last executing test programs: 1m46.35964983s ago: executing program 1 (id=1201): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=']) 1m46.000327425s ago: executing program 1 (id=1204): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002080), 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x5, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x8}, {0x6}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) read(r1, &(0x7f0000000040)=""/106, 0x6a) 1m45.904429926s ago: executing program 1 (id=1205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close(r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1m45.734668289s ago: executing program 1 (id=1208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="1a000000200000009702000000000000e0c0d66661c9bda9ff76488700000000000000"]) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) (async) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r4, 0x541e, 0xff4f370c567f0000) (async) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) 1m45.455845443s ago: executing program 1 (id=1211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$SIOCGSKNS(r5, 0x894c, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async, rerun: 64) prctl$PR_CAPBSET_READ(0x17, 0x0) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) (async) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x301100, 0x0) r10 = openat(r9, &(0x7f0000000140)='./file0\x00', 0x10601, 0x0) read$FUSE(r10, &(0x7f00000021c0)={0x2020}, 0x2020) (async) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xf) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fda={0x66646185, 0xa, 0x2, 0x3b}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}, 0x10}], 0x0, 0x0, 0x0}) 1m45.216137337s ago: executing program 1 (id=1215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 1m30.164486766s ago: executing program 32 (id=1215): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='context']) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 1m7.104285908s ago: executing program 2 (id=1690): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x101000, 0x0) ioctl$TUNGETFEATURES(r1, 0x5452, &(0x7f0000001740)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m6.816431482s ago: executing program 2 (id=1694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x356, 0x0, 0x7ffffffffdffffd}]}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000004a00), 0x1, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)={[], [{@context={'context', 0x3d, 'system_u'}}]}) 1m6.687151154s ago: executing program 2 (id=1697): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) 1m5.707635589s ago: executing program 2 (id=1712): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af25, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m5.564299241s ago: executing program 2 (id=1716): openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0xa8002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48, 0x0, 0x2}]}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1}]}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r9, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) 1m5.215382866s ago: executing program 2 (id=1722): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x38, "90033950076a503963254e54b4e0abd01147d7e552b4dc1fd51649a0ff5383a725424a2f6351f20a252c97dc28f143c4c8ee93685c6589ca"}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x864840, &(0x7f0000000180)=ANY=[]) 49.615191224s ago: executing program 33 (id=1722): r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000040)={0x1, 0x38, "90033950076a503963254e54b4e0abd01147d7e552b4dc1fd51649a0ff5383a725424a2f6351f20a252c97dc28f143c4c8ee93685c6589ca"}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x864840, &(0x7f0000000180)=ANY=[]) 2.224247556s ago: executing program 3 (id=2544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4010ae68, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) 2.050232849s ago: executing program 3 (id=2547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0xfffffffe, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/28, 0x1c, 0x0, 0x28}, @fda={0x66646185, 0x5, 0x1, 0x31}, @fda={0x66646185, 0x5, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x402080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0x1) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xae64, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0xfffffffe}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r10, 0x40046208, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) prctl$PR_MCE_KILL(0x35, 0x0, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 1.671579024s ago: executing program 3 (id=2552): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x9}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[], 0xffdd) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xfffffffffffffffd, 0x2bf9, 0x1, 0x2, 0x0, 0x400, 0x5, 0x0, 0x6, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4], 0x2000, 0x2c0242}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x2, 0xfffffff0, 0x0, 0x80000000, 0x3f0, 0x8001, 0xe}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0xfffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0xfffff000) 1.603425366s ago: executing program 0 (id=2554): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x6, 0xc, 0x7, 0x7, 0x6, 0x7b, 0x7, 0x9, 0x7, 0xbe, 0x1, 0x8, 0x9, 0x97, 0x9, 0x5}}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x0, 0xfe, 0x0, 0x8}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f00002f8000/0x3000)=nil, 0x3000, 0x7, 0x12, r6, 0x215c6000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x620500, 0x0) 1.356600119s ago: executing program 4 (id=2556): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd5) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd5) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0xc8, 0x0, &(0x7f00000023c0)=[@request_death={0x400c630e, 0x1}, @free_buffer={0x40086303, r3}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/57, 0x39, 0x2, 0x3f}, @ptr={0x70742a85, 0x1, &(0x7f00000013c0)=""/4096, 0x1000, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/220, 0xdc, 0x0, 0x39}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0x6c, 0x0, &(0x7f00000024c0)="51a293ea781ba2d48d389504116456f5102d04c6225af27b2a97e6337f8edf518f64fffcbdfc96a75698453451251a30a8278a56f3976cf0d9baa2cfbdd057c2c6ab9339ba0a5aee0ce31e45ebf0723e9dc2471950cbeefa3bc15c6ae1f629190c5c24a45249a629eb62ea9e"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.352424969s ago: executing program 0 (id=2557): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6e802, 0x0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) mount$binderfs(0x0, &(0x7f0000001040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1.236919321s ago: executing program 5 (id=2559): openat$rnullb(0xffffffffffffff9c, 0x0, 0x602240, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x800800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="01e5060000000f00000000000000eb35c80056f6500000a7"]) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x602240, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) (async) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) read$FUSE(r1, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x800800, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="01e5060000000f00000000000000eb35c80056f6500000a7"]) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) (async) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000540)=0x10001) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) 1.180248072s ago: executing program 3 (id=2560): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 1.095935423s ago: executing program 0 (id=2561): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000544522a71a945f1118120000000000000000"]) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x80, 0x200, 0xb, "65e11e03b4d62590c007a44750ce7c6c87df4b"}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6, 0x0, 0xffffb4d0, 0x5, 0x2, "0e5b632d3b4715db3e0292fb6d3627f01f56c7"}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) write(r7, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xe0, 0x6, '\x00', 0x161e}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000540)={0x0, "acb6fec2a87ec1bbc29abbb64c607c0b"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$kvm(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000000544522a71a945f1118120000000000000000"]) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x7, 0x80, 0x200, 0xb, "65e11e03b4d62590c007a44750ce7c6c87df4b"}) (async) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x6, 0x0, 0xffffb4d0, 0x5, 0x2, "0e5b632d3b4715db3e0292fb6d3627f01f56c7"}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) write(r7, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xe0, 0x6, '\x00', 0x161e}) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000540)={0x0, "acb6fec2a87ec1bbc29abbb64c607c0b"}) (async) 1.014685814s ago: executing program 3 (id=2562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$cgroup_subtree(r1, 0x0, 0x0) (async) write$cgroup_devices(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.005302224s ago: executing program 4 (id=2563): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) read(r0, &(0x7f0000000040)=""/66, 0x42) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)) 872.302756ms ago: executing program 5 (id=2564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 815.669978ms ago: executing program 4 (id=2565): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x40001) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)=@arm64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x2710, 0x5, 0x6000, 0x2000, &(0x7f0000693000/0x2000)=nil}) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x118a, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xc8bcd000) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 720.029299ms ago: executing program 0 (id=2566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) close(r0) (async) close(r0) 719.524699ms ago: executing program 5 (id=2567): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003]}, 0x45c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000440)=ANY=[@ANYBLOB='unlock me'], 0xb) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) close(r3) 420.140254ms ago: executing program 3 (id=2568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000001c0)=[@enter_looper, @acquire_done, @acquire_done={0x40106309, 0x3}], 0xa4b, 0x0, &(0x7f0000000580)="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"}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000800500"]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(0x3) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r9, 0x300000b, 0x11, r7, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x2, 0x7f, '\x00', 0xfffffffffffffff8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r4, 0x4018aee3, &(0x7f0000000080)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x7}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs={0x40046304, 0xfffffffd}, @decrefs], 0x0, 0x0, 0x0}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r12, &(0x7f00000014c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) 419.671923ms ago: executing program 0 (id=2569): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x3000, 0x9, 0x40, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x4, 0x3, 0x0, 0x4, 0xf, 0xa, 0x26}, {0x1}, {0xffff1000}, 0xddf8ffdb, 0x0, 0x100000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x7fffffffffffffff, 0x1]}) (async) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000040)='.\x00', 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) (rerun: 64) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) (async, rerun: 32) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) (async, rerun: 32) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181003, 0x0) ioctl$PTP_PIN_SETFUNC(r9, 0x40603d07, &(0x7f0000000080)={'\x00', 0xf09, 0x2, 0x8000}) (async) write$cgroup_pid(r7, &(0x7f0000000080)=r8, 0x12) 416.252403ms ago: executing program 4 (id=2570): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x105, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x6, 0x16, 0x1c0, &(0x7f0000000040)="66da0a6b9761bcd26ecbb7593229029a1e42313cf4898d504fa7b92c3986f8b4ce6e80e100a2bde4e57f878dc752863c6c49059287c153ebeb42b4cc0996b2e0c38b773cbe2d4b3ba86a5fad2b4adf04fa3cf083597eba073e1d5450042c6ece5fa1b9c9616001fac4363a97764631851ec2e741baec67669e1f2a086f63e3461915b888e943279e022d83afe543a4f0fcf1af0a5d9e18d7e8714f40618569170806890911a1444393530f662f7537e301f2992adf5431c866e7e9ed5284bafa71d0972472fdf09d1aafac8e0bc6bbf2bea3e837927469916d81d16c3fe0be3820193fce9d3875d822e911ebb9f9f6f164f2af95f4844a63fb89dbd0789794ac0832f8a96bf71d006370ee2c03cb8cf8f4f98b9e9def3ef729126b1ad8ee9323b174b51c9a2ca8b787a4455d2d1bb7c6d02579a4bc8861c132bbe5ae6c38389fed5816630dbcee7ed8cf012c9763510ed5783dba2346f097f5eb19ea0356a6383b9a40c9c59ebc8e360ea0aa0bea757426afc90567fd723aaaaf806e55a1f2875237a2a375c4859f37308b4776a17c9f6892bad163c4790daf89bf1565e99fc5832e0d865bf6ddfbe3e36539330dd5c4cf26d456529fee24d70de718d69d57efcc783ace5ee7273c17266e1f230ca0d4b0a497917dd8cf3fd16de4ff5f8dffd4d675c0079e564e8d112529d45ce5d32c15a9dab7cda18d612cc4b0328ec51a5ed691575db0987a8201fdbc42649930eb85d0c5fb13df60dfec0f7105f0a249d978f4339134f4e93a5c61e7f9d1458641153093e3f9e650e57674bead0d54e290856239372e81d765569f0598f93bcd40dd525564429231e3eb03a4d897d25cb7e8dfe3d51cdf195e62ac444b1305f0c57a6dd6355352ee0c36f03ad930049f43e3a790c9a725e258b9323c47c1dbdd5ed157c92965c8af70e2ebfc95de2982402bdfcf78feaf0022770e36ea5f44ed990173b2670516fe1b1837336966a2dc356688ef35b75499b35b12a55e5e072276b1b4b9f5bac54dc65b422fdd830653b9ea682d80d4a476d26d541dca42047efbc5867f1ea5b72d36fe60658b59c6fddc339fb2ec5812e420b43c2adfa7c5a91c5170bc37b2e160e169ebea0ec71f94a1bb1cf538f9037c7a8e999e7dccab95077d612cc5059e8557bb2ece26da8f7da65a54fe301b6fbf72ce886077a70345478235f82ebc78e5d2ef316f7e2f8de7d672d6fbc15b5f939454da2fa8a424ca51b1737e81c45bd64270cdc71d3aa729a23a308a7061fb0976b07b4d68f4e8ca6f695c4b4d5109e615139fe0a97ff97acbb7e8bbd7e65347883fe31893f82f3758b8689af2beee47f50d90f83a40067d2933423c7705c2a5352ab8e23f54db1702e52f8d5633298e4462db81faff518f74ad53582fb9406585f6e68aa67fffa5bb4ca43991444eb1255b2c6a82b4e2c901"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0xc0800, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0x2) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCSIG(r0, 0x40045436, 0x22) ioctl$KDMKTONE(r0, 0x4b30, 0x1) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000500)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000580)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x450000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000640)={0x0, r3, 0x5, 0x800, 0x4eff, 0xaf73}) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000680)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000006c0)=0x9) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000740)={0x0, 0x2, 0x6, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000b40)={r5, 0x0, 0x1, [0x8, 0x3240, 0x1ff, 0x10000, 0x8], [0x0, 0x444, 0xffffffff, 0x0, 0x3, 0x4, 0x8, 0x5, 0x101, 0x5, 0x9, 0x10000, 0x3, 0xfffffffffffffff8, 0x0, 0x7fffffffffffffff, 0x5, 0x4, 0x43, 0xafaf, 0x9, 0x8, 0x5, 0x7, 0x8, 0x7f, 0x8000, 0x8, 0x212c, 0x7, 0x7, 0x7, 0xfffffffffffffffe, 0x6, 0x10001, 0x0, 0x0, 0x9, 0x962, 0xffffffffffffff80, 0x1, 0x80000001, 0xf9c3, 0x40, 0xc8, 0x2, 0x9, 0x124, 0x1, 0xfffffffffffffffa, 0x2, 0x3, 0xbe42, 0x0, 0x1, 0x9, 0x1, 0x8000000000000000, 0x80000000, 0x4, 0x9, 0xd, 0xffffffffffffffff, 0x4, 0x6, 0x3, 0x2, 0xfffffffffffffffa, 0xfffffffffffffff9, 0xf63, 0x455d, 0xffffffffffffffaf, 0x0, 0x0, 0x7d3, 0x100000000, 0x16, 0xc, 0x0, 0x3, 0x2c, 0x5, 0x7, 0x2, 0x2, 0xc, 0x0, 0x731, 0x5, 0x7f0000000, 0x2, 0xa, 0x6, 0xfffffffffffffffa, 0x1, 0xfffffffffffffe01, 0x1, 0x80000001, 0xce1, 0xac6, 0x5, 0x9, 0x2, 0x1, 0x3, 0x2, 0xd, 0x9, 0x3, 0xfffffffffffffffa, 0x8001, 0xfffffffffffffffb, 0xd39b, 0x8000000000000000, 0x4, 0x6, 0x1000, 0x1, 0x9, 0x2, 0x7]}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000f80), 0x505080, 0x0) ioctl$VT_WAITACTIVE(r6, 0x5607) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000fc0)={r0, 0x40, 0x5, 0x7}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001000)={{r7}, 0x4, 0x80, 0x6}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000001040)=0x1) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f0000001080)) ioctl$TIOCCONS(r7, 0x541d) r8 = openat$cgroup(r4, &(0x7f00000010c0)='syz0\x00', 0x200002, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000001100)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000001180)) 313.495335ms ago: executing program 5 (id=2571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2d, 'hugetlb'}]}, 0x9) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 216.199026ms ago: executing program 4 (id=2572): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) (async) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) (async) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000004c0)=@x86={0x6, 0x5, 0x8, 0x0, 0x4, 0x2, 0x1, 0x2, 0x7, 0x4, 0x7f, 0x5, 0x0, 0x3, 0x4000a, 0x8, 0x81, 0x6, 0x0, '\x00', 0xbf, 0x10001}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x12) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$TIOCCONS(r10, 0x541d) read(r9, &(0x7f0000000080)=""/1, 0x1) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000100)={[{0x80000001, 0x1, 0xec, 0x9, 0x5, 0x0, 0x4, 0x2, 0x80, 0x1b, 0x5, 0x4, 0x5}, {0x4, 0x9, 0x8, 0x86, 0x13, 0xb, 0x6, 0x99, 0x2b, 0xc0, 0x2, 0x1, 0x9}, {0xc, 0x8, 0x0, 0x4a, 0x3, 0x40, 0x15, 0x80, 0x9, 0x3, 0x9, 0x5, 0x3b2}], 0x94}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2054c60, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8]) 184.500457ms ago: executing program 5 (id=2573): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xfffff000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x3212, 0x9, 0x1, 0x3, 0x7, "5a4fa95b0b108e3bb66f56665f237ce352cff6"}) 156.235827ms ago: executing program 0 (id=2574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) read$FUSE(r1, &(0x7f00000002c0)={0x2020}, 0x2020) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) (rerun: 64) 292.22µs ago: executing program 5 (id=2575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0x4000, 0x0, 0x100, 0x2, 0x0, [{0x5d, 0x8, 0x2, '\x00', 0xb2}, {0x8, 0xe, 0x9, '\x00', 0x6}, {0xf8, 0xff, 0x5, '\x00', 0x8}, {0x0, 0xc, 0x8, '\x00', 0x8}, {0x5, 0x3, 0xb, '\x00', 0x86}, {0x7, 0x3, 0x0, '\x00', 0x8c}, {0x10, 0x27, 0x4, '\x00', 0xf9}, {0x7, 0x1, 0x1, '\x00', 0x58}, {0x8, 0x3, 0x1, '\x00', 0xd}, {0xf7, 0x8a, 0x8, '\x00', 0x81}, {0x4, 0xc, 0x6, '\x00', 0xd}, {0xde, 0x9, 0x7, '\x00', 0x4}, {0x8, 0xf, 0x8, '\x00', 0x9}, {0x4, 0x4, 0x82, '\x00', 0xfd}, {0x44, 0x7c, 0x7, '\x00', 0x10}, {0x7, 0x4, 0xc, '\x00', 0x5}, {0x3, 0x9, 0x5, '\x00', 0x2}, {0x6, 0x43, 0x35, '\x00', 0xc}, {0x7, 0x7, 0x18, '\x00', 0x2}, {0x9, 0x40, 0xa, '\x00', 0x40}, {0x5, 0x5, 0x18, '\x00', 0xa}, {0x7, 0x0, 0x0, '\x00', 0x4}, {0xfd, 0x9, 0xc3, '\x00', 0x4}, {0x81, 0x5b, 0x2}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x10, 0x800008001], 0xeeee8000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=2576): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="020700000009000000fdffffff0600000000000000010000000c00000000a76620520d0000050000000000000000"]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xfffffffffffffffc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000200007c0000000000200000000000000"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="0b9c8e0d992d302273797a74656d5f752c00"]) kernel console output (not intermixed with test programs): 4.701661][ T5099] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 124.752824][ T5101] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 124.831286][ T5106] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 124.920964][ T5114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.951241][ T5114] rust_binder: Error while translating object. [ 124.964362][ T5114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.979249][ T5114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 125.290904][ T5137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.528608][ T5147] block device autoloading is deprecated and will be removed. [ 125.816460][ T5165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.983878][ T5173] binder: Bad value for 'stats' [ 126.362648][ T5191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.561943][ T5197] input: syz1 as /devices/virtual/input/input77 [ 126.713530][ T36] kauditd_printk_skb: 1352 callbacks suppressed [ 126.713554][ T36] audit: type=1400 audit(1750327294.220:22452): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=493 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.778394][ T36] audit: type=1400 audit(1750327294.220:22453): avc: denied { ioctl } for pid=5189 comm="syz.3.1513" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.841403][ T36] audit: type=1400 audit(1750327294.220:22454): avc: denied { set_context_mgr } for pid=5189 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 126.915201][ T36] audit: type=1400 audit(1750327294.230:22455): avc: denied { map } for pid=5189 comm="syz.3.1513" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.984753][ T36] audit: type=1400 audit(1750327294.230:22456): avc: denied { read } for pid=5189 comm="syz.3.1513" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.056823][ T36] audit: type=1400 audit(1750327294.230:22457): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.110887][ T36] audit: type=1400 audit(1750327294.230:22458): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.175306][ T36] audit: type=1400 audit(1750327294.230:22459): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.232579][ T36] audit: type=1400 audit(1750327294.230:22460): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=493 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.296304][ T36] audit: type=1400 audit(1750327294.230:22461): avc: denied { ioctl } for pid=5189 comm="syz.3.1513" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 127.486144][ T5215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 127.914086][ T5230] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 127.969837][ T5235] binder: Unknown parameter './binderfs/binder0' [ 128.297823][ T5251] rust_binder: Write failure EINVAL in pid:395 [ 128.409645][ T5256] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.547032][ T5268] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 128.964102][ T5283] input: syz0 as /devices/virtual/input/input78 [ 129.052943][ T5294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:460 [ 129.206403][ T5297] rust_binder: Error in use_page_slow: ESRCH [ 129.206432][ T5297] rust_binder: use_range failure ESRCH [ 129.222977][ T5297] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 129.273639][ T5297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.299088][ T5297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:463 [ 129.653744][ T5308] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.930812][ T5316] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.942753][ T5316] rust_binder: Write failure EFAULT in pid:409 [ 130.184127][ T5330] SELinux: security_context_str_to_sid () failed with errno=-22 [ 130.205219][ T5328] kvm: emulating exchange as write [ 130.557650][ T5346] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.563546][ T5346] rust_binder: Error in use_page_slow: ESRCH [ 130.580280][ T5346] rust_binder: use_range failure ESRCH [ 130.590389][ T5346] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 130.602570][ T5346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 130.628092][ T5346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:415 [ 130.628286][ T5347] binder: Unknown parameter '' [ 130.771948][ T5351] binder: Bad value for 'defcontext' [ 131.060305][ T5359] rust_binder: Error while translating object. [ 131.060351][ T5359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 131.077587][ T5359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:111 [ 131.176902][ T5366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:478 [ 131.211620][ T5366] rust_binder: Write failure EFAULT in pid:478 [ 131.247057][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.260497][ T5366] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.290791][ T5366] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 131.547118][ T5385] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.547580][ T5386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.555668][ T5385] rust_binder: Error in use_page_slow: ESRCH [ 131.562179][ T5385] rust_binder: use_range failure ESRCH [ 131.568961][ T5385] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 131.574736][ T5385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 131.583038][ T5385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:435 [ 131.740676][ T36] kauditd_printk_skb: 889 callbacks suppressed [ 131.740698][ T36] audit: type=1400 audit(1750327299.240:23351): avc: denied { read } for pid=5396 comm="syz.2.1575" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.839613][ T36] audit: type=1400 audit(1750327299.240:23352): avc: denied { read open } for pid=5396 comm="syz.2.1575" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 131.846307][ T5394] binder: Bad value for 'stats' [ 131.913540][ T36] audit: type=1400 audit(1750327299.310:23353): avc: denied { read } for pid=5391 comm="syz.4.1574" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 131.978020][ T36] audit: type=1400 audit(1750327299.310:23354): avc: denied { read open } for pid=5391 comm="syz.4.1574" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.045433][ T36] audit: type=1400 audit(1750327299.310:23355): avc: denied { ioctl } for pid=5391 comm="syz.4.1574" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.082384][ T36] audit: type=1400 audit(1750327299.320:23356): avc: denied { read write } for pid=1652 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.114256][ T36] audit: type=1400 audit(1750327299.320:23357): avc: denied { read write open } for pid=1652 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.141100][ T36] audit: type=1400 audit(1750327299.320:23358): avc: denied { ioctl } for pid=1652 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.169707][ T36] audit: type=1400 audit(1750327299.330:23359): avc: denied { read } for pid=5391 comm="syz.4.1574" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.193632][ T36] audit: type=1400 audit(1750327299.330:23360): avc: denied { read open } for pid=5391 comm="syz.4.1574" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 132.286976][ T5409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 132.287011][ T5409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 132.338762][ T5409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.371263][ T5409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:122 [ 132.384147][ T5407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.856558][ T5429] binder: Bad value for 'defcontext' [ 133.282574][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 133.288648][ T376] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.853364][ T5474] input: syz1 as /devices/virtual/input/input80 [ 133.902259][ T5474] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 134.014633][ T5483] kvm: user requested TSC rate below hardware speed [ 134.509460][ T5506] binder: Unknown parameter '00000000000000H0000' [ 134.543747][ T5506] binder: Unknown parameter '00000000000000H0000' [ 134.560691][ T5506] binder: Unknown parameter '00000000000000H0000' [ 134.567434][ T5512] tap0: tun_chr_ioctl cmd 1074025677 [ 134.578482][ T5512] tap0: linktype set to 776 [ 134.585108][ T5512] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 134.952572][ T5532] can0: slcan on ptm0. [ 135.000402][ T5532] rust_binder: Write failure EINVAL in pid:496 [ 135.134049][ T5542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 135.238861][ T5546] input: syz0 as /devices/virtual/input/input81 [ 135.285672][ T5546] input: failed to attach handler leds to device input81, error: -6 [ 135.344567][ T5551] binder: Unknown parameter 'dont_hash' [ 135.757498][ T5528] can0 (unregistered): slcan off ptm0. [ 135.857646][ T5566] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.859090][ T5567] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 136.009104][ T5585] rust_binder: Write failure EFAULT in pid:982 [ 136.009420][ T5585] rust_binder: Write failure EFAULT in pid:982 [ 136.190808][ T5591] kvm: kvm [5590]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 136.655520][ T5612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 136.751972][ T36] kauditd_printk_skb: 965 callbacks suppressed [ 136.751992][ T36] audit: type=1400 audit(1750327304.250:24326): avc: denied { read open } for pid=5615 comm="syz.2.1640" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.874273][ T5617] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 136.883829][ T36] audit: type=1400 audit(1750327304.320:24327): avc: denied { ioctl } for pid=5615 comm="syz.2.1640" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.942429][ T5625] binder: Bad value for 'stats' [ 136.968811][ T36] audit: type=1400 audit(1750327304.320:24328): avc: denied { ioctl } for pid=5615 comm="syz.2.1640" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.023769][ T36] audit: type=1400 audit(1750327304.330:24329): avc: denied { search } for pid=5621 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.073708][ T36] audit: type=1400 audit(1750327304.330:24330): avc: denied { search } for pid=5621 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.120606][ T3345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.132567][ T3345] audit: audit_lost=221 audit_rate_limit=0 audit_backlog_limit=64 [ 137.160122][ T5632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.166806][ T36] audit: type=1400 audit(1750327304.330:24331): avc: denied { search } for pid=5621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.190129][ T3345] audit: backlog limit exceeded [ 137.283261][ T5635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 137.285992][ T5635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:517 [ 137.432281][ T5642] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.636409][ T5650] random: crng reseeded on system resumption [ 137.678240][ T5650] Restarting kernel threads ... done. [ 137.736286][ T5653] tun0: tun_chr_ioctl cmd 1074025675 [ 137.743869][ T5653] tun0: persist enabled [ 137.751760][ T5653] tun0: tun_chr_ioctl cmd 1074025675 [ 137.768957][ T5653] tun0: persist enabled [ 137.866677][ T5660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.763027][ T5686] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 138.893105][ T13] bridge_slave_1: left allmulticast mode [ 138.922545][ T13] bridge_slave_1: left promiscuous mode [ 138.928308][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.944451][ T13] bridge_slave_0: left allmulticast mode [ 138.960308][ T13] bridge_slave_0: left promiscuous mode [ 138.975696][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.230656][ T13] veth1_macvtap: left promiscuous mode [ 139.239781][ T13] veth0_vlan: left promiscuous mode [ 139.405216][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.421805][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.442636][ T5695] bridge_slave_0: entered allmulticast mode [ 139.475938][ T5720] input: syz0 as /devices/virtual/input/input83 [ 139.488618][ T5695] bridge_slave_0: entered promiscuous mode [ 139.512871][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.518412][ T5720] SELinux: security_context_str_to_sid () failed with errno=-22 [ 139.520308][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.520369][ T5695] bridge_slave_1: entered allmulticast mode [ 139.520819][ T5695] bridge_slave_1: entered promiscuous mode [ 139.754015][ T5730] kvm: kvm [5729]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 140.035659][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.042768][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.080986][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.088109][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.111594][ T5752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 140.151171][ T5752] rust_binder: Error in use_page_slow: ESRCH [ 140.151200][ T5752] rust_binder: use_range failure ESRCH [ 140.171994][ T5752] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 140.192602][ T5752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.212569][ T5752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:538 [ 140.277294][ T5695] veth0_vlan: entered promiscuous mode [ 140.352087][ T5695] veth1_macvtap: entered promiscuous mode [ 140.526845][ T5756] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 140.561488][ T5756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 141.023664][ T5775] input: syz1 as /devices/virtual/input/input84 [ 141.030618][ T5779] rust_binder: Read failure Err(EAGAIN) in pid:1030 [ 141.052543][ T5775] input: failed to attach handler leds to device input84, error: -6 [ 141.087999][ T5782] input: syz0 as /devices/virtual/input/input85 [ 141.125672][ T5782] input: failed to attach handler leds to device input85, error: -6 [ 141.194508][ T5775] kvm_intel: kvm [5774]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 141.296902][ T5790] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 141.400837][ T5798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:553 [ 141.451153][ T5800] input: syz1 as /devices/virtual/input/input86 [ 141.479224][ T5800] input: failed to attach handler leds to device input86, error: -6 [ 141.757444][ T36] kauditd_printk_skb: 1055 callbacks suppressed [ 141.757463][ T36] audit: type=1400 audit(1750327309.260:25355): avc: denied { create } for pid=5818 comm="syz.4.1703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 141.811548][ T36] audit: type=1400 audit(1750327309.270:25356): avc: denied { read write } for pid=5815 comm="syz.0.1702" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.840064][ T36] audit: type=1400 audit(1750327309.270:25357): avc: denied { read write open } for pid=5815 comm="syz.0.1702" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.877397][ T36] audit: type=1400 audit(1750327309.290:25358): avc: denied { read } for pid=5818 comm="syz.4.1703" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.902363][ T36] audit: type=1400 audit(1750327309.290:25359): avc: denied { read open } for pid=5818 comm="syz.4.1703" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.927348][ T5824] binder: Unknown parameter 'dont_hash' [ 141.941696][ T36] audit: type=1400 audit(1750327309.290:25360): avc: denied { read write } for pid=5818 comm="syz.4.1703" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 141.990474][ T36] audit: type=1400 audit(1750327309.290:25361): avc: denied { read open } for pid=5818 comm="syz.4.1703" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.015493][ T36] audit: type=1400 audit(1750327309.300:25362): avc: denied { ioctl } for pid=5818 comm="syz.4.1703" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.040892][ T36] audit: type=1400 audit(1750327309.300:25363): avc: denied { read write } for pid=5818 comm="syz.4.1703" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.066658][ T36] audit: type=1400 audit(1750327309.300:25364): avc: denied { read write open } for pid=5818 comm="syz.4.1703" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.259506][ T5842] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 142.573166][ T5861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:563 [ 142.634873][ T5860] kvm: apic: phys broadcast and lowest prio [ 142.996726][ T5874] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 143.009126][ T5873] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.009465][ T5880] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 143.423931][ T5901] input: syz1 as /devices/virtual/input/input87 [ 143.479472][ T5901] input: syz0 as /devices/virtual/input/input88 [ 144.144565][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.152928][ T5925] rust_binder: Write failure EINVAL in pid:56 [ 144.153893][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.172739][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.180656][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.189951][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.198520][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.218613][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.228754][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.238009][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.246678][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.256777][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.272542][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.282683][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.290446][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.300611][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.316308][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.326319][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.336092][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.345190][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.354284][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.362425][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.373173][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.380949][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.390629][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.399559][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.420508][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.430902][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.439479][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.448832][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.457405][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.466775][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.475373][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.484254][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.494680][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.504350][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.512131][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.521189][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.530589][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.538956][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.548522][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.582589][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.590388][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.601463][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.624412][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.633678][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.641635][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.649833][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.662549][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.672343][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.697966][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.706006][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.714111][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.725951][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.733822][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.741844][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.766587][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.782679][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.797548][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.806564][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.814560][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.822578][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.832167][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.840612][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.849993][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.859039][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.868439][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.877269][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.885529][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.895123][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.903869][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.925163][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.942160][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.953731][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.963483][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.972649][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.980708][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 144.994401][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.014162][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.021987][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.030313][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.043453][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.051487][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.059970][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.068269][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.076607][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.084868][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.093194][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.101313][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.109742][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.118361][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.127143][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.135186][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.145376][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.153398][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.161498][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.182215][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.201880][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.214155][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.225438][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.234564][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.242394][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.289928][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.306189][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.322626][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.330505][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.362793][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.370759][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.378805][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.402753][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.410754][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.419938][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.427924][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.430832][ T5960] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 145.435903][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.453104][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.461967][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.469105][ T5960] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 145.490038][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.500853][ T5964] SELinux: failed to load policy [ 145.505902][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.516129][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.529731][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.540194][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.549139][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.557005][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.565207][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.573147][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.582053][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.589973][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.598442][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.623672][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.631476][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x6 [ 145.652565][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x3 [ 145.660637][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.671290][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.679867][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.689100][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.697908][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.726744][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.737786][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.746349][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.756335][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.765143][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.774395][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.786654][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.795502][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.805314][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.823117][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.830971][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.840160][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.854123][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.862176][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.875947][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.885311][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.893933][ T45] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0 [ 145.904179][ T45] hid-generic 0008:0000:FFFFFBFF.000B: hidraw0: HID v9.86 Device [syz0] on syz1 [ 146.197773][ T5983] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 146.349293][ T5988] fido_id[5988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.418555][ T5994] rust_binder: Read failure Err(EAGAIN) in pid:624 [ 146.724475][ T6002] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 146.762911][ T36] kauditd_printk_skb: 2803 callbacks suppressed [ 146.762927][ T36] audit: type=1400 audit(1750327314.270:28168): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.815904][ T6004] rust_binder: Write failure EINVAL in pid:62 [ 146.832261][ T36] audit: type=1400 audit(1750327314.270:28169): avc: denied { read write } for pid=4790 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.920484][ T6011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.936649][ T1652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 146.939128][ T36] audit: type=1400 audit(1750327314.290:28170): avc: denied { read write } for pid=6000 comm="syz.3.1763" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.952148][ T1652] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 146.975379][ T36] audit: type=1400 audit(1750327314.290:28171): avc: denied { read write open } for pid=6000 comm="syz.3.1763" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 146.982618][ T6011] audit: audit_lost=234 audit_rate_limit=0 audit_backlog_limit=64 [ 147.016067][ T36] audit: type=1400 audit(1750327314.290:28172): avc: denied { read write open } for pid=4790 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.020267][ T1652] audit: backlog limit exceeded [ 147.689085][ T6041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.968715][ T6054] binder: Bad value for 'stats' [ 148.195262][ T6061] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 148.465130][ T6071] rust_binder: Write failure EFAULT in pid:648 [ 148.506687][ T6071] rust_binder: Write failure EFAULT in pid:648 [ 148.613301][ T6078] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 148.833850][ T6092] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 148.963697][ T6094] binder: Bad value for 'stats' [ 148.979167][ T6096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.044064][ T6096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.053776][ T6097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.091849][ T6097] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 149.091895][ T6096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.123033][ T6098] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 149.136938][ T6101] binder: Unknown parameter '' [ 149.314448][ T6106] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 149.520707][ T6111] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 149.583779][ T6114] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 192, size: 142) [ 149.593089][ T6114] rust_binder: Error while translating object. [ 149.605125][ T6114] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.611915][ T6114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 149.696204][ T6117] binder: Unknown parameter 'nXI' [ 149.706675][ T6119] binder: Unknown parameter 'nXI' [ 149.918688][ T6126] random: crng reseeded on system resumption [ 150.014982][ T6126] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 150.015009][ T6126] rust_binder: Read failure Err(EFAULT) in pid:668 [ 150.187087][ T6136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.206741][ T6136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:672 [ 150.659267][ T6166] binder: Bad value for 'defcontext' [ 151.358691][ T6193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333 [ 151.612569][ T6200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.633400][ T6199] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 151.772945][ T36] kauditd_printk_skb: 3441 callbacks suppressed [ 151.772965][ T36] audit: type=1400 audit(1750327319.280:31613): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.854690][ T36] audit: type=1400 audit(1750327319.320:31614): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.916655][ T1652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.922607][ T36] audit: type=1400 audit(1750327319.320:31615): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.942585][ T1652] audit: audit_lost=235 audit_rate_limit=0 audit_backlog_limit=64 [ 151.948714][ T36] audit: type=1400 audit(1750327319.320:31616): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.955596][ T1652] audit: backlog limit exceeded [ 151.993647][ T6208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.998777][ T1652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.003368][ T4790] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.014862][ T6206] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 152.214824][ T6218] SELinux: failed to load policy [ 152.247997][ T6218] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 152.248020][ T6218] rust_binder: Read failure Err(EFAULT) in pid:146 [ 152.496687][ T6222] block device autoloading is deprecated and will be removed. [ 152.565523][ T6222] syz.0.1832: attempt to access beyond end of device [ 152.565523][ T6222] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 152.614040][ T6226] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 152.614064][ T6226] rust_binder: Error while translating object. [ 152.639060][ T6226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.655904][ T6226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 152.705046][ T6228] binder: Binderfs stats mode cannot be changed during a remount [ 152.844444][ T6231] rust_binder: Error in use_page_slow: ESRCH [ 152.844464][ T6231] rust_binder: use_range failure ESRCH [ 152.859402][ T6233] rust_binder: Write failure EINVAL in pid:152 [ 152.890686][ T6231] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 152.933772][ T6231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.933804][ T6231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:343 [ 153.463175][ T6252] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 153.471766][ T6252] SELinux: failed to load policy [ 153.622860][ T6258] rust_binder: Write failure EINVAL in pid:352 [ 153.732958][ T6263] SELinux: policydb version 1576030233 does not match my version range 15-33 [ 153.741879][ T6263] SELinux: failed to load policy [ 153.829429][ T6270] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:727 [ 154.188075][ T6285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 154.372829][ T6291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166 [ 154.415415][ T6293] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 154.675604][ T6296] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.815597][ T6303] rust_binder: Write failure EINVAL in pid:739 [ 154.816728][ T6300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.064320][ T6312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.082266][ T6312] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 155.121820][ T6315] binder: Unknown parameter 'obj_user' [ 155.154406][ T6315] binder: Unknown parameter 'obj_user' [ 155.295301][ T6323] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 155.435898][ T6326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 155.435935][ T6326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:750 [ 155.945935][ T6350] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 155.981439][ T6348] SELinux: ebitmap: truncated map [ 155.989993][ T6348] SELinux: failed to load policy [ 156.150071][ T6353] rust_binder: Read failure Err(EAGAIN) in pid:180 [ 156.479648][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.494137][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.501900][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.509768][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.517856][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.525688][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.533685][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.541528][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.549316][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.557422][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.565218][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.573349][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.581111][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x7 [ 156.588951][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.597056][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.606245][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.614733][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.622772][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.630875][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.638719][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.651927][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.660835][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.668724][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.676754][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.684664][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.692819][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.700680][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.709859][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.718723][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.726614][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.734454][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.742263][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.755480][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.765798][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.773934][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.781820][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.789706][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.790399][ T36] kauditd_printk_skb: 3379 callbacks suppressed [ 156.790412][ T36] audit: type=1400 audit(1750327324.300:34924): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.798747][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.812539][ T36] audit: type=1400 audit(1750327324.310:34925): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.827878][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.855093][ T36] audit: type=1400 audit(1750327324.310:34926): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.858874][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.876163][ T36] audit: type=1400 audit(1750327324.310:34927): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.889865][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.916068][ T1652] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.920865][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.928518][ T36] audit: type=1400 audit(1750327324.310:34928): avc: denied { setattr } for pid=1652 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.944119][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.971618][ T4790] audit: audit_backlog=65 > audit_backlog_limit=64 [ 156.975907][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.980112][ T4790] audit: audit_lost=261 audit_rate_limit=0 audit_backlog_limit=64 [ 156.988707][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 156.996362][ T1652] audit: audit_lost=262 audit_rate_limit=0 audit_backlog_limit=64 [ 157.005313][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.011972][ T1652] audit: backlog limit exceeded [ 157.021006][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.052549][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.070326][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.082552][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.100630][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.120841][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.130941][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.151170][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.171394][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.179273][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.187392][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.195835][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.220525][ T6383] rust_binder: Error while translating object. [ 157.220571][ T6383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 157.226968][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.244260][ T6383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:418 [ 157.246499][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.263730][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.271499][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.279383][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.292539][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.302290][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.321745][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.330167][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.346559][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.360092][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.368679][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.377235][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.385987][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.395692][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.404452][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.425086][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.433848][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.441612][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.459546][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.472545][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.481754][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.490805][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.499056][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.507988][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.516542][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.525337][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.535310][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.544417][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.552402][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.561500][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.570348][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.598479][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.608562][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.622541][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.640512][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.649399][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.667644][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.676270][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.684899][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.702551][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.710416][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.719390][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.732547][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.739184][ T6391] rust_binder: Write failure EINVAL in pid:425 [ 157.740577][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.768630][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.777423][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.792554][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.800431][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.820636][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.829341][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.842556][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.861337][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.872555][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.880356][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.902548][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.910406][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.919365][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.928001][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.936495][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.945380][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.953945][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.961787][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.970936][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.979616][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 157.988245][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.002568][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.020535][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.030633][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.050834][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.059376][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.077352][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.092555][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.110702][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.122540][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.130420][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.152543][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.160327][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.192552][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.200437][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.222548][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.230417][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.252545][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.260329][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.282546][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.290423][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.312525][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.320330][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.342564][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.350447][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: unknown main item tag 0x0 [ 158.374373][ T3242] hid-generic 0008:0000:FFFFFBFF.000C: hidraw0: HID v9.86 Device [syz0] on syz1 [ 158.591469][ T6396] rust_binder: Error while translating object. [ 158.591500][ T6396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 158.604791][ T6394] SELinux: security_context_str_to_sid () failed with errno=-22 [ 158.622807][ T6396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189 [ 158.700975][ T6400] binder: Bad value for 'stats' [ 158.847951][ T6398] fido_id[6398]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.864033][ T12] bridge_slave_1: left allmulticast mode [ 158.869725][ T12] bridge_slave_1: left promiscuous mode [ 158.900072][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.910175][ T12] bridge_slave_0: left allmulticast mode [ 158.915996][ T12] bridge_slave_0: left promiscuous mode [ 158.930618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.991538][ T6410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:754 [ 159.248136][ T12] veth1_macvtap: left promiscuous mode [ 159.263495][ T12] veth0_vlan: left promiscuous mode [ 159.308227][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.315341][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.322570][ T6402] bridge_slave_0: entered allmulticast mode [ 159.328785][ T6402] bridge_slave_0: entered promiscuous mode [ 159.335923][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.343288][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.350431][ T6402] bridge_slave_1: entered allmulticast mode [ 159.359726][ T6402] bridge_slave_1: entered promiscuous mode [ 159.497376][ T6429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 159.497410][ T6429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:201 [ 159.581005][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.597245][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.604512][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.611551][ T6402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.640265][ T6434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:204 [ 159.683628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.706081][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.725524][ T6436] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 159.742702][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.749026][ T6436] SELinux: failed to load policy [ 159.749803][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.766767][ T306] Bluetooth: hci0: Frame reassembly failed (-90) [ 159.779235][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.786435][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.903387][ T6402] veth0_vlan: entered promiscuous mode [ 159.950383][ T6438] binder: Unknown parameter 'defcontext-vsock' [ 159.950545][ T6402] veth1_macvtap: entered promiscuous mode [ 160.141622][ T6445] binder: Unknown parameter 'obj_type' [ 160.246180][ T6451] binder: Bad value for 'stats' [ 160.341871][ T6459] input: syz0 as /devices/virtual/input/input95 [ 160.407220][ T6459] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 160.765320][ T6475] syz.5.1913: attempt to access beyond end of device [ 160.765320][ T6475] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.799971][ T6474] binder: Unknown parameter '0x00000000000000030x0000000000000003' [ 161.101238][ T6485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 161.101274][ T6485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 161.332819][ T6490] rust_binder: Error in use_page_slow: ESRCH [ 161.345189][ T6490] rust_binder: use_range failure ESRCH [ 161.351287][ T6490] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 161.362588][ T6490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 161.382532][ T6490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:22 [ 161.638765][ T6503] rust_binder: Error while translating object. [ 161.670133][ T6503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 161.688940][ T6503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:221 [ 161.793035][ T36] kauditd_printk_skb: 1993 callbacks suppressed [ 161.793055][ T36] audit: type=1400 audit(1750327329.300:36915): avc: denied { read } for pid=6504 comm="syz.0.1926" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.831565][ T36] audit: type=1400 audit(1750327329.300:36916): avc: denied { read open } for pid=6504 comm="syz.0.1926" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.857503][ T36] audit: type=1400 audit(1750327329.330:36917): avc: denied { ioctl } for pid=6504 comm="syz.0.1926" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 161.862557][ T376] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.910869][ T36] audit: type=1400 audit(1750327329.410:36918): avc: denied { read write } for pid=4790 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.941863][ T36] audit: type=1400 audit(1750327329.410:36919): avc: denied { read write open } for pid=4790 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.012529][ T36] audit: type=1400 audit(1750327329.410:36920): avc: denied { ioctl } for pid=4790 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.102532][ T36] audit: type=1400 audit(1750327329.440:36921): avc: denied { read write } for pid=5695 comm="syz-executor" name="loop0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.162433][ T36] audit: type=1400 audit(1750327329.450:36922): avc: denied { read write open } for pid=5695 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.182309][ T6518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 162.188748][ T6518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 162.200965][ T36] audit: type=1400 audit(1750327329.450:36923): avc: denied { ioctl } for pid=5695 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=508 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.236662][ T6518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 162.237513][ T36] audit: type=1400 audit(1750327329.480:36924): avc: denied { read write } for pid=6507 comm="syz.4.1927" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.706084][ T6545] binder: Unknown parameter '' [ 162.915929][ T6563] rust_binder: Error while translating object. [ 162.915978][ T6563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 162.932992][ T6563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:40 [ 162.972853][ T6566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 163.242997][ T6578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:465 [ 163.374475][ T6574] rust_binder: Error while translating object. [ 163.402623][ T6574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 163.409018][ T6574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 163.468440][ T6596] rust_binder: Write failure EINVAL in pid:467 [ 163.511505][ T6593] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 163.532544][ T6593] rust_binder: Error in use_page_slow: EBUSY [ 163.562559][ T6593] rust_binder: use_range failure EBUSY [ 163.577160][ T6593] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 163.578954][ T6593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 163.579867][ T6602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:798 [ 163.596109][ T6593] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 163.607938][ T6593] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:52 [ 163.814091][ T6611] binder: Bad value for 'max' [ 163.898899][ T6618] binder: Unknown parameter 'dont_hash' [ 163.916249][ T6620] random: crng reseeded on system resumption [ 164.413111][ T6647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.420062][ T6645] rust_binder: Write failure EINVAL in pid:65 [ 164.493112][ T6649] input: syz1 as /devices/virtual/input/input98 [ 164.530132][ T6649] random: crng reseeded on system resumption [ 164.587318][ T6646] rust_binder: Write failure EINVAL in pid:253 [ 164.688470][ T6666] rust_binder: Write failure EFAULT in pid:819 [ 164.858990][ T6677] binder: Bad value for 'max' [ 164.943498][ T6683] binder: Bad value for 'stats' [ 165.038132][ T6674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:257 [ 165.143699][ T6691] random: crng reseeded on system resumption [ 166.298954][ T6734] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 166.303426][ T6736] random: crng reseeded on system resumption [ 166.332604][ T6734] SELinux: failed to load policy [ 166.535884][ T6741] rust_binder: Write failure EINVAL in pid:79 [ 166.566463][ T6746] binder: Binderfs stats mode cannot be changed during a remount [ 166.629596][ T6741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 166.815241][ T36] kauditd_printk_skb: 1034 callbacks suppressed [ 166.815261][ T36] audit: type=1400 audit(1750327334.320:37959): avc: denied { read write } for pid=6761 comm="syz.3.2010" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.895486][ T36] audit: type=1400 audit(1750327334.320:37960): avc: denied { read open } for pid=6761 comm="syz.3.2010" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 166.935613][ T6770] binder: Unknown parameter 'dont_hash`y~$WK#GѶG&T拣BL.\_&uY/YMހ' [ 166.957095][ T36] audit: type=1400 audit(1750327334.320:37961): avc: denied { read } for pid=6764 comm="syz.5.2011" name="binder0" dev="binder" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 166.997122][ T6773] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.042523][ T36] audit: type=1400 audit(1750327334.320:37962): avc: denied { read open } for pid=6764 comm="syz.5.2011" path="/dev/binderfs/binder0" dev="binder" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.142747][ T36] audit: type=1400 audit(1750327334.320:37963): avc: denied { read write } for pid=6764 comm="syz.5.2011" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.187028][ T36] audit: type=1400 audit(1750327334.320:37964): avc: denied { read write open } for pid=6764 comm="syz.5.2011" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 167.212916][ T36] audit: type=1400 audit(1750327334.320:37965): avc: denied { read } for pid=6764 comm="syz.5.2011" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.240395][ T6780] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.253836][ T6781] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.260845][ T6782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.479972][ T6793] rust_binder: Error while translating object. [ 167.480021][ T6793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 167.490714][ T6793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:525 [ 168.222994][ T6829] binder: Bad value for 'max' [ 168.659107][ T6850] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 168.659131][ T6850] rust_binder: Read failure Err(EFAULT) in pid:883 [ 168.778183][ T6860] rust_binder: Read failure Err(EAGAIN) in pid:101 [ 168.783239][ T6861] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 168.808427][ T6860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 169.005527][ T6872] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 169.014544][ T6873] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 169.073597][ T6876] binfmt_misc: register: failed to install interpreter file ./file0 [ 169.240985][ T6881] SELinux: ebitmap: truncated map [ 169.249841][ T6881] SELinux: failed to load policy [ 169.428533][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.575925][ T6889] rust_binder: Error while translating object. [ 169.582432][ T6889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 169.613598][ T6889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:899 [ 169.720774][ T6894] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 169.814278][ T6905] binder: Unknown parameter '`Y' [ 169.999456][ T6910] kvm: user requested TSC rate below hardware speed [ 170.220816][ T7023] rust_binder: Error while translating object. [ 170.220848][ T7023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 170.232564][ T7023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:909 [ 170.344803][ T7027] input: syz0 as /devices/virtual/input/input105 [ 170.484185][ T12] bridge_slave_1: left allmulticast mode [ 170.494263][ T12] bridge_slave_1: left promiscuous mode [ 170.509328][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.532301][ T12] bridge_slave_0: left allmulticast mode [ 170.545672][ T12] bridge_slave_0: left promiscuous mode [ 170.552157][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.722626][ T12] veth1_macvtap: left promiscuous mode [ 170.743705][ T12] veth0_vlan: left promiscuous mode [ 170.819014][ T7045] serio: Serial port ttynull [ 170.871681][ T7044] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 171.044618][ T7055] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 171.135024][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.162530][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.169722][ T7034] bridge_slave_0: entered allmulticast mode [ 171.214059][ T7034] bridge_slave_0: entered promiscuous mode [ 171.237206][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.252524][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.273190][ T7034] bridge_slave_1: entered allmulticast mode [ 171.279665][ T7034] bridge_slave_1: entered promiscuous mode [ 171.346176][ T7070] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 171.523948][ T7074] input: syz0 as /devices/virtual/input/input106 [ 171.710952][ T7079] input: syz1 as /devices/virtual/input/input107 [ 171.783245][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.790326][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.843365][ T36] kauditd_printk_skb: 1027 callbacks suppressed [ 171.843384][ T36] audit: type=1400 audit(1750327339.350:38987): avc: denied { read write } for pid=7082 comm="syz.3.2079" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 171.890353][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.897479][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.912571][ T36] audit: type=1400 audit(1750327339.390:38988): avc: denied { read write open } for pid=7082 comm="syz.3.2079" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 172.006483][ T36] audit: type=1400 audit(1750327339.390:38989): avc: denied { ioctl } for pid=7082 comm="syz.3.2079" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.095312][ T36] audit: type=1400 audit(1750327339.400:38990): avc: denied { read write } for pid=6402 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.154082][ T36] audit: type=1400 audit(1750327339.400:38991): avc: denied { read write open } for pid=6402 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.174475][ T7034] veth0_vlan: entered promiscuous mode [ 172.220464][ T36] audit: type=1400 audit(1750327339.400:38992): avc: denied { ioctl } for pid=6402 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.227635][ T6402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.247488][ T36] audit: type=1400 audit(1750327339.450:38993): avc: denied { read write } for pid=3345 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.263169][ T7034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.278708][ T6402] audit: audit_lost=268 audit_rate_limit=0 audit_backlog_limit=64 [ 172.335259][ T7034] veth1_macvtap: entered promiscuous mode [ 172.437159][ T7097] rust_binder: Error while translating object. [ 172.437209][ T7097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 172.451969][ T7097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:934 [ 172.673358][ T7111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 172.739071][ T7114] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 172.908808][ T7123] input: syz0 as /devices/virtual/input/input109 [ 173.065526][ T7126] rust_binder: Write failure EFAULT in pid:4 [ 173.150052][ T7134] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 173.273260][ T7138] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 173.582252][ T7153] rust_binder: Error while translating object. [ 173.591183][ T7153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 173.599486][ T7153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:949 [ 174.010443][ T7173] kvm: kvm [7171]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 174.822468][ T7300] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 174.834024][ T7300] SELinux: failed to load policy [ 175.103775][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.110941][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.132588][ T7295] bridge_slave_0: entered allmulticast mode [ 175.143395][ T7295] bridge_slave_0: entered promiscuous mode [ 175.165002][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.172110][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.194049][ T7295] bridge_slave_1: entered allmulticast mode [ 175.200671][ T7295] bridge_slave_1: entered promiscuous mode [ 175.217539][ T46] bridge_slave_1: left allmulticast mode [ 175.226721][ T46] bridge_slave_1: left promiscuous mode [ 175.233503][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.251316][ T46] bridge_slave_0: left allmulticast mode [ 175.272543][ T46] bridge_slave_0: left promiscuous mode [ 175.279351][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.397996][ T46] veth1_macvtap: left promiscuous mode [ 175.403654][ T46] veth0_vlan: left promiscuous mode [ 175.547968][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.555046][ T7295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.562288][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.569332][ T7295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.606674][ T7318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979 [ 175.684316][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.684769][ T7322] input: syz0 as /devices/virtual/input/input110 [ 175.707130][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.731776][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.738898][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.757402][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.764591][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.844714][ T7295] veth0_vlan: entered promiscuous mode [ 175.873519][ T7295] veth1_macvtap: entered promiscuous mode [ 176.054169][ T7326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 176.391768][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.404496][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.413753][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.433989][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.452892][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.477900][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.485349][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.491885][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.504414][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.510799][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.523057][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.529425][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.547572][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.592162][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.600277][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.609905][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.617338][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.624030][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.630478][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.637044][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.643970][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.650695][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.653246][ T7341] rust_binder: Write failure EINVAL in pid:982 [ 176.667659][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.698824][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.700564][ T7345] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 176.732835][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.772892][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.781780][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.798224][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.832888][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.851663][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.873620][ T36] kauditd_printk_skb: 1383 callbacks suppressed [ 176.873638][ T36] audit: type=1400 audit(1750327344.380:40359): avc: denied { ioctl } for pid=7333 comm="syz.0.2128" path="/dev/binderfs/binder0" dev="binder" ino=103 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.880447][ T7356] rust_binder: inc_ref_done called when no active inc_refs [ 176.887472][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.913489][ T7356] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 176.926679][ T36] audit: type=1400 audit(1750327344.380:40360): avc: denied { read } for pid=7354 comm="syz.5.2134" name="binder1" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 176.936675][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.959918][ T7334] rust_binder: Write failure EINVAL in pid:6 [ 176.960078][ T7356] rust_binder: Read failure Err(EFAULT) in pid:596 [ 176.973246][ T36] audit: type=1400 audit(1750327344.380:40361): avc: denied { read open } for pid=7354 comm="syz.5.2134" path="/dev/binderfs/binder1" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.005913][ T36] audit: type=1400 audit(1750327344.380:40362): avc: denied { read } for pid=7355 comm="syz.4.2133" name="binder1" dev="binder" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.050304][ T36] audit: type=1400 audit(1750327344.380:40363): avc: denied { read open } for pid=7355 comm="syz.4.2133" path="/dev/binderfs/binder1" dev="binder" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.106573][ T36] audit: type=1400 audit(1750327344.380:40364): avc: denied { ioctl } for pid=7355 comm="syz.4.2133" path="/dev/binderfs/binder1" dev="binder" ino=135 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.151052][ T36] audit: type=1400 audit(1750327344.380:40365): avc: denied { set_context_mgr } for pid=7355 comm="syz.4.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 177.171788][ T36] audit: type=1400 audit(1750327344.380:40366): avc: denied { ioctl } for pid=7355 comm="syz.4.2133" path="/dev/binderfs/binder1" dev="binder" ino=135 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.237742][ T7363] rust_binder: Error while translating object. [ 177.237790][ T7363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 177.244747][ T7363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 177.254981][ T36] audit: type=1400 audit(1750327344.430:40367): avc: denied { read } for pid=7354 comm="syz.5.2134" name="binder1" dev="binder" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 177.298931][ T7372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.329864][ T7374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 177.334764][ T7363] binder: Bad value for 'stats' [ 177.453512][ T7380] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 177.586738][ T7387] rust_binder: Write failure EFAULT in pid:203 [ 177.652602][ T7382] rust_binder: Write failure EFAULT in pid:987 [ 177.801292][ T7392] input: syz1 as /devices/virtual/input/input111 [ 177.831371][ T7392] input: syz0 as /devices/virtual/input/input112 [ 178.077832][ T7406] rust_binder: Error while translating object. [ 178.077867][ T7406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 178.093161][ T7406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:618 [ 178.108208][ T7408] binder: Unknown parameter '' [ 178.544006][ T7425] SELinux: policydb version 1311858077 does not match my version range 15-33 [ 178.572549][ T7425] SELinux: failed to load policy [ 178.994572][ T7459] rust_binder: Write failure EINVAL in pid:1004 [ 179.571992][ T7483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1016 [ 179.726959][ T7485] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 179.838870][ T7490] SELinux: Context system_u: is not valid (left unmapped). [ 179.877937][ T7490] kvm: kvm [7489]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 179.920255][ T7490] SELinux: security_context_str_to_sid () failed with errno=-22 [ 179.968241][ T7493] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 179.976953][ T7493] rust_binder: Write failure EINVAL in pid:635 [ 180.040789][ T7503] can0: slcan on ttyS3. [ 180.124068][ T7503] can0 (unregistered): slcan off ttyS3. [ 180.491824][ T7516] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 180.601844][ T7523] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 180.702433][ T7529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.702468][ T7529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 180.768536][ T7535] binder: Unknown parameter 'sŌ'SpR' [ 180.892219][ T7542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.892845][ T7542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.168502][ T7559] binder: Unknown parameter '0xffffffffffffffff' [ 181.285604][ T7564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.414354][ T7568] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 181.815326][ T7598] rust_binder: Error while translating object. [ 181.815360][ T7598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 181.821663][ T7598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 181.889287][ T36] kauditd_printk_skb: 959 callbacks suppressed [ 181.889308][ T36] audit: type=1400 audit(1750327349.390:41325): avc: denied { read write } for pid=7603 comm="syz.0.2213" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.900943][ T7607] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 181.920041][ T36] audit: type=1400 audit(1750327349.390:41326): avc: denied { read open } for pid=7603 comm="syz.0.2213" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 181.994139][ T36] audit: type=1400 audit(1750327349.390:41327): avc: denied { read } for pid=7600 comm="syz.4.2212" name="binder0" dev="binder" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.005431][ T7607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 182.017274][ T36] audit: type=1400 audit(1750327349.390:41328): avc: denied { read open } for pid=7600 comm="syz.4.2212" path="/dev/binderfs/binder0" dev="binder" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.037767][ T7605] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.053784][ T36] audit: type=1400 audit(1750327349.390:41329): avc: denied { map } for pid=7600 comm="syz.4.2212" path="/dev/binderfs/binder0" dev="binder" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.071952][ T7605] audit: audit_lost=276 audit_rate_limit=0 audit_backlog_limit=64 [ 182.087964][ T6402] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.098950][ T6402] audit: audit_lost=277 audit_rate_limit=0 audit_backlog_limit=64 [ 182.107838][ T6402] audit: backlog limit exceeded [ 182.249609][ T7614] binder: Unknown parameter 'uid' [ 182.328680][ T7619] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 182.485020][ T7625] binder: Unknown parameter 'con' [ 182.646078][ T7633] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 182.646811][ T7633] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 182.672631][ T7635] tun0: tun_chr_ioctl cmd 1074025676 [ 182.709641][ T7635] tun0: owner set to 0 [ 182.984671][ T7650] binder: Unknown parameter '' [ 183.080525][ T7654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.116651][ T7654] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 183.173496][ T7654] rust_binder: Error while translating object. [ 183.173545][ T7654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 183.190531][ T7654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:668 [ 183.441380][ T7667] binder: Unknown parameter 'dont_hash' [ 183.546347][ T7669] rust_binder: Write failure EINVAL in pid:673 [ 183.781247][ T7680] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 254) [ 183.797908][ T7680] rust_binder: Error while translating object. [ 183.844107][ T7680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.855438][ T7680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:675 [ 183.912700][ T7686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 183.940776][ T7686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 184.185812][ T7701] binder: Unknown parameter '0x000000000000000b$'-64E%gz'5j9$N?qǽ]K X_?B|籸w [ 184.185812][ T7701] ͋a~v>t00000000000000000000013' [ 184.408100][ T7712] binder: Unknown parameter ':Ҫ E' [ 184.430381][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.052190][ T7722] rust_binder: Write failure EINVAL in pid:1087 [ 185.114973][ T7728] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 185.230924][ T7733] input: syz0 as /devices/virtual/input/input115 [ 185.510457][ T7736] input: syz1 as /devices/virtual/input/input116 [ 185.604990][ T7738] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.605707][ T7739] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 185.605838][ T7740] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 185.693742][ T7739] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 185.958337][ T7750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.969020][ T7748] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.977776][ T7750] rust_binder: Write failure EINVAL in pid:701 [ 185.989495][ T7748] rust_binder: Error while translating object. [ 185.995801][ T7748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.003346][ T7748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1091 [ 186.173606][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.193285][ T7762] binder: Unknown parameter 'stats' [ 186.205791][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.206112][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.213107][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.219949][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.226568][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.233257][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.240016][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.246701][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.253363][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.259786][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.266405][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.273069][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.279484][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.286076][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.293334][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.299758][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.307117][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.313666][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.320283][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.327620][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.334166][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.340604][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.347171][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.353722][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.360255][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.367380][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.378711][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.385803][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.392410][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.399139][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.409332][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.418655][ T7763] rust_binder: Write failure EINVAL in pid:1093 [ 186.436024][ T7768] cgroup: fork rejected by pids controller in /syz4 [ 186.483412][ T376] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 186.489570][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 186.633920][ T7876] random: crng reseeded on system resumption [ 186.875925][ T7889] syz.3.2273: attempt to access beyond end of device [ 186.875925][ T7889] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 186.903267][ T7892] rust_binder: Error while translating object. [ 186.903300][ T7892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 186.909523][ T7892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:278 [ 186.919007][ T36] kauditd_printk_skb: 898 callbacks suppressed [ 186.919028][ T36] audit: type=1400 audit(1750327354.410:42224): avc: denied { ioctl } for pid=7890 comm="syz.5.2275" path="/dev/binderfs/binder0" dev="binder" ino=151 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.970952][ T36] audit: type=1400 audit(1750327354.410:42225): avc: denied { call } for pid=7890 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 187.064285][ T36] audit: type=1400 audit(1750327354.470:42226): avc: denied { ioctl } for pid=7888 comm="syz.3.2273" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.119326][ T7900] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 187.121423][ T7898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.152319][ T7898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 187.161807][ T36] audit: type=1400 audit(1750327354.470:42227): avc: denied { read write } for pid=6402 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.205934][ T13] bridge_slave_1: left allmulticast mode [ 187.211655][ T13] bridge_slave_1: left promiscuous mode [ 187.224640][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.225961][ T36] audit: type=1400 audit(1750327354.470:42228): avc: denied { read write open } for pid=6402 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.273513][ T36] audit: type=1400 audit(1750327354.470:42229): avc: denied { execmem } for pid=7893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 187.294427][ T13] bridge_slave_0: left allmulticast mode [ 187.300108][ T13] bridge_slave_0: left promiscuous mode [ 187.332634][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.392524][ T36] audit: type=1400 audit(1750327354.500:42230): avc: denied { ioctl } for pid=6402 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.433277][ T36] audit: type=1400 audit(1750327354.520:42231): avc: denied { read } for pid=7888 comm="syz.3.2273" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.461459][ T36] audit: type=1400 audit(1750327354.520:42232): avc: denied { read open } for pid=7888 comm="syz.3.2273" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.494277][ T7913] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.612957][ T7920] input: syz0 as /devices/virtual/input/input118 [ 187.638220][ T13] veth1_macvtap: left promiscuous mode [ 187.655490][ T13] veth0_vlan: left promiscuous mode [ 187.718177][ T7920] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 187.762713][ T7920] rust_binder: Write failure EINVAL in pid:124 [ 187.763385][ T7920] rust_binder: Read failure Err(EAGAIN) in pid:124 [ 187.781865][ T7920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.821575][ T7928] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.847242][ T7928] rust_binder: Write failure EFAULT in pid:1110 [ 187.866214][ T7931] rust_binder: Write failure EINVAL in pid:297 [ 188.074674][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.143558][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.150694][ T7904] bridge_slave_0: entered allmulticast mode [ 188.182961][ T7904] bridge_slave_0: entered promiscuous mode [ 188.204042][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.211308][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.254064][ T7948] kvm: user requested TSC rate below hardware speed [ 188.262559][ T7904] bridge_slave_1: entered allmulticast mode [ 188.269068][ T7904] bridge_slave_1: entered promiscuous mode [ 188.397563][ T7953] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.400036][ T7953] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 188.435440][ T7953] rust_binder: Error while translating object. [ 188.490831][ T7953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 188.554544][ T7953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1118 [ 188.767116][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.775947][ T7967] rust_binder: Write failure EINVAL in pid:142 [ 188.776414][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.856281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.863571][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.895461][ T7973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 189.016140][ T7983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 189.139297][ T7904] veth0_vlan: entered promiscuous mode [ 189.263108][ T7994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.263141][ T7994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152 [ 189.285522][ T7904] veth1_macvtap: entered promiscuous mode [ 189.454826][ T8000] rust_binder: Error while translating object. [ 189.454874][ T8000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 189.462405][ T8000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:156 [ 189.573887][ T8006] input: syz1 as /devices/virtual/input/input119 [ 189.783490][ T8013] rust_binder: Error while translating object. [ 189.783539][ T8013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 189.789996][ T8013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:158 [ 190.087047][ T8030] rust_binder: Write failure EFAULT in pid:324 [ 190.201799][ T8030] binder: Bad value for 'max' [ 190.418078][ T8041] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 190.505434][ T8043] kvm: user requested TSC rate below hardware speed [ 190.871163][ T8057] input: syz1 as /devices/virtual/input/input121 [ 191.317633][ T8084] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 191.344683][ T8078] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.497890][ T8090] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.497928][ T8090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 191.927587][ T36] kauditd_printk_skb: 859 callbacks suppressed [ 191.927606][ T36] audit: type=1400 audit(1750327359.430:43063): avc: denied { read } for pid=8100 comm="syz.4.2340" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.002546][ T36] audit: type=1400 audit(1750327359.480:43064): avc: denied { read open } for pid=8100 comm="syz.4.2340" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.052525][ T36] audit: type=1400 audit(1750327359.480:43065): avc: denied { ioctl } for pid=8100 comm="syz.4.2340" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.097547][ T36] audit: type=1400 audit(1750327359.490:43066): avc: denied { read write } for pid=3345 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.149013][ T36] audit: type=1400 audit(1750327359.500:43067): avc: denied { read write open } for pid=3345 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.195603][ T36] audit: type=1400 audit(1750327359.500:43068): avc: denied { ioctl } for pid=3345 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.251905][ T8109] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.276609][ T36] audit: type=1400 audit(1750327359.540:43069): avc: denied { read write } for pid=8106 comm="syz.0.2341" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.326448][ T8108] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.342523][ T36] audit: type=1400 audit(1750327359.540:43070): avc: denied { read write open } for pid=8106 comm="syz.0.2341" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 192.373610][ T36] audit: type=1400 audit(1750327359.550:43071): avc: denied { read } for pid=8106 comm="syz.0.2341" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.412665][ T36] audit: type=1400 audit(1750327359.550:43072): avc: denied { read open } for pid=8106 comm="syz.0.2341" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.760728][ T8138] binder: Unknown parameter 'fsmagic' [ 192.890923][ T8143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.999568][ T8149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.999598][ T8149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1157 [ 193.156419][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.203689][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.211374][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.250469][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 193.261700][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 193.272995][ T8157] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 193.714598][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.714934][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.723641][ T8190] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 193.742910][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.773972][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.811594][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.852124][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.886297][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.895040][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.901846][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.932794][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.939698][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.979369][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.992937][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.007322][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.029266][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.040338][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.052983][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.072882][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.097087][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.115716][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.135336][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.148941][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.166326][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.182916][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.205669][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.222676][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.246962][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.264924][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.271723][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.310702][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.330958][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.359441][ T8189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.406196][ T8212] binder: Unknown parameter 'dont_hash' [ 194.659062][ T12] Bluetooth: hci0: Frame reassembly failed (-90) [ 194.672579][ T8220] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.693187][ T8220] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.703595][ T8220] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.975479][ T8241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 194.975515][ T8241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 195.339487][ T8256] rust_binder: Error while translating object. [ 195.372858][ T8256] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 195.403748][ T8256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:383 [ 195.447847][ T8262] binder: Bad value for 'stats' [ 195.598396][ T8266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 195.689650][ T8272] binfmt_misc: register: failed to install interpreter file ./file0 [ 195.766168][ T8270] binder: Unknown parameter '' [ 195.780669][ T8273] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 195.847679][ T8278] input: syz1 as /devices/virtual/input/input122 [ 195.946372][ T8278] rust_binder: Error while translating object. [ 195.946419][ T8278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 195.982525][ T8278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 196.115936][ T8290] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 196.289745][ T8304] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 196.303792][ T8304] pim6reg0: linktype set to 769 [ 196.722519][ T376] Bluetooth: hci0: command 0x1003 tx timeout [ 196.728648][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.877696][ T8334] input: syz0 as /devices/virtual/input/input123 [ 196.948231][ T36] kauditd_printk_skb: 925 callbacks suppressed [ 196.948251][ T36] audit: type=1400 audit(1750327364.450:43998): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=536 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.036698][ T36] audit: type=1400 audit(1750327364.450:43999): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=536 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.101450][ T8342] rust_binder: Error in use_page_slow: ESRCH [ 197.101469][ T8342] rust_binder: use_range failure ESRCH [ 197.127946][ T36] audit: type=1400 audit(1750327364.450:44000): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=536 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.165314][ T8348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.174254][ T8342] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 197.174287][ T8342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.182137][ T8342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1185 [ 197.184245][ T8350] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.194796][ T8348] audit: audit_lost=289 audit_rate_limit=0 audit_backlog_limit=64 [ 197.242311][ T36] audit: type=1400 audit(1750327364.450:44001): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=536 ioctlcmd=0x4525 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 197.253341][ T8350] audit: audit_lost=290 audit_rate_limit=0 audit_backlog_limit=64 [ 197.268830][ T8351] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.289032][ T3345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.323431][ T8348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:112 [ 197.705127][ T8363] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 197.856457][ T8365] input: syz0 as /devices/virtual/input/input124 [ 197.971018][ T8377] random: crng reseeded on system resumption [ 198.073523][ T8382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 198.073560][ T8382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1197 [ 198.242229][ T8383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:244 [ 198.498515][ T8403] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 198.583515][ T8411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.583898][ T8415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.632204][ T8414] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 198.703468][ T8411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1210 [ 198.720255][ T8417] rust_binder: Write failure EINVAL in pid:248 [ 199.202425][ T8439] input: syz0 as /devices/virtual/input/input128 [ 199.222551][ T8439] input: failed to attach handler leds to device input128, error: -6 [ 199.527660][ T8449] binder: Binderfs stats mode cannot be changed during a remount [ 199.565578][ T8456] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 199.590883][ T8456] rust_binder: Write failure EINVAL in pid:144 [ 199.693812][ T8466] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 199.759869][ T8471] binder: Bad value for 'defcontext' [ 199.908213][ T8478] tap1: tun_chr_ioctl cmd 1074025678 [ 199.925004][ T8478] tap1: group set to 0 [ 199.992964][ T8474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 200.028921][ T8483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261 [ 200.320793][ T8498] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION duplicate cookie [ 200.347911][ T8498] rust_binder: Write failure EINVAL in pid:453 [ 200.367170][ T8500] binder: Bad value for 'defcontext' [ 200.517937][ T8506] rust_binder: Write failure EINVAL in pid:1225 [ 200.674514][ T8518] rust_binder: Error while translating object. [ 200.699407][ T8518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 200.719625][ T8518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1228 [ 200.731089][ T8516] SELinux: security_context_str_to_sid (n) failed with errno=-22 [ 200.848566][ T8523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 200.916275][ T8531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457 [ 200.992974][ T8537] rust_binder: Error while translating object. [ 201.032731][ T8537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.053382][ T8537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 201.081903][ T8540] binder: Bad value for 'stats' [ 201.086007][ T8539] SELinux: policydb magic number 0x30303005 does not match expected magic number 0xf97cff8c [ 201.119374][ T8539] SELinux: failed to load policy [ 201.295576][ T8547] binder: Bad value for 'stats' [ 201.320690][ T8550] binder: Bad value for 'stats' [ 201.353622][ T8543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.403728][ T8543] rust_binder: Error while translating object. [ 201.403758][ T8543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 201.410066][ T8543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 201.750752][ T8565] binder: Bad value for 'stats' [ 201.824520][ T8565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.824557][ T8565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 201.968542][ T36] kauditd_printk_skb: 1080 callbacks suppressed [ 201.968564][ T36] audit: type=1400 audit(1750327369.470:45043): avc: denied { read write } for pid=7295 comm="syz-executor" name="loop0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.043621][ T36] audit: type=1400 audit(1750327369.470:45044): avc: denied { read write open } for pid=7295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.071630][ T36] audit: type=1400 audit(1750327369.470:45045): avc: denied { ioctl } for pid=7295 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=508 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 202.180252][ T36] audit: type=1400 audit(1750327369.470:45046): avc: denied { execmem } for pid=8571 comm="syz.3.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 202.248132][ T36] audit: type=1400 audit(1750327369.470:45047): avc: denied { execute } for pid=8571 comm="syz.3.2492" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 202.313993][ T8591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.332528][ T36] audit: type=1400 audit(1750327369.490:45048): avc: denied { read write } for pid=8571 comm="syz.3.2492" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.363467][ T8591] audit: audit_lost=304 audit_rate_limit=0 audit_backlog_limit=64 [ 202.373934][ T8594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.392421][ T8591] audit: backlog limit exceeded [ 202.725436][ T8639] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 202.725474][ T8639] rust_binder: Error in use_page_slow: EBUSY [ 202.750628][ T8639] rust_binder: use_range failure EBUSY [ 202.756926][ T8639] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 202.762502][ T8639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 202.779503][ T8639] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 202.811825][ T8639] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:186 [ 203.193391][ T13] bridge_slave_1: left allmulticast mode [ 203.230754][ T13] bridge_slave_1: left promiscuous mode [ 203.242644][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.266593][ T13] bridge_slave_0: left allmulticast mode [ 203.277431][ T13] bridge_slave_0: left promiscuous mode [ 203.292580][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.396295][ T8729] rust_binder: Read failure Err(EAGAIN) in pid:299 [ 203.396385][ T8727] rust_binder: Read failure Err(EAGAIN) in pid:299 [ 203.418319][ T8728] rust_binder: Read failure Err(EAGAIN) in pid:474 [ 203.525289][ T13] veth1_macvtap: left promiscuous mode [ 203.590152][ T13] veth0_vlan: left promiscuous mode [ 203.954142][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.961262][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.975179][ T8724] bridge_slave_0: entered allmulticast mode [ 203.981678][ T8724] bridge_slave_0: entered promiscuous mode [ 204.010777][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.018046][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.025387][ T8724] bridge_slave_1: entered allmulticast mode [ 204.032066][ T8724] bridge_slave_1: entered promiscuous mode [ 204.144933][ T8757] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 204.216993][ T8759] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 204.392637][ T8766] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.493953][ T8769] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 200, size: 75) [ 204.509224][ T8769] rust_binder: Error while translating object. [ 204.538644][ T8769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.551123][ T8769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 204.653121][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.669482][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.684772][ T8780] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.700569][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.714139][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.904301][ T8724] veth0_vlan: entered promiscuous mode [ 204.995047][ T8724] veth1_macvtap: entered promiscuous mode [ 205.381615][ T8806] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 205.391258][ T8806] rust_binder: Write failure EINVAL in pid:221 [ 205.564616][ T8812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.571816][ T8812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 205.583724][ T8812] rust_binder: Write failure EINVAL in pid:9 [ 205.609182][ T8814] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 205.934616][ T8831] binder: Unknown parameter '' [ 206.189039][ T8836] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 206.815626][ T8872] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 206.834038][ T8873] binder: Bad value for 'defcontext' [ 206.868973][ T8869] rust_binder: Write failure EINVAL in pid:231 [ 206.870283][ T8868] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 206.877973][ T8868] rust_binder: Error in use_page_slow: EBUSY [ 206.902583][ T8868] rust_binder: use_range failure EBUSY [ 206.908630][ T8868] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 206.942512][ T8868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 206.964290][ T8868] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 206.976075][ T36] kauditd_printk_skb: 978 callbacks suppressed [ 206.976094][ T36] audit: type=1400 audit(1750327374.480:46025): avc: denied { read write } for pid=8877 comm="syz.3.2560" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.022558][ T8868] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:231 [ 207.056386][ T36] audit: type=1400 audit(1750327374.480:46026): avc: denied { read write open } for pid=8877 comm="syz.3.2560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.094594][ T36] audit: type=1400 audit(1750327374.540:46027): avc: denied { map } for pid=8877 comm="syz.3.2560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.118687][ T36] audit: type=1400 audit(1750327374.540:46028): avc: denied { execmem } for pid=8877 comm="syz.3.2560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.229447][ T36] audit: type=1400 audit(1750327374.540:46029): avc: denied { read execute } for pid=8877 comm="syz.3.2560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.274490][ T36] audit: type=1400 audit(1750327374.540:46030): avc: denied { map } for pid=8877 comm="syz.3.2560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.300236][ T36] audit: type=1400 audit(1750327374.540:46031): avc: denied { read } for pid=8877 comm="syz.3.2560" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.334964][ T8894] rust_binder: Error while translating object. [ 207.335012][ T8894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.381345][ T36] audit: type=1400 audit(1750327374.540:46032): avc: denied { write } for pid=8882 comm="syz.0.2561" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.392558][ T8894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:237 [ 207.427231][ T8901] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 207.460277][ T36] audit: type=1400 audit(1750327374.540:46033): avc: denied { write open } for pid=8882 comm="syz.0.2561" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.485167][ T8903] input: syz1 as /devices/virtual/input/input131 [ 207.497132][ T94] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.544987][ T8900] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 207.858775][ T8917] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 207.974772][ T8915] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 207.974772][ T8915] attempt to subtract with overflow [ 208.100222][ T8915] ------------[ cut here ]------------ [ 208.105923][ T8915] kernel BUG at rust/helpers/bug.c:7! [ 208.167422][ T8915] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 208.174425][ T8915] CPU: 1 UID: 0 PID: 8915 Comm: syz.3.2568 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 208.188252][ T8915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.197774][ T8934] rust_binder: Error while translating object. [ 208.198415][ T8915] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 208.198444][ T8934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 208.198466][ T8934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:529 [ 208.204610][ T8915] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c1 de 02 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8b 1a 4b a3 90 90 90 90 90 90 90 90 90 [ 208.204635][ T8915] RSP: 0018:ffffc9000371dab0 EFLAGS: 00010246 [ 208.204669][ T8915] RAX: 0000000000000061 RBX: 1ffff920006e3b58 RCX: 402b63e2da426b00 [ 208.211894][ T8936] binder: Unknown parameter ' -0"syztem_u' [ 208.219232][ T8915] RDX: ffffc900066a5000 RSI: 00000000000050c5 RDI: 00000000000050c6 [ 208.219260][ T8915] RBP: ffffc9000371dab0 R08: ffffc9000371d7a7 R09: 1ffff920006e3af4 [ 208.219277][ T8915] R10: dffffc0000000000 R11: fffff520006e3af5 R12: 0000000000000000 [ 208.292977][ T8915] R13: dffffc0000000000 R14: ffffc9000371dae0 R15: ffffc9000371db10 [ 208.301060][ T8915] FS: 00007f85f13d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 208.310266][ T8915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.316869][ T8915] CR2: 0000001b3381fffc CR3: 0000000115cfa000 CR4: 00000000003526b0 [ 208.324880][ T8915] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.332945][ T8915] DR3: 0000000000000008 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.341160][ T8915] Call Trace: [ 208.344436][ T8915] [ 208.347370][ T8915] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 208.354928][ T8915] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 208.362999][ T8915] ? _RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x401/0x810 [ 208.373345][ T8915] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 208.386911][ T8915] ? __cfi__RNvMs0_NtCshgDM7dBCdno_11rust_binder4nodeNtB5_4Node22update_refcount_locked+0x10/0x10 [ 208.397552][ T8915] ? __kasan_check_write+0x18/0x20 [ 208.402690][ T8915] ? _raw_spin_lock+0x8c/0x120 [ 208.407471][ T8915] ? __cfi__raw_spin_lock+0x10/0x10 [ 208.412673][ T8915] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 208.419885][ T8915] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 208.427785][ T8915] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 208.437787][ T8915] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 208.448497][ T8915] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 208.458418][ T8915] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 208.469102][ T8915] ? __kasan_check_write+0x18/0x20 [ 208.474321][ T8915] ? _raw_spin_lock+0x8c/0x120 [ 208.479130][ T8915] ? __cfi__raw_spin_lock+0x10/0x10 [ 208.484418][ T8915] ? __kasan_check_write+0x18/0x20 [ 208.489535][ T8915] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x27cf/0x96a0 [ 208.499111][ T8915] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 208.509026][ T8915] ? unwind_next_frame+0x3c2/0x750 [ 208.514138][ T8915] ? vfs_open+0x86/0x230 [ 208.518379][ T8915] ? vfs_open+0x86/0x230 [ 208.522616][ T8915] ? __kernel_text_address+0x11/0x40 [ 208.527992][ T8915] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 208.534161][ T8915] ? arch_stack_walk+0x12a/0x170 [ 208.539131][ T8915] ? is_bpf_text_address+0x17b/0x1a0 [ 208.544454][ T8915] ? is_bpf_text_address+0x17b/0x1a0 [ 208.549786][ T8915] ? kernel_text_address+0xa9/0xe0 [ 208.555011][ T8915] ? __kernel_text_address+0x11/0x40 [ 208.560311][ T8915] ? unwind_get_return_address+0x51/0x90 [ 208.566120][ T8915] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 208.572294][ T8915] ? arch_stack_walk+0x10b/0x170 [ 208.577239][ T8915] ? is_bpf_text_address+0x17b/0x1a0 [ 208.582570][ T8915] ? kernel_text_address+0xa9/0xe0 [ 208.587812][ T8915] ? unwind_get_return_address+0x51/0x90 [ 208.593469][ T8915] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 208.599814][ T8915] ? arch_stack_walk+0x10b/0x170 [ 208.605019][ T8915] ? stack_depot_save_flags+0x38/0x800 [ 208.610483][ T8915] ? kasan_save_alloc_info+0x40/0x50 [ 208.615783][ T8915] ? kasan_save_track+0x4f/0x80 [ 208.620667][ T8915] ? kasan_save_track+0x3e/0x80 [ 208.625655][ T8915] ? kasan_save_alloc_info+0x40/0x50 [ 208.631027][ T8915] ? __kasan_kmalloc+0x96/0xb0 [ 208.635890][ T8915] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 208.642480][ T8915] ? krealloc_noprof+0x8d/0x130 [ 208.647351][ T8915] ? rust_helper_krealloc+0x33/0xd0 [ 208.652638][ T8915] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 208.662191][ T8915] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 208.672875][ T8915] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 208.682161][ T8915] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 208.690839][ T8915] ? __se_sys_ioctl+0x132/0x1b0 [ 208.695709][ T8915] ? __x64_sys_ioctl+0x7f/0xa0 [ 208.700478][ T8915] ? do_syscall_64+0x58/0xf0 [ 208.705158][ T8915] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.711231][ T8915] ? __kasan_kmalloc+0x96/0xb0 [ 208.716000][ T8915] ? kasan_save_alloc_info+0x40/0x50 [ 208.721319][ T8915] ? __kasan_kmalloc+0x96/0xb0 [ 208.726087][ T8915] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 208.732685][ T8915] ? __kasan_check_write+0x18/0x20 [ 208.737798][ T8915] ? _raw_spin_lock+0x8c/0x120 [ 208.742566][ T8915] ? __cfi__raw_spin_lock+0x10/0x10 [ 208.747765][ T8915] ? __asan_memset+0x39/0x50 [ 208.752351][ T8915] ? _raw_spin_unlock+0x45/0x60 [ 208.757220][ T8915] ? rust_helper_spin_unlock+0x19/0x30 [ 208.762705][ T8915] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 208.773228][ T8915] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 208.784201][ T8915] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 208.790235][ T8915] ? common_lsm_audit+0x148c/0x1860 [ 208.795445][ T8915] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 208.801430][ T8915] ? slow_avc_audit+0x18d/0x1f0 [ 208.806277][ T8915] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 208.815477][ T8915] ? avc_denied+0x112/0x180 [ 208.819985][ T8915] ? avc_has_extended_perms+0x895/0xdd0 [ 208.825530][ T8915] ? avc_has_extended_perms+0x91a/0xdd0 [ 208.831078][ T8915] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 208.840623][ T8915] ? do_vfs_ioctl+0xeda/0x1e30 [ 208.845401][ T8915] ? preempt_schedule_common+0x2d/0x60 [ 208.850874][ T8915] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 208.856603][ T8915] ? __cfi_preempt_schedule+0x10/0x10 [ 208.861984][ T8915] ? __cfi_check_preempt_wakeup_fair+0x10/0x10 [ 208.868140][ T8915] ? preempt_schedule_thunk+0x1a/0x40 [ 208.873696][ T8915] ? try_to_wake_up+0xe17/0x1aa0 [ 208.878684][ T8915] ? ioctl_has_perm+0x384/0x4d0 [ 208.883741][ T8915] ? has_cap_mac_admin+0xd0/0xd0 [ 208.888786][ T8915] ? futex_wake+0x63a/0x900 [ 208.893290][ T8915] ? __cfi_futex_wake+0x10/0x10 [ 208.898149][ T8915] ? selinux_file_ioctl+0x6e0/0x1360 [ 208.903447][ T8915] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 208.908998][ T8915] ? do_futex+0x356/0x500 [ 208.913334][ T8915] ? __cfi_do_futex+0x10/0x10 [ 208.918015][ T8915] ? __fget_files+0x2c5/0x340 [ 208.922693][ T8915] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 208.931198][ T8915] ? __se_sys_ioctl+0x114/0x1b0 [ 208.936052][ T8915] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 208.945172][ T8915] __se_sys_ioctl+0x132/0x1b0 [ 208.950060][ T8915] __x64_sys_ioctl+0x7f/0xa0 [ 208.954673][ T8915] x64_sys_call+0x1878/0x2ee0 [ 208.959366][ T8915] do_syscall_64+0x58/0xf0 [ 208.963876][ T8915] ? clear_bhb_loop+0x35/0x90 [ 208.968556][ T8915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 208.974455][ T8915] RIP: 0033:0x7f85f2d8e929 [ 208.978871][ T8915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.998652][ T8915] RSP: 002b:00007f85f13d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.007080][ T8915] RAX: ffffffffffffffda RBX: 00007f85f2fb6160 RCX: 00007f85f2d8e929 [ 209.015224][ T8915] RDX: 0000200000000140 RSI: 00000000c0306201 RDI: 0000000000000003 [ 209.023278][ T8915] RBP: 00007f85f2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.031267][ T8915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.039328][ T8915] R13: 0000000000000000 R14: 00007f85f2fb6160 R15: 00007ffc5e4043c8 [ 209.047479][ T8915] [ 209.050502][ T8915] Modules linked in: [ 209.055437][ T8915] ---[ end trace 0000000000000000 ]--- [ 209.063138][ T8915] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 209.068482][ T8915] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 c1 de 02 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 8b 1a 4b a3 90 90 90 90 90 90 90 90 90 [ 209.094227][ T8915] RSP: 0018:ffffc9000371dab0 EFLAGS: 00010246 [ 209.103575][ T8915] RAX: 0000000000000061 RBX: 1ffff920006e3b58 RCX: 402b63e2da426b00 [ 209.114260][ T8915] RDX: ffffc900066a5000 RSI: 00000000000050c5 RDI: 00000000000050c6 [ 209.126837][ T8915] RBP: ffffc9000371dab0 R08: ffffc9000371d7a7 R09: 1ffff920006e3af4 [ 209.140642][ T8915] R10: dffffc0000000000 R11: fffff520006e3af5 R12: 0000000000000000 [ 209.153723][ T8915] R13: dffffc0000000000 R14: ffffc9000371dae0 R15: ffffc9000371db10 [ 209.167233][ T8915] FS: 00007f85f13d66c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 209.234118][ T8915] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.240881][ T8915] CR2: 00007f6c63d81178 CR3: 0000000115cfa000 CR4: 00000000003526b0 [ 209.264316][ T8915] DR0: 0000000000001bba DR1: 0000000000000000 DR2: 0000000000000000 [ 209.292537][ T8915] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 209.324950][ T8915] Kernel panic - not syncing: Fatal exception [ 209.331409][ T8915] Kernel Offset: disabled [ 209.335728][ T8915] Rebooting in 86400 seconds..