last executing test programs: 1m11.824536176s ago: executing program 2 (id=1154): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x1, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x14, 0x6, 0x7f, 0x20c}, {0x1, 0x2, 0x18, 0x5, 0xf, 0xfc, 0x3, 0x2, 0x6, 0x70, 0x4, 0x5, 0xfffffffffffffffd}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0xff, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x3, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x3}, {0x0, 0x0, 0x41, '\x00', 0xfc}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0xff, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x3, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x3}, {0x0, 0x0, 0x41, '\x00', 0xfc}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 1m11.725801837s ago: executing program 2 (id=1155): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0xed3d1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x480081, 0x0) unlinkat(r1, &(0x7f0000000040)='.\x00', 0x0) (async) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x3, 0x8, 0x7a980000, 0x9, 0x63f}) 1m11.651980169s ago: executing program 2 (id=1156): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000040)={0x6, 0x8}) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x4, 0x0, 0x20}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$UHID_INPUT2(r5, 0x0, 0xff0f) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r6, 0x400454ce, 0xf97ad6f95ad21833) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000200)={0x0, 0x6, 0x1, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x3d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 1m11.633952559s ago: executing program 2 (id=1158): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x8000000000000000, 0x20, 0x6}, 0x2f) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x4, 0x0, [0x9, 0xbac, 0xb, 0x6]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x8, r0, 'id1\x00'}) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000140)) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)=0xa}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000200)) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000300)=0xfffffffffffffff0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x303000, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000380)) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000003c0)) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x1c, 0x2, {0xb, @struct={0x2, 0xb}, 0x0, 0x3, 0x9, 0x7, 0x6, 0x1, 0x20, @usage=0xa07, 0x5106, 0x81, [0x5, 0x8, 0x91, 0x9, 0x3, 0x1]}, {0xa5a, @usage=0x3e, 0x0, 0x5, 0x9092, 0x8, 0x1000000000000, 0x8, 0x31, @usage=0x97a5, 0x9, 0x5, [0x2, 0x100, 0xe, 0x2, 0xa, 0x2]}, {0x8000000000000001, @struct={0x0, 0xd}, 0x0, 0x7, 0x1, 0x4, 0x5, 0xffffffffffffe6bd, 0x20, @struct={0xfffffffa, 0x10000}, 0x9, 0x200, [0x9e, 0x1, 0x5, 0xc, 0x1, 0x3]}, {0x80, 0x80000001, 0x8000000000000001}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000840)={{r3}, {@val={r4}, @max}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000880)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x98, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000900)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @fda={0x66646185, 0x3, 0x2, 0xe}}, &(0x7f0000000980)={0x0, 0x18, 0x30}}, 0x400}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x8, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000009c0)={@flat=@weak_handle={0x77682a85, 0x101}, @fda={0x66646185, 0x7, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000a40)={0x0, 0x18, 0x38}}}], 0xa8, 0x0, &(0x7f0000000b40)="380a22cb21805a0720a42059d8bf985ac043f215a6101b9c512da8bebf03dc4eb55dc357539824080611798ff77835aeccbe4946a19cfa96978e384074ffe169affcc065363c5e4fe15e1c60bbf8843b0d38efe6e8444359e78c0255aedb7b8f42d88a714f6c2eea6ce9c136f4a51cbe97fdbe412de6ca6e28421ea834f385142f869e40e15e4eb84aa62d41b17f7515c0c29396f55b665548b34ca44a0ba0c21b1e794f58edf312"}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c40)={r4, 0x0, 0x3, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001040)={{r3}, "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"}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000002040)={0x0, 0x1cfb, [0xffe0000000000000, 0x3, 0x9, 0x2, 0xb, 0x3ae]}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r5 = openat(r1, &(0x7f0000002080)='./file0\x00', 0x20140, 0x4d) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000020c0)={0xfff7, 0xff1a, 0x5276}) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000002100)) openat$kvm(0xffffffffffffff9c, &(0x7f0000002200), 0x202, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000002240)=@attr_pvtime_ipa={0x0, 0x1, 0x1, 0x35}) close(r5) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000002280)) 1m11.55600982s ago: executing program 2 (id=1159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) read(r2, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r3, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:0:0:0.', @ANYRESHEX], 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x11, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000300)=[@register_looper, @enter_looper, @dead_binder_done], 0x4, 0x0, &(0x7f0000000380)="20f65a13"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$selinux_validatetrans(r6, &(0x7f0000000100)={'system_u:object_r:getty_log_t:s0', 0x20, 'system_u:object_r:fixed_disk_device_t:s0', 0x20, 0xfffffffffffffcd8, 0x20, '/usr/sbin/cupsd\x00'}, 0x6f) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x4000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xfa, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xfd}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0xd000, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000040)) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000280)={0xd000, 0xdddd0000, 0x5, 0x5, 0xf}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 1m11.320227323s ago: executing program 2 (id=1162): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0xf000, 0x90, &(0x7f0000000100)=""/144}]}) 56.335023299s ago: executing program 32 (id=1162): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)={0x1, 0x0, [{0xf000, 0x90, &(0x7f0000000100)=""/144}]}) 2.906798108s ago: executing program 1 (id=1957): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0xffffffff, 0x0, 0x80000001}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 2.76322632s ago: executing program 1 (id=1960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01005a0a00000004811f2e36000000000000000000"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.546066993s ago: executing program 1 (id=1963): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x100000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa37a, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffffe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x401, 0x0, 0x3, 0x3, 0x2, 0x4, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x1, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x8, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x3, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x5, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0x8, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x0, 0x7aae62b2, 0x0, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000980)) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000800000000000cbdd5f6d6e47ab5900ffb6e3ed86c249069412a6c104a8fac17a0791a14378819a758be44514bd624aef8893800b7c1c3603b04271204471a655619af59b5f69be1b5b679bf265cf3df52800dff3d1756300e7e61831dd4c4587c7c785545eede4438a03ac48faf86301fd131ba168eeb5459df2cf55d82414fee4d477448f1ae144b7107db4073503892aa2128aa1e122d15a2d39f8c1"]) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.774367365s ago: executing program 0 (id=1972): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000140)={0xc1b}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000002000c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0xffffe000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x8527d000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) 1.773796645s ago: executing program 4 (id=1973): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) (rerun: 64) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4040ae9e, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffff5f}, "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", "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"}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x500, 0x0) (async) close(0x3) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000000000910300000000000006000000000000007b0b00000000000007000000000000008e16000000000000ff0000000000000040080000000000000300000000004d825500003d0a0000000000000900000000000000"]) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x400000007, 0x1000000000, 0x0, 0x43, 0xda4, 0x40000005, 0x2004cb, 0x0, 0x100001000000, 0xfffffffffffffffe, 0x1, 0x8000, 0x3], 0x100000, 0x40802}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000002c0)={0x35}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x1fe) (async) read$FUSE(r4, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000000c0)=0x0) write$FUSE_LK(r4, &(0x7f0000000140)={0x28, 0x4e3818f3f0e1c71b, r10, {{0x10001, 0x4, 0x2, r11}}}, 0x28) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x2010, r5, 0x35b4a000) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (rerun: 64) 1.573114357s ago: executing program 0 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x7ffc, 0x40, 0x0, 0x800000, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000007fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x10500, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xfc, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x7, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xf0, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x40000002, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x6, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc01, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x8001, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x10001, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x80087601, 0x500) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1.326637101s ago: executing program 0 (id=1980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xa0, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/79, 0x4f, 0x2, 0x33}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x3, 0x2, 0x29}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}, 0x1000}, @increfs={0x40046304, 0x3}], 0x0, 0x0, &(0x7f0000000500)}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.233459822s ago: executing program 4 (id=1982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x5, 0x3, 0xffff1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xaece, 0x1) read(r5, &(0x7f0000000040)=""/8, 0x8) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) read$FUSE(r6, &(0x7f0000000e40)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000f"]) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)=0x2) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x40, 0x84, 0x4, 0x6, 0x0, 0x400200cc1, 0xa, 0x4, 0x0, 0x0, 0x2, 0x2, 0x0, 0x40c, 0x8d], 0xffff1000, 0x2011d2}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.128207204s ago: executing program 3 (id=1983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xfec9, 0x0, &(0x7f0000000000), 0xfffffffffffffd37, 0x0, 0x0}) 943.084987ms ago: executing program 3 (id=1984): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x27ddc99d2b6db97c, 0x34, &(0x7f00000003c0)=""/52}]}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af04, &(0x7f0000000200)) (async) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0xc000000) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) 899.271897ms ago: executing program 4 (id=1985): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f00000000c0)={0xa1, 0xd8}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {}, 0x0, 0x2, 0x0, 0x0, 0x0, {0x0}}, 0x58) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x5b, 0xe, 0x0, 0x20000000000003}) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)) 768.041179ms ago: executing program 3 (id=1986): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x4edc, 0xe, 0x7fffffffffffffff}) (async, rerun: 64) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x8, 0xd, 0x7, 0x0, [{0x4, 0x9, 0x3, '\x00', 0x2}, {0x9, 0x2c, 0x4, '\x00', 0x5e}, {0x6, 0xf8, 0x5c, '\x00', 0x3}, {0x6, 0x4, 0xc8, '\x00', 0x7}, {0x9a, 0x7, 0xf9, '\x00', 0x3}, {0x40, 0x6, 0xe, '\x00', 0x1}, {0x40, 0x5d, 0x7}, {0xf8, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x5, 0xa, '\x00', 0xf9}, {0xe, 0x7, 0x66, '\x00', 0x32}, {0x0, 0x5, 0x3, '\x00', 0xd4}, {0x4, 0x3, 0x0, '\x00', 0x7}, {0x73, 0x9, 0x8, '\x00', 0x1}, {0xf, 0x5a, 0xfd, '\x00', 0x8}, {0xb8, 0x8, 0x7, '\x00', 0x3}, {0x4, 0x5, 0xc0, '\x00', 0xc}, {0x52, 0xd7, 0x7, '\x00', 0x8}, {0x9, 0x0, 0x1, '\x00', 0x4}, {0x7, 0x7, 0x77, '\x00', 0x8}, {0x2, 0x10, 0x9, '\x00', 0x4}, {0x6f, 0xbe, 0x0, '\x00', 0x7}, {0x3, 0x1, 0x4, '\x00', 0x96}, {0x7, 0xf9, 0x4, '\x00', 0xc}, {0x2, 0xf3, 0x6, '\x00', 0x1}]}}) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40f00, 0x0) write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, './binderfs/binder0\x00', 0x3a, './binderfs/binder0\x00', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x4f, 0x4f, 0x0, 0x46, 0x4f]}, 0x54) 755.016839ms ago: executing program 4 (id=1987): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000400)={0xc8a, 0x8000, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xb77}) write(r2, &(0x7f00000002c0)='u', 0x1) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) (async, rerun: 64) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffff0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f00000003c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 655.25244ms ago: executing program 1 (id=1963): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x100000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa37a, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40000000, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TIOCMSET(r2, 0x5418, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x14) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) write$uinput_user_dev(r4, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffffe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x401, 0x0, 0x3, 0x3, 0x2, 0x4, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x1, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x8, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x3, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x5, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0x8, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x0, 0x7aae62b2, 0x0, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000980)) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000800000000000cbdd5f6d6e47ab5900ffb6e3ed86c249069412a6c104a8fac17a0791a14378819a758be44514bd624aef8893800b7c1c3603b04271204471a655619af59b5f69be1b5b679bf265cf3df52800dff3d1756300e7e61831dd4c4587c7c785545eede4438a03ac48faf86301fd131ba168eeb5459df2cf55d82414fee4d477448f1ae144b7107db4073503892aa2128aa1e122d15a2d39f8c1"]) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 583.871002ms ago: executing program 3 (id=1988): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x3000, 0x5000, 0x1}}, "62a83115571c0d8ef42553ba3c7819dcf3a50ff3fe64379cff75e7ee4bbafad4ea9152ec6989c9f280d42c17bb5dffdd006d44b2e7bbe4fc10ce1e667d92eab091bfb4cfcad3f93e23a12a60898ab2275ffec98f388fd1f23f1bbdd5fbaa4071a4862696d6a9043c4958793a4ebef04acb4e1dd56a62063671bc56579e3cce8f276cef802828d74b770e5162838034eb81b968a68b9c6ccd8925eb6feda5f05980adc4d03cf2e510e128223217b3745e0ab068087aacc02b135add43e0168b46b297be2b93bc9b63a5af0bb55ee494419bf951f5b49d6729fb95d0b793e92f40b7355087ada3592ddcd4132b5edaeaba4de793722b4ef6d5b802f8dc90ec08373944139c5cbe47b3099430696fc0938eb27c429127da39f504aa5e201a6d82dab5c4f8a7868d2f77f02e0a2a8a5101af5ed824dabb497e645bed814ef3070a1f4fb5d66ff91357b42c34d829efb10eec59dcb666a586c2477ebe7186c1492f90423a1a8bf3aaa64bbf84872457d3ba6259dc60b09b684158168265ee6b003ada2584da84f2f089b773b00662a5597540eecc5b4bc72c408d2bc114485692f085602a0935ecb6a8ea0cf01264bc8557f4c4ff8be2a9a3f96aba9023900fd46dcd1212456db86c58ad4791215b28be007930dc1951c0df2b58415589f4544a8c2443cc7d5a70f5c8e5fc79dcb118b16b1658ce6ce8ef1025ed2dd41dd9396f260318d77da658dee0dfd02c09cc0e6e8a71095acb117a963541ae0c28c1df36fc3252a5b09429ddfc8203f9aea7b7840060e698d47479b811969a031dde2bcc0a798d899bd0843ded72d22b47825fbfd110c52f86014d98579a19cf1f155ad92170948af20d82b215b76cd178adffda262235522e18ef2a46a6c0a773d3df52a7a4f4acc9c93a655bc22d429a204c6bde3a476937c13fd6ed9985921783f590090600a29c261fc06b632f55229dd209ba508329ba42c5bea9e806c9c50d0ffcf6fb7aea95618caedf42c333ca724f001f381b30e8afcfbea2c96a9ee8bf98f74d28e6205d417a982aa36692b80c7489360edeab7209f7ddc2520ae7e8c956090aecc31d9fa9dad42106164f06348caece30b480dff8531809f43aae70eae29ab53c09c8855fcd16fadaf1bac287a67377982ca49a64319106f817d4b14191e6c5b895371f8117d3e5ed6bae2e7bb91687576020fcc71f7a12a574ca07d76e67f60b54d8cbe2c0944c612e49388ed6ed68d4ecd71b19e8bca81962cbf2931b81b5dce72ef9b4a51ea237d5cbd1fe24e002067c18868413b9c9b6afae908d28568a2ef01ed831d5978b19cd5ebb0635037d62e3b60941ade107ea22a1dce3e6029afd8a9eb5aded6b09686d8eee1de1ca5e50d8db9b31cace07f6c52922357389db44bdf5b4da9f5975157970008e190d383cf4416c246ebb2555657adb0f9f650e9739e8e15fbf9fc8cf421c4ca54faefeceec4eff494cd43fdb973ae01509fa7be143f9ed9864abc551855b0998a8e313e519221a463ef96e3b307aaf16d23398bb64aaff0b5afa760372f385caf2fdfd1e87021f0f923cc112c1888768ebe01a9f2edec755a5ff5ae2d27e971546f8d9006520ea4679f5d6fa6d560b18c5d220bb799d6c45f7e43eab131073a9171ce29c74bba2736db6b53d3af2aafdca2f5a8f9018e90ac1002b9be1f730f04dfa66505d761f26c92c31a4e8ed7415e0567311edd5c48cf4c29874bc9b4edbbe0d25cf4fb9b6a4d83311ca0fe061cd70886e52fca2a4d596269034385f4a6ea152c423aef5b6f4b08cf2fba790f3f51f221438de91688be5da1e54ab8718ad1959b592c1f32ba61e6887ce99072a5ca146aa78b881b08bf72c16020f61ad2f16293397112ba8bd5706742fef6e1ba190f60bf905766494df689dd5cee88723a008417766d7b3f6e81d4c80ea5bbddcd4fde9c03b26abfae4b442d762c8bd1416ba11ce1f0ed71a6daff49491426979affb35e2c8eb7fb85d74cfc7b530deb28b3d6b4c5f14029ed7fedd567fc4520490dcd478d3933db94652a420eb696e63135286bbb08ce00885d4a6a066e9cf9f574405bb282859e0bb158d60ee217b4a03492a60e909eeac489cdcfa40af2e6a5d73e90cfe486d5cc37a6be795e0df86ae738eeb6b8227b88e5fdd40e2c9ed72c42b80b44187268b8b3ca6c05a639728f99c85f7efe8d2156dedc441f5876bfeb0b357403076a1181228d1f45c88250b26ff97825454b27b59fe22db2b319720b9f16df18dc6054816cd1ceea0effd34afc833003b719bd24f04be0250aaf72689af9f7a6048377295b0ec8e9d37000d8ad2cbd50f3a6ff8ce238fda1242dec60e919b54c70da73bc533007af09adb125dc3e04e05e232bdb1ccb0ff426447b0e524f8cff75e1f5c984d014f4a058f45018efb5c7af3a2d0f5076566a972d159442ef1b59a77e18508dfb7791ffefe159831446bdb136fd2d59110fbb7fa39401d2305a4fd554fe5908748ef0bb358458640105dc7a0bcda1379b7a6d93fdeaab509021e03548de9b8bafbbe3713b93a6d2b7bdd2b61adf0b8bde08eadcf78787e6cae72ccb374c7d8056280dc4463290cd583a6f9e71b794c24f2e1d5bd56959395519325f92a48a1ea325b3b76a038727d141ce643bbb5d509c9c47f93e51c57c3011191a4fc80ad6e596a89685811803e41606d8bef55db1d7e8696c793a153344b8457c0c66624e5269f3bbf72f4f04229ad7f70cbfe423963f0e80b3c6c0868bde6c5697711264fa17fe8c988e7b8269b5fa7aa540879e4ceecaa07e16342eb4e368225ed878438dfc82e6686e71355fc11c371914f35fd7448bc8877ae11cd130d575acbcc47a458c52c95acc57e887064b800f426e46dddc8b45db8e9225bb8e3f10559022db899a30f47a3f1fc3bc4b3abe35d12bd5f5b62a806b3117e73e7a40684416805461dcfb0291a7bc2a9cc977cbb5fbc64b400a22f0aafc19df5e181ef6644def4b70b88c2b44404082280bd164cb1b9a87e2b152428e86564f33256a30dcf47f27bc9242716bbdeb8dcbaf0fa64ba6a6e71af4ff1f56708c4d77e72d60ea3027dac12db0ebbd2baa1eab79fd80a3b206547c152d1d3e02be55d33b67484b8e2cc5f2703e0e640ec343b69f957603cc716e551f129e0f0119658a0fba7de1ceab866736b23ab156c360ec15e71f11ebcaa1412f20a0c2d9579afa9c41f6bac5683357764e3979ad572f21c19ef8a187d99f8a49b29734592e9765867c3d85c8c73e5bd27cd43a3ba771db733d694d54f0a921e4215e1a1e720eef15f2a8d6966f274d87a60a71c4b42c3dfc3b7765716f91642d4caea69379fc74dcaedcba0f043aca40b5688503601ad52a921ab415758ac5ee5c8a05ef90e0b418411a3356a73a43d6329de635691e0d05db850fd8804d20a77f3a08f3a4b674f87a46e2c936fd0f28c94551e73dd477e7859f288f0276f8ee7996451664ff37edd980253dd0b98a2fcc8710c53a9fa7a1afa2f3a8eeb9523a796c50297af364dfa9d54e1e936704fdb5a81f17150d8b80e879733f80737ec0932b74c69a18192181e385842a2d0b34eb17d001dd7a25d2835ea69ef90e62560701f03a33e2fd8e282669c3ecc3b778d65b15afdb985d5ff1117e1d67141d1672fafa7e5a5c6543a59c41b5987ea5b4ca99cc9b53c1cffb5d0bcdc9e6366bd9403d8552d1956d0361e83439ebb52db6e6a77b0e8c00f2c06cae1f1855e207558690f727292ba9143ae7aae6e0ff14f6d2c6c925b35d3beed686fb6f3c9cf06e56adcefe2c97885d7e1f9b803ce22a2bba00d1c52e418fecb42032a9047707322964316bc68bec86dde9dd17da733f8509cdd695989cfb0952949bbfc5b36aec725b1d67046dc511d27ca772c09b5b94bbe52a4bb746a26475f58be4f5be6bf41d0c189b548ce4a8f1d2b99b0a51912fac40571ed5359206a235958bd8a6323842192a8e67b0b59d2adeecc354eb8ea0546b00c38dfa7293043bf2eb2231e2da16d55c3f1555a817ddd2e01993de4acf412441bddf36625c52b7781c56d9adc6559d6314265e6e11e207d1360d4dbcba02c9eadc820366fc0c13600dc9660ee05e1af099a5e1876efdf276e646a1b48429c0dc9ea9049ed68d883cab9012e34654ecd53b2492632e97ad2d5a867a249678d862831a5a93c3d4d3910b21911f76ca50a45bb1932e2ec96e3f46e3ceb7cc9abe67a186abb67ea1920f529290618c0f0fad67765cb54c1385fb42fa09999d7a5880768511739096e24527bff142cacec4d8def22c4f2cab58beb2e1f4e725496ef3467fdc646a481a61bc1203301ab5f166cc0e0d236b96d763764552c60ebf62de652e1f5255301e87cb8cb725f81cb4948bb6e2da2c78524a8642372f987235fc613c90e680914112609d129eddfac5fadbc5e867f43fd83ba239621e88ee35af308e5c20f1709896ca447fa3c3cc03041ecf8f918f1275d74cd170eed53b63badc21f33188807c0fddfa63b8377f243f36fb1e483462cf3dd51a35c7add01188390cf48db02a65771390f25374d3fe2b4418776df5ac090d7cc05f47f61e355f205ca4638adce8768528fb144e6d81e590cd2fcff1665c78f051a7973452c82550b4a24b8bc31ee527dffa77f03b3946ad1e1d6ee1b032627219ea2cfccba08a07108218f34cee01b339f93710897acac9c26c63425415223c3f418839d89c870f590916760032972929a03f4869ccd9e2d2e32124c1d7815866d84bd1dd47004bd269574011f4474044ae2b3ca48ad140fe2149e8634aec1cb23e424b2e41d4d01167ff0a29d56414487b9a60a218c406f133f94bc05d5bfba5c310082eccc68209321295bb1550f98eb44b05ba87a2d031ca1b1f6b6095a3ac3533096bc0d21e7d5d6aaafbdadb94bec7fc2d4b4335ae876b167fb7fb9b74515dac563ebedabd477f636a091c16c6e2df3f96010edef501e413518d43cecd36ed7f4e0f3a209ea55bf64d79a2f8091334fdfc21380359e327d0d328e0697ba20490e0c8adcc5107a1d133b5414d94132960e74d6ffc3baa3ea0e2618c34f581f1b5c1def12c416578eb04d46377b4dc90cd974975f40d5c0e452a0bfb758132c34db990ea335f044683c807170f4159a9a31a96b6160278118602a8c0a739453bc3749b97c1412d628b8202c506fe1ff249083c851dd2ed44c395d18d4ba9771e8a59c3807de2264399296a5828e8a2dbcb3cccc3588d64d35e8af805aba330be4ccd3ba6f8df71185aac607dd122c64b132dcf569ca806d551aa83377d14f6cd50da62ea83c40aa86c87085ec5dfe40511685932cd9a3cd90e85dfe058e847d1a46b09cbdaf0f8437ca3cd8d21c930ef24fe624e611baced90591ca778123edae2de0da961104e70d7fb48a0040a6df57964eef3f1d4d865a77d4cb2ce0de35b1f8f2cac9058e00dc97dcae8016df096301353b481e971256a41514d53c96c73d5106f7ed6b8af979a1848f123557baab388f2e797516c632843fa7999193b76966ebb10bd26848114d2e0ba83d1227c4c5cff665193ad80a4efa73501364fa82c1194c38466ebf3bad3c878b67559b656e4169d7340d547786b00fba08fb0feada873cd1f2ae6cc23708f3f45e0415beaf1480cf7e6f0bb00bdf74c8a93510896317fa436be1005ef7b7ff74bb580912df2e326e17507f3f42ce4644a7ba3041d40352fc4d6dc4f7eb99b30e9e79c82d76ef2ac9c1ccb1352d8045330ddfe63f880bf446cde7917989c33e83c26da3b082e214357e88b54e08ff", "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"}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) write(r4, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0b", 0x72) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xe0, 0x6, '\x00', 0x161e}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 460.222103ms ago: executing program 4 (id=1989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 416.418684ms ago: executing program 0 (id=1990): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2280, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x5d, 0xa9, 0x0, 0x5, 0x3, 0x2, 0xff, 0x9, 0x7, 0xa, 0x5, 0x0, 0x2, 0x4, 0x0, 0x5, 0x8, 0x8, '\x00', 0x40, 0x3}) (async) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (async) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000020c0)={[0x8bc1, 0x100000000, 0x8000000000000001, 0x3, 0x6, 0x400, 0x5, 0x12e, 0x6, 0x400000000000000, 0x9, 0x4, 0xfffffffffffff978, 0x2800000, 0x62, 0x8], 0xeeef0000, 0x100}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000002180)=0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000021c0), 0x424000, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002200)={{0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x9, 0x7, 0x80000, 0x1, 0xff, 0xe, 0xfffffffe, 0xfffffffffffff001, 0x0, 0x6, 0x7}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002280)={{r2, 0x2, 0x1000, 0x6, 0x8, 0x5f, 0x2, 0x5d9c, 0x7, 0x7ff, 0x8fe3, 0x8c, 0x100, 0x7fff, 0xfffffffffffffffa}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000003280)={0x23, 0x5, 0x8, 0x1, 0x5, "f8d9898e21b669fc033e8563fe0b0700032fc6"}) (async) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000032c0)={0x0, 0xd, 0x5b, 0xcc11, 0x800}) (async) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000003300)={0x5, 0x4, 0xf5}) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000003380)={0xe1, 0x18, '\x00', 0x0, &(0x7f0000003340)=[0x0, 0x0, 0x0]}) (async) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f00000033c0)) (async) read$FUSE(r1, &(0x7f0000003500)={0x2020}, 0x2020) (async) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000005540), 0x342, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000005580)=0x80) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000055c0)={0x1, 0x0, @ioapic={0x1000, 0x7, 0x0, 0xe72, 0x0, [{0x4, 0xe3, 0x4, '\x00', 0x10}, {0x6, 0x0, 0x90, '\x00', 0xbc}, {0x1, 0xcb, 0xc, '\x00', 0x4}, {0x81, 0x9, 0xc, '\x00', 0x6}, {0x5, 0x0, 0x6, '\x00', 0x7}, {0xca, 0x6, 0x1, '\x00', 0x8}, {0x9, 0x8, 0x3, '\x00', 0x7}, {0x7, 0x2}, {0xce, 0xa, 0x3, '\x00', 0xfa}, {0x3, 0x8, 0x0, '\x00', 0x1}, {0x4, 0x0, 0xed, '\x00', 0x3}, {0x3, 0xee, 0xf6, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x1}, {0x2, 0x34, 0xe6, '\x00', 0x6}, {0x10, 0x4, 0x9, '\x00', 0xd9}, {0x4b, 0xb, 0xab, '\x00', 0x1}, {0x3, 0x2, 0x9, '\x00', 0xff}, {0x0, 0x80, 0xfd, '\x00', 0x56}, {0xc, 0xbc, 0x4, '\x00', 0x8a}, {0x4, 0x1, 0x1, '\x00', 0x2}, {0x1, 0x7d, 0x3, '\x00', 0x7f}, {0x10, 0x88, 0x1, '\x00', 0x1}, {0xff, 0xa, 0xe, '\x00', 0x7}, {0xf5, 0x9, 0x3, '\x00', 0x43}]}}) (async) write(r3, &(0x7f0000005800)="f6f01e5d664fe7a1c7db4b9ae3a93af18643f2084ca45325d8ce82533d402df413ec4c637afbd5d35526583853bfe92409310eae854b74", 0x37) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r1, 0xa2ae8000) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000005840)={0x0, "50fd7cfebebda0eab943c66173048c2b"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000006840)={{r0}, 0x0, 0x16, @unused=[0xe97, 0x800, 0x5, 0x8], @devid=r4}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) (async) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000007840)={0xb, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8010, r5, 0xc553d000) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) mount$binderfs(&(0x7f0000007880), &(0x7f00000078c0)='./binderfs2\x00', &(0x7f0000007900), 0x880, &(0x7f0000007940)={[{@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xffff}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) (async) read$FUSE(r1, &(0x7f0000007a00)={0x2020}, 0x2020) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x90, r3, 0xb5d7b000) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000009a40)) 324.543265ms ago: executing program 0 (id=1991): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x7) (async) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x3f}) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) (async) write$uinput_user_dev(r2, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r0, &(0x7f0000000280)=""/112, 0x70) 240.114337ms ago: executing program 3 (id=1992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) syz_clone3(0x0, 0xfffffffffffffcb2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 238.703897ms ago: executing program 1 (id=1993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @decrefs, @register_looper, @register_looper]}) 210.526927ms ago: executing program 0 (id=1994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x4) (async) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffffffffff8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) 148.528538ms ago: executing program 1 (id=1995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/163, 0x0, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x80, 0x10}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/143, 0x0, 0x2, 0x27}}, &(0x7f0000000280)={0x0, 0xffffffffffffff8b, 0xfffffffffffffda9}}, 0x10}], 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x10) mkdirat$cgroup(r4, &(0x7f00000002c0)='syz1\x00', 0x1ff) 40.159239ms ago: executing program 4 (id=1996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x801, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@increfs={0x40046305}, @increfs, @decrefs], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000004c0)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000008a2d8ef10040000100eeffffff0000000000"]) openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000000), 0xa) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_procs(r12, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f00000001c0), 0x12) ioctl$BLKRRPART(r10, 0x125f, 0x0) read$FUSE(r9, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=1997): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7fff) kernel console output (not intermixed with test programs): bridge_slave_0: left promiscuous mode [ 77.473303][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.663320][ T46] veth1_macvtap: left promiscuous mode [ 77.668861][ T46] veth0_vlan: left promiscuous mode [ 77.786094][ T3719] binder: Unknown parameter 'fscontext?}' [ 77.800065][ T3716] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 77.812254][ T3716] pim6reg0: linktype set to 769 [ 77.944462][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.946380][ T3730] rust_binder: Error while translating object. [ 77.951533][ T3730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 77.959403][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.959932][ T3731] rust_binder: Error while translating object. [ 77.978893][ T3715] bridge_slave_0: entered allmulticast mode [ 77.991672][ T3730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:727 [ 77.991697][ T3715] bridge_slave_0: entered promiscuous mode [ 77.991730][ T3731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 78.002813][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.024091][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.031174][ T3715] bridge_slave_1: entered allmulticast mode [ 78.037977][ T3715] bridge_slave_1: entered promiscuous mode [ 78.045507][ T3731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:727 [ 78.222376][ T3741] binder: Unknown parameter 'stas' [ 78.343537][ T3744] binder: Bad value for 'stats' [ 78.436548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.443627][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.460000][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.467108][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.599035][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 78.638000][ T3746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.638036][ T3746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:800 [ 78.651638][ T3750] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 78.673037][ T3752] binder: Bad value for 'max' [ 78.689676][ T3715] veth0_vlan: entered promiscuous mode [ 78.738384][ T3715] veth1_macvtap: entered promiscuous mode [ 78.864184][ T3749] rtc_cmos 00:00: Alarms can be up to one day in the future [ 78.876297][ T3755] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 78.882118][ T3755] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 79.124602][ T3767] rust_binder: Error while translating object. [ 79.124647][ T3767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 79.130862][ T3767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:742 [ 79.166558][ T3770] syz.2.1056: attempt to access beyond end of device [ 79.166558][ T3770] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.189740][ T1509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.213728][ T1509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.236145][ T1509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.264585][ T1509] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.271884][ T1509] rtc rtc0: __rtc_set_alarm: err=-22 [ 79.291218][ T3768] __vm_enough_memory: pid: 3768, comm: syz.0.1055, bytes: 281474976845824 not enough memory for the allocation [ 79.473841][ T36] kauditd_printk_skb: 1046 callbacks suppressed [ 79.473861][ T36] audit: type=1400 audit(1750417924.300:2829): avc: denied { map } for pid=3783 comm="syz.3.1060" path="/dev/binderfs/binder0" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.479533][ T3789] binder: Unknown parameter '0xffffffffffffffff' [ 79.480174][ T36] audit: type=1400 audit(1750417924.300:2830): avc: denied { mounton } for pid=3787 comm="syz.2.1061" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.507766][ T3788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:749 [ 79.518315][ T36] audit: type=1400 audit(1750417924.330:2831): avc: denied { read } for pid=3783 comm="syz.3.1060" path="/dev/binderfs/binder0" dev="binder" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.644919][ T36] audit: type=1400 audit(1750417924.330:2832): avc: denied { ioctl } for pid=3783 comm="syz.3.1060" path="/dev/binderfs/binder0" dev="binder" ino=62 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.655295][ T3796] rust_binder: Error while translating object. [ 79.701686][ T3796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 79.717903][ T36] audit: type=1400 audit(1750417924.360:2833): avc: denied { read write } for pid=3715 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.756194][ T3796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:810 [ 79.787500][ T36] audit: type=1400 audit(1750417924.360:2834): avc: denied { read write open } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.853372][ T3803] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.859924][ T3803] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 79.873427][ T3794] audit: audit_backlog=65 > audit_backlog_limit=64 [ 79.880137][ T3794] audit: audit_lost=26 audit_rate_limit=0 audit_backlog_limit=64 [ 79.951425][ T3794] binder: Bad value for 'stats' [ 79.960440][ T3805] binder: Bad value for 'context' [ 79.983338][ T3808] rust_binder: Error while translating object. [ 79.983361][ T3808] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 79.989626][ T3808] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:757 [ 80.071736][ T3811] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 80.124376][ T3811] rust_binder: Write failure EFAULT in pid:760 [ 80.190573][ T3817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:815 [ 80.275127][ T3820] binder: Bad value for 'max' [ 80.422284][ T3826] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 80.422309][ T3826] rust_binder: Error while translating object. [ 80.444619][ T3826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.461900][ T3826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 80.739509][ T3836] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 80.813997][ T3843] rust_binder: Write failure EINVAL in pid:826 [ 81.170799][ T3857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.177493][ T3854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 81.187604][ T3857] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.210121][ T3854] rust_binder: Read failure Err(EFAULT) in pid:19 [ 81.243969][ T3857] input: syz0 as /devices/virtual/input/input62 [ 81.428452][ T3869] rust_binder: Read failure Err(EAGAIN) in pid:767 [ 81.446531][ T3870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.819433][ T3883] rust_binder: Write failure EINVAL in pid:29 [ 81.845914][ T3883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 81.905599][ T3876] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.911910][ T3887] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 82.064956][ T3893] rust_binder: Write failure EFAULT in pid:771 [ 82.121209][ T3896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.260079][ T3901] rust_binder: Write failure EFAULT in pid:914 [ 82.492085][ T3904] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 82.533261][ T3904] rust_binder: Write failure EINVAL in pid:845 [ 82.556480][ T3911] rust_binder: Write failure EFAULT in pid:33 [ 82.825654][ T3920] rust_binder: Write failure EFAULT in pid:35 [ 82.945321][ T3927] binder: Bad value for 'stats' [ 82.982570][ T3927] binder: Unknown parameter 'audit' [ 83.037747][ T3932] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 83.099270][ T3935] binder: Unknown parameter 'coyBLV"i5ntext' [ 83.516465][ T3940] rust_binder: Write failure EINVAL in pid:922 [ 83.652154][ T3944] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 84.007603][ T3970] binder: Unknown parameter 'coyBLV"i5ntext' [ 84.126961][ T3977] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 84.157706][ T3968] rust_binder: Error while translating object. [ 84.157739][ T3968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 84.176666][ T3968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:800 [ 84.495635][ T36] kauditd_printk_skb: 870 callbacks suppressed [ 84.495657][ T36] audit: type=1400 audit(1750417929.320:3703): avc: denied { read } for pid=3984 comm="syz.0.1126" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.554484][ T36] audit: type=1400 audit(1750417929.320:3704): avc: denied { read open } for pid=3984 comm="syz.0.1126" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.570754][ T3992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 84.664395][ T36] audit: type=1400 audit(1750417929.360:3705): avc: denied { ioctl } for pid=3984 comm="syz.0.1126" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.781509][ T36] audit: type=1400 audit(1750417929.370:3706): avc: denied { read } for pid=3985 comm="syz.2.1127" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.863239][ T36] audit: type=1400 audit(1750417929.370:3707): avc: denied { read open } for pid=3985 comm="syz.2.1127" path="/dev/binderfs/binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.878871][ T4008] binder: Unknown parameter 'coyBLV"i5ntext' [ 84.919713][ T3998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.927326][ T3998] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 84.935224][ T36] audit: type=1400 audit(1750417929.370:3708): avc: denied { read } for pid=3989 comm="syz.1.1128" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.943118][ T4008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 84.965126][ T4011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 85.162367][ T4015] tun0: tun_chr_ioctl cmd 1074025675 [ 85.177933][ T4015] tun0: persist enabled [ 85.221336][ T4015] tun0: tun_chr_ioctl cmd 1074025675 [ 85.233255][ T4015] tun0: persist enabled [ 85.551121][ T4025] input: syz1 as /devices/virtual/input/input63 [ 85.591823][ T4025] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.591855][ T4025] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:955 [ 85.619389][ T4025] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.895950][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.047733][ T4039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 86.047771][ T4039] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 86.069880][ T4039] rust_binder: Read failure Err(EFAULT) in pid:63 [ 86.142731][ T4045] binder: Unknown parameter 'coyBLV"i5ntext' [ 86.367007][ T4048] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89) [ 86.367031][ T4048] rust_binder: Error while translating object. [ 86.390654][ T4048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.401467][ T4048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:958 [ 86.523286][ T4058] input: syz1 as /devices/virtual/input/input64 [ 86.731641][ T4065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.787938][ T4069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:886 [ 86.924802][ T4074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:968 [ 87.150116][ T4088] binder: Unknown parameter 'coyBLV"i5ntext' [ 87.218957][ T4092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.362110][ T4095] input: syz0 as /devices/virtual/input/input66 [ 87.664060][ T4105] input: syz1 as /devices/virtual/input/input68 [ 87.705360][ T4105] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 87.913239][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.914417][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 87.995268][ T4118] binder: Unknown parameter 'coyBLV"i5ntext' [ 88.039159][ T4116] binder: Unknown parameter '00000000000000000003' [ 88.053030][ T4116] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 88.961514][ T4150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 88.978980][ T4150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.022845][ T4150] rust_binder: Error while translating object. [ 89.044999][ T4150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.051210][ T4150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:906 [ 89.084349][ T4152] binder: Unknown parameter 'coyBLV"i5ntext' [ 89.258004][ T4156] SELinux: failed to load policy [ 89.343458][ T4158] SELinux: security_context_str_to_sid () failed with errno=-22 [ 89.491978][ T4161] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 89.492005][ T4161] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 89.503805][ T36] kauditd_printk_skb: 1916 callbacks suppressed [ 89.503825][ T36] audit: type=1400 audit(1750417934.330:5614): avc: denied { map } for pid=4163 comm="syz.1.1184" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.510724][ T4164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.511415][ T36] audit: type=1400 audit(1750417934.330:5615): avc: denied { read } for pid=4163 comm="syz.1.1184" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.525499][ T4161] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 89.575947][ T4164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 89.610969][ T36] audit: type=1400 audit(1750417934.330:5616): avc: denied { ioctl } for pid=4163 comm="syz.1.1184" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 89.675062][ T36] audit: type=1400 audit(1750417934.330:5617): avc: denied { call } for pid=4163 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.704940][ T4166] binder: Bad value for 'max' [ 89.710673][ T36] audit: type=1400 audit(1750417934.370:5618): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.732219][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.740062][ T36] audit: type=1400 audit(1750417934.370:5619): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.756874][ T289] audit: audit_lost=32 audit_rate_limit=0 audit_backlog_limit=64 [ 89.774705][ T289] audit: backlog limit exceeded [ 89.780926][ T4168] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.845100][ T4168] binder: Unknown parameter 'appraise' [ 89.923896][ T4171] rust_binder: Write failure EINVAL in pid:854 [ 89.981843][ T4174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:913 [ 90.064792][ T4180] binder: Unknown parameter 'coyBLV"i5ntext' [ 90.483386][ T4187] rust_binder: Write failure EFAULT in pid:860 [ 91.062952][ T4194] rust_binder: Write failure EINVAL in pid:919 [ 91.113972][ T4194] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 91.127843][ T4194] rust_binder: Read failure Err(EFAULT) in pid:919 [ 91.146691][ T4194] rust_binder: Write failure EINVAL in pid:919 [ 91.305018][ T4201] binder: Unknown parameter 'processor : 0 [ 91.305018][ T4201] vendor_id : GenuineIntel [ 91.305018][ T4201] cpu family : 6 [ 91.305018][ T4201] model : 79 [ 91.305018][ T4201] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 91.305018][ T4201] stepping : 0 [ 91.305018][ T4201] microcode : 0xffffffff [ 91.305018][ T4201] cpu MHz : 2199.998 [ 91.305018][ T4201] cache size : 56320 KB [ 91.305018][ T4201] physical id : 0 [ 91.305018][ T4201] siblings : 2 [ 91.305018][ T4201] core id : 0 [ 91.305018][ T4201] cpu cores : 1 [ 91.305018][ T4201] apicid : 0 [ 91.305018][ T4201] ' [ 91.441482][ T4203] binder: Unknown parameter 'processor : 0 [ 91.441482][ T4203] vendor_id : GenuineIntel [ 91.441482][ T4203] cpu family : 6 [ 91.441482][ T4203] model : 79 [ 91.441482][ T4203] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 91.441482][ T4203] stepping : 0 [ 91.441482][ T4203] microcode : 0xffffffff [ 91.441482][ T4203] cpu MHz : 2199.998 [ 91.441482][ T4203] cache size : 56320 KB [ 91.441482][ T4203] physical id : 0 [ 91.441482][ T4203] siblings : 2 [ 91.441482][ T4203] core id : 0 [ 91.441482][ T4203] cpu cores : 1 [ 91.441482][ T4203] apicid : 0 [ 91.441482][ T4203] initial apicid : 0 [ 91.441482][ T4203] fpu : yes [ 91.441482][ T4203] fpu_exception : yes [ 91.441482][ T4203] cpuid level : 13 [ 91.441482][ T4203] wp : yes [ 91.441482][ T4203] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 91.441482][ T4203] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 91.660444][ T4215] binder: Unknown parameter 'coyBLV"i5ntext' [ 91.860037][ T4218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:930 [ 91.924643][ T4221] rust_binder: Write failure EFAULT in pid:867 [ 92.169728][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.193114][ T4230] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 92.213260][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.258894][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.282848][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.293241][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.300668][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.333297][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.343974][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.362848][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.381728][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.391823][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.412013][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.423253][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.430700][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.463283][ T45] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 92.478039][ T45] hid-generic 009C:0008:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 92.510029][ T4248] __vm_enough_memory: pid: 4248, comm: syz.0.1214, bytes: 274877911040 not enough memory for the allocation [ 92.551390][ T4231] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 92.551414][ T4231] rust_binder: Read failure Err(EFAULT) in pid:102 [ 92.580151][ T4248] __vm_enough_memory: pid: 4248, comm: syz.0.1214, bytes: 274877911040 not enough memory for the allocation [ 92.756473][ T4256] binder: Unknown parameter 'coyBLV"i5ntext' [ 92.809261][ T4254] fido_id[4254]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.455549][ T4280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 93.556850][ T4287] SELinux: syz.0.1223 (4287) set checkreqprot to 1. This is no longer supported. [ 94.078412][ T4305] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 94.514145][ T36] kauditd_printk_skb: 3214 callbacks suppressed [ 94.514163][ T36] audit: type=1400 audit(1750417939.340:8826): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.591084][ T36] audit: type=1400 audit(1750417939.340:8827): avc: denied { read } for pid=4321 comm="syz.1.1235" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.643756][ T4325] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.650316][ T4325] audit: audit_lost=36 audit_rate_limit=0 audit_backlog_limit=64 [ 94.659043][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.668230][ T36] audit: type=1400 audit(1750417939.340:8828): avc: denied { read open } for pid=4321 comm="syz.1.1235" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.680178][ T289] audit: audit_lost=37 audit_rate_limit=0 audit_backlog_limit=64 [ 94.705830][ T4330] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.712461][ T4330] audit: audit_lost=38 audit_rate_limit=0 audit_backlog_limit=64 [ 94.723837][ T4328] audit: audit_backlog=65 > audit_backlog_limit=64 [ 94.789631][ T4330] rust_binder: Write failure EINVAL in pid:975 [ 94.808847][ T4330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 94.834310][ T4330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:975 [ 94.885748][ T4333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 94.959427][ T4333] rust_binder: Error while translating object. [ 94.994131][ T4333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.000473][ T4333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 95.104688][ T4339] rust_binder: Write failure EINVAL in pid:908 [ 95.165669][ T4339] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 95.173681][ T4339] rust_binder: Read failure Err(EFAULT) in pid:908 [ 95.196711][ T4339] rust_binder: Write failure EINVAL in pid:908 [ 95.543445][ T4359] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.557860][ T4360] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 95.572479][ T4360] rust_binder: Write failure EINVAL in pid:985 [ 95.831083][ T4367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:987 [ 95.849745][ T4367] rust_binder: Error in use_page_slow: ESRCH [ 95.881322][ T4367] rust_binder: use_range failure ESRCH [ 95.894408][ T4367] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 95.921313][ T4367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 95.945337][ T4367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:987 [ 96.184973][ T4379] rust_binder: Write failure EFAULT in pid:990 [ 96.354351][ T4387] binder: Bad value for 'stats' [ 96.475131][ T4390] tun0: tun_chr_ioctl cmd 1074025675 [ 96.503273][ T4390] tun0: persist disabled [ 96.542716][ T4392] random: crng reseeded on system resumption [ 96.603620][ T4393] rust_binder: Write failure EFAULT in pid:996 [ 96.689217][ T4395] tap0: tun_chr_ioctl cmd 1074025673 [ 96.705454][ T4396] tap0: tun_chr_ioctl cmd 1074025677 [ 96.710800][ T4396] tap0: linktype set to 776 [ 96.763572][ T4395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 96.931769][ T4395] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 96.942248][ T4395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 96.963272][ T4395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:926 [ 97.216036][ T4409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:155 [ 97.255533][ T4410] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 97.314642][ T4414] rust_binder: Write failure EINVAL in pid:155 [ 97.714890][ T4425] binder: Bad value for 'max' [ 98.095627][ T4440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 98.188246][ T4444] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 98.204775][ T4444] rust_binder: Write failure EINVAL in pid:942 [ 98.301942][ T4450] binder: Bad value for 'max' [ 98.386347][ T4452] binder: Unknown parameter 'obj_role' [ 98.761462][ T4462] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 99.230260][ T4478] binder: Unknown parameter 'fs*context' [ 99.523233][ T36] kauditd_printk_skb: 3102 callbacks suppressed [ 99.523253][ T36] audit: type=1400 audit(1750417944.340:11926): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.591926][ T36] audit: type=1400 audit(1750417944.350:11927): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.598183][ T4490] binder: Binderfs stats mode cannot be changed during a remount [ 99.641863][ T36] audit: type=1400 audit(1750417944.350:11928): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.644324][ T4483] rust_binder: Error in use_page_slow: ESRCH [ 99.665850][ T36] audit: type=1400 audit(1750417944.350:11929): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.684357][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.696888][ T36] audit: type=1400 audit(1750417944.350:11930): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.701630][ T4483] rust_binder: use_range failure ESRCH [ 99.725256][ T289] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 99.727246][ T36] audit: type=1400 audit(1750417944.350:11931): avc: denied { setattr } for pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.730733][ T289] audit: backlog limit exceeded [ 99.734379][ T289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.740631][ T4483] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 99.773154][ T4483] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 99.781801][ T4483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1023 [ 100.093647][ T4498] SELinux: policydb string length 14080 does not match expected length 8 [ 100.157647][ T4498] SELinux: failed to load policy [ 100.184036][ T4498] rust_binder: Write failure EFAULT in pid:962 [ 100.413319][ T4509] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 100.464274][ T4509] SELinux: security_context_str_to_sid () failed with errno=-22 [ 100.583960][ T4515] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 100.593528][ T4515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:970 [ 100.694856][ T4518] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 100.713520][ T4518] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 100.728871][ T4518] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 100.827110][ T4521] rust_binder: Read failure Err(EAGAIN) in pid:196 [ 101.079909][ T4528] SELinux: policydb version -1436411654 does not match my version range 15-33 [ 101.104633][ T4528] SELinux: failed to load policy [ 101.284297][ T4536] binder: Unknown parameter 'coyBLV"i5ntext' [ 101.543935][ T4541] rust_binder: Write failure EFAULT in pid:973 [ 101.653587][ T4548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1039 [ 101.738499][ T4548] rust_binder: Error while translating object. [ 101.753055][ T4548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 101.760306][ T4548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1039 [ 101.828310][ T4551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 101.846869][ T4551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:975 [ 101.869837][ T4551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.216143][ T4561] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 102.237386][ T4563] rust_binder: Read failure Err(EAGAIN) in pid:1045 [ 102.244643][ T4561] rust_binder: Write failure EINVAL in pid:978 [ 102.460330][ T4567] rust_binder: Read failure Err(EAGAIN) in pid:1047 [ 102.597421][ T4573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 102.608124][ T4570] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 102.629100][ T4570] pim6reg0: linktype set to 769 [ 102.641155][ T4570] rust_binder: Write failure EINVAL in pid:980 [ 102.641632][ T4570] rust_binder: Read failure Err(EAGAIN) in pid:980 [ 102.649834][ T12] bridge_slave_1: left allmulticast mode [ 102.668259][ T12] bridge_slave_1: left promiscuous mode [ 102.685379][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.701739][ T12] bridge_slave_0: left allmulticast mode [ 102.707547][ T12] bridge_slave_0: left promiscuous mode [ 102.714498][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.837323][ T12] veth1_macvtap: left promiscuous mode [ 102.842875][ T12] veth0_vlan: left promiscuous mode [ 102.923156][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.930480][ T4574] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.938313][ T4574] bridge_slave_0: entered allmulticast mode [ 102.944744][ T4574] bridge_slave_0: entered promiscuous mode [ 102.952292][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.959396][ T4574] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.966519][ T4574] bridge_slave_1: entered allmulticast mode [ 102.972807][ T4574] bridge_slave_1: entered promiscuous mode [ 103.068184][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.075341][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.082588][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.089649][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.194431][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.201841][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.231536][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.238729][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.259368][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.266042][ T4584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:982 [ 103.266432][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.394361][ T4574] veth0_vlan: entered promiscuous mode [ 103.460264][ T4574] veth1_macvtap: entered promiscuous mode [ 103.599703][ T4594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 103.973917][ T4604] rust_binder: Error in use_page_slow: ESRCH [ 103.973943][ T4604] rust_binder: use_range failure ESRCH [ 103.980216][ T4604] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 103.985845][ T4604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.994527][ T4604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:987 [ 104.014110][ T4607] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 104.031433][ T4607] rust_binder: Write failure EINVAL in pid:9 [ 104.160733][ T4611] binder: Unknown parameter 'sta' [ 104.208878][ T4613] rust_binder: Write failure EFAULT in pid:994 [ 104.384874][ T4619] rust_binder: Error in use_page_slow: ESRCH [ 104.384905][ T4619] rust_binder: use_range failure ESRCH [ 104.405524][ T4619] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 104.411046][ T4619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 104.431770][ T4623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1000 [ 104.443845][ T4619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:11 [ 104.548543][ T36] kauditd_printk_skb: 2317 callbacks suppressed [ 104.548562][ T36] audit: type=1400 audit(1750417949.370:14247): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.599696][ T4625] rust_binder: Error while translating object. [ 104.599739][ T4625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 104.613496][ T4625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 104.621178][ T36] audit: type=1400 audit(1750417949.410:14248): avc: denied { map } for pid=4624 comm="syz.1.1335" path="/dev/binderfs/binder0" dev="binder" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.725006][ T36] audit: type=1400 audit(1750417949.410:14249): avc: denied { read } for pid=4624 comm="syz.1.1335" path="/dev/binderfs/binder0" dev="binder" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.727856][ T4631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.764266][ T36] audit: type=1400 audit(1750417949.410:14250): avc: denied { read } for pid=4624 comm="syz.1.1335" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.792451][ T36] audit: type=1400 audit(1750417949.410:14251): avc: denied { read open } for pid=4624 comm="syz.1.1335" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.818320][ T36] audit: type=1400 audit(1750417949.410:14252): avc: denied { ioctl } for pid=4624 comm="syz.1.1335" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.843827][ T36] audit: type=1400 audit(1750417949.410:14253): avc: denied { read } for pid=4626 comm="syz.0.1336" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.913073][ T36] audit: type=1400 audit(1750417949.410:14254): avc: denied { read open } for pid=4626 comm="syz.0.1336" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 104.947260][ T36] audit: type=1400 audit(1750417949.420:14255): avc: denied { ioctl } for pid=4626 comm="syz.0.1336" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.002242][ T36] audit: type=1400 audit(1750417949.420:14256): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.109658][ T4646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:16 [ 105.369345][ T4654] random: crng reseeded on system resumption [ 105.481087][ T4665] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 105.506903][ T4666] rust_binder: Write failure EFAULT in pid:20 [ 105.826397][ T4671] rust_binder: Write failure EFAULT in pid:1068 [ 105.836703][ T4673] rust_binder: Error while translating object. [ 105.856334][ T4673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 105.873639][ T4673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1013 [ 105.954374][ T4679] binder: Unknown parameter 'y' [ 106.461718][ T4705] binder: Unknown parameter 'coyBLV"i5ntext' [ 107.063259][ T4717] random: crng reseeded on system resumption [ 107.224917][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.229353][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.271965][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.293278][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.300713][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.321211][ T4724] SELinux: failed to load policy [ 107.337610][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.349063][ T4724] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 107.349085][ T4724] rust_binder: Read failure Err(EFAULT) in pid:28 [ 107.357952][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.378087][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.386220][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.395120][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.412716][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.420227][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.428819][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.436467][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.450956][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.458531][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.466403][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.473891][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.481339][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.489458][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.498870][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.508320][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.516910][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.527091][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.535997][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.538257][ T4726] input: syz1 as /devices/virtual/input/input74 [ 107.545894][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.560641][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.570761][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.593866][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.602402][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.625612][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.643254][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.651003][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 107.668290][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 107.931164][ T4739] rust_binder: Error while translating object. [ 107.931202][ T4739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 107.954220][ T4739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 108.219340][ T4744] fido_id[4744]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.426015][ T4749] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 108.426040][ T4749] rust_binder: Error while translating object. [ 108.454932][ T4749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.490631][ T4749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1090 [ 108.510940][ T4755] rust_binder: Write failure EFAULT in pid:1047 [ 108.542334][ T4752] syz.4.1374: attempt to access beyond end of device [ 108.542334][ T4752] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.705442][ T4760] rust_binder: Write failure EINVAL in pid:1094 [ 108.838517][ T4766] rust_binder: Error while translating object. [ 108.863243][ T4766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.871382][ T4766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1096 [ 109.108443][ T4776] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 109.133226][ T4776] rust_binder: Error while translating object. [ 109.151963][ T4776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.155226][ T4775] binder: Unknown parameter 'processor : 0 [ 109.155226][ T4775] vendor_id : GenuineIntel [ 109.155226][ T4775] cpu family : 6 [ 109.155226][ T4775] model : 79 [ 109.155226][ T4775] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 109.155226][ T4775] stepping : 0 [ 109.155226][ T4775] microcode : 0xffffffff [ 109.155226][ T4775] cpu MHz : 2199.998 [ 109.155226][ T4775] cache size : 56320 KB [ 109.155226][ T4775] physical id : 0 [ 109.155226][ T4775] siblings : 2 [ 109.155226][ T4775] core id : 0 [ 109.155226][ T4775] cpu cores : 1 [ 109.155226][ T4775] apicid : 0 [ 109.155226][ T4775] initial apicid : 0 [ 109.155226][ T4775] fpu : yes [ 109.155226][ T4775] fpu_exception : yes [ 109.155226][ T4775] cpuid level : 13 [ 109.155226][ T4775] wp : yes [ 109.155226][ T4775] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 109.155226][ T4775] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 109.158839][ T4776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1100 [ 109.273393][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 109.315967][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.482800][ T4784] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 109.482827][ T4784] rust_binder: Error while translating object. [ 109.513486][ T4784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.541866][ T4784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 109.553247][ T36] kauditd_printk_skb: 760 callbacks suppressed [ 109.553264][ T36] audit: type=1400 audit(1750417954.370:15017): avc: denied { read append } for pid=4773 comm="syz.4.1380" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.655069][ T36] audit: type=1400 audit(1750417954.380:15018): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.727107][ T36] audit: type=1400 audit(1750417954.380:15019): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.746069][ T4781] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.760272][ T4796] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.768795][ T4792] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.770868][ T3715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.791636][ T4796] audit: audit_lost=42 audit_rate_limit=0 audit_backlog_limit=64 [ 109.793909][ T4794] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.800521][ T3715] audit: audit_lost=43 audit_rate_limit=0 audit_backlog_limit=64 [ 109.966828][ T4799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250 [ 110.272415][ T4816] syz.1.1394: attempt to access beyond end of device [ 110.272415][ T4816] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 110.541551][ T4823] rust_binder: Error in use_page_slow: ESRCH [ 110.541574][ T4823] rust_binder: use_range failure ESRCH [ 110.563487][ T4823] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 110.568998][ T4823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 110.592731][ T4823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:259 [ 110.881106][ T4839] binder: Unknown parameter 'coyBLV"i5ntext' [ 110.900385][ T4833] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 111.045898][ T4845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1124 [ 111.292894][ T4854] rust_binder: Write failure EINVAL in pid:57 [ 111.373324][ T4854] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.399356][ T4861] rust_binder: Error while translating object. [ 111.399401][ T4861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 111.435272][ T4861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1069 [ 111.446512][ T4854] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 111.463318][ T4854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 111.471937][ T4854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:57 [ 111.570209][ T4874] rust_binder: Error while translating object. [ 111.583343][ T4874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 111.584430][ T4876] rust_binder: Write failure EINVAL in pid:1135 [ 111.589544][ T4874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1072 [ 111.839786][ T4883] binder: Unknown parameter 'coyBLV"i5ntext' [ 111.905923][ T4885] rust_binder: Write failure EINVAL in pid:278 [ 112.471378][ T4902] rust_binder: Error while translating object. [ 112.497937][ T4902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 112.505350][ T4902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 112.633309][ T4918] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 113.062138][ T4922] rust_binder: Read failure Err(EFAULT) in pid:293 [ 113.285947][ T4937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 113.317642][ T4937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:298 [ 113.504834][ T4942] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 113.521472][ T4942] rust_binder: Write failure EINVAL in pid:72 [ 113.706137][ T4958] binder: Unknown parameter 'defcontext01777777777777777777777' [ 113.804188][ T4964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:76 [ 113.883424][ T4969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:304 [ 114.066413][ T4977] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 114.076672][ T4977] rust_binder: Error while translating object. [ 114.106466][ T4977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.133316][ T4977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 114.564891][ T36] kauditd_printk_skb: 850 callbacks suppressed [ 114.564912][ T36] audit: type=1400 audit(1750417959.390:15847): avc: denied { read } for pid=5005 comm="syz.0.1450" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.605333][ T36] audit: type=1400 audit(1750417959.390:15848): avc: denied { read open } for pid=5005 comm="syz.0.1450" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.630827][ T36] audit: type=1400 audit(1750417959.400:15849): avc: denied { read } for pid=5005 comm="syz.0.1450" name="binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.734844][ T36] audit: type=1400 audit(1750417959.400:15850): avc: denied { read open } for pid=5005 comm="syz.0.1450" path="/dev/binderfs/binder1" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 114.797498][ T36] audit: type=1400 audit(1750417959.410:15851): avc: denied { read } for pid=5005 comm="syz.0.1450" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.817800][ T5011] rust_binder: Write failure EINVAL in pid:80 [ 114.837105][ T36] audit: type=1400 audit(1750417959.410:15852): avc: denied { read open } for pid=5005 comm="syz.0.1450" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.886510][ T36] audit: type=1400 audit(1750417959.410:15853): avc: denied { execmem } for pid=5005 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 114.915098][ T36] audit: type=1400 audit(1750417959.460:15854): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.942920][ T36] audit: type=1400 audit(1750417959.480:15855): avc: denied { read write } for pid=4574 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.976019][ T36] audit: type=1400 audit(1750417959.480:15856): avc: denied { read write open } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 115.355088][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.362540][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.380118][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.388362][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.395825][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.403458][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.411077][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.419304][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.426778][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.434196][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.441860][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.453247][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.460691][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.478305][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.488837][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.497046][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.505220][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.521051][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.528951][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.538020][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.547586][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.563536][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.571035][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.584868][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.592405][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.603318][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.610788][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.619144][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.626581][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.635922][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.643353][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.650772][ T308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 115.675244][ T308] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.869142][ T5062] binder: Bad value for 'stats' [ 115.870206][ T5061] binder: Bad value for 'stats' [ 116.056028][ T5071] fido_id[5071]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 116.201247][ T5081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1180 [ 116.205614][ T5082] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 116.211789][ T5075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1141 [ 116.321728][ T5075] rust_binder: Write failure EINVAL in pid:1141 [ 116.474122][ T5094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:334 [ 116.876362][ T5111] kvm: user requested TSC rate below hardware speed [ 116.902750][ T5111] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 116.992041][ T5122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.126894][ T5127] binder: Unknown parameter 'coyBLV"i5ntext' [ 117.368114][ T5132] rust_binder: Failed to allocate buffer. len:1720, is_oneway:true [ 117.552010][ T5138] rust_binder: Failed to allocate buffer. len:56, is_oneway:false [ 117.560146][ T5137] rust_binder: Error while translating object. [ 117.585990][ T5137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 117.609963][ T5137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:348 [ 117.696390][ T5143] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 117.771201][ T5147] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 117.799427][ T5147] rust_binder: Read failure Err(EFAULT) in pid:351 [ 117.858685][ T5153] binder: Unknown parameter 'coyBLV"i5ntext' [ 118.164681][ T5161] binder: Unknown parameter 'coyBLV"i5ntext' [ 118.428380][ T5171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:110 [ 118.738094][ T5182] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 119.001416][ T5191] rust_binder: Write failure EINVAL in pid:117 [ 119.072617][ T5197] tun0: tun_chr_ioctl cmd 1074025675 [ 119.103321][ T5197] tun0: persist enabled [ 119.134360][ T5203] tun0: tun_chr_ioctl cmd 1074025675 [ 119.167265][ T5203] tun0: persist enabled [ 119.251808][ T5208] rust_binder: Error while translating object. [ 119.251833][ T5208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 119.251872][ T5207] binder: Unknown parameter 'coyBLV"i5ntext' [ 119.274489][ T5205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.283292][ T5208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 119.463607][ T5214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:361 [ 119.505422][ T5216] binder: Bad value for 'max' [ 119.597847][ T36] kauditd_printk_skb: 948 callbacks suppressed [ 119.597864][ T36] audit: type=1400 audit(1750417964.420:16805): avc: denied { read write } for pid=3715 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.651637][ T36] audit: type=1400 audit(1750417964.450:16806): avc: denied { read write open } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.723238][ T36] audit: type=1400 audit(1750417964.450:16807): avc: denied { ioctl } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.793254][ T36] audit: type=1400 audit(1750417964.470:16808): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.883271][ T36] audit: type=1400 audit(1750417964.470:16809): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.946193][ T36] audit: type=1400 audit(1750417964.470:16810): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.034120][ T36] audit: type=1400 audit(1750417964.510:16811): avc: denied { read write } for pid=3715 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.123262][ T36] audit: type=1400 audit(1750417964.510:16812): avc: denied { read write open } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.156697][ T36] audit: type=1400 audit(1750417964.510:16813): avc: denied { ioctl } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.223533][ T36] audit: type=1400 audit(1750417964.520:16814): avc: denied { read append } for pid=5219 comm="syz.3.1512" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.304109][ T5236] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 120.338265][ T5238] binder: Unknown parameter 'coyBLV"i5ntext' [ 120.584967][ T5244] binder: Bad value for 'max' [ 120.626317][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.646170][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.656682][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.665237][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.673451][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.705067][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.722670][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.733838][ T5258] binder: Unknown parameter 'coyBLV"i5ntext' [ 120.740674][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.750611][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.765763][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.789780][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.803398][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.812006][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.821008][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.829923][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.838348][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.846501][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.867753][ T5261] rust_binder: Write failure EFAULT in pid:135 [ 120.875919][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.890738][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.900802][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.909007][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.918355][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.927078][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.935245][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.942699][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.951263][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.962326][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.970544][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 120.986183][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 121.002449][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 121.018749][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 121.026969][ T1509] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 121.038264][ T1509] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.535802][ T5283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.539500][ T5281] fido_id[5281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 121.802391][ T5290] rust_binder: Write failure EFAULT in pid:1194 [ 122.095800][ T5296] binder: Unknown parameter 'coyBLV"i5ntext' [ 122.424310][ T5307] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.473842][ T5307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1199 [ 122.799582][ T5320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 122.809544][ T5322] rust_binder: Write failure EINVAL in pid:160 [ 122.844451][ T5324] binder: Unknown parameter 'fscntext uncxnu' [ 122.936372][ T5331] syz.4.1547: attempt to access beyond end of device [ 122.936372][ T5331] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.985215][ T5334] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 122.985237][ T5334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 122.990064][ T5332] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 123.004246][ T5332] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 123.012256][ T5332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1207 [ 123.021783][ T5334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1207 [ 123.069544][ T5337] binder: Unknown parameter 'coyBLV"i5ntext' [ 123.181598][ T5342] rust_binder: Error while translating object. [ 123.181646][ T5342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 123.193260][ T5342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1211 [ 123.374055][ T5349] serio: Serial port ttynull [ 123.446724][ T5352] SELinux: failed to load policy [ 123.496778][ T5352] rust_binder: Error in use_page_slow: ESRCH [ 123.496804][ T5352] rust_binder: use_range failure ESRCH [ 123.505289][ T5352] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 123.512989][ T5352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 123.533240][ T5352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:172 [ 123.584712][ T5357] rust_binder: Write failure EFAULT in pid:1243 [ 123.593900][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 123.603225][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.868606][ T5369] input: syz0 as /devices/virtual/input/input80 [ 123.965530][ T5373] binder: Unknown parameter 'coyBLV"i5ntext' [ 124.224806][ T5378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1252 [ 124.650637][ T36] kauditd_printk_skb: 827 callbacks suppressed [ 124.650655][ T36] audit: type=1400 audit(1750417969.470:17642): avc: denied { read write } for pid=4574 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.737635][ T36] audit: type=1400 audit(1750417969.540:17643): avc: denied { read write open } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.825497][ T36] audit: type=1400 audit(1750417969.540:17644): avc: denied { ioctl } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.925375][ T36] audit: type=1400 audit(1750417969.630:17645): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 124.971720][ T5395] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.988515][ T5395] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 125.002181][ T5395] audit: backlog limit exceeded [ 125.007609][ T36] audit: type=1400 audit(1750417969.630:17646): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.062375][ T3715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.070487][ T36] audit: type=1400 audit(1750417969.630:17647): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.144698][ T5404] binder: Unknown parameter 'coyBLV"i5ntext' [ 125.207619][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x4 [ 125.215162][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x2 [ 125.233255][ T31] hid-generic 0000:0000:0000.000C: unknown main item tag 0x3 [ 125.250938][ T31] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 125.275504][ T5406] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 125.308369][ T5406] rust_binder: Write failure EINVAL in pid:192 [ 125.457316][ T5413] fido_id[5413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.486566][ T5417] rust_binder: Error while translating object. [ 125.486591][ T5417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 125.498654][ T5417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:194 [ 126.261945][ T5458] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 126.261971][ T5458] rust_binder: Read failure Err(EFAULT) in pid:1274 [ 126.565164][ T5477] rust_binder: Write failure EFAULT in pid:210 [ 126.674781][ T5489] binder: Unknown parameter 'coyBLV"i5ntext' [ 126.902267][ T5498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.976727][ T5497] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 126.998624][ T5497] rust_binder: Write failure EINVAL in pid:1283 [ 127.043258][ T5502] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.210486][ T5506] binder: Unknown parameter 'coyBLV"i5ntext' [ 127.234088][ T5510] rust_binder: Write failure EINVAL in pid:1286 [ 127.234533][ T5510] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 127.260976][ T5510] rust_binder: Write failure EINVAL in pid:1286 [ 127.451497][ T5514] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 127.511447][ T5514] rust_binder: Write failure EINVAL in pid:222 [ 127.734710][ T5524] binder: Unknown parameter 'coyBLV"i5ntext' [ 128.070710][ T5535] rust_binder: Write failure EINVAL in pid:228 [ 128.354889][ T5545] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.456668][ T5548] SELinux: failed to load policy [ 128.557804][ T5548] rust_binder: Error while translating object. [ 128.557840][ T5548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 128.574280][ T5548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1259 [ 128.989144][ T5562] binder: Unknown parameter 'coyBLV"i5ntext' [ 129.034836][ T5561] SELinux: policydb version -1727783929 does not match my version range 15-33 [ 129.047949][ T5561] SELinux: failed to load policy [ 129.241509][ T5569] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.254743][ T5569] rust_binder: Error in use_page_slow: ESRCH [ 129.261210][ T5569] rust_binder: use_range failure ESRCH [ 129.280742][ T5569] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 129.290188][ T5569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.333334][ T5569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 129.376261][ T5572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.408293][ T5569] rust_binder: Error in use_page_slow: ESRCH [ 129.446053][ T5569] rust_binder: use_range failure ESRCH [ 129.463640][ T5569] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 129.474380][ T5574] random: crng reseeded on system resumption [ 129.519874][ T5569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 129.519966][ T5569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423 [ 129.554373][ T5572] rust_binder: Write failure EFAULT in pid:423 [ 129.664418][ T36] kauditd_printk_skb: 881 callbacks suppressed [ 129.664436][ T36] audit: type=1400 audit(1750417974.490:18515): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.731896][ T36] audit: type=1400 audit(1750417974.490:18516): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.801757][ T36] audit: type=1400 audit(1750417974.490:18517): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.861549][ T36] audit: type=1400 audit(1750417974.490:18518): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.897694][ T36] audit: type=1400 audit(1750417974.520:18519): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.954236][ T36] audit: type=1400 audit(1750417974.520:18520): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.002208][ T36] audit: type=1400 audit(1750417974.550:18521): avc: denied { read } for pid=5586 comm="syz.3.1627" name="binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.027503][ T36] audit: type=1400 audit(1750417974.550:18522): avc: denied { read open } for pid=5586 comm="syz.3.1627" path="/dev/binderfs/binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.052711][ T5596] rust_binder: Write failure EINVAL in pid:1308 [ 130.054867][ T5596] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 130.062174][ T5596] rust_binder: Read failure Err(EFAULT) in pid:1308 [ 130.077652][ T5598] audit: audit_backlog=65 > audit_backlog_limit=64 [ 130.091957][ T36] audit: type=1400 audit(1750417974.550:18523): avc: denied { ioctl } for pid=5586 comm="syz.3.1627" path="/dev/binderfs/binder0" dev="binder" ino=71 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 130.152649][ T5601] rust_binder: Error while translating object. [ 130.152679][ T5601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 130.159601][ T5601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1310 [ 130.188985][ T5598] kvm: Disabled LAPIC found during irq injection [ 130.282814][ T5604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 130.324732][ T5604] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 130.477731][ T5608] rust_binder: Write failure EINVAL in pid:432 [ 130.520342][ T5611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:434 [ 130.660501][ T5618] SELinux: failed to load policy [ 130.693599][ T5620] binder: Bad value for 'max' [ 131.118500][ T5643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1295 [ 131.164885][ T5645] __vm_enough_memory: pid: 5645, comm: syz.1.1646, bytes: 281474976845824 not enough memory for the allocation [ 131.219330][ T5647] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 131.219362][ T5647] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1298 [ 131.283340][ T5649] __vm_enough_memory: pid: 5649, comm: syz.0.1648, bytes: 281474976845824 not enough memory for the allocation [ 131.345941][ T5654] binder: Unknown parameter 'fscontext?}' [ 131.364162][ T5656] __vm_enough_memory: pid: 5656, comm: syz.0.1648, bytes: 281474976845824 not enough memory for the allocation [ 131.398050][ T5652] SELinux: failed to load policy [ 131.571700][ T5668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1305 [ 131.681786][ T5672] binder: Unknown parameter 'coyBLV"i5ntext' [ 131.818621][ T5679] rust_binder: Error while translating object. [ 131.818662][ T5679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.826050][ T5679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 131.959374][ T5686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 131.982561][ T5687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.045080][ T5684] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 132.111431][ T5686] SELinux: ebitmap: truncated map [ 132.124537][ T5686] SELinux: failed to load policy [ 132.130405][ T5686] rust_binder: Error in use_page_slow: ESRCH [ 132.130422][ T5686] rust_binder: use_range failure ESRCH [ 132.138897][ T5686] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 132.153706][ T5686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 132.161545][ T5686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:453 [ 132.297332][ T5704] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.413686][ T5713] SELinux: policydb version -845211227 does not match my version range 15-33 [ 132.443291][ T5713] SELinux: failed to load policy [ 132.585969][ T5718] binder: Unknown parameter 'coyBLV"i5ntext' [ 132.607192][ T5717] binder: Unknown parameter 'context' [ 132.923722][ T5733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 132.925808][ T5733] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 132.956829][ T5721] rust_binder: Read failure Err(EFAULT) in pid:1338 [ 132.978564][ T5733] rust_binder: Write failure EINVAL in pid:462 [ 133.003252][ T5733] rust_binder: Error while translating object. [ 133.043279][ T5733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.074701][ T5733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 133.078479][ T5737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.240417][ T5752] rust_binder: Error while translating object. [ 133.251966][ T5749] input: syz1 as /devices/virtual/input/input81 [ 133.271233][ T5752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 133.271268][ T5752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1342 [ 133.402543][ T5758] rust_binder: Write failure EINVAL in pid:467 [ 133.454948][ T5760] binder: Unknown parameter 'coyBLV"i5ntext' [ 133.730376][ T5770] SELinux: ebitmap: truncated map [ 133.779891][ T5770] SELinux: failed to load policy [ 133.842274][ T5770] rust_binder: Write failure EINVAL in pid:471 [ 133.944583][ T5777] input: syz1 as /devices/virtual/input/input82 [ 133.978078][ T5779] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 133.978100][ T5779] rust_binder: Read failure Err(EFAULT) in pid:474 [ 134.474514][ T5787] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 134.481085][ T5787] rust_binder: Read failure Err(EFAULT) in pid:476 [ 134.523856][ T5787] rust_binder: Write failure EINVAL in pid:476 [ 134.648862][ T5806] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.683834][ T36] kauditd_printk_skb: 1098 callbacks suppressed [ 134.683853][ T36] audit: type=1400 audit(1750417979.510:19599): avc: denied { read write } for pid=5798 comm="syz.4.1692" name="binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.735706][ T5802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.736122][ T5802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.742640][ T36] audit: type=1400 audit(1750417979.540:19600): avc: denied { read write open } for pid=5798 comm="syz.4.1692" path="/dev/binderfs/binder1" dev="binder" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.849521][ T5809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.857562][ T36] audit: type=1400 audit(1750417979.550:19601): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.859701][ T5809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.876154][ T36] audit: type=1400 audit(1750417979.550:19602): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 134.925889][ T5811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.967761][ T36] audit: type=1400 audit(1750417979.550:19603): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=480 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.010955][ T36] audit: type=1400 audit(1750417979.560:19604): avc: denied { ioctl } for pid=5798 comm="syz.4.1692" path="/dev/binderfs/binder1" dev="binder" ino=38 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.046495][ T36] audit: type=1400 audit(1750417979.560:19605): avc: denied { ioctl } for pid=5798 comm="syz.4.1692" path="/dev/binderfs/binder1" dev="binder" ino=38 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.081126][ T36] audit: type=1400 audit(1750417979.590:19606): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.106273][ T36] audit: type=1400 audit(1750417979.590:19607): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.134411][ T36] audit: type=1400 audit(1750417979.590:19608): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 135.324240][ T5820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.909807][ T5835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:309 [ 136.051147][ T5838] SELinux: truncated policydb string identifier [ 136.089149][ T5838] SELinux: failed to load policy [ 136.094881][ T5838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1366 [ 136.183270][ T5840] rust_binder: Write failure EINVAL in pid:487 [ 136.424987][ T5860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.655813][ T5868] binder: Bad value for 'max' [ 136.741095][ T5875] rust_binder: Write failure EINVAL in pid:497 [ 136.819953][ T5879] binder: Unknown parameter 'coyBLV"i5ntext' [ 137.174892][ T5895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.188229][ T5896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502 [ 137.506695][ T5907] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.552821][ T5909] input: syz1 as /devices/virtual/input/input85 [ 137.582064][ T5907] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 137.638574][ T5909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:507 [ 137.724600][ T5911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 137.746213][ T5911] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 137.789538][ T5911] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 137.820569][ T5911] rust_binder: Write failure EINVAL in pid:332 [ 137.832725][ T5913] binder: Unknown parameter 'coyBLV"i5ntext' [ 137.941150][ T5917] tun0: tun_chr_ioctl cmd 1074025675 [ 137.952592][ T5917] tun0: persist disabled [ 138.047827][ T5921] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.048292][ T5921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1385 [ 138.083771][ T5921] rust_binder: Error while translating object. [ 138.108250][ T5921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 138.114665][ T5921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1385 [ 138.259121][ T5929] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.506049][ T5944] rust_binder: Write failure EFAULT in pid:515 [ 138.524404][ T5945] rust_binder: Write failure EFAULT in pid:515 [ 138.564153][ T5950] binder: Unknown parameter 'coyBLV"i5ntext' [ 138.750893][ T5955] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.773942][ T5955] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 139.012281][ T5966] SELinux: security_context_str_to_sid () failed with errno=-22 [ 139.264860][ T5981] rust_binder: Error while translating object. [ 139.264943][ T5981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 139.273267][ T5981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1365 [ 139.429839][ T5991] rust_binder: Write failure EFAULT in pid:350 [ 139.641275][ T6007] kvm: kvm [6006]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 139.693728][ T36] kauditd_printk_skb: 976 callbacks suppressed [ 139.693746][ T36] audit: type=1400 audit(1750417984.520:20585): avc: denied { append } for pid=6006 comm="syz.4.1759" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.783259][ T36] audit: type=1400 audit(1750417984.520:20586): avc: denied { append open } for pid=6006 comm="syz.4.1759" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.862744][ T36] audit: type=1400 audit(1750417984.520:20587): avc: denied { read write } for pid=6006 comm="syz.4.1759" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.923217][ T36] audit: type=1400 audit(1750417984.520:20588): avc: denied { read write open } for pid=6006 comm="syz.4.1759" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 139.968039][ T36] audit: type=1400 audit(1750417984.520:20589): avc: denied { ioctl } for pid=6006 comm="syz.4.1759" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 140.021335][ T36] audit: type=1400 audit(1750417984.520:20590): avc: denied { read write } for pid=6006 comm="syz.4.1759" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.077558][ T36] audit: type=1400 audit(1750417984.520:20591): avc: denied { read open } for pid=6006 comm="syz.4.1759" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.119138][ T36] audit: type=1400 audit(1750417984.520:20592): avc: denied { map } for pid=6006 comm="syz.4.1759" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.160062][ T36] audit: type=1400 audit(1750417984.520:20593): avc: denied { read } for pid=6006 comm="syz.4.1759" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.193381][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.555400][ T6040] input: syz0 as /devices/virtual/input/input86 [ 140.833752][ T6049] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 140.947699][ T6059] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 140.947725][ T6059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 140.964575][ T6059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1425 [ 141.006618][ T6062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:554 [ 141.035523][ T6062] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 141.064718][ T6062] rust_binder: Read failure Err(EFAULT) in pid:554 [ 141.117163][ T6072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 141.131156][ T6070] binder: Bad value for 'max' [ 141.172140][ T6070] binder: Bad value for 'max' [ 141.184367][ T6070] binder: Bad value for 'max' [ 141.185413][ T6072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1428 [ 141.225065][ T6070] binder: Bad value for 'max' [ 141.257044][ T6070] binder: Bad value for 'max' [ 141.273043][ T6070] binder: Bad value for 'max' [ 141.279706][ T6070] binder: Bad value for 'max' [ 141.286545][ T6070] binder: Bad value for 'max' [ 141.292484][ T6070] binder: Bad value for 'max' [ 141.299535][ T6070] binder: Bad value for 'max' [ 141.307888][ T6070] binder: Bad value for 'max' [ 141.316337][ T6070] binder: Bad value for 'max' [ 141.322050][ T6070] binder: Bad value for 'max' [ 141.329041][ T6070] binder: Bad value for 'max' [ 141.336277][ T6070] binder: Bad value for 'max' [ 141.374139][ T6070] binder: Bad value for 'max' [ 141.395901][ T6070] binder: Bad value for 'max' [ 141.410970][ T6070] binder: Bad value for 'max' [ 141.423454][ T6070] binder: Bad value for 'max' [ 141.430710][ T6070] binder: Bad value for 'max' [ 141.439528][ T6087] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 141.451076][ T6087] rust_binder: Write failure EINVAL in pid:563 [ 141.458716][ T6070] binder: Bad value for 'max' [ 141.474146][ T6070] binder: Bad value for 'max' [ 141.480155][ T6070] binder: Bad value for 'max' [ 141.489316][ T6070] binder: Bad value for 'max' [ 141.508382][ T6070] binder: Bad value for 'max' [ 141.530115][ T6070] binder: Bad value for 'max' [ 141.536458][ T6070] binder: Bad value for 'max' [ 141.542470][ T6070] binder: Bad value for 'max' [ 141.557786][ T6070] binder: Bad value for 'max' [ 141.564265][ T6070] binder: Bad value for 'max' [ 141.570174][ T6070] binder: Bad value for 'max' [ 141.585731][ T6070] binder: Bad value for 'max' [ 141.613556][ T6089] rust_binder: Write failure EFAULT in pid:566 [ 141.616953][ T6070] binder: Bad value for 'max' [ 141.755171][ T6092] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 141.794161][ T6092] rust_binder: Write failure EINVAL in pid:371 [ 142.077257][ T6107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 142.085626][ T6109] binder: Unknown parameter 'defcontextun' [ 142.104893][ T6111] binder: Unknown parameter 'context' [ 142.113231][ T6107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:573 [ 142.277157][ T6113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.381993][ T6125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1439 [ 142.382221][ T6122] rust_binder: Write failure EFAULT in pid:1391 [ 142.400804][ T6125] rust_binder: Write failure EINVAL in pid:1439 [ 142.445773][ T6122] binder: Unknown parameter 'contextrfs/binder1' [ 142.645283][ T6134] binder: Unknown parameter 'processor : 0 [ 142.645283][ T6134] vendor_id : GenuineIntel [ 142.645283][ T6134] cpu family : 6 [ 142.645283][ T6134] model : 79 [ 142.645283][ T6134] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 142.645283][ T6134] stepping : 0 [ 142.645283][ T6134] microcode : 0xffffffff [ 142.645283][ T6134] cpu MHz : 2199.998 [ 142.645283][ T6134] cache size : 56320 KB [ 142.645283][ T6134] physical id : 0 [ 142.645283][ T6134] siblings : 2 [ 142.645283][ T6134] core id : 0 [ 142.645283][ T6134] cpu cores : 1 [ 142.645283][ T6134] apicid : 0 [ 142.645283][ T6134] initial apicid : 0 [ 142.645283][ T6134] fpu : yes [ 142.645283][ T6134] fpu_exception : yes [ 142.645283][ T6134] cpuid level : 13 [ 142.645283][ T6134] wp : yes [ 142.645283][ T6134] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 142.645283][ T6134] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 142.731507][ T6142] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 142.736099][ T6130] rust_binder: inc_ref_done called when no active inc_refs [ 143.123026][ T6149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1402 [ 143.173621][ T6154] input: syz0 as /devices/virtual/input/input88 [ 143.322233][ T6154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:578 [ 143.375698][ T6164] rust_binder: Error while translating object. [ 143.385284][ T6163] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 143.412907][ T6163] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 143.427441][ T6164] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.427475][ T6164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1450 [ 143.665033][ T6176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 143.665073][ T6176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1411 [ 143.704700][ T6181] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 143.729533][ T6181] rust_binder: Write failure EFAULT in pid:392 [ 143.804559][ T6178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1792 (3584 ns) > initial count (48 ns). Using initial count to start timer. [ 143.953954][ T6188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.413791][ T6212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1459 [ 144.451173][ T6212] rust_binder: Write failure EINVAL in pid:1459 [ 144.581481][ T6221] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 144.703892][ T36] kauditd_printk_skb: 1230 callbacks suppressed [ 144.703913][ T36] audit: type=1400 audit(1750417989.530:21816): avc: denied { read write } for pid=4574 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.751516][ T6227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:591 [ 144.763560][ T6228] rust_binder: Write failure EFAULT in pid:1426 [ 144.770495][ T6229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.793238][ T36] audit: type=1400 audit(1750417989.530:21817): avc: denied { read write open } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.823356][ T6232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.838086][ T6234] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.846537][ T6232] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 144.854906][ T6235] audit: audit_backlog=66 > audit_backlog_limit=64 [ 144.863440][ T6232] audit: backlog limit exceeded [ 144.882778][ T6234] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 144.887353][ T36] audit: type=1400 audit(1750417989.530:21818): avc: denied { ioctl } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 144.896985][ T3715] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.983680][ T6240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 144.987299][ T6240] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 145.080604][ T6244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.199809][ T6253] binder: Unknown parameter '' [ 145.272836][ T6257] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 145.292015][ T6257] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 145.310551][ T6257] rust_binder: Read failure Err(EFAULT) in pid:417 [ 145.519365][ T6265] rust_binder: Write failure EFAULT in pid:606 [ 145.594683][ T6269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 145.600981][ T6269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:421 [ 145.811772][ T6285] binder: Unknown parameter 'coyBLV"i5ntext' [ 145.852588][ T6284] rust_binder: Error while translating object. [ 145.852617][ T6284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 145.862285][ T6284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:614 [ 145.884282][ T6290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.054141][ T6299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.264669][ T6309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.511993][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 146.543762][ T6315] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.597542][ T6305] binder: Bad value for 'max' [ 147.265447][ T6342] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 147.363539][ T6345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.385532][ T6345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.402226][ T6345] rust_binder: Write failure EINVAL in pid:435 [ 147.410275][ T6347] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 147.468317][ T6347] SELinux: policydb magic number 0x40000 does not match expected magic number 0xf97cff8c [ 147.493240][ T6347] SELinux: failed to load policy [ 147.506774][ T6350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.509257][ T6350] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 147.584469][ T6347] rust_binder: Write failure EINVAL in pid:1461 [ 147.734293][ T6356] binder: Unknown parameter '' [ 148.103383][ T6383] rust_binder: Read failure Err(EAGAIN) in pid:459 [ 148.297007][ T6391] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.323925][ T6391] rust_binder: Got transaction with invalid offset. [ 148.343703][ T6391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.350447][ T6391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1478 [ 148.408920][ T6394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 148.431189][ T6394] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 148.473224][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.473228][ T2493] Bluetooth: hci0: command 0x1003 tx timeout [ 148.553238][ T2495] Bluetooth: hci1: command 0x1003 tx timeout [ 148.553407][ T53] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 148.690571][ T6398] binder: Unknown parameter '' [ 148.849231][ T6417] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 148.853811][ T6418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471 [ 149.100249][ T6426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.302367][ T6426] rust_binder: Error while translating object. [ 149.345783][ T6426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 149.377065][ T6426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1488 [ 149.629094][ T6444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.641761][ T6446] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.666126][ T6447] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 149.706740][ T6446] kvm: user requested TSC rate below hardware speed [ 149.741498][ T36] kauditd_printk_skb: 878 callbacks suppressed [ 149.741516][ T36] audit: type=1400 audit(1750417994.560:22692): avc: denied { read } for pid=6448 comm="syz.1.1896" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.758348][ T6447] kvm: user requested TSC rate below hardware speed [ 149.813070][ T36] audit: type=1400 audit(1750417994.560:22693): avc: denied { read open } for pid=6448 comm="syz.1.1896" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 149.879059][ T36] audit: type=1400 audit(1750417994.690:22694): avc: denied { read write } for pid=4574 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.923337][ T36] audit: type=1400 audit(1750417994.690:22695): avc: denied { read write open } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.989498][ T36] audit: type=1400 audit(1750417994.690:22696): avc: denied { ioctl } for pid=4574 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.025460][ T6458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:642 [ 150.027192][ T6455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.037352][ T6457] rust_binder: Write failure EFAULT in pid:1498 [ 150.046289][ T6459] rust_binder: Write failure EFAULT in pid:1498 [ 150.056897][ T6455] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 150.093330][ T36] audit: type=1400 audit(1750417994.690:22697): avc: denied { read write } for pid=3715 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.198573][ T36] audit: type=1400 audit(1750417994.690:22698): avc: denied { read write open } for pid=3715 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.231017][ T6464] input: syz0 as /devices/virtual/input/input91 [ 150.267592][ T6464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.276115][ T94] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.283906][ T6464] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 150.472437][ T6470] FAULT_INJECTION: forcing a failure. [ 150.472437][ T6470] name failslab, interval 1, probability 0, space 0, times 1 [ 150.503238][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.1.1903 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 150.503274][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.503294][ T6470] Call Trace: [ 150.503302][ T6470] [ 150.503310][ T6470] __dump_stack+0x21/0x30 [ 150.503341][ T6470] dump_stack_lvl+0x10c/0x190 [ 150.503366][ T6470] ? __cfi_dump_stack_lvl+0x10/0x10 [ 150.503392][ T6470] dump_stack+0x19/0x20 [ 150.503414][ T6470] should_fail_ex+0x3d9/0x530 [ 150.503438][ T6470] should_failslab+0xac/0x100 [ 150.503466][ T6470] __kmalloc_cache_node_noprof+0x46/0x3d0 [ 150.503491][ T6470] ? __get_vm_area_node+0x154/0x3a0 [ 150.503511][ T6470] ? kasan_save_track+0x3e/0x80 [ 150.503537][ T6470] __get_vm_area_node+0x154/0x3a0 [ 150.503558][ T6470] __vmalloc_node_range_noprof+0x33c/0x1420 [ 150.503580][ T6470] ? copy_process+0x538/0x3220 [ 150.503604][ T6470] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 150.503627][ T6470] ? kasan_save_alloc_info+0x40/0x50 [ 150.503647][ T6470] ? arch_dup_task_struct+0x5b/0xe0 [ 150.503672][ T6470] ? __asan_memcpy+0x5a/0x80 [ 150.503696][ T6470] dup_task_struct+0x5bd/0xc50 [ 150.503714][ T6470] ? copy_process+0x538/0x3220 [ 150.503733][ T6470] ? copy_process+0x3220/0x3220 [ 150.503753][ T6470] ? __kasan_check_write+0x18/0x20 [ 150.503776][ T6470] copy_process+0x538/0x3220 [ 150.503799][ T6470] ? __cfi_copy_process+0x10/0x10 [ 150.503842][ T6470] ? __kasan_check_write+0x18/0x20 [ 150.503869][ T6470] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 150.503901][ T6470] vhost_task_create+0x1d6/0x350 [ 150.503928][ T6470] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 150.503959][ T6470] ? __cfi_vhost_task_create+0x10/0x10 [ 150.503986][ T6470] ? __cfi_vhost_task_fn+0x10/0x10 [ 150.504012][ T6470] ? __kasan_check_write+0x18/0x20 [ 150.504033][ T6470] ? mutex_lock+0x92/0x1c0 [ 150.504051][ T6470] ? __cfi_mutex_lock+0x10/0x10 [ 150.504070][ T6470] ? kernel_text_address+0xa9/0xe0 [ 150.504090][ T6470] kvm_mmu_post_init_vm+0x1a6/0x310 [ 150.504116][ T6470] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 150.504139][ T6470] ? _parse_integer_limit+0x195/0x1e0 [ 150.504161][ T6470] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 150.504184][ T6470] ? kstrtoull+0x13b/0x1e0 [ 150.504203][ T6470] ? kstrtouint+0x78/0xf0 [ 150.504222][ T6470] ? ioctl_has_perm+0x1aa/0x4d0 [ 150.504249][ T6470] ? __asan_memcpy+0x5a/0x80 [ 150.504271][ T6470] ? ioctl_has_perm+0x3e0/0x4d0 [ 150.504309][ T6470] ? has_cap_mac_admin+0xd0/0xd0 [ 150.504335][ T6470] ? __kasan_check_write+0x18/0x20 [ 150.504355][ T6470] ? mutex_lock_killable+0x92/0x1c0 [ 150.504374][ T6470] ? __cfi_mutex_lock_killable+0x10/0x10 [ 150.504392][ T6470] ? proc_fail_nth_write+0x17e/0x210 [ 150.504412][ T6470] kvm_vcpu_ioctl+0x96f/0xee0 [ 150.504438][ T6470] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 150.504463][ T6470] ? __cfi_vfs_write+0x10/0x10 [ 150.504485][ T6470] ? __kasan_check_write+0x18/0x20 [ 150.504505][ T6470] ? mutex_unlock+0x8b/0x240 [ 150.504522][ T6470] ? __cfi_mutex_unlock+0x10/0x10 [ 150.504539][ T6470] ? __fget_files+0x2c5/0x340 [ 150.504564][ T6470] ? __fget_files+0x2c5/0x340 [ 150.504590][ T6470] ? bpf_lsm_file_ioctl+0xd/0x20 [ 150.504611][ T6470] ? security_file_ioctl+0x34/0xd0 [ 150.504635][ T6470] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 150.504659][ T6470] __se_sys_ioctl+0x132/0x1b0 [ 150.504685][ T6470] __x64_sys_ioctl+0x7f/0xa0 [ 150.504709][ T6470] x64_sys_call+0x1878/0x2ee0 [ 150.504734][ T6470] do_syscall_64+0x58/0xf0 [ 150.504757][ T6470] ? clear_bhb_loop+0x35/0x90 [ 150.504803][ T6470] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 150.504832][ T6470] RIP: 0033:0x7fe952b8e929 [ 150.504859][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.504877][ T6470] RSP: 002b:00007fe953aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.504899][ T6470] RAX: ffffffffffffffda RBX: 00007fe952db5fa0 RCX: 00007fe952b8e929 [ 150.504914][ T6470] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 150.504926][ T6470] RBP: 00007fe953aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 150.504937][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.504949][ T6470] R13: 0000000000000000 R14: 00007fe952db5fa0 R15: 00007ffcc8b53a88 [ 150.504965][ T6470] [ 150.504973][ T6470] syz.1.1903: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 150.872780][ T6474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 150.903234][ T6470] ,cpuset=syz1,mems_allowed=0 [ 150.950448][ T6472] rust_binder: Read failure Err(EAGAIN) in pid:1504 [ 150.996567][ T6470] [ 151.023200][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.1.1903 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 151.023232][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.023244][ T6470] Call Trace: [ 151.023250][ T6470] [ 151.023259][ T6470] __dump_stack+0x21/0x30 [ 151.023286][ T6470] dump_stack_lvl+0x10c/0x190 [ 151.023310][ T6470] ? __cfi_dump_stack_lvl+0x10/0x10 [ 151.023337][ T6470] dump_stack+0x19/0x20 [ 151.023359][ T6470] warn_alloc+0x1bc/0x2a0 [ 151.023379][ T6470] ? __cfi_warn_alloc+0x10/0x10 [ 151.023398][ T6470] ? kasan_save_track+0x3e/0x80 [ 151.023423][ T6470] ? __get_vm_area_node+0x392/0x3a0 [ 151.023444][ T6470] __vmalloc_node_range_noprof+0x361/0x1420 [ 151.023470][ T6470] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 151.023491][ T6470] ? kasan_save_alloc_info+0x40/0x50 [ 151.023512][ T6470] ? arch_dup_task_struct+0x5b/0xe0 [ 151.023536][ T6470] ? __asan_memcpy+0x5a/0x80 [ 151.023558][ T6470] dup_task_struct+0x5bd/0xc50 [ 151.023576][ T6470] ? copy_process+0x538/0x3220 [ 151.023595][ T6470] ? copy_process+0x3220/0x3220 [ 151.023613][ T6470] ? __kasan_check_write+0x18/0x20 [ 151.023636][ T6470] copy_process+0x538/0x3220 [ 151.023658][ T6470] ? __cfi_copy_process+0x10/0x10 [ 151.023700][ T6470] ? __kasan_check_write+0x18/0x20 [ 151.023719][ T6470] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 151.023753][ T6470] vhost_task_create+0x1d6/0x350 [ 151.023778][ T6470] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 151.023809][ T6470] ? __cfi_vhost_task_create+0x10/0x10 [ 151.023836][ T6470] ? __cfi_vhost_task_fn+0x10/0x10 [ 151.023859][ T6470] ? __kasan_check_write+0x18/0x20 [ 151.023880][ T6470] ? mutex_lock+0x92/0x1c0 [ 151.023897][ T6470] ? __cfi_mutex_lock+0x10/0x10 [ 151.023915][ T6470] ? kernel_text_address+0xa9/0xe0 [ 151.023935][ T6470] kvm_mmu_post_init_vm+0x1a6/0x310 [ 151.023958][ T6470] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 151.023980][ T6470] ? _parse_integer_limit+0x195/0x1e0 [ 151.024001][ T6470] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 151.024024][ T6470] ? kstrtoull+0x13b/0x1e0 [ 151.024042][ T6470] ? kstrtouint+0x78/0xf0 [ 151.024061][ T6470] ? ioctl_has_perm+0x1aa/0x4d0 [ 151.024089][ T6470] ? __asan_memcpy+0x5a/0x80 [ 151.024110][ T6470] ? ioctl_has_perm+0x3e0/0x4d0 [ 151.024136][ T6470] ? has_cap_mac_admin+0xd0/0xd0 [ 151.024163][ T6470] ? __kasan_check_write+0x18/0x20 [ 151.024184][ T6470] ? mutex_lock_killable+0x92/0x1c0 [ 151.024203][ T6470] ? __cfi_mutex_lock_killable+0x10/0x10 [ 151.024221][ T6470] ? proc_fail_nth_write+0x17e/0x210 [ 151.024241][ T6470] kvm_vcpu_ioctl+0x96f/0xee0 [ 151.024266][ T6470] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 151.024291][ T6470] ? __cfi_vfs_write+0x10/0x10 [ 151.024313][ T6470] ? __kasan_check_write+0x18/0x20 [ 151.024333][ T6470] ? mutex_unlock+0x8b/0x240 [ 151.024350][ T6470] ? __cfi_mutex_unlock+0x10/0x10 [ 151.024367][ T6470] ? __fget_files+0x2c5/0x340 [ 151.024392][ T6470] ? __fget_files+0x2c5/0x340 [ 151.024418][ T6470] ? bpf_lsm_file_ioctl+0xd/0x20 [ 151.024438][ T6470] ? security_file_ioctl+0x34/0xd0 [ 151.024465][ T6470] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 151.024488][ T6470] __se_sys_ioctl+0x132/0x1b0 [ 151.024514][ T6470] __x64_sys_ioctl+0x7f/0xa0 [ 151.024539][ T6470] x64_sys_call+0x1878/0x2ee0 [ 151.024564][ T6470] do_syscall_64+0x58/0xf0 [ 151.024588][ T6470] ? clear_bhb_loop+0x35/0x90 [ 151.024616][ T6470] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 151.024643][ T6470] RIP: 0033:0x7fe952b8e929 [ 151.024658][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.024675][ T6470] RSP: 002b:00007fe953aa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.024696][ T6470] RAX: ffffffffffffffda RBX: 00007fe952db5fa0 RCX: 00007fe952b8e929 [ 151.024711][ T6470] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 151.024723][ T6470] RBP: 00007fe953aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 151.024735][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.024752][ T6470] R13: 0000000000000000 R14: 00007fe952db5fa0 R15: 00007ffcc8b53a88 [ 151.024768][ T6470] [ 151.024787][ T6470] Mem-Info: [ 151.443382][ T6470] active_anon:36368 inactive_anon:0 isolated_anon:0 [ 151.443382][ T6470] active_file:21830 inactive_file:2233 isolated_file:0 [ 151.443382][ T6470] unevictable:0 dirty:153 writeback:0 [ 151.443382][ T6470] slab_reclaimable:6808 slab_unreclaimable:70300 [ 151.443382][ T6470] mapped:35303 shmem:30356 pagetables:943 [ 151.443382][ T6470] sec_pagetables:0 bounce:0 [ 151.443382][ T6470] kernel_misc_reclaimable:0 [ 151.443382][ T6470] free:1497519 free_pcp:5065 free_cma:0 [ 151.533210][ T6470] Node 0 active_anon:152172kB inactive_anon:0kB active_file:87320kB inactive_file:8932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144512kB dirty:212kB writeback:400kB shmem:128324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4548kB pagetables:3672kB sec_pagetables:0kB all_unreclaimable? no [ 151.637424][ T6470] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB [ 151.667418][ T6470] lowmem_reserve[]: 0 3921 3921 [ 151.672321][ T6470] Normal free:3039392kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:146672kB inactive_anon:0kB active_file:87320kB inactive_file:8932kB unevictable:0kB writepending:112kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3884kB local_pcp:536kB free_cma:0kB [ 151.745259][ T6470] lowmem_reserve[]: 0 0 0 [ 151.749667][ T6470] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 151.789803][ T6470] Normal: 334*4kB (UME) 768*8kB (UME) 571*16kB (UME) 555*32kB (UME) 222*64kB (UME) 176*128kB (UME) 79*256kB (UME) 60*512kB (UME) 24*1024kB (UME) 9*2048kB (UE) 700*4096kB (UM) = 3032264kB [ 151.846573][ T6470] 55190 total pagecache pages [ 151.851299][ T6470] 0 pages in swap cache [ 151.865647][ T6470] Free swap = 124996kB [ 151.869848][ T6470] Total swap = 124996kB [ 151.903220][ T6470] 2097051 pages RAM [ 151.907132][ T6470] 0 pages HighMem/MovableOnly [ 151.911824][ T6470] 351520 pages reserved [ 151.932958][ T6470] 0 pages cma reserved [ 151.950272][ T6470] Memory allocations: [ 151.973221][ T6470] 0 B 0 init/main.c:1370 func:do_initcalls [ 151.980486][ T6470] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 152.023208][ T6470] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 152.041133][ T6470] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 152.060910][ T6470] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 152.073218][ T6470] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 152.090629][ T6470] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 152.099392][ T6470] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 152.107921][ T6470] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 152.116514][ T6470] 0 B 0 init/initramfs.c:101 func:find_link [ 152.731019][ T6517] SELinux: unknown common r [ 152.743262][ T6517] SELinux: failed to load policy [ 152.926817][ T6526] binder: Unknown parameter 'coyBLV"i5ntext' [ 153.027964][ T6528] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.375130][ T6543] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 153.387591][ T6542] binder: Unknown parameter 'uid' [ 153.401616][ T6543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664 [ 153.473042][ T6546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.491668][ T6546] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 153.513218][ T6546] rust_binder: Write failure EINVAL in pid:1524 [ 153.524499][ T6546] rust_binder: Write failure EFAULT in pid:1524 [ 153.593228][ T6552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509 [ 153.602062][ T6557] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.612454][ T6557] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 153.754992][ T6565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.779133][ T6565] rust_binder: Error while translating object. [ 153.787169][ T6565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 153.793430][ T6565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1528 [ 153.848586][ T6565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 153.872154][ T6565] rust_binder: Error while translating object. [ 153.879693][ T6565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.885950][ T6565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1528 [ 153.917650][ T6571] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.056843][ T6576] rust_binder: Write failure EFAULT in pid:1530 [ 154.325583][ T6583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.399269][ T6586] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 154.414324][ T6586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670 [ 154.443524][ T6585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.462911][ T6586] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 154.483393][ T6586] rust_binder: Write failure EINVAL in pid:670 [ 154.685552][ T6594] binder: Bad value for 'max' [ 154.778132][ T36] kauditd_printk_skb: 621 callbacks suppressed [ 154.778164][ T36] audit: type=1400 audit(1750417999.600:23308): avc: denied { ioctl } for pid=6590 comm="syz.0.1941" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 154.849208][ T36] audit: type=1400 audit(1750417999.650:23309): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.880036][ T6599] rust_binder: Error while translating object. [ 154.880069][ T6599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.893252][ T36] audit: type=1400 audit(1750417999.650:23310): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.895014][ T6599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1534 [ 154.912833][ T36] audit: type=1400 audit(1750417999.650:23311): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.977628][ T36] audit: type=1400 audit(1750417999.700:23312): avc: denied { read } for pid=6598 comm="syz.3.1943" name="binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.012474][ T6603] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 155.039204][ T6605] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 155.054366][ T36] audit: type=1400 audit(1750417999.700:23313): avc: denied { read open } for pid=6598 comm="syz.3.1943" path="/dev/binderfs/binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.088904][ T36] audit: type=1400 audit(1750417999.700:23314): avc: denied { ioctl } for pid=6598 comm="syz.3.1943" path="/dev/binderfs/binder0" dev="binder" ino=71 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.115056][ T36] audit: type=1400 audit(1750417999.700:23315): avc: denied { set_context_mgr } for pid=6598 comm="syz.3.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 155.149041][ T36] audit: type=1400 audit(1750417999.700:23316): avc: denied { map } for pid=6598 comm="syz.3.1943" path="/dev/binderfs/binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.174621][ T6604] rust_binder: inc_ref_done called when no active inc_refs [ 155.175374][ T6604] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 155.208350][ T36] audit: type=1400 audit(1750417999.700:23317): avc: denied { read } for pid=6598 comm="syz.3.1943" path="/dev/binderfs/binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.236983][ T6608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:673 [ 155.382223][ T6611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 155.421614][ T6608] rust_binder: Read failure Err(EFAULT) in pid:673 [ 155.617339][ T6619] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 155.622945][ T6620] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.781122][ T6627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1544 [ 155.949097][ T6642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1545 [ 155.958439][ T6646] random: crng reseeded on system resumption [ 156.024369][ T6652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1549 [ 156.045496][ T6652] rust_binder: Read failure Err(EFAULT) in pid:1549 [ 156.224431][ T305] bridge_slave_1: left allmulticast mode [ 156.258292][ T305] bridge_slave_1: left promiscuous mode [ 156.276266][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.282185][ T6657] kvm: kvm [6656]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 156.314012][ T305] bridge_slave_0: left allmulticast mode [ 156.323928][ T6657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1552 [ 156.333199][ T305] bridge_slave_0: left promiscuous mode [ 156.354470][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.524493][ T6665] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 156.534984][ T305] veth1_macvtap: left promiscuous mode [ 156.558213][ T305] veth0_vlan: left promiscuous mode [ 156.567113][ T6665] SELinux: failed to load policy [ 156.700089][ T6678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.808772][ T6688] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.816865][ T6688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 156.823345][ T6688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1557 [ 156.970801][ T6696] random: crng reseeded on system resumption [ 157.024510][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.031673][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.057105][ T6696] __vm_enough_memory: pid: 6696, comm: syz.0.1972, bytes: 281474976845824 not enough memory for the allocation [ 157.080823][ T6666] bridge_slave_0: entered allmulticast mode [ 157.108900][ T6666] bridge_slave_0: entered promiscuous mode [ 157.149227][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.177136][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.193242][ T6666] bridge_slave_1: entered allmulticast mode [ 157.199599][ T6666] bridge_slave_1: entered promiscuous mode [ 157.492666][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.499869][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.507210][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.514271][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.529855][ T6721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1568 [ 157.639817][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.683868][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.709552][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.716654][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.728895][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.736008][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.870799][ T6666] veth0_vlan: entered promiscuous mode [ 157.942811][ T6666] veth1_macvtap: entered promiscuous mode [ 158.687348][ T6772] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 158.687348][ T6772] attempt to add with overflow [ 158.713748][ T6774] rust_binder: Error while translating object. [ 158.713787][ T6774] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.743322][ T6774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 158.783362][ T6772] ------------[ cut here ]------------ [ 158.797865][ T6772] kernel BUG at rust/helpers/bug.c:7! [ 158.840637][ T6772] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 158.847721][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.0.1994 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 158.861192][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.871271][ T6772] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 158.876590][ T6772] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ca ab 5a 62 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 80 6f 13 ee 90 90 90 90 90 90 90 90 90 [ 158.896216][ T6772] RSP: 0018:ffffc9000d48f3f0 EFLAGS: 00010246 [ 158.902324][ T6772] RAX: 000000000000008c RBX: 1ffff92001a91e80 RCX: 8f5ef299e2c25300 [ 158.910322][ T6772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 158.918315][ T6772] RBP: ffffc9000d48f3f0 R08: ffffc9000d48f0e7 R09: 1ffff92001a91e1c [ 158.926316][ T6772] R10: dffffc0000000000 R11: fffff52001a91e1d R12: 0000000000000000 [ 158.934313][ T6772] R13: dffffc0000000000 R14: ffffc9000d48f420 R15: ffffc9000d48f450 [ 158.942309][ T6772] FS: 00007f980b4306c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 158.951262][ T6772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.957865][ T6772] CR2: 00007f980b3edd58 CR3: 000000013eb2c000 CR4: 00000000003526b0 [ 158.965865][ T6772] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 158.973856][ T6772] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.981848][ T6772] Call Trace: [ 158.985144][ T6772] [ 158.988094][ T6772] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 158.995589][ T6772] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 159.003603][ T6772] ? kernel_text_address+0xa9/0xe0 [ 159.008740][ T6772] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 159.022316][ T6772] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 159.028505][ T6772] ? arch_stack_walk+0x10b/0x170 [ 159.033474][ T6772] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 159.040706][ T6772] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 159.048639][ T6772] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 159.058565][ T6772] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 159.069183][ T6772] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 159.081455][ T6772] ? mas_wr_store_type+0x8eb/0x1ad0 [ 159.086687][ T6772] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 159.099489][ T6772] ? mas_preallocate+0x56e/0xc60 [ 159.104455][ T6772] ? __cfi_mas_preallocate+0x10/0x10 [ 159.109767][ T6772] ? kasan_save_alloc_info+0x40/0x50 [ 159.115096][ T6772] ? __asan_memset+0x39/0x50 [ 159.119734][ T6772] mmap_region+0x1371/0x1bd0 [ 159.124349][ T6772] ? __cfi_mmap_region+0x10/0x10 [ 159.129315][ T6772] ? __kasan_check_read+0x15/0x20 [ 159.134364][ T6772] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 159.140638][ T6772] ? file_mmap_ok+0x147/0x1a0 [ 159.145337][ T6772] do_mmap+0xb6d/0x13c0 [ 159.149519][ T6772] ? __cfi_do_mmap+0x10/0x10 [ 159.154131][ T6772] ? down_write_killable+0xe9/0x2d0 [ 159.159355][ T6772] ? __cfi_down_write_killable+0x10/0x10 [ 159.165018][ T6772] vm_mmap_pgoff+0x38f/0x4e0 [ 159.169640][ T6772] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 159.174773][ T6772] ? __fget_files+0x2c5/0x340 [ 159.179480][ T6772] ksys_mmap_pgoff+0x166/0x1e0 [ 159.184270][ T6772] __x64_sys_mmap+0x121/0x140 [ 159.188973][ T6772] x64_sys_call+0x13bf/0x2ee0 [ 159.193664][ T6772] do_syscall_64+0x58/0xf0 [ 159.198098][ T6772] ? clear_bhb_loop+0x35/0x90 [ 159.202808][ T6772] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.208751][ T6772] RIP: 0033:0x7f980a58e929 [ 159.213178][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.232795][ T6772] RSP: 002b:00007f980b430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.241204][ T6772] RAX: ffffffffffffffda RBX: 00007f980a7b6080 RCX: 00007f980a58e929 [ 159.249170][ T6772] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 159.257138][ T6772] RBP: 00007f980a610b39 R08: 0000000000000006 R09: 0000000000000000 [ 159.265109][ T6772] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 159.273082][ T6772] R13: 0000000000000000 R14: 00007f980a7b6080 R15: 00007ffd75ba6178 [ 159.281066][ T6772] [ 159.284088][ T6772] Modules linked in: [ 159.288157][ T6772] ---[ end trace 0000000000000000 ]--- [ 159.296611][ T6772] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 159.302049][ T6772] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 ca ab 5a 62 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 80 6f 13 ee 90 90 90 90 90 90 90 90 90 [ 159.321737][ T6772] RSP: 0018:ffffc9000d48f3f0 EFLAGS: 00010246 [ 159.327900][ T6772] RAX: 000000000000008c RBX: 1ffff92001a91e80 RCX: 8f5ef299e2c25300 [ 159.341128][ T6772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 159.373214][ T6772] RBP: ffffc9000d48f3f0 R08: ffffc9000d48f0e7 R09: 1ffff92001a91e1c [ 159.383416][ T6772] R10: dffffc0000000000 R11: fffff52001a91e1d R12: 0000000000000000 [ 159.391683][ T6772] R13: dffffc0000000000 R14: ffffc9000d48f420 R15: ffffc9000d48f450 [ 159.409921][ T6772] FS: 00007f980b4306c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 159.418942][ T6772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.433249][ T6772] CR2: 00007f6e72981178 CR3: 000000013eb2c000 CR4: 00000000003526b0 [ 159.441331][ T6772] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 159.451801][ T6772] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.460766][ T6772] Kernel panic - not syncing: Fatal exception [ 159.467200][ T6772] Kernel Offset: disabled [ 159.471526][ T6772] Rebooting in 86400 seconds..