] rust_binder: use_range failure EBUSY [ 59.763711][ T2043] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 59.773334][ T2043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 59.777960][ T2051] input: syz1 as /devices/virtual/input/input26 [ 59.792980][ T2043] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 59.820100][ T2043] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:325 [ 59.836746][ T2043] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 59.866921][ T2043] rust_binder: Read failure Err(EFAULT) in pid:325 [ 60.042986][ T2064] rust_binder: Write failure EINVAL in pid:465 [ 60.185384][ T2073] input: syz0 as /devices/virtual/input/input28 [ 60.435949][ T2085] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 60.435971][ T2085] rust_binder: Error while translating object. [ 60.444088][ T2083] binder: Unknown parameter 'audit' [ 60.445976][ T2085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.456895][ T2085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:472 [ 60.554352][ T2088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:474 [ 60.589946][ T2090] rust_binder: Error while translating object. [ 60.622941][ T2090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 60.629144][ T2090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 60.677361][ T2095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.742975][ T2095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 60.826080][ T2099] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 61.159864][ T2117] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 61.189907][ T2117] rust_binder: Write failure EINVAL in pid:481 [ 61.302640][ T2136] rust_binder: Error while translating object. [ 61.309294][ T2136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 61.318196][ T2135] binder: Bad value for 'stats' [ 61.331823][ T2136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:407 [ 61.396956][ T2139] binder: Unknown parameter 'non' [ 61.579683][ T2145] input: syz0 as /devices/virtual/input/input29 [ 61.631220][ T2145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:410 [ 62.328288][ T36] kauditd_printk_skb: 981 callbacks suppressed [ 62.328306][ T36] audit: type=1400 audit(1750359956.910:6065): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.424194][ T2192] binder: Unknown parameter 'subj_type' [ 62.429962][ T36] audit: type=1400 audit(1750359956.960:6066): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.473967][ T36] audit: type=1400 audit(1750359956.960:6067): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.572420][ T36] audit: type=1400 audit(1750359956.970:6068): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.583687][ T2180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 62.612247][ T36] audit: type=1400 audit(1750359956.970:6069): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.661995][ T36] audit: type=1400 audit(1750359956.970:6070): avc: denied { read append } for pid=2178 comm="syz.0.590" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.695869][ T36] audit: type=1400 audit(1750359956.980:6071): avc: denied { read open } for pid=2178 comm="syz.0.590" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.729485][ T36] audit: type=1400 audit(1750359956.980:6072): avc: denied { ioctl } for pid=2178 comm="syz.0.590" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.766844][ T36] audit: type=1400 audit(1750359956.980:6073): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.803340][ T36] audit: type=1400 audit(1750359957.000:6074): avc: denied { setattr } for pid=2190 comm="syz.1.593" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 63.000067][ T521] hid-generic C98F:0003:0000.0005: unknown main item tag 0x0 [ 63.017192][ T521] hid-generic C98F:0003:0000.0005: unknown main item tag 0x0 [ 63.050536][ T521] hid-generic C98F:0003:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.082853][ T2212] binder: Bad value for 'max' [ 63.211232][ T2211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:499 [ 63.252059][ T2212] kvm_intel: kvm [2210]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 63.257755][ T2213] fido_id[2213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.470570][ T2227] KVM: debugfs: duplicate directory 2227-7 [ 63.520852][ T2235] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.524180][ T2227] rust_binder: Write failure EINVAL in pid:501 [ 63.736070][ T2243] rust_binder: Write failure EINVAL in pid:426 [ 64.117113][ T2269] SELinux: truncated policydb string identifier [ 64.149261][ T2269] SELinux: failed to load policy [ 64.172974][ T2269] SELinux: truncated policydb string identifier [ 64.200728][ T2269] SELinux: failed to load policy [ 64.233593][ T2269] SELinux: truncated policydb string identifier [ 64.284900][ T2269] SELinux: failed to load policy [ 64.294012][ T2275] binder: Unknown parameter 'max' [ 64.303616][ T2269] SELinux: truncated policydb string identifier [ 64.321886][ T2269] SELinux: failed to load policy [ 64.336953][ T2269] SELinux: truncated policydb string identifier [ 64.353692][ T2269] SELinux: failed to load policy [ 64.363810][ T2269] SELinux: truncated policydb string identifier [ 64.372553][ T2278] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 64.402736][ T2269] SELinux: failed to load policy [ 64.427599][ T2269] SELinux: truncated policydb string identifier [ 64.455622][ T2280] kvm: kvm [2279]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 64.462941][ T2269] SELinux: failed to load policy [ 64.477375][ T2269] SELinux: truncated policydb string identifier [ 64.500230][ T2269] SELinux: failed to load policy [ 64.513379][ T2269] SELinux: truncated policydb string identifier [ 64.525339][ T2269] SELinux: failed to load policy [ 64.537079][ T2269] SELinux: truncated policydb string identifier [ 64.552910][ T2269] SELinux: failed to load policy [ 64.558223][ T2269] SELinux: truncated policydb string identifier [ 64.593308][ T2269] SELinux: failed to load policy [ 64.598612][ T2269] SELinux: truncated policydb string identifier [ 64.622790][ T2269] SELinux: failed to load policy [ 64.634132][ T2269] SELinux: truncated policydb string identifier [ 64.640493][ T2269] SELinux: failed to load policy [ 64.660554][ T2269] SELinux: truncated policydb string identifier [ 64.692925][ T2269] SELinux: failed to load policy [ 64.698252][ T2269] SELinux: truncated policydb string identifier [ 64.740299][ T2269] SELinux: failed to load policy [ 64.747259][ T2269] SELinux: truncated policydb string identifier [ 64.764319][ T2269] SELinux: failed to load policy [ 64.771995][ T2269] SELinux: truncated policydb string identifier [ 64.782785][ T2269] SELinux: truncated policydb string identifier [ 64.789984][ T2269] SELinux: truncated policydb string identifier [ 64.803231][ T2269] SELinux: truncated policydb string identifier [ 64.823888][ T2269] SELinux: truncated policydb string identifier [ 64.830595][ T2269] SELinux: truncated policydb string identifier [ 64.846859][ T2269] SELinux: truncated policydb string identifier [ 64.853578][ T2269] SELinux: truncated policydb string identifier [ 64.860255][ T2269] SELinux: truncated policydb string identifier [ 64.866960][ T2269] SELinux: truncated policydb string identifier [ 64.873793][ T2269] SELinux: truncated policydb string identifier [ 64.883208][ T2269] SELinux: truncated policydb string identifier [ 64.889882][ T2269] SELinux: truncated policydb string identifier [ 64.923219][ T2269] SELinux: truncated policydb string identifier [ 64.962235][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.992994][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 66.992994][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.039419][ T36] kauditd_printk_skb: 452 callbacks suppressed [ 68.039435][ T36] audit: type=1400 audit(1750359962.620:6527): avc: denied { mounton } for pid=2303 comm="syz.1.632" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.042935][ T2308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 68.068494][ T36] audit: type=1400 audit(1750359962.620:6528): avc: denied { read } for pid=2304 comm="syz.2.633" name="binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.081106][ T2308] input: syz1 as /devices/virtual/input/input30 [ 68.104167][ T36] audit: type=1400 audit(1750359962.620:6529): avc: denied { read open } for pid=2304 comm="syz.2.633" path="/dev/binderfs/binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.128654][ T36] audit: type=1400 audit(1750359962.620:6530): avc: denied { ioctl } for pid=2304 comm="syz.2.633" path="/dev/binderfs/binder0" dev="binder" ino=37 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.159866][ T36] audit: type=1400 audit(1750359962.640:6531): avc: denied { read } for pid=2305 comm="syz.3.634" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.250545][ T36] audit: type=1400 audit(1750359962.640:6532): avc: denied { read open } for pid=2305 comm="syz.3.634" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.293825][ T36] audit: type=1400 audit(1750359962.640:6533): avc: denied { read } for pid=2303 comm="syz.1.632" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.316962][ T36] audit: type=1400 audit(1750359962.640:6534): avc: denied { read open } for pid=2303 comm="syz.1.632" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.374420][ T36] audit: type=1400 audit(1750359962.640:6535): avc: denied { read } for pid=2302 comm="syz.0.631" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.400216][ T2330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.446154][ T2331] rust_binder: inc_ref_done called when no active inc_refs [ 68.748140][ T2355] binder: Bad value for 'max' [ 68.959509][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 68.978769][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.001625][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.026469][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.060776][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.083808][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.114487][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.143296][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.152310][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.166728][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.178133][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.187795][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.197947][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.231777][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.251931][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.270867][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.296821][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.323739][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.348116][ T2387] SELinux: policydb version -1836883337 does not match my version range 15-33 [ 69.358234][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.385780][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.403361][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.437444][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.461142][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.481490][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.491231][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.510566][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.534181][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.548941][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.575476][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.601206][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.610740][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.620846][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.630627][ T2368] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 69.687229][ T2410] input: syz0 as /devices/virtual/input/input31 [ 69.696647][ T2408] binder: Unknown parameter 'nXI' [ 69.914130][ T2422] binder: Unknown parameter '0177777777777777777777701777777777777777777777' [ 70.052252][ T2429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:414 [ 70.211084][ T2441] binder: Unknown parameter '01777777777777777777777' [ 70.213991][ T2439] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 70.357666][ T2449] __vm_enough_memory: pid: 2449, comm: syz.2.673, bytes: 281474976845824 not enough memory for the allocation [ 70.373297][ T2448] input: syz1 as /devices/virtual/input/input32 [ 70.566951][ T2459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.623241][ T2459] binfmt_misc: register: failed to install interpreter file ./file0 [ 70.637210][ T2459] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.696238][ T2463] rust_binder: Write failure EINVAL in pid:560 [ 70.802646][ T2474] rust_binder: Write failure EFAULT in pid:427 [ 70.836931][ T2476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.946637][ T2476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:427 [ 70.973340][ T2474] rust_binder: Write failure EINVAL in pid:427 [ 71.023105][ T2488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.056459][ T2488] rust_binder: Error while translating object. [ 71.086218][ T2488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.092449][ T2488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 71.255868][ T2501] binder: Unknown parameter 'fscontext?}' [ 71.407845][ T2499] sel_write_load: 15 callbacks suppressed [ 71.407861][ T2499] SELinux: failed to load policy [ 71.422204][ T2508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.438281][ T2508] rust_binder: Error in use_page_slow: ESRCH [ 71.452941][ T2508] rust_binder: use_range failure ESRCH [ 71.459087][ T2508] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 71.480419][ T2508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.492938][ T2508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:497 [ 71.749428][ T2529] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.883740][ T2538] rust_binder: Error while translating object. [ 71.912157][ T2538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.920481][ T2538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:501 [ 72.043514][ T2543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.063699][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:573 [ 72.086176][ T2543] rust_binder: Write failure EINVAL in pid:573 [ 72.388813][ T2557] rust_binder: Got transaction with invalid offset. [ 72.402711][ T2557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.416806][ T2557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:582 [ 72.794858][ T2583] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 73.081092][ T36] kauditd_printk_skb: 898 callbacks suppressed [ 73.081111][ T36] audit: type=1400 audit(1750359967.660:7420): avc: denied { read write } for pid=2590 comm="syz.2.713" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.131075][ T36] audit: type=1400 audit(1750359967.660:7421): avc: denied { read open } for pid=2590 comm="syz.2.713" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.157068][ T36] audit: type=1400 audit(1750359967.660:7422): avc: denied { read } for pid=2590 comm="syz.2.713" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.233174][ T36] audit: type=1400 audit(1750359967.660:7423): avc: denied { read open } for pid=2590 comm="syz.2.713" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.270360][ T36] audit: type=1400 audit(1750359967.660:7424): avc: denied { ioctl } for pid=2590 comm="syz.2.713" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.378551][ T36] audit: type=1400 audit(1750359967.690:7425): avc: denied { read } for pid=2590 comm="syz.2.713" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.389469][ T2597] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.421317][ T36] audit: type=1400 audit(1750359967.690:7426): avc: denied { read open } for pid=2590 comm="syz.2.713" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 73.453114][ T2597] audit: audit_lost=33 audit_rate_limit=0 audit_backlog_limit=64 [ 73.457685][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.476199][ T2598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:592 [ 73.613096][ T2603] binder: Unknown parameter 'posixacl' [ 73.803219][ T2613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.847402][ T2617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:480 [ 73.929529][ T2618] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 74.105217][ T2627] input: syz1 as /devices/virtual/input/input33 [ 74.162748][ T2633] rust_binder: Error in use_page_slow: ESRCH [ 74.162780][ T2633] rust_binder: use_range failure ESRCH [ 74.170243][ T2633] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 74.177970][ T2633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.186453][ T2633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:604 [ 74.351159][ T2636] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 74.379624][ T2638] rust_binder: Write failure EFAULT in pid:607 [ 74.485387][ T2640] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.527256][ T2640] rust_binder: Error while translating object. [ 74.543066][ T2640] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 74.549391][ T2640] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:519 [ 74.565851][ T2645] binder: Bad value for 'max' [ 74.588551][ T2644] SELinux: security_context_str_to_sid () failed with errno=-22 [ 74.704723][ T2655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.706535][ T2655] rust_binder: Error in use_page_slow: ESRCH [ 74.726535][ T2655] rust_binder: use_range failure ESRCH [ 74.732584][ T2655] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 74.734508][ T2651] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 74.746598][ T2655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 74.762930][ T2655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:522 [ 74.839633][ T2651] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 74.906223][ T2663] binder: Unknown parameter 'defcontext01777777777777777777777' [ 74.949895][ T2660] serio: Serial port ttynull [ 74.950183][ T2662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:488 [ 75.237235][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.280013][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.288824][ T2674] SELinux: Context is not valid (left unmapped). [ 75.302919][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.322389][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.344456][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.352930][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.360497][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.384292][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.392682][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.407351][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.417224][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.426651][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.435981][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.443924][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.451454][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.458924][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.478743][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.486194][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.496291][ T2695] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 75.504511][ T2695] rust_binder: Write failure EINVAL in pid:620 [ 75.515464][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.529240][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.536833][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.544315][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.551957][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.559424][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.567178][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.578449][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.585889][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.593512][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.600907][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.608317][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.615731][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.623274][ T10] hid-generic 0001:0000:0000.0006: unknown main item tag 0x0 [ 75.631911][ T10] hid-generic 0001:0000:0000.0006: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 75.755819][ T2722] binder: Unknown parameter 'coyBLV"i5ntext' [ 75.846245][ T2726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 75.858576][ T2724] kvm: user requested TSC rate below hardware speed [ 75.922073][ T2729] rust_binder: Write failure EINVAL in pid:624 [ 75.993466][ T2733] fido_id[2733]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.403605][ T2754] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 76.441469][ T2753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 76.449639][ T2753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:501 [ 76.582848][ T2763] binder: Bad value for 'stats' [ 76.808546][ T2774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506 [ 77.007672][ T2786] rust_binder: Write failure EFAULT in pid:632 [ 77.113930][ T2792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.146581][ T2791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.172944][ T2792] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.262264][ T2798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.287550][ T2798] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 77.347565][ T2804] rust_binder: Error in use_page_slow: ESRCH [ 77.382893][ T2804] rust_binder: use_range failure ESRCH [ 77.388917][ T2804] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 77.418461][ T2804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.439888][ T2804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:515 [ 77.591318][ T2812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 78.083099][ T36] kauditd_printk_skb: 1087 callbacks suppressed [ 78.083116][ T36] audit: type=1400 audit(1750359972.670:8511): avc: denied { ioctl } for pid=2828 comm="syz.1.790" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.186158][ T36] audit: type=1400 audit(1750359972.720:8512): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.191628][ T2835] binder: Binderfs stats mode cannot be changed during a remount [ 78.269295][ T36] audit: type=1400 audit(1750359972.720:8513): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.311962][ T36] audit: type=1400 audit(1750359972.720:8514): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.352943][ T36] audit: type=1400 audit(1750359972.760:8515): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.364266][ T2838] kvm: kvm [2837]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 78.425190][ T36] audit: type=1400 audit(1750359972.770:8516): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.473826][ T36] audit: type=1400 audit(1750359972.770:8517): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 78.517631][ T36] audit: type=1400 audit(1750359972.770:8518): avc: denied { remount } for pid=2832 comm="syz.0.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.543978][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 78.566388][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.576681][ T36] audit: type=1400 audit(1750359972.830:8519): avc: denied { read write } for pid=2826 comm="syz.2.789" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.665968][ T2844] rust_binder: Write failure EINVAL in pid:648 [ 78.666686][ T36] audit: type=1400 audit(1750359972.830:8520): avc: denied { ioctl open } for pid=2826 comm="syz.2.789" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.712794][ T2847] binder: Bad value for 'max' [ 78.730943][ T2846] binder: Bad value for 'max' [ 78.857102][ T2852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.857133][ T2852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:648 [ 78.861589][ T2848] fido_id[2848]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.113324][ T2862] kvm: apic: phys broadcast and lowest prio [ 80.708307][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x6 [ 80.722959][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.730793][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.738257][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.745971][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.753511][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.761106][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.768556][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.776185][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.783640][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.791237][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.798778][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.806460][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.813909][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.821486][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.828951][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.836805][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.844732][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.852263][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.859753][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.867362][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.874846][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.882426][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.889877][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.897491][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.904954][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.912551][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.920007][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.927611][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.935073][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.942745][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.950217][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.957839][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.965297][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.972906][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.980352][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.987808][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 80.995437][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.002906][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.010626][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.018283][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.025787][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.033376][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.040813][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.048409][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.056052][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.063477][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.071077][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.079183][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.087211][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.099779][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.112129][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.120178][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.128190][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.136210][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.144206][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.156644][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.165614][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.173958][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.181676][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.181918][ T2921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.190097][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.207128][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.215350][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.223850][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.231481][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.240026][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.248241][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.256629][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.264600][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.272001][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.280433][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.288462][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.296512][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.304766][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.312224][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.320657][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.328816][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.336853][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.344929][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.352327][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.360744][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.368780][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.376848][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.386537][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.394577][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.402012][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.410135][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.418732][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.426744][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.434783][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.442269][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.450615][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.458640][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.471169][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.480474][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.488976][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.497427][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.505679][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.513943][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.521447][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.530223][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.539038][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.547294][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.555331][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.562748][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.571085][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.579093][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.587159][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.595176][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.608357][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.616943][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.629835][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.638072][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.646641][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.662036][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.675507][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.684106][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.692516][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.702203][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.722908][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.730330][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.751619][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.760571][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.768676][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x6 [ 81.777730][ T2930] rust_binder: Write failure EFAULT in pid:652 [ 81.777777][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x3 [ 81.792470][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.800942][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.809351][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.824748][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.836247][ T2934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:569 [ 81.837881][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.859743][ T2934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.869110][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.891629][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.899713][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.907736][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.915823][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.923963][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.931505][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.941597][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.952655][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.966179][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.982912][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 81.990329][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.018384][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.033334][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.040802][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.070460][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.084013][ T2941] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.085177][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.100187][ T2941] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 82.100207][ T2941] rust_binder: Error while translating object. [ 82.112944][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.126928][ T2941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.126959][ T2941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:573 [ 82.136972][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.156405][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.163997][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.171544][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.178259][ T2944] rust_binder: Error while translating object. [ 82.179022][ T2944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.179053][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.192960][ T2944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 82.202550][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.220001][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.250366][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.258331][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.267612][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.275811][ T2946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.276010][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.291257][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.323114][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.331997][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.340169][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.366643][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.384272][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.392038][ T2950] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.399511][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.413673][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.421219][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.429582][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.437725][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.472904][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.482909][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x4 [ 82.490326][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.500734][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.508247][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.517068][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.524587][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.532829][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.544698][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.554088][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.561628][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.570460][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.578296][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.586208][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.594253][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.602347][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.610842][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.626608][ T2956] binder: Unknown parameter 'processor : 0 [ 82.626608][ T2956] vendor_id : GenuineIntel [ 82.626608][ T2956] cpu family : 6 [ 82.626608][ T2956] model : 7' [ 82.643335][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.650744][ T10] hid-generic 01FF:0004:0400.0008: unknown main item tag 0x0 [ 82.659519][ T10] hid-generic 01FF:0004:0400.0008: hidraw0: HID v0.05 Device [syz0] on syz1 [ 82.742021][ T2959] SELinux: policydb string does not match my string SE Linux [ 82.760408][ T2959] SELinux: failed to load policy [ 83.073322][ T2971] FAULT_INJECTION: forcing a failure. [ 83.073322][ T2971] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 83.094641][ T36] kauditd_printk_skb: 4343 callbacks suppressed [ 83.094657][ T36] audit: type=1400 audit(1750359977.680:12864): avc: denied { setattr } for pid=288 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.101078][ T2971] CPU: 0 UID: 0 PID: 2971 Comm: syz.0.838 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 83.101106][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.101123][ T2971] Call Trace: [ 83.101128][ T2971] [ 83.101136][ T2971] __dump_stack+0x21/0x30 [ 83.101159][ T2971] dump_stack_lvl+0x10c/0x190 [ 83.101177][ T2971] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.101197][ T2971] dump_stack+0x19/0x20 [ 83.101213][ T2971] should_fail_ex+0x3d9/0x530 [ 83.101231][ T2971] should_fail_alloc_page+0xeb/0x110 [ 83.101252][ T2971] __alloc_pages_noprof+0x19d/0x6c0 [ 83.101269][ T2971] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 83.101286][ T2971] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.101307][ T2971] ? kvm_mmu_post_init_vm+0x1a6/0x310 [ 83.101326][ T2971] __folio_alloc_noprof+0x14/0x80 [ 83.101341][ T2971] folio_prealloc+0x46/0x240 [ 83.101363][ T2971] do_wp_page+0x1c54/0x3270 [ 83.101383][ T2971] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 83.101401][ T2971] ? folio_put+0x90/0x90 [ 83.101419][ T2971] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.101437][ T2971] ? __pte_offset_map+0x1b0/0x230 [ 83.101454][ T2971] ? pte_offset_map_rw_nolock+0xba/0x110 [ 83.101471][ T2971] handle_mm_fault+0xff7/0x1b90 [ 83.101490][ T2971] ? __kasan_check_write+0x18/0x20 [ 83.101509][ T2971] ? __cfi_handle_mm_fault+0x10/0x10 [ 83.101528][ T2971] ? vm_normal_page+0x1fa/0x220 [ 83.101546][ T2971] ? follow_page_pte+0xa5c/0xb90 [ 83.101562][ T2971] ? gup_must_unshare+0x1e0/0x1e0 [ 83.101577][ T2971] ? vma_is_secretmem+0x11/0x50 [ 83.101593][ T2971] __get_user_pages+0x1169/0x22d0 [ 83.101617][ T2971] ? populate_vma_page_range+0x230/0x230 [ 83.101645][ T2971] ? down_read_killable+0x79/0xf0 [ 83.101662][ T2971] ? __cfi_down_read_killable+0x10/0x10 [ 83.101678][ T2971] ? get_user_pages_fast_only+0xc0/0xc0 [ 83.101700][ T2971] get_user_pages_unlocked+0x1b7/0x6e0 [ 83.101724][ T2971] hva_to_pfn+0x25f/0xa60 [ 83.101744][ T2971] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 83.101762][ T2971] ? tdp_iter_next+0x7d4/0xa30 [ 83.101776][ T2971] ? __cfi_hva_to_pfn+0x10/0x10 [ 83.101796][ T2971] ? kvm_tdp_mmu_fast_pf_get_last_sptep+0x20f/0x290 [ 83.101814][ T2971] ? __cfi_kvm_tdp_mmu_fast_pf_get_last_sptep+0x10/0x10 [ 83.101834][ T2971] __gfn_to_pfn_memslot+0x29f/0x330 [ 83.101855][ T2971] kvm_faultin_pfn+0x5db/0x1510 [ 83.101875][ T2971] ? fast_page_fault+0x1160/0x1160 [ 83.101894][ T2971] ? __kvm_mmu_topup_memory_cache+0x49a/0x860 [ 83.101913][ T2971] ? get_guest_cr3+0xc0/0xc0 [ 83.101933][ T2971] kvm_tdp_page_fault+0x204/0x320 [ 83.101949][ T2971] kvm_mmu_do_page_fault+0x29d/0x5f0 [ 83.101964][ T2971] ? __cfi__raw_spin_trylock+0x10/0x10 [ 83.101984][ T2971] ? kvm_arch_async_page_ready+0x480/0x480 [ 83.102000][ T2971] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 83.102024][ T2971] kvm_mmu_page_fault+0x143/0x970 [ 83.102039][ T2971] handle_ept_violation+0x21c/0x440 [ 83.102061][ T2971] ? vmx_vcpu_run+0xfbd/0x1e40 [ 83.102083][ T2971] ? __cfi_handle_ept_violation+0x10/0x10 [ 83.102104][ T2971] vmx_handle_exit+0x12c2/0x1b40 [ 83.102122][ T2971] ? vmx_read_guest_seg_ar+0x179/0x350 [ 83.102138][ T2971] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 83.102156][ T2971] ? vmx_get_segment+0x3e4/0x8e0 [ 83.102171][ T2971] ? vmx_handle_exit_irqoff+0xe9/0x7a0 [ 83.102190][ T2971] vcpu_run+0x481a/0x7260 [ 83.102216][ T2971] ? signal_pending+0xc0/0xc0 [ 83.102233][ T2971] ? complete_emulated_mmio+0x4fb/0x790 [ 83.102249][ T2971] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 83.102268][ T2971] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 83.102285][ T2971] ? kstrtoull+0x13b/0x1e0 [ 83.102300][ T2971] ? kstrtouint+0x78/0xf0 [ 83.102315][ T2971] ? ioctl_has_perm+0x1aa/0x4d0 [ 83.102337][ T2971] ? __asan_memcpy+0x5a/0x80 [ 83.102353][ T2971] ? ioctl_has_perm+0x3e0/0x4d0 [ 83.102373][ T2971] ? has_cap_mac_admin+0xd0/0xd0 [ 83.102393][ T2971] ? __kasan_check_write+0x18/0x20 [ 83.102410][ T2971] ? mutex_lock_killable+0x92/0x1c0 [ 83.102425][ T2971] ? __cfi_mutex_lock_killable+0x10/0x10 [ 83.102441][ T2971] ? proc_fail_nth_write+0x17e/0x210 [ 83.102457][ T2971] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 83.102473][ T2971] kvm_vcpu_ioctl+0x96f/0xee0 [ 83.102493][ T2971] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.102513][ T2971] ? __cfi_vfs_write+0x10/0x10 [ 83.102530][ T2971] ? __kasan_check_write+0x18/0x20 [ 83.102547][ T2971] ? mutex_unlock+0x8b/0x240 [ 83.102561][ T2971] ? __cfi_mutex_unlock+0x10/0x10 [ 83.102598][ T2971] ? __fget_files+0x2c5/0x340 [ 83.102619][ T2971] ? __fget_files+0x2c5/0x340 [ 83.102644][ T2971] ? bpf_lsm_file_ioctl+0xd/0x20 [ 83.102661][ T2971] ? security_file_ioctl+0x34/0xd0 [ 83.102681][ T2971] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.102699][ T2971] __se_sys_ioctl+0x132/0x1b0 [ 83.102721][ T2971] __x64_sys_ioctl+0x7f/0xa0 [ 83.102740][ T2971] x64_sys_call+0x1878/0x2ee0 [ 83.102759][ T2971] do_syscall_64+0x58/0xf0 [ 83.102778][ T2971] ? clear_bhb_loop+0x35/0x90 [ 83.102801][ T2971] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.102821][ T2971] RIP: 0033:0x7ff294d8e929 [ 83.102841][ T2971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.102855][ T2971] RSP: 002b:00007ff294beb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.102873][ T2971] RAX: ffffffffffffffda RBX: 00007ff294fb5fa0 RCX: 00007ff294d8e929 [ 83.102886][ T2971] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 83.102897][ T2971] RBP: 00007ff294beb090 R08: 0000000000000000 R09: 0000000000000000 [ 83.102907][ T2971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.102918][ T2971] R13: 0000000000000000 R14: 00007ff294fb5fa0 R15: 00007ffcf230fec8 [ 83.102931][ T2971] [ 83.548050][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.561633][ T2973] fido_id[2973]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.647722][ T288] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64 [ 83.661567][ T2975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.718982][ T288] audit: backlog limit exceeded [ 83.733927][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.740629][ T288] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 83.745806][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.770967][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.772945][ T288] audit: backlog limit exceeded [ 83.878445][ T2980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.944917][ T2983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 84.222673][ T45] hid-generic C98F:0003:0000.0009: unknown main item tag 0x0 [ 84.259665][ T45] hid-generic C98F:0003:0000.0009: unknown main item tag 0x0 [ 84.271651][ T45] hid-generic C98F:0003:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.458116][ T2996] fido_id[2996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.578280][ T3001] binder: Bad value for 'max' [ 84.655538][ T3003] FAULT_INJECTION: forcing a failure. [ 84.655538][ T3003] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 84.690041][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: syz.2.849 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 84.690071][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.690081][ T3003] Call Trace: [ 84.690087][ T3003] [ 84.690094][ T3003] __dump_stack+0x21/0x30 [ 84.690118][ T3003] dump_stack_lvl+0x10c/0x190 [ 84.690137][ T3003] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.690155][ T3003] ? __kasan_check_read+0x15/0x20 [ 84.690173][ T3003] dump_stack+0x19/0x20 [ 84.690191][ T3003] should_fail_ex+0x3d9/0x530 [ 84.690209][ T3003] should_fail+0xf/0x20 [ 84.690226][ T3003] should_fail_usercopy+0x1e/0x30 [ 84.690244][ T3003] __kvm_read_guest_page+0x177/0x210 [ 84.690267][ T3003] kvm_vcpu_read_guest_page+0x31a/0x400 [ 84.690290][ T3003] kvm_fetch_guest_virt+0x146/0x190 [ 84.690310][ T3003] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 84.690330][ T3003] __do_insn_fetch_bytes+0x321/0x730 [ 84.690353][ T3003] ? x86_decode_insn+0x4fb0/0x4fb0 [ 84.690373][ T3003] ? hva_to_pfn+0x153/0xa60 [ 84.690393][ T3003] ? __cfi___switch_to+0x10/0x10 [ 84.690413][ T3003] x86_decode_insn+0x33b/0x4fb0 [ 84.690436][ T3003] ? kvm_tdp_mmu_map+0x7a2/0x1190 [ 84.690457][ T3003] ? __cfi_x86_decode_insn+0x10/0x10 [ 84.690478][ T3003] ? __kasan_check_write+0x18/0x20 [ 84.690495][ T3003] ? vmx_read_guest_seg_ar+0x1c8/0x350 [ 84.690511][ T3003] ? __asan_memset+0x39/0x50 [ 84.690528][ T3003] ? init_decode_cache+0x7c/0x90 [ 84.690549][ T3003] ? init_emulate_ctxt+0x410/0x540 [ 84.690573][ T3003] ? kvm_inject_realmode_interrupt+0x2e0/0x2e0 [ 84.690597][ T3003] x86_decode_emulated_instruction+0x66/0x190 [ 84.690614][ T3003] x86_emulate_instruction+0x2d3/0x1870 [ 84.690630][ T3003] ? kvm_mmu_do_page_fault+0x4b0/0x5f0 [ 84.690646][ T3003] ? finish_task_switch+0x638/0x780 [ 84.690664][ T3003] handle_ud+0x19e/0x320 [ 84.690692][ T3003] ? __cfi_handle_ud+0x10/0x10 [ 84.690714][ T3003] ? __cfi_rcu_note_context_switch+0x10/0x10 [ 84.690738][ T3003] ? clear_bhb_loop+0x35/0x90 [ 84.690761][ T3003] ? clear_bhb_loop+0x35/0x90 [ 84.690781][ T3003] ? clear_bhb_loop+0x35/0x90 [ 84.690802][ T3003] ? clear_bhb_loop+0x35/0x90 [ 84.690823][ T3003] ? clear_bhb_loop+0x12/0x90 [ 84.690845][ T3003] handle_exception_nmi+0x194/0xeb0 [ 84.690868][ T3003] ? __cfi_handle_exception_nmi+0x10/0x10 [ 84.690889][ T3003] vmx_handle_exit+0x12c2/0x1b40 [ 84.690908][ T3003] ? xfd_validate_state+0x68/0x150 [ 84.690926][ T3003] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 84.690945][ T3003] ? vmx_handle_exit_irqoff+0x401/0x7a0 [ 84.690965][ T3003] vcpu_run+0x481a/0x7260 [ 84.690993][ T3003] ? signal_pending+0xc0/0xc0 [ 84.691011][ T3003] ? complete_emulated_mmio+0x4fb/0x790 [ 84.691028][ T3003] kvm_arch_vcpu_ioctl_run+0x101a/0x1aa0 [ 84.691048][ T3003] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 84.691066][ T3003] ? kstrtoull+0x13b/0x1e0 [ 84.691082][ T3003] ? kstrtouint+0x78/0xf0 [ 84.691098][ T3003] ? ioctl_has_perm+0x1aa/0x4d0 [ 84.691120][ T3003] ? __asan_memcpy+0x5a/0x80 [ 84.691137][ T3003] ? ioctl_has_perm+0x3e0/0x4d0 [ 84.691158][ T3003] ? has_cap_mac_admin+0xd0/0xd0 [ 84.691180][ T3003] ? __kasan_check_write+0x18/0x20 [ 84.691197][ T3003] ? mutex_lock_killable+0x92/0x1c0 [ 84.691213][ T3003] ? __cfi_mutex_lock_killable+0x10/0x10 [ 84.691229][ T3003] ? proc_fail_nth_write+0x17e/0x210 [ 84.691246][ T3003] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 84.691263][ T3003] kvm_vcpu_ioctl+0x96f/0xee0 [ 84.691283][ T3003] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.691304][ T3003] ? __cfi_vfs_write+0x10/0x10 [ 84.691322][ T3003] ? __kasan_check_write+0x18/0x20 [ 84.691339][ T3003] ? mutex_unlock+0x8b/0x240 [ 84.691354][ T3003] ? __cfi_mutex_unlock+0x10/0x10 [ 84.691368][ T3003] ? __fget_files+0x2c5/0x340 [ 84.691390][ T3003] ? __fget_files+0x2c5/0x340 [ 84.691411][ T3003] ? bpf_lsm_file_ioctl+0xd/0x20 [ 84.691428][ T3003] ? security_file_ioctl+0x34/0xd0 [ 84.691448][ T3003] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.691467][ T3003] __se_sys_ioctl+0x132/0x1b0 [ 84.691488][ T3003] __x64_sys_ioctl+0x7f/0xa0 [ 84.691508][ T3003] x64_sys_call+0x1878/0x2ee0 [ 84.691528][ T3003] do_syscall_64+0x58/0xf0 [ 84.691547][ T3003] ? clear_bhb_loop+0x35/0x90 [ 84.691569][ T3003] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.691591][ T3003] RIP: 0033:0x7fea6f38e929 [ 84.691606][ T3003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.691620][ T3003] RSP: 002b:00007fea7016b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.691639][ T3003] RAX: ffffffffffffffda RBX: 00007fea6f5b5fa0 RCX: 00007fea6f38e929 [ 84.691652][ T3003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 84.691663][ T3003] RBP: 00007fea7016b090 R08: 0000000000000000 R09: 0000000000000000 [ 84.691673][ T3003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.691690][ T3003] R13: 0000000000000000 R14: 00007fea6f5b5fa0 R15: 00007ffd089a7c18 [ 84.691704][ T3003] [ 85.549389][ T3013] tap0: tun_chr_ioctl cmd 1074812118 [ 85.560325][ T3013] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 85.734973][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.735217][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.741916][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.783238][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.783485][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.790171][ T3021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.184522][ T3036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.194147][ T3036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:704 [ 86.214939][ T3036] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 42) [ 86.232893][ T3036] rust_binder: Error while translating object. [ 86.262920][ T3036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.270249][ T3036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:704 [ 86.579422][ T3046] input: syz0 as /devices/virtual/input/input36 [ 87.115167][ T3055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.353307][ T3064] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:713 [ 88.103338][ T36] kauditd_printk_skb: 4293 callbacks suppressed [ 88.103354][ T36] audit: type=1400 audit(1750359982.690:16492): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.179763][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.180093][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.186316][ T294] audit: audit_lost=260 audit_rate_limit=0 audit_backlog_limit=64 [ 88.186328][ T294] audit: backlog limit exceeded [ 88.187028][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.193006][ T36] audit: type=1400 audit(1750359982.690:16493): avc: denied { setattr } for pid=288 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.205207][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.205924][ T288] audit: audit_lost=261 audit_rate_limit=0 audit_backlog_limit=64 [ 88.212199][ T293] audit: audit_lost=262 audit_rate_limit=0 audit_backlog_limit=64 [ 88.718034][ T3096] can0: slcan on ttyS3. [ 88.793794][ T3097] can0 (unregistered): slcan off ttyS3. [ 89.452726][ T3117] binder: Bad value for 'defcontext' [ 89.831552][ T3127] binder: Bad value for 'stats' [ 90.100016][ T3133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.402485][ T3144] binder: Bad value for 'max' [ 90.529301][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.814420][ T3153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.842339][ T3153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.592898][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 92.592898][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.801374][ T3166] binder: Bad value for 'context' [ 93.112880][ T36] kauditd_printk_skb: 8175 callbacks suppressed [ 93.112895][ T36] audit: type=1400 audit(1750359987.690:24572): avc: denied { setattr } for pid=288 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.185970][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.186372][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.192497][ T294] audit: audit_lost=295 audit_rate_limit=0 audit_backlog_limit=64 [ 93.199033][ T36] audit: type=1400 audit(1750359987.700:24573): avc: denied { setattr } for pid=288 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.247247][ T288] audit: audit_lost=296 audit_rate_limit=0 audit_backlog_limit=64 [ 93.247292][ T294] audit: backlog limit exceeded [ 93.262885][ T288] audit: backlog limit exceeded [ 93.271324][ T293] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.277715][ T3179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 93.751715][ T3191] binder: Unknown parameter '' [ 93.773802][ T3191] binder: Unknown parameter '' [ 93.931443][ T3197] binder: Bad value for 'stats' [ 93.953816][ T3198] binder: Bad value for 'stats' [ 94.006728][ T3201] binder: Unknown parameter 'processor : 0 [ 94.006728][ T3201] vendor_id : GenuineIntel [ 94.006728][ T3201] cpu family : 6 [ 94.006728][ T3201] model : 79 [ 94.006728][ T3201] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 94.006728][ T3201] stepping : 0 [ 94.006728][ T3201] micro/dev/rtc0' [ 94.183682][ T3204] KVM: debugfs: duplicate directory 3204-4 [ 94.292227][ T304] bridge_slave_1: left allmulticast mode [ 94.304377][ T3206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 94.304402][ T3206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:769 [ 94.308495][ T304] bridge_slave_1: left promiscuous mode [ 94.363847][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.380200][ T304] bridge_slave_0: left allmulticast mode [ 94.401589][ T304] bridge_slave_0: left promiscuous mode [ 94.452089][ T3209] input: syz0 as /devices/virtual/input/input40 [ 94.452951][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.487026][ T3209] __vm_enough_memory: pid: 3209, comm: syz.2.917, bytes: 281474976845824 not enough memory for the allocation [ 94.599718][ T3214] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 94.599741][ T3214] rust_binder: Error while translating object. [ 94.622968][ T3214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.629171][ T3214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:774 [ 94.650298][ T304] veth1_macvtap: left promiscuous mode [ 94.664999][ T304] veth0_vlan: left promiscuous mode [ 94.836067][ T3210] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.843216][ T3210] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.850487][ T3210] bridge_slave_0: entered allmulticast mode [ 94.871813][ T3210] bridge_slave_0: entered promiscuous mode [ 94.892972][ T3210] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.922948][ T3210] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.940399][ T3210] bridge_slave_1: entered allmulticast mode [ 94.955529][ T3210] bridge_slave_1: entered promiscuous mode [ 94.997800][ T3224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:777 [ 95.202901][ T3210] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.219179][ T3210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.226617][ T3210] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.233667][ T3210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.313325][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.343994][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.497436][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.504535][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.551163][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.558368][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.816625][ T3210] veth0_vlan: entered promiscuous mode [ 95.882366][ T3210] veth1_macvtap: entered promiscuous mode [ 96.113158][ T3253] rust_binder: Write failure EINVAL in pid:2 [ 96.289288][ T3256] binder: Bad value for 'stats' [ 96.675126][ T3276] random: crng reseeded on system resumption [ 96.784620][ T3279] binder: Unknown parameter 'nXI' [ 97.085545][ T3290] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 97.179791][ T3297] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.199496][ T3295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 97.421788][ T3305] rust_binder: Write failure EFAULT in pid:18 [ 98.036677][ T3332] binder: Unknown parameter 'ma' [ 98.063509][ T3333] binder: Unknown parameter 'ma' [ 98.078461][ T3333] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 98.127608][ T36] kauditd_printk_skb: 4118 callbacks suppressed [ 98.127628][ T36] audit: type=1400 audit(1750359992.710:28667): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.171449][ T3336] SELinux: policydb version 905587468 does not match my version range 15-33 [ 98.181043][ T3336] SELinux: failed to load policy [ 98.194597][ T36] audit: type=1400 audit(1750359992.710:28668): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.219767][ T3336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23 [ 98.220125][ T3336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 98.241543][ T36] audit: type=1400 audit(1750359992.710:28669): avc: denied { setattr } for pid=294 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.277471][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.285905][ T3336] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.292427][ T3336] audit: audit_lost=306 audit_rate_limit=0 audit_backlog_limit=64 [ 98.300341][ T294] audit: audit_lost=307 audit_rate_limit=0 audit_backlog_limit=64 [ 98.312066][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 98.318932][ T3336] audit: backlog limit exceeded [ 98.332889][ T294] audit: backlog limit exceeded [ 98.390243][ T3347] binder: Unknown parameter 'g}' [ 98.521668][ T3354] rust_binder: Write failure EINVAL in pid:28 [ 98.530974][ T3353] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 98.554219][ T3353] rust_binder: Error while translating object. [ 98.593227][ T3353] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.620400][ T3353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 98.651099][ T3357] binder: Bad value for 'max' [ 98.945812][ T3382] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 99.210777][ T3392] kvm: kvm [3389]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 99.279702][ T3392] rust_binder: Error while translating object. [ 99.279737][ T3392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.291792][ T3392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 99.408809][ T3399] SELinux: failed to load policy [ 99.694534][ T3417] rust_binder: Error while translating object. [ 99.694568][ T3417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 99.700766][ T3417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 99.883149][ T3427] binder: Unknown parameter 'non' [ 99.914395][ T3430] rust_binder: Read failure Err(EAGAIN) in pid:48 [ 99.925810][ T3430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 100.222661][ T3440] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 100.239394][ T3440] SELinux: failed to load policy [ 100.730215][ T3457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.912381][ T3463] rust_binder: Read failure Err(EAGAIN) in pid:843 [ 100.966708][ T3466] rust_binder: Write failure EFAULT in pid:845 [ 100.974607][ T3466] rust_binder: Write failure EFAULT in pid:845 [ 101.117355][ T3470] SELinux: policydb string does not match my string SE Linux [ 101.182936][ T3470] SELinux: failed to load policy [ 101.384271][ T3477] rust_binder: Write failure EINVAL in pid:870 [ 101.413835][ T305] bridge_slave_1: left allmulticast mode [ 101.442969][ T305] bridge_slave_1: left promiscuous mode [ 101.450313][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.469413][ T305] bridge_slave_0: left allmulticast mode [ 101.478916][ T305] bridge_slave_0: left promiscuous mode [ 101.489061][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.680941][ T305] veth1_macvtap: left promiscuous mode [ 101.689585][ T305] veth0_vlan: left promiscuous mode [ 101.811313][ T45] hid-generic C98F:0003:0000.000A: unknown main item tag 0x0 [ 101.833966][ T45] hid-generic C98F:0003:0000.000A: unknown main item tag 0x0 [ 101.876976][ T45] hid-generic C98F:0003:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.049961][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.079817][ T3513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:881 [ 102.080482][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.099671][ T3508] fido_id[3508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 102.146689][ T3482] bridge_slave_0: entered allmulticast mode [ 102.158269][ T3482] bridge_slave_0: entered promiscuous mode [ 102.177343][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.204914][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.227928][ T3522] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 102.227957][ T3522] rust_binder: Error in use_page_slow: EBUSY [ 102.238478][ T3522] rust_binder: use_range failure EBUSY [ 102.239268][ T3482] bridge_slave_1: entered allmulticast mode [ 102.249638][ T3522] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 102.260678][ T3482] bridge_slave_1: entered promiscuous mode [ 102.274434][ T3522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 102.274515][ T3522] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 102.293789][ T3522] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:77 [ 102.431387][ T3532] SELinux: security_context_str_to_sid () failed with errno=-22 [ 102.465401][ T3533] binder: Binderfs stats mode cannot be changed during a remount [ 102.475162][ T3533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.475190][ T3533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:887 [ 102.509709][ T3537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.541540][ T3536] binder: Binderfs stats mode cannot be changed during a remount [ 102.544394][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.562802][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.570115][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.577171][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.658400][ T3544] rust_binder: Write failure EINVAL in pid:82 [ 102.660390][ T3544] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 102.683370][ T3544] rust_binder: Read failure Err(EFAULT) in pid:82 [ 102.705105][ T3544] rust_binder: Write failure EINVAL in pid:82 [ 102.742551][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.780756][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.799132][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.806207][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.838131][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.845210][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.908355][ T3556] binder: Binderfs stats mode cannot be changed during a remount [ 102.994433][ T3482] veth0_vlan: entered promiscuous mode [ 103.049223][ T3564] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 103.049248][ T3564] rust_binder: Error while translating object. [ 103.086273][ T3564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 103.092476][ T3564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:897 [ 103.116728][ T3482] veth1_macvtap: entered promiscuous mode [ 103.121555][ T3566] rust_binder: Error while translating object. [ 103.136725][ T36] kauditd_printk_skb: 2578 callbacks suppressed [ 103.136743][ T36] audit: type=1400 audit(1750359997.720:31219): avc: denied { read write } for pid=3563 comm="syz.0.1027" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.142740][ T3564] input: syz0 as /devices/virtual/input/input45 [ 103.149241][ T36] audit: type=1400 audit(1750359997.720:31220): avc: denied { read write open } for pid=3563 comm="syz.0.1027" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.178132][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.183650][ T3566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 103.208426][ T3571] rust_binder: Error while translating object. [ 103.233132][ T36] audit: type=1400 audit(1750359997.720:31221): avc: denied { ioctl } for pid=3563 comm="syz.0.1027" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.266976][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.267204][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.274265][ T3571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 103.280696][ T3571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:881 [ 103.305390][ T36] audit: type=1400 audit(1750359997.720:31222): avc: denied { ioctl } for pid=3563 comm="syz.0.1027" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 103.341777][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.342034][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.361693][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.372562][ T94] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.372957][ T3566] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:881 [ 103.385574][ T3570] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.387790][ T3482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.406074][ T94] audit: audit_lost=318 audit_rate_limit=0 audit_backlog_limit=64 [ 103.420956][ T3569] audit: audit_backlog=65 > audit_backlog_limit=64 [ 103.429051][ T94] audit: backlog limit exceeded [ 103.442955][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.450279][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.482265][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.513561][ T3569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.514633][ T3574] rust_binder: Write failure EFAULT in pid:900 [ 103.568640][ T3574] rust_binder: Write failure EINVAL in pid:900 [ 103.673488][ T3580] kvm: user requested TSC rate below hardware speed [ 103.683156][ T3586] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 103.686395][ T3586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:888 [ 103.710753][ T3583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.772964][ T3583] binder: Unknown parameter 'processor : 0 [ 103.772964][ T3583] vendor_id : GenuineIntel [ 103.772964][ T3583] cpu family : 6 [ 103.772964][ T3583] model : 79 [ 103.772964][ T3583] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 103.772964][ T3583] stepping : 0 [ 103.772964][ T3583] microcode : 0xffffffff [ 103.772964][ T3583] cpu MHz : 2200.216 [ 103.772964][ T3583] cache size : 56320 KB [ 103.772964][ T3583] physical id : 0 [ 103.772964][ T3583] siblings : 2 [ 103.772964][ T3583] core id : 0 [ 103.772964][ T3583] cpu cores : 1 [ 103.772964][ T3583] apicid : 0 [ 103.772964][ T3583] initial apicid : 0 [ 103.772964][ T3583] fpu : yes [ 103.772964][ T3583] fpu_exception : yes [ 103.772964][ T3583] cpuid level : 13 [ 103.772964][ T3583] wp : yes [ 103.772964][ T3583] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 103.772964][ T3583] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 103.887235][ T3597] rust_binder: Write failure EFAULT in pid:891 [ 104.094414][ T3603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:97 [ 104.461582][ T3618] rust_binder: Write failure EFAULT in pid:897 [ 104.486956][ T3623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 104.500919][ T3623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:908 [ 104.569135][ T3626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:899 [ 104.714317][ T3637] binder: Unknown parameter ' ' [ 104.722744][ T3635] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 104.735998][ T3635] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 104.767729][ T3635] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 105.060044][ T3649] cgroup: fork rejected by pids controller in /syz5 [ 105.167784][ T3656] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.193924][ T3661] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 105.239520][ T3662] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 105.239964][ T3662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:913 [ 105.329805][ T3666] rust_binder: Read failure Err(EAGAIN) in pid:114 [ 105.385902][ T305] bridge_slave_1: left allmulticast mode [ 105.418172][ T305] bridge_slave_1: left promiscuous mode [ 105.427738][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.437815][ T305] bridge_slave_0: left allmulticast mode [ 105.443803][ T305] bridge_slave_0: left promiscuous mode [ 105.449573][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.596689][ T305] veth1_macvtap: left promiscuous mode [ 105.602443][ T305] veth0_vlan: left promiscuous mode [ 105.669222][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.681164][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.690221][ T3672] bridge_slave_0: entered allmulticast mode [ 105.704531][ T3672] bridge_slave_0: entered promiscuous mode [ 105.712115][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.720321][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.728022][ T3672] bridge_slave_1: entered allmulticast mode [ 105.743285][ T3672] bridge_slave_1: entered promiscuous mode [ 105.824423][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.831504][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.838786][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.845840][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.886111][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.893491][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.908541][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.915634][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.926531][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.933603][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.003750][ T3672] veth0_vlan: entered promiscuous mode [ 106.055907][ T3684] SELinux: security_context_str_to_sid () failed with errno=-22 [ 106.070289][ T3672] veth1_macvtap: entered promiscuous mode [ 106.208266][ T3689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.208516][ T3689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.251614][ T3689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.280197][ T3689] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.301378][ T3696] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 106.319250][ T3696] rust_binder: Write failure EINVAL in pid:2 [ 106.836131][ T3729] rust_binder: Write failure EINVAL in pid:929 [ 107.083106][ T3743] binder: Bad value for 'stats' [ 107.493687][ T3759] rust_binder: Error while translating object. [ 107.493712][ T3759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.502947][ T3759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 107.824402][ T3772] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.835332][ T3772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.842898][ T3772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:941 [ 107.901575][ T3775] input: syz0 as /devices/virtual/input/input49 [ 107.953405][ T3775] input: failed to attach handler leds to device input49, error: -6 [ 108.052439][ T3780] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 108.072305][ T3780] pim6reg0: linktype set to 769 [ 108.077679][ T3782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.095055][ T3782] rust_binder: Error while translating object. [ 108.113312][ T3783] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.132976][ T3782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.143714][ T36] kauditd_printk_skb: 1119 callbacks suppressed [ 108.143730][ T36] audit: type=1400 audit(1750360002.730:32327): avc: denied { ioctl } for pid=3786 comm="syz.0.1094" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.203409][ T3782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:943 [ 108.220962][ T36] audit: type=1400 audit(1750360002.740:32328): avc: denied { read } for pid=3786 comm="syz.0.1094" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.318063][ T36] audit: type=1400 audit(1750360002.740:32329): avc: denied { read open } for pid=3786 comm="syz.0.1094" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.343068][ T36] audit: type=1400 audit(1750360002.740:32330): avc: denied { ioctl } for pid=3786 comm="syz.0.1094" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.378800][ T36] audit: type=1400 audit(1750360002.800:32331): avc: denied { read write } for pid=3788 comm="syz.5.1093" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.404066][ T36] audit: type=1400 audit(1750360002.800:32332): avc: denied { read write open } for pid=3788 comm="syz.5.1093" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.444248][ T36] audit: type=1400 audit(1750360002.810:32333): avc: denied { ioctl } for pid=3788 comm="syz.5.1093" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.496974][ T3797] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 108.496998][ T3797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 108.532885][ T36] audit: type=1400 audit(1750360002.840:32334): avc: denied { read write } for pid=292 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.560414][ T3797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:946 [ 108.584581][ T3799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:148 [ 108.650736][ T36] audit: type=1400 audit(1750360002.840:32335): avc: denied { read write open } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.694345][ T36] audit: type=1400 audit(1750360002.840:32336): avc: denied { ioctl } for pid=292 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.829683][ T3806] binder: Unknown parameter 'fscontext?}' [ 109.098140][ T3817] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 109.128755][ T3817] rust_binder: Write failure EINVAL in pid:154 [ 109.132917][ T3812] rust_binder: Error while translating object. [ 109.152984][ T3812] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.163484][ T3812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 109.183195][ T3823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.246557][ T3829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:951 [ 109.287352][ T3831] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.328316][ T3828] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.690130][ T3851] rust_binder: Write failure EINVAL in pid:40 [ 109.710668][ T3851] binder: Bad value for 'max' [ 110.036589][ T3872] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.054447][ T3872] rust_binder: Error while translating object. [ 110.073036][ T3872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.080050][ T3872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:968 [ 110.306346][ T3891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.315852][ T3892] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.552982][ T3908] binder: Unknown parameter 'fscontext?}' [ 110.560957][ T3910] binder: Unknown parameter 'fscontext?}' [ 110.575256][ T3902] rust_binder: Error in use_page_slow: ESRCH [ 110.575276][ T3902] rust_binder: use_range failure ESRCH [ 110.598687][ T3902] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 110.612944][ T3902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 110.645636][ T3902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:978 [ 110.904194][ T3920] rust_binder: Write failure EINVAL in pid:174 [ 110.981418][ T3931] binder: Unknown parameter 'fowner>00000000000000000000' [ 111.124042][ T3937] input: syz0 as /devices/virtual/input/input52 [ 111.145866][ T3944] rust_binder: Write failure EINVAL in pid:64 [ 111.284895][ T3952] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 111.380972][ T3954] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.476046][ T3954] rust_binder: Error in use_page_slow: ESRCH [ 111.482503][ T3954] rust_binder: use_range failure ESRCH [ 111.492925][ T3954] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 111.513875][ T3954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.523011][ T3960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 111.535731][ T3954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:990 [ 111.596972][ T3962] rust_binder: Write failure EINVAL in pid:182 [ 111.723288][ T3968] binder: Unknown parameter 'dont_hash' [ 111.812758][ T3966] __vm_enough_memory: pid: 3966, comm: syz.0.1148, bytes: 281474976845824 not enough memory for the allocation [ 111.974775][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.975025][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.981701][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.990537][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.997604][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.005617][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.012319][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.020026][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.028526][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.044861][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.045189][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.080503][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.080760][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.317927][ T4000] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 112.534467][ T4009] rust_binder: Write failure EFAULT in pid:91 [ 112.542171][ T4012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.563625][ T4012] rust_binder: Error while translating object. [ 112.592916][ T4012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.599209][ T4012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1007 [ 112.614051][ T4014] rust_binder: Write failure EFAULT in pid:995 [ 112.778006][ T4024] rust_binder: Write failure EINVAL in pid:1000 [ 112.786027][ T4027] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.803180][ T4022] rust_binder: Write failure EINVAL in pid:1000 [ 112.888490][ T4032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 112.910113][ T4032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1009 [ 112.914734][ T4035] cgroup: fork rejected by pids controller in /syz0 [ 112.973855][ T4041] rust_binder: Write failure EINVAL in pid:98 [ 112.983239][ T4040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 113.022962][ T4035] rust_binder: Error while translating object. [ 113.040941][ T4035] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 113.063131][ T4035] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1003 [ 113.120578][ T4046] binder: Unknown parameter '0000000000000000000000000000000000000000000' [ 113.169357][ T36] kauditd_printk_skb: 1060 callbacks suppressed [ 113.169374][ T36] audit: type=1400 audit(1750360007.750:33391): avc: denied { read write } for pid=3672 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.196801][ T4049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.208732][ T36] audit: type=1400 audit(1750360007.750:33392): avc: denied { read write open } for pid=3672 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.256739][ T36] audit: type=1400 audit(1750360007.750:33393): avc: denied { ioctl } for pid=3672 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.295364][ T36] audit: type=1400 audit(1750360007.780:33394): avc: denied { read } for pid=4048 comm="syz.5.1175" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.321185][ T305] bridge_slave_1: left allmulticast mode [ 113.332912][ T305] bridge_slave_1: left promiscuous mode [ 113.349998][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.369887][ T305] bridge_slave_0: left allmulticast mode [ 113.377507][ T305] bridge_slave_0: left promiscuous mode [ 113.389699][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.396797][ T36] audit: type=1400 audit(1750360007.780:33395): avc: denied { read open } for pid=4048 comm="syz.5.1175" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.396827][ T36] audit: type=1400 audit(1750360007.780:33396): avc: denied { ioctl } for pid=4048 comm="syz.5.1175" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.462780][ T36] audit: type=1400 audit(1750360007.780:33397): avc: denied { set_context_mgr } for pid=4048 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 113.491529][ T4057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 113.497309][ T36] audit: type=1400 audit(1750360007.780:33398): avc: denied { ioctl } for pid=4048 comm="syz.5.1175" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.545926][ T36] audit: type=1326 audit(1750360007.790:33399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.5.1175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206f18e929 code=0x0 [ 113.570260][ T36] audit: type=1400 audit(1750360007.840:33400): avc: denied { read write } for pid=3210 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.631624][ T305] veth1_macvtap: left promiscuous mode [ 113.637737][ T305] veth0_vlan: left promiscuous mode [ 113.647375][ T4060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.696301][ T4062] binder: Bad value for 'stats' [ 113.784199][ T4062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.784541][ T4062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.815019][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.828561][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.836412][ T4058] bridge_slave_0: entered allmulticast mode [ 113.842657][ T4058] bridge_slave_0: entered promiscuous mode [ 113.850039][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.857197][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.864491][ T4058] bridge_slave_1: entered allmulticast mode [ 113.870897][ T4058] bridge_slave_1: entered promiscuous mode [ 113.937259][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.944328][ T4058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.951607][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.958659][ T4058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.999088][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.007182][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.025699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.032800][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.041433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.048507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.109085][ T4058] veth0_vlan: entered promiscuous mode [ 114.159401][ T4058] veth1_macvtap: entered promiscuous mode [ 114.271270][ T4072] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 114.343944][ T4072] rust_binder: Write failure EINVAL in pid:108 [ 114.374431][ T4072] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.398110][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.400186][ T4072] rust_binder: Error in use_page_slow: ESRCH [ 114.411138][ T4072] rust_binder: use_range failure ESRCH [ 114.423806][ T4072] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 114.426299][ T4081] binder: Unknown parameter 'dir$}' [ 114.436366][ T4072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 114.442528][ T4072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 114.932825][ T4103] rust_binder: Write failure EINVAL in pid:10 [ 115.238406][ T4114] binder: Unknown parameter 'Sontext' [ 115.374070][ T4119] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 115.382248][ T4119] rust_binder: Write failure EINVAL in pid:1026 [ 115.570354][ T4132] random: crng reseeded on system resumption [ 115.631825][ T4135] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.791918][ T4140] binder: Unknown parameter 'defcontext01777777777777777777777' [ 115.935240][ T4142] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 115.935263][ T4142] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 115.936771][ T4148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1037 [ 115.943027][ T4142] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 116.045987][ T4151] random: crng reseeded on system resumption [ 116.442885][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.449003][ T445] Bluetooth: hci0: command 0x1003 tx timeout [ 116.530394][ T4162] binder: Bad value for 'stats' [ 116.852107][ T4170] SELinux: security_context_str_to_sid () failed with errno=-22 [ 116.901791][ T4170] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 117.020522][ T4187] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 117.064392][ T4187] rust_binder: Write failure EINVAL in pid:38 [ 117.225603][ T4189] rust_binder: Write failure EINVAL in pid:1056 [ 117.406583][ T4208] rust_binder: Write failure EFAULT in pid:49 [ 117.592604][ T4218] rust_binder: Error while translating object. [ 117.620110][ T4218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 117.648480][ T4222] input: syz1 as /devices/virtual/input/input56 [ 117.649199][ T4218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:51 [ 117.740860][ T4222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.750411][ T4222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 117.849753][ T4228] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 117.931689][ T4234] binder: Unknown parameter 'nXI' [ 118.079016][ T4244] binder: Unknown parameter 'defcontext01777777777777777777777' [ 118.192811][ T36] kauditd_printk_skb: 754 callbacks suppressed [ 118.192827][ T36] audit: type=1400 audit(1750360012.770:34155): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.290215][ T36] audit: type=1400 audit(1750360012.810:34156): avc: denied { read write } for pid=3210 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.351333][ T36] audit: type=1400 audit(1750360012.810:34157): avc: denied { read write open } for pid=3210 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.453074][ T36] audit: type=1400 audit(1750360012.810:34158): avc: denied { ioctl } for pid=3210 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.552024][ T36] audit: type=1400 audit(1750360012.820:34159): avc: denied { read } for pid=4254 comm="syz.4.1236" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 118.560875][ T4058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.576060][ T4274] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.596800][ T4271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.603402][ T4271] audit: audit_lost=327 audit_rate_limit=0 audit_backlog_limit=64 [ 118.616991][ T4271] audit: backlog limit exceeded [ 118.701719][ T4276] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 144, size: 124) [ 118.701744][ T4276] rust_binder: Error while translating object. [ 118.732905][ T4276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.739120][ T4276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 118.778430][ T4284] SELinux: security_context_str_to_sid () failed with errno=-22 [ 118.811699][ T4284] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 118.848573][ T4287] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 119.017423][ T4301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 119.017452][ T4301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 119.055817][ T4301] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 119.062388][ T4300] rust_binder: Write failure EINVAL in pid:67 [ 119.106518][ T4301] rust_binder: Read failure Err(EFAULT) in pid:134 [ 119.245708][ T4309] SELinux: failed to load policy [ 119.421427][ T4325] rust_binder: Write failure EINVAL in pid:71 [ 119.472701][ T4325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71 [ 119.529951][ T4333] random: crng reseeded on system resumption [ 119.699242][ T565] hid-generic 0000:0000:0000.000B: item fetching failed at offset 0/1 [ 119.717792][ T565] hid-generic 0000:0000:0000.000B: probe with driver hid-generic failed with error -22 [ 119.885236][ T4345] binder: Unknown parameter 'fscontext?}l' [ 120.103862][ T4355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1107 [ 120.127228][ T4355] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 120.148842][ T4355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1107 [ 120.371612][ T4373] ptm ptm48: ldisc open failed (-12), clearing slot 48 [ 120.405523][ T4374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.405554][ T4374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 120.730024][ T4393] rust_binder: Error while translating object. [ 120.740216][ T4393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 120.752655][ T4393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:289 [ 120.770084][ T4401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.773068][ T4399] kvm: kvm [4398]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 120.792925][ T4401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1117 [ 121.116839][ T4416] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 121.142400][ T4416] rust_binder: Write failure EINVAL in pid:295 [ 121.224120][ T4420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 121.237648][ T4423] binder: Unknown parameter 'hash' [ 121.306975][ T4426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 121.307005][ T4426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 121.394475][ T4430] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 121.436354][ T4432] rust_binder: Write failure EFAULT in pid:168 [ 121.460160][ T4430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.712744][ T4440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.730738][ T4440] binder: Unknown parameter 'noninderfs/binder0' [ 121.925969][ T4450] rust_binder: Write failure EINVAL in pid:97 [ 122.045929][ T4465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 122.062160][ T4466] __vm_enough_memory: pid: 4466, comm: syz.4.1306, bytes: 281474976845824 not enough memory for the allocation [ 122.062196][ T4465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1133 [ 122.105803][ T4466] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 122.124347][ T4466] rust_binder: Error while translating object. [ 122.182941][ T4466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 122.192731][ T4466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 122.259823][ T4472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1136 [ 122.544320][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.583202][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.633031][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.685826][ T4497] binder: Bad value for 'max' [ 122.693071][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.729217][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.747960][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.767281][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.791764][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.801522][ T4491] kvm: kvm [4490]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 122.826529][ T4503] binder: Unknown parameter 'nXI' [ 122.845563][ T4503] tap0: tun_chr_ioctl cmd 1074025677 [ 122.859016][ T4503] tap0: linktype set to 776 [ 123.194476][ T36] kauditd_printk_skb: 1528 callbacks suppressed [ 123.194493][ T36] audit: type=1400 audit(1750360017.780:35681): avc: denied { read } for pid=4536 comm="syz.2.1330" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 123.224314][ T36] audit: type=1400 audit(1750360017.780:35682): avc: denied { read write } for pid=3672 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.275203][ T36] audit: type=1400 audit(1750360017.790:35683): avc: denied { read append } for pid=4542 comm="syz.5.1332" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 123.330076][ T36] audit: type=1400 audit(1750360017.800:35684): avc: denied { read write } for pid=3210 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.355692][ T36] audit: type=1400 audit(1750360017.800:35685): avc: denied { read } for pid=4542 comm="syz.5.1332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 123.385567][ T36] audit: type=1400 audit(1750360017.810:35686): avc: denied { read write } for pid=4536 comm="syz.2.1330" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=0 [ 123.413944][ T36] audit: type=1400 audit(1750360017.830:35687): avc: denied { read write } for pid=3672 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.439369][ T36] audit: type=1400 audit(1750360017.840:35688): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.508615][ T36] audit: type=1400 audit(1750360017.850:35689): avc: denied { read write } for pid=4058 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 123.540270][ T36] audit: type=1400 audit(1750360017.850:35690): avc: denied { read } for pid=4544 comm="syz.4.1331" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 123.545690][ T4574] syz.0.1341: attempt to access beyond end of device [ 123.545690][ T4574] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 124.127547][ T4602] cgroup: fork rejected by pids controller in /syz4 [ 125.214418][ T4819] rust_binder: Error while translating object. [ 125.214455][ T4819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 125.220647][ T4819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 125.804386][ T4836] SELinux: syz.0.1411 (4836) set checkreqprot to 1. This is no longer supported. [ 125.875530][ T4836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 125.875551][ T4836] rust_binder: Read failure Err(EFAULT) in pid:207 [ 125.923382][ T4836] rust_binder: Write failure EINVAL in pid:207 [ 126.025390][ T4851] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 126.113705][ T4855] rust_binder: Write failure EFAULT in pid:266 [ 126.123633][ T4856] rust_binder: Write failure EFAULT in pid:266 [ 126.161456][ T4853] kvm: Disabled LAPIC found during irq injection [ 126.237883][ T4862] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 126.237905][ T4862] rust_binder: Error while translating object. [ 126.258702][ T4862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 126.282886][ T4862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 126.494097][ T4872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:422 [ 126.521704][ T4874] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 126.793034][ T4892] SELinux: security_context_str_to_sid () failed with errno=-22 [ 126.841862][ T4896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 126.851652][ T4896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 126.880069][ T4896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:219 [ 127.061905][ T4908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1225 [ 127.091447][ T4910] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 127.204016][ T4921] rust_binder: Write failure EFAULT in pid:432 [ 127.265286][ T4927] SELinux: Context system_u: is not valid (left unmapped). [ 127.443774][ T4940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.559090][ T4941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:440 [ 127.593434][ T4945] rust_binder: Write failure EFAULT in pid:1231 [ 127.641031][ T4945] kvm: user requested TSC rate below hardware speed [ 127.713856][ T4950] __vm_enough_memory: pid: 4950, comm: syz.4.1447, bytes: 281474976845824 not enough memory for the allocation [ 127.910665][ T4959] binder: Unknown parameter 'mqi~' [ 128.006977][ T4962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1233 [ 128.124930][ T4971] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 128.158957][ T4974] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 128.207178][ T36] kauditd_printk_skb: 1244 callbacks suppressed [ 128.207196][ T4968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:297 [ 128.207206][ T36] audit: type=1400 audit(1750360022.790:36935): avc: denied { ioctl } for pid=4967 comm="syz.5.1452" path="/dev/binderfs/binder1" dev="binder" ino=23 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.262138][ T36] audit: type=1400 audit(1750360022.840:36936): avc: denied { read write } for pid=4058 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.295973][ T36] audit: type=1400 audit(1750360022.880:36937): avc: denied { read write open } for pid=4058 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.346136][ T36] audit: type=1400 audit(1750360022.880:36938): avc: denied { ioctl } for pid=4058 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.379110][ T36] audit: type=1400 audit(1750360022.920:36939): avc: denied { read write } for pid=3210 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.413965][ T4979] rust_binder: Error in use_page_slow: ESRCH [ 128.413985][ T4979] rust_binder: use_range failure ESRCH [ 128.429957][ T4979] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 128.436834][ T4981] rust_binder: Error in use_page_slow: ESRCH [ 128.444897][ T4979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 128.452094][ T4981] rust_binder: use_range failure ESRCH [ 128.464930][ T36] audit: type=1400 audit(1750360022.920:36940): avc: denied { read write open } for pid=3210 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.486739][ T4979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:237 [ 128.495637][ T4981] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 128.505493][ T4981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 128.516366][ T4981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:237 [ 128.552876][ T36] audit: type=1400 audit(1750360022.920:36941): avc: denied { read } for pid=4977 comm="syz.0.1455" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.632977][ T36] audit: type=1400 audit(1750360022.920:36942): avc: denied { read open } for pid=4977 comm="syz.0.1455" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.665067][ T36] audit: type=1400 audit(1750360022.920:36943): avc: denied { ioctl } for pid=4977 comm="syz.0.1455" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.692045][ T36] audit: type=1400 audit(1750360022.920:36944): avc: denied { set_context_mgr } for pid=4977 comm="syz.0.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.723090][ T4985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.742488][ T4988] binder: Unknown parameter 'nXI' [ 128.875485][ T4988] kvm: apic: phys broadcast and lowest prio [ 128.903732][ T4999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.904075][ T4999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.972915][ T4990] rust_binder: Read failure Err(EFAULT) in pid:459 [ 129.072549][ T5008] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 129.098473][ T5006] rust_binder: Error while translating object. [ 129.098509][ T5006] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.111858][ T5006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 129.206995][ T5018] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 129.238206][ T5018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 129.261658][ T5018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:465 [ 129.300998][ T5024] rust_binder: Error while translating object. [ 129.342946][ T5024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.354518][ T5024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 129.424027][ T5024] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.440333][ T5024] rust_binder: Error while translating object. [ 129.457798][ T5024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.464120][ T5024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 129.476355][ T5037] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 129.662705][ T5047] random: crng reseeded on system resumption [ 129.752978][ T5050] input: syz1 as /devices/virtual/input/input62 [ 129.764604][ T5047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.800057][ T5050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 129.810805][ T5050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1257 [ 129.890852][ T5052] tun0: tun_chr_ioctl cmd 1074025675 [ 129.934398][ T5052] tun0: persist enabled [ 129.939690][ T5052] tun0: tun_chr_ioctl cmd 1074025675 [ 129.946792][ T5052] tun0: persist enabled [ 129.963020][ T5052] tun0: tun_chr_ioctl cmd 1074025675 [ 129.968344][ T5052] tun0: persist enabled [ 129.978595][ T5061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.996770][ T5052] binder: Unknown parameter 'nXI' [ 130.010346][ T5061] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 130.010367][ T5061] rust_binder: Error while translating object. [ 130.024293][ T5061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.037547][ T5061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 130.106274][ T5070] rust_binder: Error while translating object. [ 130.147290][ T5070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 130.170327][ T5070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:320 [ 130.263272][ T5075] binder: Unknown parameter ' [ 130.263272][ T5075] 9}dzR7 -lð/Īj aqaP|㮆J܇>'#' [ 130.311423][ T5079] can0: slcan on ttynull. [ 130.431954][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.439994][ T5083] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.564980][ T5080] can0 (unregistered): slcan off ttynull. [ 130.599535][ T5092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.638680][ T5097] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 130.665460][ T5092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.665491][ T5092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326 [ 130.676152][ T5097] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 130.710049][ T5097] rust_binder: Error while translating object. [ 130.710090][ T5097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 130.728306][ T5097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:264 [ 131.123264][ T5116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.142899][ T5116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1269 [ 131.373864][ T5129] rust_binder: Error while translating object. [ 131.397285][ T5129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 131.403559][ T5129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1273 [ 131.448516][ T5139] rust_binder: Error while translating object. [ 131.458228][ T5139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.464440][ T5139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 131.734527][ T5158] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 131.764071][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 132.034575][ T5171] rust_binder: Error while translating object. [ 132.034616][ T5171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 132.041324][ T5171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1287 [ 132.432900][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.439283][ T5166] Bluetooth: hci0: command 0x1003 tx timeout [ 132.541696][ T5196] random: crng reseeded on system resumption [ 132.782389][ T5211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.915548][ T5219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.103243][ T5227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.119438][ T5223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1318 [ 133.136139][ T5227] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.141858][ T5230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.180353][ T5227] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 133.189839][ T5230] rust_binder: Error while translating object. [ 133.197788][ T5230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 133.204956][ T5230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:504 [ 133.295754][ T36] kauditd_printk_skb: 1275 callbacks suppressed [ 133.295771][ T36] audit: type=1400 audit(1750360027.880:38181): avc: denied { read write } for pid=3672 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.374877][ T5232] rust_binder: Error while translating object. [ 133.374921][ T5232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 133.382588][ T36] audit: type=1400 audit(1750360027.880:38182): avc: denied { read write } for pid=293 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.417243][ T5232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1321 [ 133.426968][ T36] audit: type=1400 audit(1750360027.880:38183): avc: denied { read write open } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.429161][ T5236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.461994][ T36] audit: type=1400 audit(1750360027.880:38184): avc: denied { ioctl } for pid=293 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.516237][ T36] audit: type=1400 audit(1750360027.910:38185): avc: denied { read write open } for pid=3672 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.541960][ T36] audit: type=1400 audit(1750360027.910:38186): avc: denied { ioctl } for pid=3672 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.629104][ T36] audit: type=1400 audit(1750360027.930:38187): avc: denied { read write } for pid=3210 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.675441][ T36] audit: type=1400 audit(1750360027.930:38188): avc: denied { read write open } for pid=3210 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.702495][ T5248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 133.705367][ T5247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 133.734585][ T5252] rust_binder: Write failure EINVAL in pid:353 [ 133.743265][ T5252] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.792909][ T5166] Bluetooth: hci1: command 0x1003 tx timeout [ 133.792909][ T445] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 133.883967][ T5255] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.924727][ T5255] rust_binder: Write failure EFAULT in pid:284 [ 134.007703][ T5262] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.034104][ T5262] rust_binder: Write failure EINVAL in pid:512 [ 134.110150][ T5265] rust_binder: Error while translating object. [ 134.139919][ T5265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 134.159213][ T5265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1328 [ 134.177905][ T5269] rust_binder: Write failure EINVAL in pid:287 [ 134.203221][ T5267] SELinux: failed to load policy [ 134.205591][ T5270] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.240557][ T5267] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.402622][ T5282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.524458][ T5285] binder: Unknown parameter '00000000000000000000011' [ 134.760533][ T5299] rust_binder: Write failure EINVAL in pid:518 [ 134.865522][ T5292] rust_binder: Write failure EFAULT in pid:299 [ 134.982926][ T5313] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 134.989485][ T5313] rust_binder: Error while translating object. [ 135.003789][ T5313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.020159][ T5313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 135.083588][ T5317] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.125342][ T5317] rust_binder: Error in use_page_slow: ESRCH [ 135.158081][ T5317] rust_binder: use_range failure ESRCH [ 135.183093][ T5317] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 135.188662][ T5317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 135.196742][ T5317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:525 [ 135.209663][ T5315] kvm_pr_unimpl_wrmsr: 24 callbacks suppressed [ 135.209682][ T5315] kvm: kvm [5314]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 135.267866][ T5315] binder: Unknown parameter '00000000000000000000004' [ 135.363143][ T5325] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.541413][ T5334] rust_binder: Failed copying remainder into alloc: EFAULT [ 135.558298][ T5334] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 135.578668][ T5334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 135.599518][ T5334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:366 [ 135.609307][ T5342] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.623072][ T5340] rust_binder: Write failure EFAULT in pid:1352 [ 135.633674][ T5338] binder: Unknown parameter '0x0000000000000000' [ 135.637696][ T5340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 135.657534][ T5340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1352 [ 135.669488][ T5340] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 135.678848][ T5340] rust_binder: Read failure Err(EFAULT) in pid:1352 [ 135.756328][ T5348] input: syz1 as /devices/virtual/input/input64 [ 136.000341][ T5356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.554951][ T5377] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 136.612455][ T5373] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.613888][ T5377] SELinux: failed to load policy [ 136.644783][ T5374] rust_binder: Write failure EINVAL in pid:532 [ 136.645823][ T5373] rust_binder: Write failure EINVAL in pid:532 [ 136.754929][ T5388] rust_binder: Write failure EFAULT in pid:332 [ 136.795807][ T5388] rust_binder: Write failure EINVAL in pid:332 [ 136.885828][ T5392] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 136.961023][ T5392] rust_binder: Write failure EINVAL in pid:334 [ 137.331240][ T5411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1371 [ 137.367899][ T5411] rust_binder: Failure when writing BR_NOOP at beginning of buffer. Stopping sshd: [ 137.402902][ T5411] rust_binder: Read failure Err(EFAULT) in pid:1371 stopped /usr/sbin/sshd (pid 200) OK [ 137.579249][ T5428] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 137.640715][ T5424] SELinux: policydb version 905587468 does not match my version range 15-33 [ 137.660697][ T5428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 137.660729][ T5428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:389 [ 137.688536][ T5424] SELinux: failed to load policy Stopping crond: stopped /usr/sbin/crond (pid 193) OK [ 138.083843][ T5448] binder: Unknown parameter '00000000000000000003' [ 138.224487][ T5461] input: syz1 as /devices/virtual/input/input66 Stopping dhcpcd... [ 138.305183][ T36] kauditd_printk_skb: 930 callbacks suppressed [ 138.305199][ T36] audit: type=1400 audit(1750360032.890:39079): avc: denied { read } for pid=5463 comm="syz.4.1597" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.358188][ T36] audit: type=1400 audit(1750360032.930:39080): avc: denied { read open } for pid=5463 comm="syz.4.1597" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 stopped /sbin/dhcpcd (pid 147) [ 138.429332][ T36] audit: type=1400 audit(1750360032.930:39081): avc: denied { ioctl } for pid=5463 comm="syz.4.1597" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 138.543996][ T36] audit: type=1400 audit(1750360032.970:39082): avc: denied { ioctl } for pid=5463 comm="syz.4.1597" path="/dev/binderfs/binder0" dev="binder" ino=40 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.563961][ T5476] input: syz1 as /devices/virtual/input/input67 [ 138.627634][ T36] audit: type=1400 audit(1750360032.980:39083): avc: denied { read write } for pid=4058 comm="syz-executor" name="loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 Stopping network: [ 138.713516][ T36] audit: type=1400 audit(1750360032.980:39084): avc: denied { read write open } for pid=4058 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.768232][ T4058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.770157][ T5487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.784775][ T5491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 138.791509][ T36] audit: type=1400 audit(1750360032.980:39085): avc: denied { ioctl } for pid=4058 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=444 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 139.129728][ T5517] rust_binder: Write failure EINVAL in pid:413 [ 139.294997][ T5524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 139.338805][ T5524] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 139.353844][ T5524] rust_binder: Error while translating object. [ 139.413027][ T5524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.462896][ T5524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 OK Stopping iptables: [ 139.663329][ T5529] rust_binder: Write failure EINVAL in pid:552 [ 139.877913][ T5542] binder: Unknown parameter 'r' OK Stopping system message bus: [ 139.996902][ T304] bridge_slave_1: left allmulticast mode [ 140.012908][ T304] bridge_slave_1: left promiscuous mode [ 140.048555][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.053586][ T5549] input: syz0 as /devices/virtual/input/input69 [ 140.081017][ T304] bridge_slave_0: left allmulticast mode [ 140.105912][ T5548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425 [ 140.127562][ T304] bridge_slave_0: left promiscuous mode [ 140.185639][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.454741][ T304] veth1_macvtap: left promiscuous mode [ 140.465229][ T304] veth0_vlan: left promiscuous mode [ 140.515208][ T5564] binder: Bad value for 'max' [ 140.789926][ T5581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1396 [ 140.794693][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.836147][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.855599][ T5561] bridge_slave_0: entered allmulticast mode [ 140.868611][ T5561] bridge_slave_0: entered promiscuous mode done [ 140.896217][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.909839][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.935461][ T5561] bridge_slave_1: entered allmulticast mode [ 140.950032][ T5561] bridge_slave_1: entered promiscuous mode [ 141.003019][ T5583] rust_binder: Write failure EINVAL in pid:443 [ 141.379151][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.392387][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.451069][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.458166][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.503141][ T5606] rust_binder: Write failure EFAULT in pid:382 [ 141.628971][ T5611] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 141.659346][ T5561] veth0_vlan: entered promiscuous mode [ 141.673172][ T5611] rust_binder: Write failure EINVAL in pid:1399 [ 141.765460][ T5561] veth1_macvtap: entered promiscuous mode [ 141.891919][ T5627] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 141.891942][ T5627] rust_binder: Error while translating object. [ 141.913497][ T5627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 141.921468][ T5627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404 [ 142.073442][ T5635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 142.123132][ T5637] binder: Unknown parameter 'non' [ 142.180276][ T5637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.322623][ T5647] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 44) [ 142.322647][ T5647] rust_binder: Error while translating object. [ 142.337531][ T5647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 142.341014][ T5653] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false Stopping klogd: [ 142.354726][ T5647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 142.467352][ T5662] rust_binder: Write failure EINVAL in pid:1411 [ 142.520616][ T5669] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 142.527499][ T5669] rust_binder: Read failure Err(EFAULT) in pid:7 [ 142.539954][ T5671] SELinux: security_context_str_to_sid () failed with errno=-22 OK [ 142.589336][ T5674] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 142.599396][ T5674] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 Stopping acpid: [ 142.913319][ T5692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.944319][ T5692] rust_binder: Error in use_page_slow: ESRCH [ 142.944343][ T5692] rust_binder: use_range failure ESRCH [ 142.947730][ T5694] rust_binder: Write failure EINVAL in pid:11 [ 142.950356][ T5692] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 142.965469][ T5692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 142.973469][ T5692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:470 [ 142.997635][ T5691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.064914][ T5692] rust_binder: got new transaction with bad transaction stack [ 143.072301][ T5692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:470 [ 143.110345][ T5704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.155268][ T5704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:413 [ 143.167041][ T5704] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 143.177551][ T5704] rust_binder: Read failure Err(EFAULT) in pid:413 [ 143.257756][ T5709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 143.267636][ T5711] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.314042][ T36] kauditd_printk_skb: 1037 callbacks suppressed [ 143.314060][ T36] audit: type=1400 audit(1750360037.900:40066): avc: denied { read } for pid=5715 comm="syz.4.1664" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.392872][ T36] audit: type=1400 audit(1750360037.940:40067): avc: denied { read open } for pid=5715 comm="syz.4.1664" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.444735][ T5717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.447654][ T36] audit: type=1400 audit(1750360037.940:40068): avc: denied { ioctl } for pid=5715 comm="syz.4.1664" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.461521][ T5717] audit: audit_lost=378 audit_rate_limit=0 audit_backlog_limit=64 [ 143.488362][ T5721] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.502915][ T36] audit: type=1400 audit(1750360037.940:40069): avc: denied { read } for pid=5713 comm="syz.0.1663" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 143.503438][ T5721] audit: audit_lost=379 audit_rate_limit=0 audit_backlog_limit=64 [ 143.533391][ T5723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.543905][ T5717] audit: backlog limit exceeded OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 144.110859][ T5750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 144.110899][ T5750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:482 [ 144.187455][ T5752] rust_binder: Write failure EFAULT in pid:34 [ 144.271813][ T5755] input: syz0 as /devices/virtual/input/input71 [ 144.317360][ T5757] binder: Unknown parameter 'dont_hash' umount: can't remount debugfs read-only Connection to 10.128.0.160 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 144.789648][ T60] bridge_slave_1: left allmulticast mode [ 144.795344][ T60] bridge_slave_1: left promiscuous mode [ 144.800973][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.808571][ T60] bridge_slave_0: left allmulticast mode [ 144.814287][ T60] bridge_slave_0: left promiscuous mode [ 144.819855][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.945206][ T60] veth1_macvtap: left promiscuous mode [ 144.950697][ T60] veth0_vlan: left promiscuous mode [ 145.225615][ T60] bridge_slave_1: left allmulticast mode [ 145.231256][ T60] bridge_slave_1: left promiscuous mode [ 145.236883][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.244325][ T60] bridge_slave_0: left allmulticast mode [ 145.249942][ T60] bridge_slave_0: left promiscuous mode [ 145.255580][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.263160][ T60] bridge_slave_1: left allmulticast mode [ 145.268784][ T60] bridge_slave_1: left promiscuous mode [ 145.274434][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.281777][ T60] bridge_slave_0: left allmulticast mode [ 145.287445][ T60] bridge_slave_0: left promiscuous mode [ 145.293084][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.300595][ T60] bridge_slave_1: left allmulticast mode [ 145.306269][ T60] bridge_slave_1: left promiscuous mode [ 145.311829][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.319255][ T60] bridge_slave_0: left allmulticast mode [ 145.324913][ T60] bridge_slave_0: left promiscuous mode [ 145.330469][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.577060][ T60] veth1_macvtap: left promiscuous mode [ 145.582579][ T60] veth0_vlan: left promiscuous mode [ 145.587983][ T60] veth1_macvtap: left promiscuous mode [ 145.595023][ T60] veth0_vlan: left promiscuous mode [ 145.600350][ T60] veth1_macvtap: left promiscuous mode [ 145.605832][ T60] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 146.706080][ T5768] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 146.712918][ T5768] ACPI: PM: Preparing to enter system sleep state S5 [ 146.719752][ T5768] kvm: exiting hardware virtualization [ 146.725274][ T5768] reboot: Power down serialport: VM disconnected.