last executing test programs: 2.396105265s ago: executing program 3 (id=216): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x40b81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000006c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r4, 0x4068aea3, &(0x7f0000000180)={0xcc, 0x0, 0x8001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000001000)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYRESOCT=r4]) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3e, 0xfeb, 0x8cc, 0x5, 0xe, "3d980d311bf76259765fafda57afca538770fd"}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) read$FUSE(r10, &(0x7f0000002340)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x400}], 0x0, 0x1000000, 0x0}) read$FUSE(r10, &(0x7f0000004380)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) 1.978763401s ago: executing program 3 (id=229): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x2c, 0x0, 0x1}]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0) 1.864987532s ago: executing program 2 (id=234): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0xbc, 0x8, [0x2, 0x6, 0xc, 0xc], &(0x7f0000000040)=[0x0]}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x129000, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) close_range(r2, r2, 0x39b8dc717f670f21) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000001c0)={{r0}, r4, 0x0, @unused=[0xddb8, 0x3, 0x7fff, 0x1], @subvolid=0x8}) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000011c0), 0x2002, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000001200)=0x1) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000001240)={0x3, 0x40}) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000001280)={'\x00', 0x2, 0x2, 0x5}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x202200, 0x0) openat$cgroup_ro(r6, &(0x7f0000001340)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001380), 0x100, 0x0) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f00000013c0)=0xffffffff) r8 = syz_clone(0x80, &(0x7f00000015c0)="c002d0a4659daa0b30aea5ad5f65c315e6202eb39da0f819bdb4abf97e33c251a7b110f0ac98d35e95d455cf99c045f13b2e9412d8c35c3012eaf068c57e309788bc4de5d88d06f64f40959ea5ca8b0f3d9f8ee867d83529c1132a4b0b2036ad527678a8d7530e206a8997cdbb", 0x6d, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)="526d2af31177a411e368bcd752bc0d9b") ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001700)=0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000001740)=0x0) syz_clone3(&(0x7f00000017c0)={0x44820000, &(0x7f0000001400)=0xffffffffffffffff, &(0x7f0000001440), &(0x7f0000001480), {0x1a}, &(0x7f00000014c0)=""/160, 0xa0, &(0x7f0000001580)=""/14, &(0x7f0000001780)=[r8, 0xffffffffffffffff, r9, r10], 0x4, {r5}}, 0x58) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0xc5bcc000) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) read$FUSE(r12, &(0x7f0000001880)={0x2020}, 0x2020) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f00000038c0)={0x0, r11, 0x6, 0x5, 0x3, 0x3}) openat$cgroup_type(r1, &(0x7f0000003900), 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xf01) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000003940)) ioctl$EXT4_IOC_MIGRATE(r12, 0x6609) 1.814845953s ago: executing program 3 (id=235): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) read(r0, &(0x7f00000002c0)=""/222, 0xde) write$ppp(r0, &(0x7f00000003c0)="ffbcca37f26086c7957013c74c92e91a639b872255f80ada60cd36910ff7397d761502d732b89351a106284ab5e8e211e6f87f457e545b7cdef754f09b9d086f5e0ad87b8911bbaceb7a276f8ab81d3844b819dbd9343d6f6488fb401082e1", 0x5f) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000001c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x44}, &(0x7f0000000240)=""/32, 0x20, &(0x7f0000000100)=""/97, &(0x7f0000000180)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x1, 0x10, r2, 0x6000) 1.814133083s ago: executing program 3 (id=237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x9, 0x9, 0x200, 0x6, 0x13c1, 0xff000, 0x37, 0x1e6, 0xbc5b, 0xffffffffffff8000, 0x5d64, 0x3, 0x5, 0x3, 0x8000000000000000, 0x8], 0x0, 0x30200}) read$FUSE(r1, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000080), &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000240), 0x2000040, &(0x7f00000023c0)={[{@max={'max', 0x3d, 0x8}}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@stats}], [{@euid_eq={'euid', 0x3d, r2}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '][$#:'}}, {@obj_type={'obj_type', 0x3d, './binderfs/binder1\x00'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffec4, 0x0, &(0x7f0000000040), 0xfffffef6, 0x0, &(0x7f0000000040)="d98e292a9512cfe04f4364dd346860448af0d5d6683c8dbca3de5c00bdacbea69e0e4980e1f413242d"}) 1.740433184s ago: executing program 3 (id=240): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x2000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000880), 0x12) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f00000001c0)) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) openat$incfs(r5, &(0x7f0000000080)='.pending_reads\x00', 0x302, 0xa0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x100000000) 1.682107825s ago: executing program 2 (id=242): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f00000013c0), 0xfffffdef) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) read$FUSE(r4, &(0x7f0000000dc0)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x80a0000, 0x0, 0xffffffff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0xff}, {}, {}, {0x69}, {0x0, 0x0, 0x40}, {0x0, 0xff}, {}, {}, {0x0, 0x0, 0x3a}, {0x0, 0x7}, {0x80, 0x0, 0x81}, {}, {}, {0x0, 0x0, 0xd4}, {}, {0x0, 0xff}]}}) ioctl$KVM_IRQ_LINE(r5, 0x4008ae61, &(0x7f0000000000)={0x0, 0x5}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0xa0, 0x0, &(0x7f0000000680)=[@request_death={0x400c630e, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/181, 0xb5, 0x1, 0xc}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/129, 0x81, 0x0, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000000340), 0x0, 0x0, 0x7}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}], 0x35, 0x0, &(0x7f0000000740)="1d279b2447591b7fc0636517cca9d7f7a4ea35681606db459c7186af6e29080e8c477489b162dd69dbec76273e7a4224b4bb451a90"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 1.572088827s ago: executing program 1 (id=244): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) read(r2, 0x0, 0x0) (async, rerun: 32) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00') (rerun: 32) read(r2, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.522720088s ago: executing program 3 (id=245): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x30, r0, 0x7668f000) 1.34704993s ago: executing program 1 (id=247): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r6, &(0x7f0000000040)=""/9, 0x9) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000080)={0x15e, 0x9, &(0x7f0000000380)}) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) 1.262457562s ago: executing program 2 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0x9}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000140)) 1.072347475s ago: executing program 1 (id=251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b80)={'\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x9) ioctl$TUNATTACHFILTER(r1, 0x400454cc, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) (rerun: 32) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'vxcan1\x00'}) 1.004338645s ago: executing program 2 (id=252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r4, 0x80000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) prctl$PR_SET_THP_DISABLE(0x41, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x8}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x3}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r10}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 907.151137ms ago: executing program 2 (id=254): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '/^', 0x3a, ']$@K-^{', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x4f]}, 0x33) write$cgroup_int(r1, &(0x7f0000000100)=0x1000, 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0xb}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000200)={0x87028ab0101730ed, 0x0, 0x0, &(0x7f00000004c0)=""/213, &(0x7f0000000440)=""/88, 0xdddd0000}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x290200}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000640)={[0x80000000000202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000000)={0x4, 0x8080000, 0x5, 0xf7, 0xa}) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r10, 0xae71, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r10, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x5e}) write$cgroup_int(r12, &(0x7f0000000040)=0x3, 0x12) 630.800341ms ago: executing program 0 (id=255): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80200, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80200, 0x100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) (async) 629.954551ms ago: executing program 2 (id=256): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x3, 0x0, 0x80, {0x5000, 0x1bbaa003f}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca520dd948ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d444053afce6d1e939e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f444379182f5356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bbff7f00007c3d5178e2a10765c6b2ae80753f403125a9201ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d6a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94e2c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd2953f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079b160dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cdac57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815e67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b0ffffffffc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93e5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b07900"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) write(0xffffffffffffffff, &(0x7f0000000000)='\n\x00\x00\x00', 0x4) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0xc008aec1, &(0x7f0000000000)) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x3, '\x00', 0xb9}, {0xff, 0xb}, {}, {0x0, 0x2, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x4, '\x00', 0x1}, {0xb, 0x0, 0x0, '\x00', 0x8}, {0x40, 0x99, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3, 0x0, 0xfc}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x62, 0x4, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0x6, 0x3, '\x00', 0x7}]}}) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc004ae0a, &(0x7f0000000080)=""/1) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000300)={0x1100, 0x0, 0x5, 0x400002a3d}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r10, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) 607.236641ms ago: executing program 0 (id=257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0xffffc000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x14, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 468.541603ms ago: executing program 0 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455cb, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 370.802234ms ago: executing program 0 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340)) 358.708615ms ago: executing program 0 (id=260): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x34, 0x0, &(0x7f0000000100)=[@increfs, @clear_death, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, &(0x7f0000000280)}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r3) write$FUSE_BMAP(r3, 0x0, 0x0) read$FUSE(r3, &(0x7f0000001bc0)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x1000, 0x12) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0xc0505405, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x1, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) write$cgroup_int(r2, &(0x7f0000000140)=0x7f, 0x12) 248.225367ms ago: executing program 0 (id=261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000240)=[@dead_binder_done, @release={0x40046306, 0x1}, @free_buffer], 0xff, 0x0, &(0x7f0000000400)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100e}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x18, 0x26}}, 0x400}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 70.808909ms ago: executing program 1 (id=262): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x373f55a073db5216, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 66.096639ms ago: executing program 1 (id=263): mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) close(r0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000004c0)={0xc, {0xce, "af175bd993c19d575feb886bcff17950c2d03b1c68f6f051877e8937d5f2c9983a1f1f985825bf0389d73b157328b2aa4a9cdb912e8f8c3e30e4961a0c89d6e29c5d3f47555dc54e9772398eb30d0050b68db37ba9704ce942de3f161cca90447862bb6906e0fe13553de5f5c34adefa6863fd88d9983b864e2937dd3dd4e166cdd88dddad140a8fff2cda7234702a1382a4957538398d12cd35b9f8545c976e6834038d12d027578af1317ffa35c71a5a2abb5ffb255780a49f6793b50bc23a33f7624c514f32297bed7118dc6b"}}, 0xd4) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0) write$UHID_INPUT2(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000140)={0x1, 0x400}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x115001, 0x0) ioctl$TIOCCBRK(r4, 0x5428) 0s ago: executing program 1 (id=264): prctl$PR_SET_VMA(0x42, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 0s ago: executing program 1 (id=265): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r1, 0x2546c000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffd) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x1003, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000080)={{0x0, 0xfffffffb}, {0x7, 0x2800}, 0xf, 0x1}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40603d10, &(0x7f0000000040)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000440)="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", 0x0, 0xbb2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 20.076117][ T36] audit: type=1400 audit(1750372970.650:64): avc: denied { mounton } for pid=257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.077527][ T257] cgroup: Unknown subsys name 'net' [ 20.079645][ T36] audit: type=1400 audit(1750372970.650:65): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.083466][ T36] audit: type=1400 audit(1750372970.650:66): avc: denied { unmount } for pid=257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.086236][ T257] cgroup: Unknown subsys name 'devices' [ 20.247912][ T257] cgroup: Unknown subsys name 'hugetlb' [ 20.253528][ T257] cgroup: Unknown subsys name 'rlimit' [ 20.448684][ T36] audit: type=1400 audit(1750372971.020:67): avc: denied { setattr } for pid=257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.472073][ T36] audit: type=1400 audit(1750372971.020:68): avc: denied { mounton } for pid=257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.480922][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.497157][ T36] audit: type=1400 audit(1750372971.020:69): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.526872][ T257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.528673][ T36] audit: type=1400 audit(1750372971.070:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.562562][ T36] audit: type=1400 audit(1750372971.070:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.588449][ T36] audit: type=1400 audit(1750372971.090:72): avc: denied { read } for pid=257 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.615279][ T36] audit: type=1400 audit(1750372971.090:73): avc: denied { open } for pid=257 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.382085][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.389200][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.396395][ T288] bridge_slave_0: entered allmulticast mode [ 21.402635][ T288] bridge_slave_0: entered promiscuous mode [ 21.410456][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.417539][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.424609][ T288] bridge_slave_1: entered allmulticast mode [ 21.431018][ T288] bridge_slave_1: entered promiscuous mode [ 21.484222][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.491348][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.498474][ T290] bridge_slave_0: entered allmulticast mode [ 21.504719][ T290] bridge_slave_0: entered promiscuous mode [ 21.511206][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.518295][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.525347][ T290] bridge_slave_1: entered allmulticast mode [ 21.531767][ T290] bridge_slave_1: entered promiscuous mode [ 21.557588][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.564737][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.571844][ T289] bridge_slave_0: entered allmulticast mode [ 21.578128][ T289] bridge_slave_0: entered promiscuous mode [ 21.592826][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.599992][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.607112][ T289] bridge_slave_1: entered allmulticast mode [ 21.613357][ T289] bridge_slave_1: entered promiscuous mode [ 21.660924][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.668247][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.675312][ T291] bridge_slave_0: entered allmulticast mode [ 21.681719][ T291] bridge_slave_0: entered promiscuous mode [ 21.695059][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.702390][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.709538][ T291] bridge_slave_1: entered allmulticast mode [ 21.715804][ T291] bridge_slave_1: entered promiscuous mode [ 21.845049][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.852133][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.859455][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.866536][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.876937][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.883981][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.891298][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.898370][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.908223][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.915273][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.922567][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.929621][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.946271][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.953333][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.960655][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.967716][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.019457][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.027354][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.035064][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.042344][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.050532][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.057815][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.065060][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.072384][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.081967][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.089033][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.101526][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.108629][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.127647][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.134687][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.142277][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.149330][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.163604][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.170678][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.188712][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.195770][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.207741][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.214786][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.223592][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.230656][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.249224][ T290] veth0_vlan: entered promiscuous mode [ 22.271449][ T291] veth0_vlan: entered promiscuous mode [ 22.283771][ T290] veth1_macvtap: entered promiscuous mode [ 22.294940][ T289] veth0_vlan: entered promiscuous mode [ 22.311091][ T289] veth1_macvtap: entered promiscuous mode [ 22.343916][ T291] veth1_macvtap: entered promiscuous mode [ 22.361854][ T288] veth0_vlan: entered promiscuous mode [ 22.377890][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.412515][ T288] veth1_macvtap: entered promiscuous mode [ 22.451152][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.561748][ T325] binfmt_misc: register: failed to install interpreter file ./file0 [ 22.573887][ T316] kvm: Disabled LAPIC found during irq injection [ 22.977660][ T352] rust_binder: Write failure EFAULT in pid:17 [ 23.292142][ T364] rust_binder: Write failure EFAULT in pid:27 [ 24.110450][ T374] SELinux: failed to load policy [ 24.286996][ T378] input: syz0 as /devices/virtual/input/input6 [ 24.310090][ T385] input: syz1 as /devices/virtual/input/input8 [ 24.321984][ T385] rust_binder: Error while translating object. [ 24.322046][ T385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.330486][ T385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 24.343573][ T387] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.358158][ T390] binder: Bad value for 'stats' [ 24.603244][ T402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.626568][ T405] SELinux: security_context_str_to_sid (dev/kvm) failed with errno=-22 [ 24.759638][ T407] binder: Bad value for 'max' [ 24.777955][ T409] rust_binder: Write failure EINVAL in pid:38 [ 24.791043][ T411] rust_binder: Write failure EINVAL in pid:40 [ 24.802524][ T411] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 24.979872][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:48 [ 25.215057][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 25.215077][ T36] audit: type=1400 audit(1750372975.780:143): avc: denied { write } for pid=432 comm="syz.0.41" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 25.317240][ T36] audit: type=1400 audit(1750372975.890:144): avc: denied { view } for pid=432 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 25.376213][ T36] audit: type=1400 audit(1750372975.950:145): avc: denied { ioctl } for pid=442 comm="syz.3.44" path="uts:[4026532461]" dev="nsfs" ino=4026532461 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.627661][ T36] audit: type=1400 audit(1750372976.190:146): avc: denied { block_suspend } for pid=462 comm="syz.3.50" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 25.650350][ T463] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 25.650367][ T463] rust_binder: Error while translating object. [ 25.659863][ T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.666281][ T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 25.675781][ T36] audit: type=1400 audit(1750372976.220:147): avc: denied { transfer } for pid=462 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 25.717747][ T467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 25.734358][ T469] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 25.750719][ T469] rust_binder: Write failure EINVAL in pid:50 [ 25.829108][ T471] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 25.859015][ T36] audit: type=1326 audit(1750372976.430:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=472 comm="syz.2.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99f398e929 code=0x0 [ 25.904243][ T476] ======================================================= [ 25.904243][ T476] WARNING: The mand mount option has been deprecated and [ 25.904243][ T476] and is ignored by this kernel. Remove the mand [ 25.904243][ T476] option from the mount to silence this warning. [ 25.904243][ T476] ======================================================= [ 25.904858][ T36] audit: type=1400 audit(1750372976.470:149): avc: denied { remount } for pid=470 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.078643][ T36] audit: type=1400 audit(1750372976.650:150): avc: denied { read write } for pid=482 comm="syz.3.56" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.101889][ T36] audit: type=1400 audit(1750372976.650:151): avc: denied { open } for pid=482 comm="syz.3.56" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.125232][ T36] audit: type=1400 audit(1750372976.650:152): avc: denied { ioctl } for pid=482 comm="syz.3.56" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 26.294040][ T490] binder: Binderfs stats mode cannot be changed during a remount [ 26.302074][ T490] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 26.793903][ T512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 26.848644][ T516] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 26.857825][ T516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 26.866561][ T516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:57 [ 26.876588][ T515] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 26.910916][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 26.945901][ T520] binder: Unknown parameter 'dont_hash' [ 26.965027][ T522] rust_binder: Error while translating object. [ 26.965053][ T522] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.973501][ T522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 27.080940][ T536] rust_binder: Write failure EINVAL in pid:70 [ 27.186932][ T544] rust_binder: Error while translating object. [ 27.197332][ T544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 27.204339][ T544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:49 [ 27.397865][ T560] rust_binder: Error while translating object. [ 27.418775][ T560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.427240][ T560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 27.460731][ T557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.479992][ T557] rust_binder: Write failure EINVAL in pid:53 [ 27.511039][ T560] SELinux: policydb string length 1919247368 does not match expected length 8 [ 27.526941][ T560] SELinux: failed to load policy [ 27.715714][ T580] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.728642][ T580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 27.733301][ T578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 27.745481][ T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:64 [ 27.924119][ T593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 27.933809][ T593] rust_binder: Write failure EINVAL in pid:33 [ 28.081859][ T599] binder: Bad value for 'defcontext' [ 28.393519][ T612] kvm: kvm [611]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 28.560904][ T623] binder: Unknown parameter 'obj_user' [ 28.697057][ T635] KVM: debugfs: duplicate directory 635-6 [ 28.716319][ T638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.716418][ T639] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.957522][ T655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 28.971997][ T655] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.983878][ T666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.291644][ T693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 29.298246][ T693] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.307436][ T693] rust_binder: Read failure Err(EFAULT) in pid:124 [ 29.421879][ T704] binder: Bad value for 'max' [ 29.468542][ T707] rust_binder: Write failure EINVAL in pid:64 [ 29.487254][ T699] kvm: Disabled LAPIC found during irq injection [ 29.496422][ T714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.500868][ T714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:132 [ 29.561743][ T695] rust_binder: Read failure Err(EFAULT) in pid:95 [ 29.633498][ T721] rust_binder: Write failure EFAULT in pid:135 [ 29.633907][ T720] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.651127][ T722] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.673680][ T726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.683709][ T726] rust_binder: Error while translating object. [ 29.690404][ T726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.696673][ T726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 29.805180][ T731] kvm: kvm [730]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 29.918345][ T741] input: syz1 as /devices/virtual/input/input12 [ 29.940886][ T741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.948197][ T741] rust_binder: Error in use_page_slow: ESRCH [ 29.959362][ T741] rust_binder: use_range failure ESRCH [ 29.965496][ T741] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 29.971524][ T741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.979783][ T741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:105 [ 30.015557][ T747] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.027112][ T747] rust_binder: Error in use_page_slow: ESRCH [ 30.033560][ T747] rust_binder: use_range failure ESRCH [ 30.039668][ T747] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 30.046458][ T747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.054558][ T747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 30.081754][ T750] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.171498][ T751] rust_binder: Error in use_page_slow: ESRCH [ 30.178419][ T751] rust_binder: use_range failure ESRCH [ 30.190279][ T751] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 30.197689][ T751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 30.207518][ T751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:111 [ 30.245907][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 30.245924][ T36] audit: type=1400 audit(1750372980.820:233): avc: denied { write } for pid=756 comm="syz.1.137" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.284787][ T36] audit: type=1400 audit(1750372980.860:234): avc: denied { append } for pid=754 comm="syz.2.136" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 30.310816][ T761] Bluetooth: hci0: Frame reassembly failed (-90) [ 30.317504][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.358983][ T767] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 30.366604][ T767] rust_binder: Write failure EINVAL in pid:112 [ 30.634070][ T774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.640348][ T774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 30.686063][ T776] binder: Unknown parameter 'stats֜6Y1ecqzq\Imvj}w' [ 30.963625][ T782] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 30.963652][ T782] rust_binder: Error in use_page_slow: EBUSY [ 30.974147][ T782] rust_binder: use_range failure EBUSY [ 30.980201][ T782] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 30.986181][ T782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 30.993864][ T782] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 31.003371][ T782] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:149 [ 31.051888][ T789] rust_binder: Write failure EINVAL in pid:116 [ 31.096448][ T791] rust_binder: Error in use_page_slow: ESRCH [ 31.096472][ T791] rust_binder: use_range failure ESRCH [ 31.102579][ T792] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 31.108157][ T791] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 31.116194][ T792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.124276][ T792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:118 [ 31.133777][ T791] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.143036][ T791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:118 [ 31.228661][ T804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:121 [ 31.244639][ T804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 31.282970][ T811] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 31.300419][ T811] rust_binder: Write failure EINVAL in pid:118 [ 31.351085][ T819] input: syz0 as /devices/virtual/input/input13 [ 31.366320][ T36] audit: type=1400 audit(1750372981.940:235): avc: denied { block_suspend } for pid=818 comm="syz.2.156" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.423963][ T36] audit: type=1400 audit(1750372981.990:236): avc: denied { sys_module } for pid=813 comm="syz.3.154" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.456335][ T825] deleting an unspecified loop device is not supported. [ 31.463764][ T825] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 31.463786][ T825] rust_binder: Error while translating object. [ 31.465542][ T36] audit: type=1400 audit(1750372982.030:237): avc: denied { read } for pid=824 comm="syz.0.158" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.473091][ T825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.487119][ T36] audit: type=1400 audit(1750372982.030:238): avc: denied { open } for pid=824 comm="syz.0.158" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.502792][ T825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171 [ 31.516324][ T36] audit: type=1400 audit(1750372982.030:239): avc: denied { ioctl } for pid=824 comm="syz.0.158" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 31.720123][ T836] binder: Unknown parameter 'dont_appraise' [ 31.768167][ T846] input: syz1 as /devices/virtual/input/input14 [ 31.778984][ T842] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 31.779006][ T842] rust_binder: Error while translating object. [ 31.791428][ T846] SELinux: security_context_str_to_sid (k6ofr;) failed with errno=-22 [ 31.797904][ T842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.807173][ T842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 31.834209][ T849] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.834209][ T848] SELinux: security_context_str_to_sid () failed with errno=-22 [ 31.940254][ T852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.940431][ T854] rust_binder: Error while translating object. [ 31.947139][ T854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.957283][ T854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 31.967433][ T855] rust_binder: validate_parent_fixup: new_min_offset=43, sg_entry.length=0 [ 31.985438][ T855] rust_binder: Error while translating object. [ 31.985487][ T855] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.001127][ T855] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186 [ 32.046038][ T862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.046940][ T36] audit: type=1400 audit(1750372982.600:240): avc: denied { mounton } for pid=856 comm="syz.3.168" path="/39/binderfs2" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.071229][ T865] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 32.076567][ T36] audit: type=1400 audit(1750372982.600:241): avc: denied { mount } for pid=856 comm="syz.3.168" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.107581][ T36] audit: type=1400 audit(1750372982.600:242): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.138128][ T31] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/1 [ 32.147583][ T31] hid-generic 0000:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 32.166885][ T862] rust_binder: Error while translating object. [ 32.166933][ T862] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.173233][ T862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 32.267694][ T879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 32.325425][ T762] Bluetooth: hci0: command 0x1003 tx timeout [ 32.333208][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.347002][ T892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 32.371116][ T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204 [ 32.408317][ T893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:204 [ 32.443157][ T901] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 32.472594][ T901] rust_binder: Write failure EFAULT in pid:139 [ 32.529556][ T908] rust_binder: Got transaction with invalid offset. [ 32.535863][ T908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.542664][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 32.616939][ T918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.650016][ T918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.743640][ T930] rust_binder: Write failure EINVAL in pid:217 [ 32.765464][ T931] rust_binder: Write failure EINVAL in pid:217 [ 32.777206][ T931] rust_binder: Write failure EINVAL in pid:217 [ 32.795429][ T930] rust_binder: Write failure EINVAL in pid:217 [ 32.923401][ T934] rust_binder: Failed copying remainder into alloc: EFAULT [ 32.929782][ T934] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 32.937178][ T934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 32.947056][ T934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:223 [ 33.252900][ T946] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 33.273053][ T946] rust_binder: Error while translating object. [ 33.283676][ T946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.290063][ T946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 33.308426][ T946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 33.413316][ T962] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 33.413343][ T962] rust_binder: Error while translating object. [ 33.427367][ T962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.434848][ T962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 33.492979][ T964] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 33.622344][ T967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.714571][ T981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.737771][ T981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.744546][ T981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:104 [ 33.775930][ T986] kvm: kvm [985]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1 [ 33.837079][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 33.855576][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.947705][ T999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.948562][ T999] rust_binder: Error in use_page_slow: ESRCH [ 33.955203][ T999] rust_binder: use_range failure ESRCH [ 33.956744][ T994] fido_id[994]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.975709][ T999] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 33.980077][ T999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.000754][ T999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170 [ 34.019405][ T1000] rust_binder: Write failure EINVAL in pid:159 [ 34.057911][ T1004] rust_binder: Error while translating object. [ 34.064255][ T1004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 34.071070][ T1004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:241 [ 34.171939][ T1009] rust_binder: Write failure EFAULT in pid:174 [ 34.299933][ T1019] binder: Bad value for 'stats' [ 34.343319][ T1022] binder: Bad value for 'max' [ 34.452383][ T1030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 34.609366][ T1046] rust_binder: Write failure EINVAL in pid:253 [ 34.639349][ T1048] binder: Unknown parameter '' [ 34.722190][ T1058] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.732698][ T1060] rust_binder: Error in use_page_slow: ESRCH [ 34.743857][ T1059] rust_binder: Write failure EINVAL in pid:180 [ 34.757929][ T1060] rust_binder: use_range failure ESRCH [ 34.764920][ T1060] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 34.770994][ T1060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.785207][ T1060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:127 [ 34.863299][ T1070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.924131][ T1074] rust_binder: Write failure EINVAL in pid:184 [ 34.932573][ T1073] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 34.948870][ T1073] rust_binder: Write failure EINVAL in pid:259 [ 34.994376][ T1073] can0: slcan on ttyS3. [ 35.044713][ T1073] binder: Unknown parameter 'dex' [ 35.077459][ T1078] can0 (unregistered): slcan off ttyS3. [ 35.175621][ T1094] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 35.183232][ T1094] rust_binder: Write failure EINVAL in pid:263 [ 35.233635][ T1098] input: syz0 as /devices/virtual/input/input18 [ 35.265402][ T1098] input: failed to attach handler leds to device input18, error: -6 [ 35.346470][ T1098] rust_binder: Read failure Err(EAGAIN) in pid:137 [ 35.494870][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.514299][ T1128] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 35.514327][ T1128] rust_binder: Error while translating object. [ 35.521979][ T1126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 35.526836][ T1128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.545430][ T1125] tun0: owner set to 0 [ 35.552064][ T1128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 35.565984][ T1126] tun0: tun_chr_ioctl cmd 2147767506 [ 35.582433][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.588082][ T1125] tun0: owner set to 0 [ 35.592195][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.597823][ T1125] tun0: owner set to 0 [ 35.604487][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.610086][ T1125] tun0: owner set to 0 [ 35.614191][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.645691][ T1125] tun0: owner set to 0 [ 35.651092][ T1130] can0: slcan on ptm0. [ 35.658698][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.663722][ T1130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 35.665398][ T1125] tun0: owner set to 0 [ 35.681382][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.686753][ T1125] tun0: owner set to 0 [ 35.691038][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.696861][ T1125] tun0: owner set to 0 [ 35.701217][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.713378][ T1125] tun0: owner set to 0 [ 35.723354][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.745350][ T1125] tun0: owner set to 0 [ 35.749785][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.755173][ T1125] tun0: owner set to 0 [ 35.789655][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.794997][ T1125] tun0: owner set to 0 [ 35.800943][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.808680][ T1125] tun0: owner set to 0 [ 35.811422][ T1129] can0 (unregistered): slcan off ptm0. [ 35.815151][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.824348][ T1125] tun0: owner set to 0 [ 35.828965][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.834372][ T1125] tun0: owner set to 0 [ 35.840214][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.845767][ T1125] tun0: owner set to 0 [ 35.849905][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.855240][ T1125] tun0: owner set to 0 [ 35.902210][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.907812][ T1125] tun0: owner set to 0 [ 35.929141][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.934494][ T1125] tun0: owner set to 0 [ 35.957440][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.962775][ T1125] tun0: owner set to 0 [ 35.975540][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 35.981920][ T1125] tun0: owner set to 0 [ 35.992034][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.006725][ T1125] tun0: owner set to 0 [ 36.018892][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.032372][ T1148] kvm: Disabled LAPIC found during irq injection [ 36.038903][ T1125] tun0: owner set to 0 [ 36.045443][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.050780][ T1125] tun0: owner set to 0 [ 36.065443][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.076155][ T1125] tun0: owner set to 0 [ 36.085522][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.105445][ T1125] tun0: owner set to 0 [ 36.109644][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.128034][ T1125] tun0: owner set to 0 [ 36.135119][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.145469][ T1125] tun0: owner set to 0 [ 36.155644][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.165715][ T1125] tun0: owner set to 0 [ 36.184462][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.192793][ T1167] rust_binder: Write failure EINVAL in pid:283 [ 36.196000][ T1167] rust_binder: validate_parent_fixup: new_min_offset=59, sg_entry.length=0 [ 36.206700][ T1125] tun0: owner set to 0 [ 36.212392][ T1167] rust_binder: Error while translating object. [ 36.226039][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.231109][ T1167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.232720][ T1125] tun0: owner set to 0 [ 36.248284][ T1167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 36.268598][ T1125] tun0: tun_chr_ioctl cmd 1074025676 [ 36.315429][ T1125] tun0: owner set to 0 [ 36.388871][ T1181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.388954][ T1181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:286 [ 36.484734][ T1186] binder: Bad value for 'max' [ 36.500799][ T1186] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.501472][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 36.501489][ T36] audit: type=1400 audit(1750372987.070:275): avc: denied { setcheckreqprot } for pid=1185 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.576135][ T1190] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 36.576135][ T1190] attempt to add with overflow [ 36.593347][ T1190] ------------[ cut here ]------------ [ 36.598879][ T1190] kernel BUG at rust/helpers/bug.c:7! [ 36.605572][ T36] audit: type=1400 audit(1750372987.170:276): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 36.628721][ T1190] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 36.636345][ T1190] CPU: 1 UID: 0 PID: 1190 Comm: syz.1.265 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 36.646882][ T36] audit: type=1400 audit(1750372987.170:277): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.650209][ T1190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.650229][ T1190] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 36.650304][ T1190] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 33 e0 88 83 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 79 24 c1 0f 90 90 90 90 90 90 90 90 90 [ 36.650328][ T1190] RSP: 0018:ffffc9000f0cf3f0 EFLAGS: 00010246 [ 36.650356][ T1190] RAX: 000000000000008c RBX: 1ffff92001e19e80 RCX: e11803cdf5863800 [ 36.650375][ T1190] RDX: ffffc900019e2000 RSI: 00000000000030c0 RDI: 00000000000030c1 [ 36.650393][ T1190] RBP: ffffc9000f0cf3f0 R08: ffffc9000f0cf0e7 R09: 1ffff92001e19e1c [ 36.650410][ T1190] R10: dffffc0000000000 R11: fffff52001e19e1d R12: 0000000000000000 [ 36.650427][ T1190] R13: dffffc0000000000 R14: ffffc9000f0cf420 R15: ffffc9000f0cf450 [ 36.752938][ T1190] FS: 00007f51bc3956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 36.761974][ T1190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.768566][ T1190] CR2: 00007ffcabe7c010 CR3: 0000000129264000 CR4: 00000000003526b0 [ 36.776556][ T1190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.784559][ T1190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.792560][ T1190] Call Trace: [ 36.795860][ T1190] [ 36.798883][ T1190] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 36.806371][ T1190] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 36.814361][ T1190] ? kernel_text_address+0xa9/0xe0 [ 36.819479][ T1190] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 36.833038][ T1190] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 36.839221][ T1190] ? arch_stack_walk+0x10b/0x170 [ 36.844173][ T1190] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 36.851382][ T1190] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 36.859339][ T1190] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 36.869279][ T1190] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 36.879884][ T1190] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 36.892150][ T1190] ? mas_wr_store_type+0x8eb/0x1ad0 [ 36.897365][ T1190] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 36.911354][ T1190] ? mas_preallocate+0x56e/0xc60 [ 36.916823][ T1190] ? __cfi_mas_preallocate+0x10/0x10 [ 36.922115][ T1190] ? kasan_save_alloc_info+0x40/0x50 [ 36.927409][ T1190] ? __asan_memset+0x39/0x50 [ 36.932010][ T1190] mmap_region+0x1371/0x1bd0 [ 36.937130][ T1190] ? __cfi_mmap_region+0x10/0x10 [ 36.942248][ T1190] ? __futex_queue+0x19a/0x340 [ 36.947024][ T1190] ? __kasan_check_read+0x15/0x20 [ 36.952060][ T1190] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 36.958695][ T1190] ? file_mmap_ok+0x147/0x1a0 [ 36.963380][ T1190] do_mmap+0xb6d/0x13c0 [ 36.968078][ T1190] ? __cfi_do_mmap+0x10/0x10 [ 36.972695][ T1190] ? down_write_killable+0xe9/0x2d0 [ 36.978432][ T1190] ? __cfi_down_write_killable+0x10/0x10 [ 36.984103][ T1190] vm_mmap_pgoff+0x38f/0x4e0 [ 36.988711][ T1190] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 36.993831][ T1190] ? __fget_files+0x2c5/0x340 [ 36.999481][ T1190] ksys_mmap_pgoff+0x166/0x1e0 [ 37.004267][ T1190] __x64_sys_mmap+0x121/0x140 [ 37.009023][ T1190] x64_sys_call+0x13bf/0x2ee0 [ 37.013729][ T1190] do_syscall_64+0x58/0xf0 [ 37.018193][ T1190] ? clear_bhb_loop+0x35/0x90 [ 37.022894][ T1190] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.028804][ T1190] RIP: 0033:0x7f51bb58e929 [ 37.033721][ T1190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.053390][ T1190] RSP: 002b:00007f51bc395038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 37.061877][ T1190] RAX: ffffffffffffffda RBX: 00007f51bb7b5fa0 RCX: 00007f51bb58e929 [ 37.069964][ T1190] RDX: 000000000200000a RSI: 0000000000004000 RDI: 0000200000701000 [ 37.077942][ T1190] RBP: 00007f51bb610b39 R08: 0000000000000003 R09: 000000002546c000 [ 37.086020][ T1190] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 37.093997][ T1190] R13: 0000000000000000 R14: 00007f51bb7b5fa0 R15: 00007ffcabe7bbf8 [ 37.101974][ T1190] [ 37.104993][ T1190] Modules linked in: [ 37.109919][ T1190] ---[ end trace 0000000000000000 ]--- [ 37.117056][ T36] audit: type=1400 audit(1750372987.170:278): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.141182][ T36] audit: type=1400 audit(1750372987.170:279): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.163986][ T36] audit: type=1400 audit(1750372987.170:280): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.184773][ T36] audit: type=1400 audit(1750372987.170:281): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.239581][ T36] audit: type=1400 audit(1750372987.170:282): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.275764][ T1190] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 37.283833][ T1190] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 33 e0 88 83 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 79 24 c1 0f 90 90 90 90 90 90 90 90 90 [ 37.305153][ T1190] RSP: 0018:ffffc9000f0cf3f0 EFLAGS: 00010246 [ 37.328038][ T1190] RAX: 000000000000008c RBX: 1ffff92001e19e80 RCX: e11803cdf5863800 [ 37.337062][ T1190] RDX: ffffc900019e2000 RSI: 00000000000030c0 RDI: 00000000000030c1 [ 37.346379][ T1190] RBP: ffffc9000f0cf3f0 R08: ffffc9000f0cf0e7 R09: 1ffff92001e19e1c [ 37.354872][ T1190] R10: dffffc0000000000 R11: fffff52001e19e1d R12: 0000000000000000 [ 37.364824][ T1190] R13: dffffc0000000000 R14: ffffc9000f0cf420 R15: ffffc9000f0cf450 [ 37.374574][ T1190] FS: 00007f51bc3956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 37.403514][ T1190] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.410532][ T1190] CR2: 00007ffcabe7c010 CR3: 0000000129264000 CR4: 00000000003526b0 [ 37.425847][ T1190] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.435546][ T1190] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.444114][ T1190] Kernel panic - not syncing: Fatal exception [ 37.450562][ T1190] Kernel Offset: disabled [ 37.454976][ T1190] Rebooting in 86400 seconds..