last executing test programs: 18.669784335s ago: executing program 1 (id=1038): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0x138, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x5, 0x2, 0x2f}, @flat=@binder={0x73622a85, 0xb, 0x1}, @fda={0x66646185, 0x8, 0x1, 0x8}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/188, 0xbc, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/94, 0x5e, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x6, 0x0, 0x2d}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/115, 0x73, 0x0, 0x33}}, &(0x7f00000004c0)={0x0, 0x20, 0x38}}}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x7, 0x0, 0x39}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/81, 0x51, 0x0, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/58, 0x3a, 0x1, 0x2e}}, &(0x7f0000000640)={0x0, 0x20, 0x48}}, 0x40}, @acquire_done={0x40106309, 0x3}], 0x62, 0x0, &(0x7f00000007c0)="4d591a5db6578a205657919571752beeb16c5129a8390a6c4cefdcf426bf72f0f0a25c4fc13abce009438d9fe2942fbed6dce5608b60e5ff7753feafbcf14a03d42d98ce9bd68a45022d6b6cbb0d1154b0361f0825e99d4b05ddfeef5f1315d5d300"}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) 18.668395615s ago: executing program 1 (id=1040): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x561, 0x0, 0x9}]}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000002000000009e00000000040800000000000014197f11f4ee4c3d23cbe246fe36bcb3e0b526c09afb81929e562c9ee0196c61e2eaf50e17d7967d9bc41e4d73f958975672fe8ce769fa12331a0168d3cc6ac3bcb0b40600437c844f4918a45f18a24f6202a9dcb40314e1dba3cba28b342c6c8b65d6db476d21123a0ff3ded41534aabc1768b569f8e80b18196fbd49a20f1cfbf89d0dbbc50099a3a85370c803b712827e8faef36d"]) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x8080000, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f0000000140)={0x39, 0x48, "c1f95bd5524f573c8d4e9d092aeff74a9069ebf850adf889be7b51c75802d49fb4509b0809c2fdfb3adf7f046c24a9ee4a4fa11d70b2add6b3999212415c17b3867ca60f63fa3957"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$selinux_validatetrans(r4, &(0x7f00000002c0)={'system_u:object_r:hwclock_exec_t:s0', 0x20, 'system_u:object_r:default_t:s0', 0x20, 0x8, 0x20, '/usr/sbin/cupsd\x00'}, 0x68) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 18.659613165s ago: executing program 1 (id=1042): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@hyper}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2}) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000000)={'syz0\x00', {0x8, 0x7, 0x3, 0x3ff}, 0x23, [0x10, 0x6, 0x3, 0x1, 0x0, 0xfffffff7, 0x5, 0x0, 0x2, 0x9, 0x10, 0x5, 0xfffffff7, 0x9, 0xf3, 0x5, 0x9, 0x80000000, 0x6, 0x2, 0x50000, 0x200, 0x1ff, 0x10000, 0xfffffff7, 0xd, 0x3, 0x6, 0x80000001, 0x4, 0x9, 0xc4, 0x4, 0x5, 0xd6, 0x101, 0x41, 0xb, 0x3, 0xe, 0x9, 0x6, 0xa0d, 0x4, 0x7f, 0x1d8, 0x9, 0x1, 0x80000001, 0x9, 0xe, 0x10, 0xe2, 0x7fff, 0x8, 0xff, 0x3, 0x5, 0xd072, 0x8, 0xfffffff8, 0x9, 0x100, 0x1000], [0x0, 0x1ff, 0xd0000000, 0x80000001, 0x1, 0x6, 0x0, 0x5, 0x6f, 0x0, 0x100, 0x1b6f, 0x3, 0x9, 0x9, 0x9, 0x4, 0x94, 0x8000, 0xb, 0x4, 0x1, 0x1ff, 0x8, 0x5, 0x9, 0xfffffffc, 0x4, 0x10000, 0x9, 0x5, 0x1, 0x5, 0x6, 0x3, 0xffff, 0x8, 0xe8d7, 0x3a2, 0x80, 0x3ff, 0x64, 0x1000, 0x4, 0x6, 0x8001, 0xfffffff8, 0x7, 0x0, 0x7, 0x1ff, 0x81, 0x1, 0x913, 0x9, 0x8, 0x122, 0x3, 0xe4a, 0x7fff, 0x0, 0x5, 0x9, 0x8], [0x4, 0x1000, 0x9, 0x80000001, 0x5, 0xfffffffa, 0x401, 0x7, 0x4, 0x6, 0x3, 0x9, 0x2, 0x1, 0x1a, 0xffffffff, 0x4, 0x1, 0x8, 0x5, 0xfffffffe, 0x10000, 0x9, 0x40, 0x5, 0x3, 0x10, 0x0, 0x7, 0x0, 0x1, 0x0, 0x12, 0x5, 0x0, 0xac, 0x100, 0x200, 0x2, 0x2, 0xc73, 0x65c, 0x8, 0x7fffffff, 0xffffffff, 0x6, 0x6, 0x7, 0x80000000, 0xf, 0x3, 0x401, 0x7fff, 0x6, 0xc9, 0x80000000, 0xb, 0x1000, 0x7, 0xfffffc01, 0x6, 0x4], [0x59d, 0x1c7f4f6, 0x2, 0x0, 0x5, 0x3, 0x5, 0xffff7fff, 0x1, 0x8001, 0x4000000, 0x4, 0x80000001, 0x8, 0xaa1, 0xc57e, 0x6, 0x3, 0x1, 0x8, 0xfffffff7, 0x7fff, 0xd, 0xb60648b, 0x2, 0x1000, 0x7f, 0x8, 0x1973, 0x800, 0x0, 0x22b9, 0x2964, 0x5, 0x10000, 0x1, 0x80, 0x8, 0x7, 0x7, 0x801, 0x58, 0x80000001, 0x4, 0x2c73, 0x7fff, 0x8002, 0x1, 0x9, 0x6, 0xc7d, 0x7, 0x7, 0x71b, 0x2, 0x7, 0x100, 0xb, 0x8001, 0x7, 0xfffff800, 0x7, 0x7, 0x8]}, 0x45c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006140)={0x2020}, 0x2020) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) 16.582048367s ago: executing program 1 (id=1133): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x7fffffff, 0xffffffff, 0x833, 0x80000001, 0x5, "8da9327a6441c1718db9604456e21b8fe73fdb"}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) read(r3, &(0x7f0000000600)=""/193, 0xc1) read(r1, &(0x7f0000000100)=""/62, 0x3e) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) write$uinput_user_dev(r3, &(0x7f0000000700)={'syz0\x00', {0x3a06, 0xfffe, 0x300, 0x8}, 0x8, [0x3, 0x9, 0xffffffad, 0x100, 0x8001, 0x0, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8, 0x9, 0xffffff81, 0xfff, 0x2, 0xe, 0x4, 0x48c, 0x3, 0x2, 0x9, 0x4, 0x8, 0x64c4, 0x9, 0x7a8, 0x8001, 0x80000001, 0x34, 0x7, 0x8f, 0x6, 0x5, 0xffffffff, 0x7, 0x3, 0x2, 0xd, 0x5, 0x1, 0x80000000, 0x5, 0xfffffff7, 0x8, 0x0, 0x3, 0x0, 0x5, 0xe6b1, 0x5, 0x5, 0x3, 0x9, 0x8, 0xa3, 0xac, 0x0, 0xdd, 0x1, 0x8000, 0x6, 0x9, 0x1ff], [0xfff, 0x4, 0xff, 0x8, 0x0, 0x5, 0x6, 0x7, 0x7, 0x0, 0x7, 0xc646, 0x5, 0x8, 0x10, 0xc, 0x3, 0x7, 0x2, 0x8, 0x9, 0x8000, 0xa, 0x3ff, 0x2214d677, 0x2e83, 0x3, 0x3, 0x9, 0x0, 0x7, 0x0, 0x10001, 0x5, 0x8, 0x6, 0x7fff, 0x1, 0x2, 0xf, 0x9, 0x2376, 0x3, 0x34ec, 0x100, 0x30, 0x1, 0x9, 0x81, 0x0, 0x1ff, 0x6, 0x7, 0x1, 0x10001, 0x3, 0xed7b, 0x8001, 0xd153, 0xffffffff, 0x1, 0x10000, 0x2, 0x10000], [0x6, 0x3bce6e9e, 0xb5b0, 0x56, 0xe578, 0x5, 0xb, 0xe, 0x401, 0x8, 0xffff, 0x8, 0xa58, 0xfffffff9, 0xa41, 0x5, 0x4, 0x8, 0x9, 0x4, 0x0, 0x3c, 0x7fffffff, 0x5, 0x9, 0x398, 0x40, 0xaf, 0x7, 0x0, 0x7, 0x7fff, 0x80000001, 0xec, 0x0, 0x400, 0x749, 0x5, 0x6, 0x5, 0x6, 0x3, 0x9, 0x5, 0x8d, 0x1, 0xffff, 0xa5, 0x1, 0xde, 0x800007f, 0x9, 0x8, 0x6, 0x6, 0x9, 0x6, 0xffff, 0x40, 0x3, 0x3, 0x7, 0x1, 0x1525defe], [0x3, 0x7, 0xa84, 0x6, 0x8, 0x26, 0x3, 0x40000000, 0x1, 0x3, 0x689d, 0xfff, 0x5, 0x40, 0x4, 0x4426, 0x800, 0x0, 0x79, 0x9, 0x3ff, 0x80, 0xc000000, 0x6, 0xfffffff4, 0x4, 0x6, 0x4, 0x1, 0x2d, 0x3, 0x8, 0xa, 0xffff0000, 0xec8, 0xfffffffa, 0xc, 0x2, 0xf2, 0x1000, 0x59, 0x0, 0x9a, 0x6, 0x6, 0x9, 0x8, 0x5, 0xc01, 0x9, 0x2, 0x400, 0x6, 0x2d, 0xf35, 0x25, 0x4, 0x5, 0x9, 0x3, 0x803, 0x40, 0x0, 0x1]}, 0x45c) read(r0, &(0x7f0000000000)=""/175, 0xfffffe14) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xe, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xa) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 15.72023077s ago: executing program 1 (id=1172): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000001180)={0xb23, 0x51, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_CREATE_VCPU(r4, 0x40087707, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) close(0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000000, 0x6011, 0x0, 0x200000], 0x6000, 0x12002}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0x8090ae81, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0xc2a4a000) 15.641391982s ago: executing program 1 (id=1175): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) ioctl$UI_SET_RELBIT(r0, 0x8000552c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) read(r2, &(0x7f00000001c0)=""/219, 0xdb) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000dc0)=0x7) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.082101867s ago: executing program 3 (id=1528): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d00}]}) read(r0, &(0x7f0000000040)=""/106, 0x6a) 6.000736398s ago: executing program 3 (id=1530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 5.988173139s ago: executing program 3 (id=1531): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000002a80)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="dffdcf8f1dd5ea28b430fd335b4c1a361a2cf3a992720eb344004691b7d7e5fb0745462396a297d54d5cb4e07850986e48e7530a2becfca9e8da0da987769ad99c010ef1732f8d7d40dca42a87fc1d782e17ef483b8493ef317875dcfd6426edb8bc00fe6b9c056e1bf35ad8d18f2b79f7a0bdf660719dfa6c41908c9abf992dee087e675baebe2274509d301528", @ANYBLOB="34722edf5b42221e95fd82af4828981e172d3e899235ee0397937c98fbbfe206ebeed49565bca0c2824a06e8285be3a97f16a680db0f9f1ffdc72cd5d8540dad80e0864496e13d5010476bac5f72c460dedce8b02a4597f5cb10dee55b555cdbb68706b4b3c209e762510f82a4d240ec1694c3c741edc4546ca53d23c178b16cf5b2d72451eeaef9e8500e28dc3d5c2dad3003f4ade30c05cb44343f793595b561c5839b13a3bcf1256b995bc1a9177b5ba4", @ANYBLOB="0be4e04a337dcdd097501d4b2beb2e7ab3b1e8bd6bf4943ef2ff5b1e06d04e67016eb0555e1068caa7543222309ef97c892608c322b88f2e4626ab367dc08ba2499bdb4e163fe510e9d14372f6249e55be7b4fbac8572afcd3ba6843443ffc98e531b00a3e037d174b07e8386877b9428bea384c257b6bc74884edc5d8ac7cf7683b36e2637fd033ad72d421d40cc9480fae19a0fa0bf308438da053fb7e8eaf865004017e54fb320352cd4057f2283795a4b2201a60a3c9806a1a828a8332955338d5bb8df532892b1cae2bd6f8ee18a0001123df6e71fd5d896f1ee4e9fa62f608f57065c3245370a9ea1b11c137f65520965944ee7e28db1c65a379522a0c44273e92c4128fe310a6c1e237be9c1b8133a61a88ae93a131a19cfbaacc764621f9de7c793f1de41a73492b47de30b888d1253bb55124617fb1b213a5dffe6003893fb1d40149edefcbfa546cc030ffaaf4746f27f97c36aeb1eea87bb4232892fc7c10f87e5c254db970e997eaf35d515992e784d0778a82981f8817411da60643b3e1636c52cb65ff6789984e9bce00b98237cf4ac7e61bf472de41a5420c72abbd9a7a14b846b26796af52514f11fbb120aaf4fbd83ad98658b6e14829fd08951ae13a7ade9349c4f9f97f5a124f6b3e6189ec8b298ed54552c857caa1818bafb35524250029d4438476642a0d91048edd42cd1aa49ca40917320265cc63e351ca7f335297069f76f601a488449d3bd1a47f6f693d16df2e1feff92707d79f1422d893fe8a9005578e55b7aacae2e22767fa6fd417ef7345ec40cb04d4902a25cc927d45ddbe2019dea11b2446590ec2acb30272315f1627e3700498003ce38b3fa8ecf5ca1486ccfc1a93aa2ed7da7ab9e8048cbc4f25a9d777bae652f4cc02aef1f7ed9b1edfb4ba502610bea7cc0f06d699f39b99f11136e44923f1e469db079877b55ab1b75f676903dffb0187c16586f1a5108c011babdaef4ee93542acbb5fad72122442c1bfc12d9a8ab4e740e23f5da6412717378ad2a6fc517a8ba120c508bcbfd701aa6727d52112b130a44fae60172d44b6759680f4f2da93e208905c97c84ca7ef72496e252b9c61079672e4e0d61b1870baf88085d71e97d6118d3275a2f268338e59f5e7e83fa8d7b137024704fce8197475733eb20cc1ead797cdbd942787985d60fe0203fb29b1c17e1181fb6eb9db86bc57f446308a814d5571c691554206d70a1b2ea0b3816f8aa5c8567f96fbb522c7a7e60af150d1b9f632272270d7c26ed41f55ea9edac6f23d64431c4e1acf91c75f302470c2310cc0dad7e3e18b64ec65a3a47a229bd9de4b2e92f3eb0962a607e31d27088dfd04d15e054ecb5e45720442c5e2ac3b8fd594403025fd94bc6249d6034a4190f79b2246acaf72a7277ec0222041ca51330dd9f010d0a2dacb7489a8cd172e845ced3ec9c3195ee0ab4c25e8d14404d64502b284577003262d47282ab64e28a5f72278ad5fbf6a65dc6ab377da972689d5379b79be9e30c8ae8657b1bf896aca578b065b27472dd12b9eebd99e4c43114fc81a64e76131cc91b0906363ce67df7b7b40b26318010e2fd18861e038e46c5c26cdc4da03a8357025c7044236785395926238c6e1109b5343777f52b1edd47738b366073e12e41caeaea024297bc9ff9285bba921da6f33ae33e383767e7f85ddbfc34d0942f7b2485c6a3ba5b70527188637235c0772d55fc09b8d4bffe207b7ecd6eac19ef0081deabe2817d7793d3ec78c2ecb43dc4977b270e6c1f10e9ffe72bc39474963b85d620a451126342d3ba650a56b82593932dd8c88c819b645c274306ed4a560fb56271437bb7a4782016160f76a9445e8ec0955c5410310e5da61d554a0e6819d673c5a732b12b12bf5fda3357d75327315ad2cd2d13a9a6fa6396772558be346c21ee0cc78df261ae024b12c3408203edb1fb58e00306f75ee6021887f3172c827510d38fecfba7de9584266cd6cdcc3c91aafec81de5004cd94a93cc3c92910c9b7b6315e72d7ab0e0670fa2ec6ab417dacb1a420532c8b7ea306b618dab6f6f0052729b40100cdda4e8654a24b48cfbc638b0aef26278fcce0ddb7ba57bc959d07a7a57e9cd09bfeea13f85b99605edd3d3fa9c7f29d6c7ba20aa87ce6136d10d7e2945784221a60d94a9f1ad3ad501d01078567adff13796a38439174e4004115fab3905517ba1720797f3a33ebd20099edf6e4f6091c17429185f4fe51a732c20da006d2fbab08200d85c6470d005e895c9b3e7d46bf04e60d74d75840a6fcbe7b4401569787ae70fc81d13637306baaf025d04e2528cd647b222f5b36676606d604b6a52891ed9cbfe0f3e50edc7c9f2ca55e87a5f2186216e197961a621b7ada38564c35dc0b28bcf16a94f5c8fca355027570c1a0c673eed22bfb575bd2e010800bffcfa7cc31061fb82709887e51e55f0d205d269a9f298afdd8bc6d96c1a5c18343bcb9f205a7bec756ab000d1d5958925213084f65f1520b3fb50e0d7d61692591f22ff1364c2b83ec1ac1a1f45b5913d70900d9232653e21286f6ac873dac3c6dd41899b18d944b044a44c0dca346b2725dcea6ed0b3b1d2a3b08bcbfc205cd5e3447e3a3705dc9d047c85aa2a9cf911471f91ec45955ce2a006b6368ce6ec172ab8165548b78f7319273838946435db79b59fcdfdfd02731328e587fe2ab9f18d1268a2d5be6b675432271bccb1708c78b02f3c3f060c774827518d61358b710b29befbc989456c909300f474dab73f0bcdc15739b127c4edbb7e6dd6fcde29b8aa1c478a023db4b39327a886f11b07b74be07edba86502aef31da8c89e32fc89e477edc06f7f6d99c858846ad27a0d448894e9b426a88f16774b7c34eb8ca6afe220fc0601f18b68132bbbe2181bd511c70d2f8ed65063ae20ac7c81d0f5b13a4e44f6078c99f2be2435938922cd363fda1f9766848ec0799e84b678222e2830e5cb8bae666d47e891845fc6889f76acaafeaee4ced43dd3e589f3d370153b42ed2d3686474297c7a1d6c6aee361cc18525eb9e971deddc31d3897e3cd7997571b37a755f1903120432284676c7a1a834e8681bb350e4071c75e57e5cd2e9037393220149b7a8d474e1fe757151d6fdd0b681fc316fec976f05ee8a8c4e010a786b4c12f56c48b47f4762d602401c07c45706409ad07e11b3a039518c26b6d90d625ac7cdad6b5e066cd00632e86bd5bab6a995bd9e8d113bb700627f0474d6b054b10b8dacff7eba63170cc6c4288c0ac596fd928c1b70115313cc3e2d808df9e8a2d917a58c0fc2615bad282b30b8393e8379ea76a15b997804fffa16708f1defa6a135309e9707a605a4bf1574f68c5dc1a90df1a6898d9696a7668d1be999bbe63619cfd95d9fdf4cfa964bd85cb408f6f9bc4687af7227a5a9172aa3f1d91fd67932e2213720f2af2dc4ef49f74318a085b07d433f1bc0f1ea4c4425d5f0188cd8787c202ccf77188f4deee75bfd91587c5717e1a840d84acde433c3827e350b0d7428a17e0bf38f35ceea069d64754a2be31c9e7b43d7c64582a158ed2d4e8562265145c134255d046895ed41db00254a279421eed31f42e35ee9f91e70a973412a146797414bff4d0ef2f530b2c6c74d1d0afada35a04187daa95fb22ecf3d36206dd854a38cdb83ddefa9f54b01d55c5f68cf7c419ceee59158f3ceffb81b8a70e0503ee121bfb2269aeab8186c8be80bbd22060cbf6a545c8a7f73199b1e21c926a727bc4955b82923df375a6cb4d39b1f09bb6866a76a09f15e7d4103686fc25c7169f2cc5f37d6ea8ea092d2963fc11feabb206c5a324fa7725853fbd387ec84fbcc5861bd5a7443aef085da07d8c5bc5a5f856eb45090a1a3152dd0f9bcf080945bc6ad42380300f449a76ad4a32a6104d3519571cc0c675f7850dfeaaa45e62fa2ad6b1e3d0c23498dd6966938b30b58623719a4bad7529860d5fe016f01d06996d0d294b43435e7c9d4f1a6a4b116acd79d30d68b9c10fd6e9bffd8bcba66be7921987743c8f6b0230a350fd8069f7f8bf5dcde68aa94c8b657a5c9a309cbc7d6e811a320cdfc2dad84a94ed928fef18cf6e1833eb69a709b0cca7718950b3bdc6a24cb311885168a38af99b0ade497b97bd01593e6a9b0d91ffc45cb78282fcc1cc413d09539aa98bbc57c53e564b80ae1f6cb594d477aac903973cb6f60b7f26226111947c39dfeb615a5e179920e8863ee0823e88f2d48ac6b1120a89f19f93ed2694b9b69fe571e24c9b602772f07836b565a63a7f1cd687de306864c9925c501c235bb565ea290f1649a2788264a639f556a8132f93aa6636fe2b5d33828d950a9f2a8bead95f22d7a5986e378aa6e1a9f79e8f8b766ffe0fe1bcc5395b7cb2c66a475a2ad62e3e62abbd958e10151e8defae421e4de728f9736294c61b3b152e146fd97d6a4b77df0f1382bb99af52bf50209c61a9d57f7eb78ee909533d7f52f9230accb2361d41795228fe5717dababa5da7838445a76e5ba1e85393a465754f3838f9ffcdbf458a43448a470690aa9a5288907aa50d74fed3336a3992ca1a9f2f4380092181b227f899266c3b1cc7a6ea3c737b69ad4366e0721bacbd1b8a63146c7c688b5603fad40b25a825fe63c723df9e63f5b87938c1274e022d3e2a22d45f24884a0febca5267007ba911f3311dd2eafb29e6479511f23557eac20f9caad30227f15ad3c349e0f33bd978da03a934cd4db65ebea6bd91b3f3f57b152a279dc415ed0d383297dd126e74c3cf8720cd51afe41cd9070a208fa8f6d6f25ea1e2eaebb74dcc84a4182ae98cd550cb89996f8aba3b9ecf2c1a1c28a6c8ae02a37f190ef8ffe9c9d8f9a683364ae81cba22e1b66223a91d1fbe109070af5ee739c8a9c4279694eec599d112e1724c0fe874b46f6a2a498626ffb1e8d820c2b77a155368c539fb078ec25c2997bb0df608c64d40d5c9034b78ac56ed1e87dfe93f3ba5170663385e4539eda369be74b8cdbf7a1e684fa2cb8d5707e774673b6d2ace792a204d8da79f1cb7fc2199f3cf074bf9ed8bd14c92c06dd626ae0a2397ad57a2d65c74445f2e32eacb86cb543e15adb79cfeb26cee5d4b808719000d83ba391a3f2002fa2ece30923c2aaae0cb64a6aaaaadbb4da097616f6ece80f72b4c96b78abf0a668b7f8c9525e2ec3d9a71d1769551fe3be7d1e79aa87e87647b576472cead91d1273d63a4b31a40c03c822ee578fcf8e1969f02451335fca53f66d5090fe4c4df66a2adde35aefe8efd39481690ed2119f7838ba50c381f96bbe955df0fe749295d08d299514b9770e343ebcf38e843e189e0882599a8eaa420f0c588736e1742556477036ec7c9323d80b2bfeabe64ceda36a8cd9218df0dace1c7af37cdadd9e60007ae0e882ef19df5bb492e27954c60eaf9464ab63c29130297552b7f4e09352be6ca114375a10dd410c31c73afeb34c139ef97e7013e78aa920632e2f2ad30f972e3a6858cc7215358ad0ff7a93bcb561c32bf7a44ddb51a892ef4ba8985a00797ed0870c1c2050e2781d171069f788db4e47fe7e288d87d740977e035b185d8c5237411589b0db014a2392d6c489eb8f1579a3e2f7ae7da5644c286352b7963a170b9e70583c5fcb884fd2ccddbd9872256c50c915d30d02433cddea9a5ce1fae6531d198eb105548e0993b7618557724fb3029e99a14626ceac828c21dca73871b5bd480f75e43e27bea97073462138507741e16b07bf63a86e7815353846417cbbf1464dee621a63719621", @ANYRESDEC=r0, @ANYRES32=0x0]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r6, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000000)={0x3}) openat$cgroup_freezer_state(r7, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffffa) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) 5.90973221s ago: executing program 3 (id=1533): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "c96c8fe9124f9ba1"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) syz_clone(0x20180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x9854, 0xffffffffffffffff, 'id1\x00'}) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'rlimit'}, {0x2d, 'perf_event'}, {0x2d, 'pids'}]}, 0x1a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'memory'}]}, 0x8) 5.836480641s ago: executing program 3 (id=1536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x9], 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x99) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_DEBUGREGS(r9, 0x8080aea1, &(0x7f0000001040)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1) ioctl$RTC_WKALM_SET(r1, 0x40187014, &(0x7f0000000000)={0x3, 0xfd, {0x3c, 0x0, 0x0, 0x3, 0x6, 0x60, 0x1, 0x4, 0x1}}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 5.475169657s ago: executing program 3 (id=1554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x1}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async, rerun: 64) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) (rerun: 64) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000500)={0x0, r3}) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 4.817592607s ago: executing program 0 (id=1560): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='-+\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x490, 0x0, 0x4}]}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000080)={0x20000, 0x0, [0x0, 0x1, 0x4, 0xffffffffffff339e, 0x0, 0x9, 0x8000, 0xb1a]}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x6, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xcc) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='!{[\x00') 4.339821584s ago: executing program 0 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x4, 0x76e, 0x2, 0x6, 0x0, 0x8, 0x7}, {0x0, 0xffffffdb, 0x0, 0x741, 0x3, 0xfff, 0x5}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 3.005863295s ago: executing program 0 (id=1564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.stat\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r3, r3, 0x2) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000240)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000540)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000010000040"]) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2.193000436s ago: executing program 0 (id=1566): mount$binderfs(&(0x7f0000000100), &(0x7f0000002200)='./binderfs\x00', &(0x7f0000002240), 0x10, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x110) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x110) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x8, 0x6, '\x00', 0x1f8630ad}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000340)={0x1e0003, 0x0, [0xd, 0xff, 0xfffffffffffffff7, 0x3e00000000000000, 0x7fffffff, 0x7, 0x9, 0x8]}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x46) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x46) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0xb5, 0x7}) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000a, 0x810, r4, 0xa30cc000) ioctl$TUNGETDEVNETNS(r4, 0xff03, 0x0) close(0x4) (async) close(0x4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close(r5) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000001e0100"]) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYRES64=r8], 0x8) 1.26669644s ago: executing program 0 (id=1568): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 205.581347ms ago: executing program 0 (id=1570): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00', 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x700) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x2}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x420302, 0x0) read$FUSE(r4, &(0x7f0000000d40)={0x2020}, 0x2020) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) (async) close(r5) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000001240)={'veth0_macvtap\x00', 0x400}) (async) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000100)={'virt_wifi0\x00'}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007b01"]) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1, 0x11, r4, 0x9) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) 205.358267ms ago: executing program 32 (id=1175): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) ioctl$UI_SET_RELBIT(r0, 0x8000552c, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100400, 0x0) read(r2, &(0x7f00000001c0)=""/219, 0xdb) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000dc0)=0x7) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 205.234517ms ago: executing program 2 (id=1572): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r1, 0x2546c000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 202.177187ms ago: executing program 2 (id=1573): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x3}, @decrefs={0x40046307, 0xfffffffe}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}], 0x66, 0x0, &(0x7f0000000140)="10ac8f0284779c0e6e113146ee52d554505e25db6945669edf3d019d6d6588a8a6541a3055a3abd404f48915ee0514bb9c0a402ea26d5a6557dfd6e49b5f6a432e7eac5e5945523c5292cf86428406c1a158e96f17e359cf9b76340ea9cb4b81eae1379bbaf8"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x190e}, @flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x190e}, @flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x7, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00\x00\x00\x00\x02') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00\x02\x00\x00\x00') ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0x9580000000000000, 0xf002, 0x3, 0x4, 0x14}) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0xfffffffd, 0x8000000, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffc, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) (async) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0xfffffffd, 0x8000000, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xfffffffc, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) (async) ioctl$UI_DEV_CREATE(r4, 0x5501) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 170.755907ms ago: executing program 2 (id=1574): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000004d564b"]) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x400}], 0x0, 0x1000000, 0x0}) 145.716158ms ago: executing program 2 (id=1575): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030312c73746174733d676c6f62436c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030303030483030303030313a2c73696c656e742c726f6f74636f6e746578743d808d0432d0763bf768dfb266899652009d95303591df078f2b5d99d9cf99e0f2874448e2ab1f12dd5d4b22dc8f63b80566081603ef3ac8bb689bc66e8826e1f9637904"]) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, 0x100010, r0, 0x4a709000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2d, 'perf_event'}]}, 0xc) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008d04"]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030312c73746174733d676c6f62436c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030332c6d61783d303030303030303030303030303030483030303030313a2c73696c656e742c726f6f74636f6e746578743d808d0432d0763bf768dfb266899652009d95303591df078f2b5d99d9cf99e0f2874448e2ab1f12dd5d4b22dc8f63b80566081603ef3ac8bb689bc66e8826e1f9637904"]) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000006, 0x100010, r0, 0x4a709000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000240)={[{0x2d, 'perf_event'}]}, 0xc) (async) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008d04"]) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) (async) 73.660099ms ago: executing program 2 (id=1576): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xff, 0x5, 0xff, 0x100}, {0x0, 0x1, 0x8, 0x1}, {0xf, 0x9, 0x8, 0x5}, {0x2, 0x8, 0xfa}, {0x7ff, 0x9, 0x7, 0x8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_clone(0x80000000, &(0x7f0000000100)="62dd971bac3ce70207b7df2c0e3bf9745fda8a677858b1fc2ba47fbb48df239e6933d4d8c15234136083c689cb144894a5dd460271dda9f234ceb7e28428d0cda14164cafe685b329613ad2237686e67cc22cdd444f679b50c5d2b80431803ed1f0c04fef8594ecab03adceaa155b58aa342828184dc9e0e6e4d4f4500f231ffd0f5050e6841fb9f49a510f02f9535e864d9739427b1e601b4dccd1f77e124e51c1ed5e14020145cf23f687985845bf1fcc021", 0xb3, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001240)={0x101ff, 0x4, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001240)={0x101ff, 0x4, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000012c0)={0x4, &(0x7f0000001280)=[{0x0, 0x9, 0x2, 0x6}, {0x2a7, 0x40, 0x5, 0x5}, {0xf145, 0x3, 0x9, 0x6f2df7a5}, {0xe, 0x31, 0x80, 0x200}]}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001300)) (async) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000001300)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) read(r0, &(0x7f0000001380)=""/182, 0xb6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) write$ppp(r2, &(0x7f0000001440)="fd2292a9c2bd7e9da1f12d7c9ae176ada9407190ad73ecd195a48df724910af4f8703d4f98a9f1a178de98de36c4aebf6e7f2b296543ea22860f06c789e417073c57914b31ebe319f4ac730224764147a267d87af9fc1236b57e0e4e9f91300b9e6a3d241fd28b0752debd96a872ebc87758f38f49ac04697c7e5850a487e1a384f4eb521f197d95974b601c4cdcec58de320bb9a25c8a3ce45e5ca96c", 0x9d) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000001500)={[0xe905, 0x9, 0x0, 0x100, 0x853c, 0xe, 0x6, 0xbd35, 0x6, 0x6, 0x4, 0x200, 0x6, 0x4, 0x3, 0x8], 0x4000, 0x1}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f00000015c0)={0xed, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001640)={0x10200, 0x4, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001640)={0x10200, 0x4, 0x100000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) write$ppp(r2, &(0x7f0000001680)="b91a9afad0f6601349f434eedac2759215d9c4a11357d3aae788d80a47802a7bd0ec93626f608ac79273ba4f7bd3f7d675fb0cbe7fdeea6db426d72b27d2f8e372512552e3b78ff0dea28ae0c4462ba8b700aadbc4d5b725d5c0bb3ce445470e77044bf27a3b8df59dfe6072a638966e11400a301c5b5afad39260e516b9f88ed0d293173e2fe8e7fbdc3a774ac60e0985501758ae19646a13b5202530f98744fe481b13be7609cfa0a597a74ce0d18fc8e53c82a5c6e2afd959322345cc3bb2e29fbcb7fd0ec65e9354105ea91a4b95e7f831b47b458b9d5b48878b866ccb215386b74d2747a9c9cc0028b5b1efcadf000cde0f3c2d1e", 0xf7) (async) write$ppp(r2, &(0x7f0000001680)="b91a9afad0f6601349f434eedac2759215d9c4a11357d3aae788d80a47802a7bd0ec93626f608ac79273ba4f7bd3f7d675fb0cbe7fdeea6db426d72b27d2f8e372512552e3b78ff0dea28ae0c4462ba8b700aadbc4d5b725d5c0bb3ce445470e77044bf27a3b8df59dfe6072a638966e11400a301c5b5afad39260e516b9f88ed0d293173e2fe8e7fbdc3a774ac60e0985501758ae19646a13b5202530f98744fe481b13be7609cfa0a597a74ce0d18fc8e53c82a5c6e2afd959322345cc3bb2e29fbcb7fd0ec65e9354105ea91a4b95e7f831b47b458b9d5b48878b866ccb215386b74d2747a9c9cc0028b5b1efcadf000cde0f3c2d1e", 0xf7) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000017c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f00000017c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) read(r0, &(0x7f0000001800)=""/194, 0xc2) (async) read(r0, &(0x7f0000001800)=""/194, 0xc2) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x181100, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0x181100, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000001940)={0x10001, 0xf39a}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001980)=0x1000) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000001a00)=@attr_other={0x0, 0x7, 0x9, &(0x7f00000019c0)=0x9}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001a80)={0x7, &(0x7f0000001a40)=[{0x5, 0x0, 0x4, 0x80000000}, {0x400, 0x8, 0x3, 0xa}, {0x4, 0x0, 0x7f, 0x4253}, {0x6, 0x9, 0x1, 0x2}, {0xff, 0x3, 0x3, 0x3}, {0x1, 0x4, 0x2, 0x4}, {0x8001, 0x0, 0xff, 0x3}]}) 0s ago: executing program 2 (id=1577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x3c, 0x6}, {0x6}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0xfb, 0x8, 0x8, 0x2, 0x4, 0x8, 0xf8, 0x7, 0x9, 0x0, 0x6, 0x7, 0x5, 0x9, 0x0, 0x57}}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 20.470362][ T36] audit: type=1400 audit(1750369349.289:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.471402][ T281] cgroup: Unknown subsys name 'net' [ 20.492978][ T36] audit: type=1400 audit(1750369349.289:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.520233][ T36] audit: type=1400 audit(1750369349.319:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.521244][ T281] cgroup: Unknown subsys name 'devices' [ 20.669932][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.675506][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.847805][ T36] audit: type=1400 audit(1750369349.659:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.870937][ T36] audit: type=1400 audit(1750369349.659:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.895655][ T36] audit: type=1400 audit(1750369349.669:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.903262][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.927492][ T36] audit: type=1400 audit(1750369349.739:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.952900][ T36] audit: type=1400 audit(1750369349.739:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.991567][ T36] audit: type=1400 audit(1750369349.809:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.017071][ T36] audit: type=1400 audit(1750369349.809:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.017124][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.735920][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.743022][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.750126][ T288] bridge_slave_0: entered allmulticast mode [ 21.756238][ T288] bridge_slave_0: entered promiscuous mode [ 21.763420][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.770464][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.777483][ T288] bridge_slave_1: entered allmulticast mode [ 21.783680][ T288] bridge_slave_1: entered promiscuous mode [ 21.883482][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.890699][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.897728][ T290] bridge_slave_0: entered allmulticast mode [ 21.903920][ T290] bridge_slave_0: entered promiscuous mode [ 21.913818][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.920858][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.927912][ T290] bridge_slave_1: entered allmulticast mode [ 21.934128][ T290] bridge_slave_1: entered promiscuous mode [ 21.952561][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.959594][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.966615][ T294] bridge_slave_0: entered allmulticast mode [ 21.972796][ T294] bridge_slave_0: entered promiscuous mode [ 21.984038][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.991090][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.998148][ T293] bridge_slave_0: entered allmulticast mode [ 22.004397][ T293] bridge_slave_0: entered promiscuous mode [ 22.010454][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.017474][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.024552][ T294] bridge_slave_1: entered allmulticast mode [ 22.030845][ T294] bridge_slave_1: entered promiscuous mode [ 22.039757][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.046774][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.053841][ T293] bridge_slave_1: entered allmulticast mode [ 22.059972][ T293] bridge_slave_1: entered promiscuous mode [ 22.077960][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.084992][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.092267][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.099289][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.199523][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.206552][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.213809][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.220826][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.236309][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.243764][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.251121][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.258587][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.275842][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.282892][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.292747][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.299779][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.333546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.340578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.357332][ T288] veth0_vlan: entered promiscuous mode [ 22.364784][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.371815][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.405657][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.412684][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.421074][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.428105][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.439254][ T294] veth0_vlan: entered promiscuous mode [ 22.445240][ T288] veth1_macvtap: entered promiscuous mode [ 22.460516][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.467521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.474992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.482005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.504833][ T294] veth1_macvtap: entered promiscuous mode [ 22.523492][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 22.532397][ T290] veth0_vlan: entered promiscuous mode [ 22.564454][ T293] veth0_vlan: entered promiscuous mode [ 22.588818][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.595212][ T293] veth1_macvtap: entered promiscuous mode [ 22.630098][ T290] veth1_macvtap: entered promiscuous mode [ 22.638218][ T314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 22.638538][ T314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 22.662668][ T316] binder: Unknown parameter 'nXI' [ 22.761861][ T330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 22.795354][ T339] binder: Bad value for 'max' [ 22.820377][ T344] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 22.827761][ T344] rust_binder: Write failure EINVAL in pid:15 [ 22.879787][ T348] binder: Unknown parameter 'maЈYf00000' [ 22.968842][ T367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 22.970825][ T367] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 23.086505][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 23.161047][ T380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 23.163738][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.184250][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.191681][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.199094][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.206465][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.214014][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.221436][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.228866][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.236239][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.243652][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.251031][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.258409][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.265770][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.273161][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.280546][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.287898][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.295546][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.302992][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.310374][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.317723][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.325096][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.332467][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.339844][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.347204][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.354571][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.361950][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.369569][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.376940][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.384340][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.391888][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.399761][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.407173][ T305] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 23.415644][ T305] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 23.439049][ T10] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 23.452994][ T10] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 23.461372][ T386] binder: Bad value for 'max' [ 23.466528][ T10] hid-generic C98F:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 23.480915][ T383] fido_id[383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 23.564646][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 23.728228][ T411] rust_binder: Write failure EFAULT in pid:28 [ 23.750398][ T411] rust_binder: Write failure EFAULT in pid:28 [ 23.875549][ T417] SELinux: policydb version -845211227 does not match my version range 15-33 [ 23.910873][ T417] SELinux: failed to load policy [ 23.983082][ T417] rust_binder: Write failure EFAULT in pid:31 [ 24.060334][ T424] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 24.071338][ T424] rust_binder: Error while translating object. [ 24.099855][ T424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.106122][ T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 24.196113][ T430] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 24.228349][ T430] rust_binder: Error while translating object. [ 24.254090][ T430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.270065][ T430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 24.642760][ T452] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 24.652104][ T452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:32 [ 24.662005][ T452] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 24.672107][ T452] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 24.692273][ T460] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 24.705233][ T463] ======================================================= [ 24.705233][ T463] WARNING: The mand mount option has been deprecated and [ 24.705233][ T463] and is ignored by this kernel. Remove the mand [ 24.705233][ T463] option from the mount to silence this warning. [ 24.705233][ T463] ======================================================= [ 24.749259][ T463] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 24.760239][ T470] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 24.772372][ T475] binder: Bad value for 'stats' [ 24.799270][ T481] binder: Bad value for 'stats' [ 24.820993][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 24.821562][ T485] rust_binder: Error while translating object. [ 24.831040][ T485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 24.837238][ T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 24.862760][ T487] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 24.939877][ T491] rust_binder: Write failure EINVAL in pid:45 [ 24.965281][ T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 24.971502][ T496] SELinux: security_context_str_to_sid () failed with errno=-22 [ 25.043406][ T498] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 25.051123][ T498] SELinux: failed to load policy [ 25.129574][ T511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 25.129601][ T511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:54 [ 25.168112][ T513] rust_binder: Write failure EINVAL in pid:67 [ 25.300307][ T530] rust_binder: Write failure EINVAL in pid:71 [ 25.306064][ T525] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.324295][ T533] rust_binder: Write failure EINVAL in pid:71 [ 25.324395][ T532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.499915][ T539] rust_binder: Write failure EINVAL in pid:79 [ 25.521287][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 25.521302][ T36] audit: type=1400 audit(1750369354.339:182): avc: denied { ioctl } for pid=542 comm="syz.3.76" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 25.592460][ T548] SELinux: Context is not valid (left unmapped). [ 25.601095][ T36] audit: type=1400 audit(1750369354.419:183): avc: denied { create } for pid=547 comm="syz.0.78" name="syz1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=A2 [ 25.608335][ T394] Bluetooth: hci0: command 0x1003 tx timeout [ 25.622208][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 25.628767][ T36] audit: type=1400 audit(1750369354.419:184): avc: denied { associate } for pid=547 comm="syz.0.78" name="syz1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=A2 [ 25.687341][ T36] audit: type=1400 audit(1750369354.499:185): avc: denied { ioctl } for pid=552 comm="syz.2.80" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 25.687739][ T553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 25.784283][ T36] audit: type=1400 audit(1750369354.599:186): avc: denied { read open } for pid=555 comm="syz.2.81" path="cgroup:[4026532567]" dev="nsfs" ino=4026532567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.835748][ T561] rust_binder: Error while translating object. [ 25.835784][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 25.844662][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:39 [ 25.887667][ T570] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 25.897028][ T570] rust_binder: Write failure EINVAL in pid:43 [ 25.955863][ T36] audit: type=1400 audit(1750369354.769:187): avc: denied { ioctl } for pid=578 comm="syz.0.90" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 25.968196][ T579] rust_binder: Error while translating object. [ 25.987743][ T579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.993996][ T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 26.007672][ T581] binder: Unknown parameter 'processor : 0 [ 26.007672][ T581] vendor_id : GenuineIntel [ 26.007672][ T581] cpu family : 6 [ 26.007672][ T581] model : 79 [ 26.007672][ T581] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 26.007672][ T581] stepping : 0 [ 26.007672][ T581] microcode : 0xffffffff [ 26.007672][ T581] cpu MHz : 2200.218 [ 26.007672][ T581] cache size : 56320 KB [ 26.007672][ T581] physical id : 0 [ 26.007672][ T581] siblings : 2 [ 26.007672][ T581] core id : 0 [ 26.007672][ T581] cpu cores : 1 [ 26.007672][ T581] apicid : 0 [ 26.007672][ T581] initial apicid : 0 [ 26.007672][ T581] fpu : yes [ 26.007672][ T581] fpu_exception : yes [ 26.007672][ T581] cpuid level : 13 [ 26.007672][ T581] wp : yes [ 26.007672][ T581] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 26.007672][ T581] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 26.027443][ T36] audit: type=1326 audit(1750369354.839:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=582 comm="syz.0.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f914f38e929 code=0x0 [ 26.187472][ T583] binder: Unknown parameter 'X00000000000000000000' [ 26.300547][ T612] SELinux: policydb version 255608155 does not match my version range 15-33 [ 26.309393][ T612] SELinux: failed to load policy [ 26.348299][ T620] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.371997][ T36] audit: type=1400 audit(1750369355.189:189): avc: denied { ioctl } for pid=626 comm="syz.2.105" path="net:[4026532572]" dev="nsfs" ino=4026532572 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.403794][ T629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 26.506481][ T610] rust_binder: Read failure Err(EFAULT) in pid:90 [ 26.566543][ T36] audit: type=1400 audit(1750369355.379:190): avc: denied { write } for pid=639 comm="syz.3.109" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 26.638214][ T644] SELinux: failed to load policy [ 26.663001][ T649] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 26.717852][ T657] rust_binder: Read failure Err(EAGAIN) in pid:62 [ 26.717940][ T655] input: syz1 as /devices/virtual/input/input10 [ 26.731892][ T36] audit: type=1400 audit(1750369355.559:191): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=440 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.732482][ T655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:96 [ 26.811767][ T660] SELinux: unknown common r [ 26.826327][ T660] SELinux: failed to load policy [ 26.865170][ T662] rust_binder: Error while translating object. [ 26.865201][ T662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 26.871841][ T662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 26.971993][ T669] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 27.189477][ T690] rust_binder: Write failure EINVAL in pid:59 [ 27.319221][ T707] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 27.330979][ T707] pim6reg0: linktype set to 769 [ 27.335986][ T707] rust_binder: Read failure Err(EAGAIN) in pid:75 [ 27.545137][ T725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 27.604048][ T733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109 [ 28.085693][ T769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 28.149830][ T771] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 28.171046][ T773] kvm: user requested TSC rate below hardware speed [ 28.289067][ T776] kvm: kvm [775]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 28.470112][ T781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.470134][ T781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:105 [ 28.480059][ T782] binder: Bad value for 'stats' [ 28.835884][ T807] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 28.898985][ T802] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 28.907728][ T802] rust_binder: Write failure EINVAL in pid:133 [ 28.961543][ T813] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 29.020308][ T815] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 29.020334][ T815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:114 [ 29.113295][ T819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 29.170129][ T827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 29.180352][ T827] rust_binder: Error while translating object. [ 29.189680][ T827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.195909][ T827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 29.218158][ T830] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 29.227397][ T830] rust_binder: Error while translating object. [ 29.239445][ T830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.245599][ T830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 29.282849][ T833] cgroup: fork rejected by pids controller in /syz3 [ 29.401528][ T841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.401556][ T841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 29.428119][ T838] input: syz0 as /devices/virtual/input/input12 [ 29.445444][ T838] rust_binder: Error while translating object. [ 29.445464][ T838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.451736][ T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142 [ 29.471851][ T843] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.507401][ T846] rust_binder: Error in use_page_slow: ESRCH [ 29.507414][ T846] rust_binder: use_range failure ESRCH [ 29.516111][ T846] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 29.521600][ T846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.532449][ T846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:133 [ 29.555653][ T12] bridge_slave_1: left allmulticast mode [ 29.571754][ T12] bridge_slave_1: left promiscuous mode [ 29.577395][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.585229][ T854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 29.590408][ T12] bridge_slave_0: left allmulticast mode [ 29.608327][ T12] bridge_slave_0: left promiscuous mode [ 29.614652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.670920][ T864] SELinux: Context is not valid (left unmapped). [ 29.681690][ T862] binder: Bad value for 'max' [ 29.687053][ T864] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 29.687071][ T864] rust_binder: Error while translating object. [ 29.708320][ T864] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.714501][ T864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 29.764549][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.770096][ T872] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 29.778281][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.796870][ T865] bridge_slave_0: entered allmulticast mode [ 29.803207][ T865] bridge_slave_0: entered promiscuous mode [ 29.810325][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.817411][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.824695][ T865] bridge_slave_1: entered allmulticast mode [ 29.831128][ T865] bridge_slave_1: entered promiscuous mode [ 29.837569][ T12] veth1_macvtap: left promiscuous mode [ 29.843272][ T12] veth0_vlan: left promiscuous mode [ 29.926114][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.933175][ T865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.940446][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.947462][ T865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.955475][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.963780][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.980385][ T882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 29.981348][ T882] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 29.987927][ T882] rust_binder: Error while translating object. [ 30.000836][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.009255][ T882] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.014020][ T882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 30.014036][ T646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.040247][ T884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.040495][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.040576][ T884] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 30.046911][ T646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.070208][ T884] rust_binder: Write failure EINVAL in pid:153 [ 30.070275][ T884] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 30.085867][ T884] rust_binder: Write failure EINVAL in pid:153 [ 30.095307][ T865] veth0_vlan: entered promiscuous mode [ 30.113651][ T865] veth1_macvtap: entered promiscuous mode [ 30.120762][ T889] random: crng reseeded on system resumption [ 30.163109][ T893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 30.169901][ T889] SELinux: security_context_str_to_sid () failed with errno=-22 [ 30.309581][ T906] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.309676][ T906] rust_binder: Write failure EINVAL in pid:95 [ 30.355405][ T914] binder: Bad value for 'max' [ 30.366611][ T914] binder: Bad value for 'max' [ 30.413531][ T926] binder: Bad value for 'max' [ 30.446898][ T931] rust_binder: Write failure EFAULT in pid:159 [ 30.455186][ T933] binder: Binderfs stats mode cannot be changed during a remount [ 30.540299][ T948] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 31.061657][ T979] rust_binder: Write failure EFAULT in pid:109 [ 31.066063][ T983] rust_binder: Error while translating object. [ 31.075874][ T983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 31.082069][ T983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:183 [ 31.122152][ T987] input: syz0 as /devices/virtual/input/input18 [ 31.142879][ T987] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 31.142897][ T987] rust_binder: Error while translating object. [ 31.153482][ T987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.159723][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 31.240554][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 31.240566][ T36] audit: type=1400 audit(1750369360.059:208): avc: denied { append } for pid=1007 comm="syz.0.234" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 31.372335][ T1014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.372428][ T1014] random: crng reseeded on system resumption [ 31.397616][ T1014] rust_binder: Write failure EINVAL in pid:117 [ 31.406949][ T1016] binder: Unknown parameter '00000000017777777777' [ 31.432435][ T1018] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 31.454617][ T1021] input: syz0 as /devices/virtual/input/input20 [ 31.580034][ T1024] binder: Unknown parameter 'g)}sB' [ 31.659221][ T1032] random: crng reseeded on system resumption [ 31.676010][ T1031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 31.707955][ T36] audit: type=1326 audit(1750369360.519:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.731621][ T36] audit: type=1326 audit(1750369360.519:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.736353][ T1038] binder: Unknown parameter 'context' [ 31.757888][ T36] audit: type=1326 audit(1750369360.549:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1040 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fde6f7c11e5 code=0x7ffc0000 [ 31.786786][ T36] audit: type=1326 audit(1750369360.549:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.818398][ T36] audit: type=1326 audit(1750369360.549:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.842525][ T1045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.844661][ T1049] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 31.861694][ T36] audit: type=1326 audit(1750369360.549:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.893143][ T36] audit: type=1326 audit(1750369360.549:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.916297][ T36] audit: type=1326 audit(1750369360.549:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.939676][ T36] audit: type=1326 audit(1750369360.549:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1036 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 31.972437][ T1058] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 31.993673][ T1065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.993920][ T1065] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 1160, size: 4096) [ 32.000682][ T1065] rust_binder: Error while translating object. [ 32.011485][ T1065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.017812][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 32.047577][ T1068] rust_binder: Write failure EINVAL in pid:41 [ 32.104456][ T1076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.222715][ T1082] binder: Unknown parameter 'context' [ 32.241637][ T646] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.248066][ T1083] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 32.296232][ T1089] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 32.296251][ T1089] rust_binder: Error while translating object. [ 32.315570][ T1089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.321922][ T1089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 32.338231][ T1085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.414354][ T1100] input: syz1 as /devices/virtual/input/input21 [ 32.449207][ T1107] binder: Unknown parameter 'nXI' [ 32.519546][ T1114] tap0: tun_chr_ioctl cmd 1074025677 [ 32.528122][ T1114] tap0: linktype set to 774 [ 32.552126][ T1114] rust_binder: Write failure EINVAL in pid:206 [ 32.808673][ T1123] random: crng reseeded on system resumption [ 32.872353][ T1123] rust_binder: Write failure EFAULT in pid:210 [ 32.945269][ T1126] rust_binder: Write failure EFAULT in pid:211 [ 32.979130][ T1132] binder: Unknown parameter '00000000000000000000004' [ 33.074949][ T1144] rust_binder: Write failure EFAULT in pid:73 [ 33.125784][ T1150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 33.134431][ T1150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:216 [ 33.270955][ T1156] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 33.413458][ T1171] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 33.476862][ T1173] input: syz1 as /devices/virtual/input/input26 [ 33.537232][ T1176] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.537515][ T1176] rust_binder: Error in use_page_slow: ESRCH [ 33.543986][ T1176] rust_binder: use_range failure ESRCH [ 33.550013][ T1176] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 33.555567][ T1176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.563582][ T1176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:223 [ 33.711889][ T1188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.721027][ T1188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 33.742239][ T1192] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 33.783190][ T1201] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 33.823541][ T1205] rust_binder: Error in use_page_slow: ESRCH [ 33.823557][ T1205] rust_binder: use_range failure ESRCH [ 33.829780][ T1205] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 33.835259][ T1205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.843122][ T1205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 33.897380][ T1210] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 33.906425][ T1210] rust_binder: Error while translating object. [ 33.916932][ T1210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.923126][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 33.933073][ T1211] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.950843][ T1215] rust_binder: Write failure EFAULT in pid:248 [ 33.961247][ T885] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.973807][ T885] Bluetooth: hci1: Frame reassembly failed (-84) [ 34.032734][ T1216] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 34.032770][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:248 [ 34.057237][ T1221] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 34.248365][ T1216] Bluetooth: hci0: command 0x1003 tx timeout [ 34.254430][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.370760][ T1238] input: syz1 as /devices/virtual/input/input28 [ 34.411980][ T1241] SELinux: policydb version -845211227 does not match my version range 15-33 [ 34.425144][ T1241] SELinux: failed to load policy [ 34.430393][ T1241] SELinux: ebitmap: truncated map [ 34.435549][ T1241] SELinux: failed to load policy [ 34.446168][ T1241] SELinux: ebitmap: truncated map [ 34.459526][ T1241] SELinux: failed to load policy [ 34.468626][ T1241] SELinux: ebitmap: truncated map [ 34.476823][ T1241] SELinux: failed to load policy [ 34.559570][ T1250] SELinux: policydb magic number 0x76656400 does not match expected magic number 0xf97cff8c [ 34.579683][ T1250] SELinux: failed to load policy [ 34.639617][ T1259] binder: Bad value for 'stats' [ 34.949800][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:111 [ 34.949831][ T1290] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.958997][ T1290] rust_binder: Read failure Err(EFAULT) in pid:111 [ 35.041278][ T1300] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.046706][ T1297] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 35.050220][ T1300] serio: Serial port ttynull [ 35.054541][ T1297] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 35.074660][ T1297] kvm: requested 143314 ns i8254 timer period limited to 200000 ns [ 35.084915][ T1297] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 35.099681][ T1302] rust_binder: Error while translating object. [ 35.099711][ T1302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.105865][ T1302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164 [ 35.194383][ T1306] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.821067][ T1320] SELinux: failed to load policy [ 35.944328][ T1329] rust_binder: Write failure EFAULT in pid:292 [ 35.961737][ T1330] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 35.991446][ T1332] rust_binder: Write failure EFAULT in pid:170 [ 36.008972][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 36.009477][ T394] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.078737][ T1339] kvm: apic: phys broadcast and lowest prio [ 36.088809][ T1344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.088864][ T1344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.098926][ T1339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:172 [ 36.111842][ T1345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.121124][ T1345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 36.171556][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.206985][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.207008][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.218206][ T1356] input: syz0 as /devices/virtual/input/input30 [ 36.240999][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.241021][ T1353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.328001][ T1366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.343510][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 36.343525][ T36] audit: type=1326 audit(1750369365.159:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.411110][ T36] audit: type=1326 audit(1750369365.159:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.444454][ T36] audit: type=1326 audit(1750369365.159:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.477306][ T1374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.477933][ T36] audit: type=1326 audit(1750369365.159:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.478055][ T1375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.488015][ T36] audit: type=1326 audit(1750369365.159:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.577968][ T36] audit: type=1326 audit(1750369365.159:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.612497][ T36] audit: type=1326 audit(1750369365.159:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.640070][ T36] audit: type=1326 audit(1750369365.159:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.665573][ T36] audit: type=1326 audit(1750369365.159:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.689230][ T36] audit: type=1326 audit(1750369365.159:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1365 comm="syz.1.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fde6f78e929 code=0x7ffc0000 [ 36.796943][ T1383] rust_binder: Write failure EFAULT in pid:137 [ 36.797142][ T1383] binder: Bad value for 'max' [ 36.825963][ T1386] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.826264][ T1386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 36.928364][ T1396] binder: Binderfs stats mode cannot be changed during a remount [ 37.018097][ T1406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.018224][ T1406] SELinux: syz.1.370 (1406) set checkreqprot to 1. This is no longer supported. [ 37.112367][ T1413] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 37.112394][ T1413] rust_binder: Error in use_page_slow: EBUSY [ 37.122771][ T1413] rust_binder: use_range failure EBUSY [ 37.128771][ T1413] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 37.134299][ T1413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 37.141977][ T1413] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 37.151460][ T1413] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:262 [ 37.199070][ T1419] rust_binder: Write failure EFAULT in pid:310 [ 37.354265][ T1433] input: syz1 as /devices/virtual/input/input32 [ 37.497338][ T1451] rust_binder: Write failure EFAULT in pid:268 [ 37.565698][ T1453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.620986][ T1455] input: syz0 as /devices/virtual/input/input33 [ 37.628428][ T1456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.633719][ T1456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 37.658292][ T1461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272 [ 37.673130][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.673308][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.682317][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.688801][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.701420][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.704584][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.707596][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.714643][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.720372][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.726384][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.733140][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.745389][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.745527][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.751664][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.758140][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.768406][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.770702][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.776824][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.783232][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.789299][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.795754][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.801820][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.808314][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.814396][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.820849][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.827536][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.833581][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.840297][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.845940][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.858665][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.861093][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.866258][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.871189][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.878106][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.890099][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.896302][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.902648][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.908921][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.911229][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.915154][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.928855][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.935062][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.938298][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.941400][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.953966][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.954750][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.960385][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.972279][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.972838][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.986610][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.986649][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.993536][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 37.999390][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.006239][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 38.011923][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.018346][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 38.024433][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.030863][ T1464] rust_binder: Write failure EINVAL in pid:274 [ 38.036959][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.056443][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.075745][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.082218][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.089722][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.090366][ T1470] SELinux: failed to load policy [ 38.096199][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.107554][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.118722][ T1463] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.218962][ T1477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.335660][ T1486] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.369756][ T1493] rust_binder: Error while translating object. [ 38.376182][ T1493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.384354][ T1493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285 [ 38.394330][ T1499] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.421903][ T1507] rust_binder: Error while translating object. [ 38.428509][ T1507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.434826][ T1507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 38.461919][ T1511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 38.468031][ T1510] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.505745][ T1518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 38.505928][ T1518] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 38.522504][ T1520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.531758][ T1521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210 [ 38.546522][ T1525] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 38.584386][ T1530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.584689][ T1530] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 38.591301][ T1530] rust_binder: Read failure Err(EFAULT) in pid:217 [ 38.601712][ T1530] rust_binder: Write failure EINVAL in pid:217 [ 38.634303][ T1543] input: syz0 as /devices/virtual/input/input34 [ 38.659894][ T1548] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 38.693133][ T1552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 38.806124][ T1562] input: syz1 as /devices/virtual/input/input35 [ 38.864626][ T1565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.864895][ T1565] rust_binder: Error in use_page_slow: ESRCH [ 38.878302][ T1565] rust_binder: use_range failure ESRCH [ 38.888379][ T1565] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 38.894015][ T1565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 38.903630][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:300 [ 38.919314][ T1569] rust_binder: Write failure EFAULT in pid:220 [ 39.015852][ T1575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:339 [ 39.064134][ T1597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.074028][ T1597] rust_binder: Error in use_page_slow: ESRCH [ 39.089613][ T1597] rust_binder: use_range failure ESRCH [ 39.098296][ T1597] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 39.103759][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.112129][ T1598] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 39.129550][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:227 [ 39.252144][ T1609] rust_binder: Write failure EINVAL in pid:347 [ 39.368950][ T1077] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 39.377202][ T1628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 39.377471][ T1627] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 39.385013][ T1077] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.398306][ T1627] rust_binder: Error while translating object. [ 39.406550][ T1627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.413266][ T1627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 39.713231][ T1661] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 39.722659][ T1660] binder: Unknown parameter 'smackfsfloor' [ 39.761464][ T1667] can0: slcan on ptm0. [ 39.784432][ T1670] input: syz0 as /devices/virtual/input/input38 [ 39.793555][ T1670] binder: Unknown parameter '_u' [ 39.808906][ T1666] can0 (unregistered): slcan off ptm0. [ 39.829639][ T1679] input: syz0 as /devices/virtual/input/input39 [ 39.867785][ T1686] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 40.105049][ T1721] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 40.105065][ T1721] rust_binder: Error while translating object. [ 40.115723][ T1721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.121974][ T1721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 40.186746][ T1704] rust_binder: Read failure Err(EFAULT) in pid:334 [ 40.346426][ T1735] input: syz0 as /devices/virtual/input/input40 [ 40.364637][ T1735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 40.364734][ T1735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.539929][ T1761] kvm: Disabled LAPIC found during irq injection [ 40.768604][ T1770] input: syz0 as /devices/virtual/input/input41 [ 40.850343][ T1777] rust_binder: Write failure EINVAL in pid:389 [ 40.916852][ T1779] binder: Unknown parameter 'context' [ 40.936640][ T1781] SELinux: failed to load policy [ 40.941773][ T1781] SELinux: failed to load policy [ 40.946804][ T1781] SELinux: failed to load policy [ 40.951831][ T1781] SELinux: failed to load policy [ 40.956872][ T1781] SELinux: failed to load policy [ 40.961881][ T1781] SELinux: failed to load policy [ 40.966907][ T1781] SELinux: failed to load policy [ 40.971922][ T1781] SELinux: failed to load policy [ 40.976952][ T1781] SELinux: failed to load policy [ 40.981956][ T1781] SELinux: failed to load policy [ 41.006860][ T1787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.006948][ T1787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 41.013723][ T1787] rust_binder: Error while translating object. [ 41.022874][ T1787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.029046][ T1787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:399 [ 41.177327][ T1794] input: syz0 as /devices/virtual/input/input42 [ 41.312966][ T1796] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.313266][ T1796] rust_binder: Error while translating object. [ 41.319901][ T1796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.326060][ T1796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408 [ 41.461381][ T1801] kvm: kvm [1800]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3032 [ 41.543741][ T1807] rust_binder: Write failure EINVAL in pid:410 [ 41.579432][ T1811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.680380][ T1823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.743175][ T1829] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 41.889573][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 41.889589][ T36] audit: type=1326 audit(1750369370.709:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1848 comm="syz.2.500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb854f8e929 code=0x0 [ 41.955960][ T1860] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 41.966139][ T1861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.975701][ T1867] binder: Bad value for 'defcontext' [ 42.110811][ T1876] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 42.417278][ T1912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.417302][ T1912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:309 [ 42.532450][ T1926] binder: Unknown parameter '00000000000000000000003' [ 42.586934][ T1930] binder: Unknown parameter 'nXI' [ 42.685787][ T1937] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 42.728663][ T1943] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 42.743915][ T1947] input: syz0 as /devices/virtual/input/input44 [ 42.824370][ T1960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.824630][ T1961] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 42.831150][ T1961] rust_binder: Error while translating object. [ 42.843368][ T1961] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.849559][ T1961] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432 [ 43.059993][ T36] audit: type=1400 audit(1750369371.879:321): avc: denied { map } for pid=1999 comm="syz.3.552" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 43.114409][ T2012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:355 [ 43.156535][ T2018] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 43.165747][ T2018] rust_binder: Error while translating object. [ 43.179096][ T2018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.185307][ T2018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 43.200021][ T36] audit: type=1400 audit(1750369372.009:322): avc: denied { map } for pid=2019 comm="syz.1.558" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 43.293288][ T2032] rust_binder: Write failure EFAULT in pid:456 [ 43.317305][ T2034] rust_binder: Write failure EINVAL in pid:362 [ 43.625542][ T2077] binder: Unknown parameter 'fscontext?}' [ 43.693128][ T2085] rust_binder: Failed copying remainder into alloc: EFAULT [ 43.693147][ T2085] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 43.700875][ T2085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.712940][ T2085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:375 [ 43.737473][ T2097] rust_binder: Error while translating object. [ 43.746604][ T2101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:467 [ 43.754938][ T2097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 43.765537][ T2097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:389 [ 43.778965][ T2106] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.828704][ T2117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.828730][ T2117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394 [ 43.853868][ T2125] rust_binder: Write failure EINVAL in pid:396 [ 43.864867][ T2125] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.866759][ T2127] rust_binder: Write failure EFAULT in pid:380 [ 43.871542][ T2129] rust_binder: Write failure EINVAL in pid:396 [ 43.887387][ T2130] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.912029][ T2135] binder: Bad value for 'defcontext' [ 43.925735][ T2137] rust_binder: Write failure EINVAL in pid:476 [ 43.929230][ T36] audit: type=1326 audit(1750369372.749:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2134 comm="syz.1.596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde6f78e929 code=0x0 [ 43.977696][ T2143] serio: Serial port ttynull [ 44.028893][ T2142] rust_binder: Error in use_page_slow: ESRCH [ 44.028910][ T2142] rust_binder: use_range failure ESRCH [ 44.034939][ T2142] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 44.042129][ T2142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.050192][ T2142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:384 [ 44.166330][ T2158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484 [ 44.193070][ T2167] deleting an unspecified loop device is not supported. [ 44.316256][ T2180] binder: Unknown parameter 'dont_hash' [ 44.316853][ T2179] binder: Unknown parameter 'dont_hash' [ 44.425918][ T36] audit: type=1400 audit(1750369373.239:324): avc: denied { compute_member } for pid=2185 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.511242][ T36] audit: type=1326 audit(1750369373.329:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.0.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f914f38e929 code=0x0 [ 44.553771][ T36] audit: type=1400 audit(1750369373.369:326): avc: denied { view } for pid=2192 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.593848][ T2195] kvm: user requested TSC rate below hardware speed [ 44.647463][ T36] audit: type=1326 audit(1750369373.459:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f38e929 code=0x7ffc0000 [ 44.680643][ T36] audit: type=1326 audit(1750369373.499:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f914f38e929 code=0x7ffc0000 [ 44.704101][ T36] audit: type=1326 audit(1750369373.499:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz.0.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914f38e929 code=0x7ffc0000 [ 44.751666][ T2201] binder: Unknown parameter 'context!' [ 44.929030][ T2214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 44.929061][ T2214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:403 [ 44.966764][ T2219] tap0: tun_chr_ioctl cmd 1074025677 [ 44.981548][ T2219] tap0: linktype set to 776 [ 45.076100][ T2238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.115878][ T2244] rust_binder: Write failure EFAULT in pid:402 [ 45.218046][ T2262] binder: Bad value for 'stats' [ 45.317934][ T2266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.375183][ T2266] input: syz1 as /devices/virtual/input/input47 [ 45.427885][ T2276] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 45.592527][ T2294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422 [ 45.658593][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.674014][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.680536][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.686839][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.693233][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.700261][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.706602][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.712989][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.719335][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.725725][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.732203][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.738800][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.745088][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.751412][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.757680][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.764013][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.770295][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.776565][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.783083][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.789473][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.795789][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.802210][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.808701][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.815092][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.821458][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.827974][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.834270][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.840587][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.846841][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.853133][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.859437][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.865690][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.871982][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.874322][ T2316] binder: Unknown parameter 'smackfshat' [ 45.878321][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.890172][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.896479][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.904397][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.910842][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.917166][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.923586][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.929946][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.936229][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.942569][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.948961][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.955256][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.961627][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.967937][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.974324][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.980924][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.987355][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 45.994603][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.001071][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.007422][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.010357][ T2332] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 46.013761][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.021953][ T2332] rust_binder: Write failure EINVAL in pid:515 [ 46.028392][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.029823][ T2332] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 46.034708][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.041158][ T2332] rust_binder: Write failure EINVAL in pid:515 [ 46.049270][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.067781][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.075394][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.082109][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.088622][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.094983][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.099670][ T2342] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 46.102769][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.117295][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.123620][ T2303] binder: Unknown parameter 'fscontext?}ontrol' [ 46.142134][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 46.142350][ T2344] rust_binder: Error while translating object. [ 46.153550][ T2344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 46.160519][ T2344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 46.193021][ T2353] tap0: tun_chr_ioctl cmd 1074025677 [ 46.207520][ T2353] tap0: linktype set to 776 [ 46.252080][ T2355] SELinux: security_context_str_to_sid () failed with errno=-22 [ 46.275652][ T2360] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 46.293354][ T2357] input: syz0 as /devices/virtual/input/input50 [ 46.359787][ T2362] binder: Unknown parameter '00000000000000000000005 ' [ 46.373241][ T2364] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 46.380828][ T2364] sel_write_load: 56 callbacks suppressed [ 46.380836][ T2364] SELinux: failed to load policy [ 46.423404][ T2369] binder: Unknown parameter 'noninderfs/binder0' [ 46.710118][ T2389] rust_binder: Write failure EFAULT in pid:432 [ 46.983072][ T2390] rust_binder: Read failure Err(EFAULT) in pid:432 [ 47.162497][ T2421] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 47.358918][ T2441] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 47.594235][ T898] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 47.601738][ T898] hid-generic C98F:0003:0000.0004: unknown main item tag 0x0 [ 47.610834][ T898] hid-generic C98F:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 47.635447][ T2457] fido_id[2457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.658240][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 47.658252][ T36] audit: type=1326 audit(1750369376.469:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.2.704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fb854f8e929 code=0x0 [ 47.701011][ T2473] rust_binder: Error while translating object. [ 47.701029][ T2473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 47.707201][ T2473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461 [ 47.724662][ T2475] serio: Serial port ttynull [ 47.806919][ T2484] rust_binder: Write failure EFAULT in pid:452 [ 48.023857][ T36] audit: type=1400 audit(1750369376.839:353): avc: denied { checkpoint_restore } for pid=2500 comm="syz.1.714" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.288320][ T2532] SELinux: Context system_u: is not valid (left unmapped). [ 48.295972][ T36] audit: type=1400 audit(1750369377.109:354): avc: denied { create } for pid=2531 comm="syz.1.722" name="cgroup.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 48.319018][ T36] audit: type=1400 audit(1750369377.109:355): avc: denied { associate } for pid=2531 comm="syz.1.722" name="cgroup.events" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:" [ 48.344102][ T36] audit: type=1400 audit(1750369377.109:356): avc: denied { read append open } for pid=2531 comm="syz.1.722" path="/154/cgroup.events" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 48.431929][ T2540] rust_binder: Write failure EFAULT in pid:477 [ 48.434646][ T36] audit: type=1400 audit(1750369377.249:357): avc: denied { ioctl } for pid=2531 comm="syz.1.722" path="/154/cgroup.events" dev="tmpfs" ino=804 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 48.578377][ T36] audit: type=1400 audit(1750369377.389:358): avc: denied { unlink } for pid=288 comm="syz-executor" name="cgroup.events" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:" [ 48.690567][ T2583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.905173][ T2613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 48.908331][ T2603] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 48.912013][ T2613] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 48.918028][ T2603] rust_binder: Write failure EINVAL in pid:492 [ 48.939322][ T2613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 48.946424][ T2613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:504 [ 48.974936][ T2620] binder: Bad value for 'max' [ 48.975078][ T2617] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 49.019048][ T36] audit: type=1326 audit(1750369377.839:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2623 comm="syz.1.752" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde6f78e929 code=0x0 [ 49.312787][ T2646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:513 [ 49.602912][ T2659] SELinux: failed to load policy [ 49.957865][ T2672] input: syz1 as /devices/virtual/input/input55 [ 50.133455][ T2684] input: syz0 as /devices/virtual/input/input56 [ 50.173048][ T2686] rust_binder: Write failure EINVAL in pid:517 [ 50.439590][ T2692] input: syz1 as /devices/virtual/input/input57 [ 50.677610][ T2712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 50.861909][ T2723] kvm: kvm [2721]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 50.881596][ T2724] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 50.932356][ T2726] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 50.932373][ T2726] rust_binder: Read failure Err(EFAULT) in pid:531 [ 51.044930][ T2729] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 51.185288][ T36] audit: type=1326 audit(1750369379.999:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2750 comm="syz.2.793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb854f8e929 code=0x0 [ 51.593589][ T2761] SELinux: security_context_str_to_sid () failed with errno=-22 [ 51.670561][ T2763] input: syz0 as /devices/virtual/input/input58 [ 51.973377][ T2794] rust_binder: Error while translating object. [ 51.973409][ T2794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.980005][ T2794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:542 [ 52.078064][ T2804] binder: Unknown parameter 'coyBLV"i5ntext' [ 52.111354][ T2808] rust_binder: Write failure EINVAL in pid:525 [ 52.124619][ T2811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:527 [ 52.130803][ T2811] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.139951][ T2811] rust_binder: Read failure Err(EFAULT) in pid:527 [ 52.383002][ T2842] __vm_enough_memory: pid: 2842, comm: syz.0.822, bytes: 281474976845824 not enough memory for the allocation [ 52.404346][ T36] audit: type=1326 audit(1750369381.219:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2841 comm="syz.0.822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f914f38e929 code=0x0 [ 52.605654][ T2875] binder: Bad value for 'max' [ 52.611726][ T2872] binder: Bad value for 'max' [ 52.950661][ T36] audit: type=1400 audit(1750369381.769:362): avc: denied { map } for pid=2890 comm="syz.2.838" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 52.964933][ T2896] rust_binder: Error while translating object. [ 52.978425][ T2896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.984638][ T2896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561 [ 53.013814][ T2904] binder: Unknown parameter '0x0000000000000004d5I' [ 53.186132][ T2924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 53.202891][ T36] audit: type=1326 audit(1750369382.019:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.204937][ T2927] rust_binder: Error while translating object. [ 53.212227][ T36] audit: type=1326 audit(1750369382.019:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.236584][ T2927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.243251][ T36] audit: type=1326 audit(1750369382.019:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.264992][ T2927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:574 [ 53.274257][ T36] audit: type=1326 audit(1750369382.019:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.330291][ T36] audit: type=1326 audit(1750369382.019:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.353522][ T36] audit: type=1326 audit(1750369382.019:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.376729][ T36] audit: type=1326 audit(1750369382.019:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.399977][ T36] audit: type=1326 audit(1750369382.019:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.423274][ T36] audit: type=1326 audit(1750369382.019:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2926 comm="syz.3.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0382d8e929 code=0x7ffc0000 [ 53.440781][ T2929] input: syz1 as /devices/virtual/input/input61 [ 53.463209][ T2929] input: syz0 as /devices/virtual/input/input62 [ 53.541824][ T2933] random: crng reseeded on system resumption [ 53.702367][ T2956] rust_binder: Write failure EINVAL in pid:580 [ 54.124508][ T2990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 54.131364][ T2990] input: syz0 as /devices/virtual/input/input64 [ 54.146746][ T2990] input: failed to attach handler leds to device input64, error: -6 [ 54.159472][ T2990] input: syz0 as /devices/virtual/input/input63 [ 54.179405][ T2990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.258366][ T3000] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 54.462192][ T3009] random: crng reseeded on system resumption [ 54.483746][ T3009] rust_binder: Write failure EINVAL in pid:588 [ 54.494360][ T3014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:590 [ 54.531909][ T3024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:693 [ 54.541071][ T3024] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 54.550232][ T3024] rust_binder: Read failure Err(EFAULT) in pid:693 [ 54.571074][ T3026] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 54.637361][ T3029] kvm: user requested TSC rate below hardware speed [ 54.644502][ T3029] kvm: user requested TSC rate below hardware speed [ 54.706074][ T3032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.706094][ T3032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 54.973419][ T3039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:608 [ 55.108487][ T3047] binder: Unknown parameter 'nonkaller0' [ 55.196434][ T3050] cgroup: fork rejected by pids controller in /syz2 [ 55.217693][ T3052] rust_binder: Write failure EFAULT in pid:582 [ 55.469354][ T304] bridge_slave_1: left allmulticast mode [ 55.482834][ T304] bridge_slave_1: left promiscuous mode [ 55.489540][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.497281][ T304] bridge_slave_0: left allmulticast mode [ 55.503034][ T304] bridge_slave_0: left promiscuous mode [ 55.508749][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.686325][ T304] veth1_macvtap: left promiscuous mode [ 55.691925][ T304] veth0_vlan: left promiscuous mode [ 55.780152][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.787300][ T3055] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.799316][ T3055] bridge_slave_0: entered allmulticast mode [ 55.805714][ T3055] bridge_slave_0: entered promiscuous mode [ 55.812411][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.819611][ T3055] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.829962][ T3055] bridge_slave_1: entered allmulticast mode [ 55.836183][ T3055] bridge_slave_1: entered promiscuous mode [ 55.879122][ T3070] input: syz1 as /devices/virtual/input/input65 [ 55.892348][ T3055] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.899379][ T3055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.906609][ T3055] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.913624][ T3055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.945883][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.954829][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.968885][ T646] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.975931][ T646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.985121][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.992148][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.013442][ T3055] veth0_vlan: entered promiscuous mode [ 56.022252][ T3055] veth1_macvtap: entered promiscuous mode [ 56.062506][ T3076] SELinux: failed to load policy [ 56.067914][ T3076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715 [ 56.086351][ T3083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 56.164688][ T646] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.180329][ T52] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 56.283300][ T3102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 56.283319][ T3102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:722 [ 56.362807][ T3107] SELinux: security_context_str_to_sid () failed with errno=-22 [ 56.541357][ T3119] binder: Bad value for 'stats' [ 56.753847][ T3130] binder: Unknown parameter 'euid>00000000000000000000' [ 56.833513][ T3135] rust_binder: Got transaction with invalid offset. [ 56.833550][ T3135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 56.840191][ T3135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:628 [ 57.023831][ T3145] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 57.043175][ T3146] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 57.353937][ T3154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.353964][ T3154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 57.959338][ T36] kauditd_printk_skb: 205 callbacks suppressed [ 57.959355][ T36] audit: type=1400 audit(1750369386.779:577): avc: denied { read } for pid=3320 comm="syz.2.986" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 58.009793][ T36] audit: type=1400 audit(1750369386.789:578): avc: denied { write } for pid=3322 comm="syz.3.987" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 58.039025][ T36] audit: type=1400 audit(1750369386.789:579): avc: denied { read } for pid=3322 comm="syz.3.987" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 58.061553][ T36] audit: type=1400 audit(1750369386.789:580): avc: denied { read } for pid=3322 comm="syz.3.987" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 58.087195][ T36] audit: type=1400 audit(1750369386.789:581): avc: denied { read } for pid=3322 comm="syz.3.987" name="binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.110254][ T36] audit: type=1400 audit(1750369386.789:582): avc: denied { read } for pid=3322 comm="syz.3.987" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 58.144205][ T36] audit: type=1400 audit(1750369386.789:583): avc: denied { read write } for pid=3322 comm="syz.3.987" name="binder0" dev="binder" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 58.168313][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 58.168841][ T36] audit: type=1400 audit(1750369386.789:584): avc: denied { read write } for pid=865 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.174483][ T394] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.202986][ T36] audit: type=1400 audit(1750369386.799:585): avc: denied { read write } for pid=3330 comm="syz.3.989" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 58.233959][ T36] audit: type=1400 audit(1750369386.799:586): avc: denied { read write } for pid=865 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 58.301238][ T3407] can0: slcan on ptm1. [ 58.359541][ T3407] can0 (unregistered): slcan off ptm1. [ 58.619173][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.483373][ T646] Bluetooth: hci1: Frame reassembly failed (-84) [ 59.492759][ T646] Bluetooth: hci1: Frame reassembly failed (-90) [ 59.653445][ T3659] can0: slcan on ptm2. [ 59.698775][ T3658] can0 (unregistered): slcan off ptm2. [ 60.200885][ T3678] can0: slcan on ptm2. [ 60.238529][ T3677] can0 (unregistered): slcan off ptm2. [ 60.648764][ T394] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.528645][ T1216] Bluetooth: hci1: command 0x1003 tx timeout [ 61.534743][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 62.968350][ T36] kauditd_printk_skb: 45271 callbacks suppressed [ 62.968366][ T36] audit: type=1400 audit(1750369391.789:41968): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 62.979343][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.995824][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.009188][ T3988] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.011327][ T865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.015685][ T3988] audit: audit_lost=1311 audit_rate_limit=0 audit_backlog_limit=64 [ 63.015700][ T3988] audit: backlog limit exceeded [ 63.025462][ T148] audit: audit_lost=1312 audit_rate_limit=0 audit_backlog_limit=64 [ 63.030247][ T288] audit: audit_lost=1313 audit_rate_limit=0 audit_backlog_limit=64 [ 63.044744][ T148] audit: backlog limit exceeded [ 64.152469][ T4122] tap0: tun_chr_ioctl cmd 1074025677 [ 64.157808][ T4122] tap0: linktype set to 776 [ 65.248339][ T4232] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 65.783354][ T4288] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.801675][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.322105][ T4360] can0: slcan on ptm2. [ 67.428341][ T4359] can0 (unregistered): slcan off ptm2. [ 67.978371][ T36] kauditd_printk_skb: 58363 callbacks suppressed [ 67.978387][ T36] audit: type=1400 audit(1750369396.799:88960): avc: denied { setattr } for pid=288 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 67.987361][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.008482][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.022907][ T288] audit: audit_lost=5131 audit_rate_limit=0 audit_backlog_limit=64 [ 68.023922][ T4426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.037549][ T865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.038440][ T4426] audit: audit_lost=5132 audit_rate_limit=0 audit_backlog_limit=64 [ 68.044205][ T288] audit: backlog limit exceeded [ 68.053660][ T148] audit: audit_lost=5133 audit_rate_limit=0 audit_backlog_limit=64 [ 68.057012][ T865] audit: audit_lost=5134 audit_rate_limit=0 audit_backlog_limit=64 [ 68.808354][ T1216] Bluetooth: hci0: command 0x1003 tx timeout [ 68.814367][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.388479][ T13] bridge_slave_1: left allmulticast mode [ 72.394152][ T13] bridge_slave_1: left promiscuous mode [ 72.418144][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.468812][ T13] bridge_slave_0: left allmulticast mode [ 72.474465][ T13] bridge_slave_0: left promiscuous mode [ 72.485890][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.988319][ T36] kauditd_printk_skb: 64484 callbacks suppressed [ 72.988334][ T36] audit: type=1400 audit(1750369401.809:142601): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 72.994262][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.994691][ T36] audit: type=1400 audit(1750369401.809:142602): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.015924][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.024201][ T3055] audit: audit_backlog=65 > audit_backlog_limit=64 [ 73.043418][ T148] audit: audit_lost=8765 audit_rate_limit=0 audit_backlog_limit=64 [ 73.050139][ T3055] audit: audit_lost=8766 audit_rate_limit=0 audit_backlog_limit=64 [ 73.056379][ T148] audit: backlog limit exceeded [ 73.064333][ T36] audit: type=1400 audit(1750369401.809:142603): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.072157][ T288] audit: audit_lost=8767 audit_rate_limit=0 audit_backlog_limit=64 [ 73.106015][ T13] veth1_macvtap: left promiscuous mode [ 73.111533][ T13] veth0_vlan: left promiscuous mode [ 77.038640][ T4865] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 77.998302][ T36] kauditd_printk_skb: 89672 callbacks suppressed [ 77.998318][ T36] audit: type=1400 audit(1750369406.809:209135): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.004365][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.004681][ T36] audit: type=1400 audit(1750369406.819:209136): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.025771][ T148] audit: audit_lost=16546 audit_rate_limit=0 audit_backlog_limit=64 [ 78.032458][ T36] audit: type=1400 audit(1750369406.819:209137): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.053440][ T148] audit: backlog limit exceeded [ 78.082398][ T36] audit: type=1400 audit(1750369406.819:209138): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.087614][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 78.108387][ T36] audit: type=1400 audit(1750369406.819:209139): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.114835][ T148] audit: audit_lost=16547 audit_rate_limit=0 audit_backlog_limit=64 [ 79.358691][ T13] bridge_slave_1: left allmulticast mode [ 79.364362][ T13] bridge_slave_1: left promiscuous mode [ 79.370099][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.388557][ T13] bridge_slave_0: left allmulticast mode [ 79.394196][ T13] bridge_slave_0: left promiscuous mode [ 79.400344][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.429022][ T13] bridge_slave_1: left allmulticast mode [ 79.434660][ T13] bridge_slave_1: left promiscuous mode [ 79.440707][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.488547][ T13] bridge_slave_0: left allmulticast mode [ 79.494189][ T13] bridge_slave_0: left promiscuous mode [ 79.500256][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.528885][ T13] bridge_slave_1: left allmulticast mode [ 79.534525][ T13] bridge_slave_1: left promiscuous mode [ 79.540590][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.568906][ T13] bridge_slave_0: left allmulticast mode [ 79.574548][ T13] bridge_slave_0: left promiscuous mode [ 79.580246][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.428518][ T13] veth1_macvtap: left promiscuous mode [ 80.434049][ T13] veth0_vlan: left promiscuous mode [ 80.518412][ T13] veth1_macvtap: left promiscuous mode [ 80.523929][ T13] veth0_vlan: left promiscuous mode [ 80.588415][ T13] veth1_macvtap: left promiscuous mode [ 80.594214][ T13] veth0_vlan: left promiscuous mode [ 83.008321][ T36] kauditd_printk_skb: 61950 callbacks suppressed [ 83.008336][ T36] audit: type=1400 audit(1750369411.829:268461): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.014111][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.014691][ T36] audit: type=1400 audit(1750369411.829:268462): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.035760][ T148] audit: audit_lost=17424 audit_rate_limit=0 audit_backlog_limit=64 [ 83.042495][ T36] audit: type=1400 audit(1750369411.829:268463): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.063341][ T148] audit: backlog limit exceeded [ 83.071412][ T36] audit: type=1400 audit(1750369411.829:268464): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.092621][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 83.097351][ T36] audit: type=1400 audit(1750369411.829:268465): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.118358][ T148] audit: audit_lost=17425 audit_rate_limit=0 audit_backlog_limit=64