last executing test programs: 16.492399366s ago: executing program 0 (id=36): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGNPMODE(r2, 0x4008744b, &(0x7f0000000140)={0x29}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 16.427616267s ago: executing program 0 (id=38): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x2, 0x1000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x1df) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 16.23004966s ago: executing program 0 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1914577cdc35d164, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000040)=0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x5}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010046109aad0000eaef131414e3e8444ebf3f9d0f4dce5a88626cbf179cef390f7e0a9a9ae0b75a448661a282e840a7399c3e0ce252443eac1df6ad64922d0f2934d93b29bfedf810cfb5216de2822d89dffbc14bfd7bc1b42bf1cddaa6db0c59eb48f97566bf9555e47f028dbabfe5a3c1229471f44d9caf5d9247f95608e16c7ac3db6b55b71067650cd2a27c14a42cf9b67b88daaf41b2f7f2ec9e903e09d7a771a6cc2a90c50097a741d2ad635bbafde59fc90c110159f2c5866591e7711441cb022f99b1863deb62782e7d8ce92f156b93bad2401222"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1914577cdc35d164, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r1, 0x5412, &(0x7f0000000040)=0x15) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x3a, 0x0, 0x5}]}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010046109aad0000eaef131414e3e8444ebf3f9d0f4dce5a88626cbf179cef390f7e0a9a9ae0b75a448661a282e840a7399c3e0ce252443eac1df6ad64922d0f2934d93b29bfedf810cfb5216de2822d89dffbc14bfd7bc1b42bf1cddaa6db0c59eb48f97566bf9555e47f028dbabfe5a3c1229471f44d9caf5d9247f95608e16c7ac3db6b55b71067650cd2a27c14a42cf9b67b88daaf41b2f7f2ec9e903e09d7a771a6cc2a90c50097a741d2ad635bbafde59fc90c110159f2c5866591e7711441cb022f99b1863deb62782e7d8ce92f156b93bad2401222"]) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) (async) 16.084438972s ago: executing program 0 (id=40): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 15.955917164s ago: executing program 0 (id=41): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x380, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7f) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f0000000600)=ANY=[@ANYBLOB="01010000000000000000000000004002000000000200000000000000000014"]) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @ioapic={0x100000, 0xf0d, 0x969, 0x3, 0x0, [{0x40, 0x8, 0x2, '\x00', 0xc}, {0x2, 0x84, 0x0, '\x00', 0x7}, {0x9, 0x5, 0x2, '\x00', 0x2}, {0x3, 0x3, 0xb}, {0xa, 0x7, 0x6, '\x00', 0x2}, {0x0, 0x6, 0x3, '\x00', 0x18}, {0x20, 0x3, 0x3, '\x00', 0x80}, {0xb0, 0x4, 0x55, '\x00', 0x9}, {0xb, 0x2, 0x5, '\x00', 0x1}, {0x7, 0x7, 0x4, '\x00', 0x64}, {0x7, 0x7, 0x8, '\x00', 0x5}, {0x0, 0xca, 0x1, '\x00', 0x5}, {0x80, 0x1, 0xf2, '\x00', 0x1}, {0x4, 0xd7, 0x1, '\x00', 0xa}, {0x9, 0x2, 0x9f, '\x00', 0xf3}, {0xeb, 0x1, 0x49, '\x00', 0x4}, {0x7, 0xf7, 0x0, '\x00', 0xa7}, {0x1, 0x0, 0x3, '\x00', 0x3}, {0xf7, 0x1, 0x2, '\x00', 0x1}, {0xa7, 0x6, 0x2, '\x00', 0xf}, {0x10, 0xf0, 0x7, '\x00', 0xf7}, {0xff, 0x7, 0xd3, '\x00', 0x4}, {0x2d, 0x5, 0x8, '\x00', 0x2}, {0x2, 0x6, 0xb9, '\x00', 0x9}]}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc001102a, 0x0, 0x390}]}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0000080, 0x0, 0x7ffffffffff7fffe}]}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 15.818339616s ago: executing program 0 (id=44): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10000, 0x10d) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x8, 0xe8, 0xfff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x218302) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0xc0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000140)={0x4}) (async) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000140)={0x4}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x1, 0x0, 0xa474, 0x9}, 0x2, [0x2, 0x0, 0x9, 0x5, 0x8000, 0xc, 0x6, 0xd, 0x4, 0x2, 0x530, 0x8, 0x4, 0xff, 0x8, 0x401, 0x0, 0x2, 0x2, 0x8, 0xc, 0x1, 0xd, 0x80, 0x1, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x7f, 0x8000, 0xfffffff9, 0x4, 0x8, 0xc, 0x1000, 0x8, 0x401, 0x3, 0x8, 0x7fff, 0x7, 0x2, 0x3, 0x2, 0x4, 0x8, 0x7, 0xfffffff9, 0x0, 0x9, 0xfffffe00, 0x2, 0x6, 0x3, 0x4, 0x4ef1, 0x1, 0xb3, 0x10000, 0x10000, 0x3, 0xe], [0xa2, 0x0, 0x8, 0xa, 0x6e6, 0x1, 0x5, 0x6, 0xc867, 0x3aa, 0x200, 0x4, 0xc1ac, 0x0, 0x0, 0xf91a, 0x1, 0x10, 0x910, 0x800, 0x6, 0xffffffff, 0xe177, 0x63, 0x63, 0x8, 0xb00000, 0x6, 0x80000000, 0x3, 0x78, 0x1, 0x3ff, 0x5, 0x4, 0x2, 0x8, 0x8, 0x1, 0x100, 0x4736, 0xffffffff, 0x10000, 0x40, 0x6, 0x6, 0x2, 0x0, 0x10000, 0x40, 0x2a3, 0x48, 0x481a, 0x101, 0x10, 0x0, 0x5, 0x8001, 0x7, 0x10001, 0xbcb, 0x9, 0x0, 0x9], [0xc6, 0xd96, 0x2, 0x5, 0x9, 0x10001, 0x2, 0xfffffeff, 0x8, 0x7, 0x9, 0x0, 0x6, 0x3, 0x1, 0x6, 0xafde, 0x675, 0x8001, 0xc, 0x7, 0x4, 0x200, 0x0, 0x3, 0x1, 0x8, 0x9, 0x9, 0x6, 0x9c8, 0x80000000, 0x5, 0x7f, 0x1, 0x9, 0x7fff, 0x1, 0x9, 0xc1b, 0x8, 0x4, 0x6, 0x8, 0x1, 0x6, 0x1, 0xd, 0x10000, 0x9, 0x1, 0x6, 0x2f, 0x5, 0x8, 0x5, 0xffffffff, 0x5, 0xc42, 0x0, 0x7, 0x3, 0xfffffffd, 0x1000], [0x3ff, 0xb, 0x2, 0x7f, 0xfffffe00, 0x5, 0x0, 0x4, 0x8, 0x8001, 0x2, 0x1, 0x5, 0x8c0, 0x6, 0x1, 0x7fffffff, 0x7, 0x2, 0x2, 0x2, 0x0, 0x4, 0x4, 0x1000, 0xff, 0x3, 0x3, 0x8, 0x5a, 0x5d, 0x3, 0x7fff, 0xb11, 0xfffffff2, 0x401, 0xa30, 0x6ac, 0x4, 0x8000, 0x7, 0x6, 0x7, 0x8000, 0x8, 0xb, 0x401, 0x5, 0x3, 0x6, 0x9, 0x6, 0xa000, 0x6, 0x7, 0xc6, 0x5, 0x9, 0x0, 0x7, 0x8, 0x2, 0xfe56, 0x2]}, 0x45c) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000a00)={0x1, 0x1, 0x1a, 0x8, 0xec, &(0x7f0000000600)}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a40)={0x6b22, 0x1, 0xd0a, 0x8, 0x5, "5be00e3114d5ef17b5667b5d0a3835c4645768", 0x3, 0x2}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a40)={0x6b22, 0x1, 0xd0a, 0x8, 0x5, "5be00e3114d5ef17b5667b5d0a3835c4645768", 0x3, 0x2}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ac0)={'syz0\x00', {0x4c00, 0x8, 0x800, 0x4}, 0x48, [0x9, 0xf0c, 0x0, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x9fb9, 0x4d04, 0x6, 0x400, 0x7, 0xb, 0x8, 0x5, 0x2, 0x2854, 0x9, 0x2, 0xffff, 0xffff, 0x80, 0x0, 0x0, 0x9, 0xb, 0x1, 0x3, 0x3, 0x4, 0x3, 0x7fffffff, 0x7f, 0x80000000, 0x61d4ad69, 0x1, 0x80, 0x101, 0x8, 0x3, 0x7, 0x9, 0x3, 0x5, 0x6, 0x84, 0x3a56, 0x0, 0x5, 0x9, 0x3, 0x9, 0x401, 0xa, 0x4, 0x8000, 0x7, 0x6, 0xffffffff, 0x0, 0x0, 0x4, 0x2a, 0xca7b], [0x3, 0x800, 0xa06, 0xdb0, 0x80, 0x7a, 0x1, 0x5, 0x1, 0x8, 0xe, 0x4, 0x43, 0xfffffff7, 0x78, 0x80000000, 0x8, 0x0, 0x1e4, 0x1, 0x81, 0x6, 0x7ff, 0x6, 0x5, 0x79f0, 0x7, 0x679, 0x5, 0xb6bc, 0xca4, 0x3, 0xdb6, 0xd2, 0x1, 0x0, 0x3, 0x5, 0x8, 0xa035, 0x8, 0x93, 0xeaf, 0x5, 0x4, 0x6, 0xfff, 0x4, 0x4, 0x2, 0x6, 0x4cb, 0x8, 0x7, 0xffff, 0x0, 0x5, 0x9, 0xffffffff, 0x93, 0x3, 0xfffffff8, 0x10001, 0x200], [0x2, 0x0, 0x8, 0x45f, 0x3, 0x7f, 0x50000, 0x3, 0x1ff, 0x6, 0x5, 0xcd0, 0x80000001, 0x0, 0xe, 0x7, 0x2, 0x1000, 0x10000, 0xac, 0x5, 0x5, 0x7cbb, 0x0, 0x67, 0x5, 0x4, 0x1, 0x2, 0x1, 0xea50, 0xa20, 0x80000000, 0x5e53, 0xff, 0x80000001, 0xf, 0x9, 0xfffffff8, 0x2, 0x200, 0x0, 0x7fffffff, 0x4, 0x7fffffff, 0x401, 0xfe6, 0x0, 0x8, 0x7fffffff, 0x8, 0x1, 0x401, 0x739, 0x0, 0x9, 0x8, 0x1, 0xfffffff8, 0x4, 0x12000000, 0x0, 0x9, 0x4], [0x7, 0x8, 0x7ff, 0x4, 0x4, 0x100, 0x10, 0x7, 0x2, 0x800, 0x3, 0x0, 0x0, 0x6, 0x5, 0xfffff800, 0x6, 0xb, 0x2, 0xffff, 0x1000, 0x4, 0xfffffff0, 0x5, 0x3ff, 0x1e, 0x0, 0x200, 0x8, 0x296, 0xfffffff9, 0x8, 0x8, 0x9672, 0x9f7, 0x8c, 0x3, 0x45, 0x8000, 0xfffffffb, 0x6, 0x81, 0x4, 0xffff, 0x1, 0x200, 0x8, 0x1, 0x401, 0x1, 0x5, 0x4, 0x80, 0x9b, 0x0, 0x80000000, 0x2, 0x5, 0x6, 0x2a82, 0xcca, 0x0, 0x8, 0x4d78]}, 0x45c) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x427) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001340)={0x1, 0x1, 0x18, 0xb, 0x11c, &(0x7f0000000f40)}) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001340)={0x1, 0x1, 0x18, 0xb, 0x11c, &(0x7f0000000f40)}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001380)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000017c0)={0x1, 0x1, 0x15, 0x1, 0x59, &(0x7f00000013c0)}) read(r1, &(0x7f0000001800)=""/255, 0xff) (async) read(r1, &(0x7f0000001800)=""/255, 0xff) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001900), 0x24000, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001900), 0x24000, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000001940)) (async) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000001940)) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000001980)) openat$bsg(0xffffffffffffff9c, &(0x7f00000019c0), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001a00)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0x7) syz_clone3(&(0x7f0000002e40)={0xc000c000, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40), {0x5}, &(0x7f0000001d80)=""/96, 0x60, &(0x7f0000001e00)=""/4096, &(0x7f0000002e00)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) (async) syz_clone3(&(0x7f0000002e40)={0xc000c000, &(0x7f0000001cc0), &(0x7f0000001d00)=0x0, &(0x7f0000001d40), {0x5}, &(0x7f0000001d80)=""/96, 0x60, &(0x7f0000001e00)=""/4096, &(0x7f0000002e00)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) syz_clone3(&(0x7f0000004040)={0x200000000, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00), {0x38}, &(0x7f0000001b40)=""/249, 0xf9, &(0x7f0000001c40)=""/122, &(0x7f0000004000)=[r5, 0x0], 0x2, {r0}}, 0x58) 5.762123051s ago: executing program 2 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, {0x2000, 0x0, 0xf, 0x0, 0x7, 0x14, 0x0, 0x0, 0x3, 0x0, 0x2, 0xfc}, {0x3000, 0xd000, 0x10, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x3000, 0x9, 0x40, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80, 0x1}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, {0x8080000, 0x3000, 0x4, 0x3, 0x0, 0x4, 0xf, 0xa, 0x26}, {0x1}, {0xffff1000, 0x2}, 0xddf8ffdb, 0x0, 0x100000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0x7fffffffffffffff, 0x1]}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000180)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, 0xfffffffffffffffe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x32) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$vga_arbiter(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xdb) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 3.713102522s ago: executing program 2 (id=229): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x105082, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x40187013, &(0x7f0000000080)={0x1}) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x2000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) read(r0, &(0x7f0000000280)=""/112, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x40047703, 0x0) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x1}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 3.644026233s ago: executing program 2 (id=230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) 3.643816203s ago: executing program 2 (id=231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper, @decrefs], 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 3.643165513s ago: executing program 2 (id=232): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) (async) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x81) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 32) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000003c0)={0xa, 0x4, 0x4, 0xffffffffffffffff, 0x7}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0xffffffffffffbfff, 0x9, 0x8000000000000005, 0x4, 0x0, 0x9, 0x400000000000006, 0x100000000], 0x8000000, 0x141200}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x80, 0x10, 0x0, 0x5, 0x0, 0x7f, 0x4, 0x0, 0x80, '\x00', 0x2, 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x19) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x3000, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, 0x20, 0x0, 0x4, 0x10}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x6, 0x2}, {0xdddd1000, 0x5000, 0x3, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000, 0xeeeed000, 0x0, 0x0, 0x2}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x75}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x2}, {0x10000, 0x5000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {}, 0xfdfcffdf, 0x0, 0x2000, 0x302034, 0x0, 0x500, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffd]}) ioctl$TCFLSH(r6, 0x400455c8, 0x7) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x1, 0x2, 0x5, 0x0, 0x54392ec65197b9e3}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) close_range(r10, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x6) 3.529467595s ago: executing program 2 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x30800, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0x5460, 0x1000000000000) (async) ioctl$KVM_SET_NESTED_STATE(r3, 0x4140aecd, &(0x7f0000000dc0)={{0x1, 0x0, 0x80, {0x4000, 0xf000, 0x1}}, "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", "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"}) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r5, 0x2000) 859.707906ms ago: executing program 3 (id=263): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @clear_death={0x400c630f, 0x2}], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 797.099657ms ago: executing program 32 (id=44): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10000, 0x10d) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) (async) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x8, 0xe8, 0xfff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x218302) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x3) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0xc0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000140)={0x4}) (async) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000140)={0x4}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x1, 0x0, 0xa474, 0x9}, 0x2, [0x2, 0x0, 0x9, 0x5, 0x8000, 0xc, 0x6, 0xd, 0x4, 0x2, 0x530, 0x8, 0x4, 0xff, 0x8, 0x401, 0x0, 0x2, 0x2, 0x8, 0xc, 0x1, 0xd, 0x80, 0x1, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x7f, 0x8000, 0xfffffff9, 0x4, 0x8, 0xc, 0x1000, 0x8, 0x401, 0x3, 0x8, 0x7fff, 0x7, 0x2, 0x3, 0x2, 0x4, 0x8, 0x7, 0xfffffff9, 0x0, 0x9, 0xfffffe00, 0x2, 0x6, 0x3, 0x4, 0x4ef1, 0x1, 0xb3, 0x10000, 0x10000, 0x3, 0xe], [0xa2, 0x0, 0x8, 0xa, 0x6e6, 0x1, 0x5, 0x6, 0xc867, 0x3aa, 0x200, 0x4, 0xc1ac, 0x0, 0x0, 0xf91a, 0x1, 0x10, 0x910, 0x800, 0x6, 0xffffffff, 0xe177, 0x63, 0x63, 0x8, 0xb00000, 0x6, 0x80000000, 0x3, 0x78, 0x1, 0x3ff, 0x5, 0x4, 0x2, 0x8, 0x8, 0x1, 0x100, 0x4736, 0xffffffff, 0x10000, 0x40, 0x6, 0x6, 0x2, 0x0, 0x10000, 0x40, 0x2a3, 0x48, 0x481a, 0x101, 0x10, 0x0, 0x5, 0x8001, 0x7, 0x10001, 0xbcb, 0x9, 0x0, 0x9], [0xc6, 0xd96, 0x2, 0x5, 0x9, 0x10001, 0x2, 0xfffffeff, 0x8, 0x7, 0x9, 0x0, 0x6, 0x3, 0x1, 0x6, 0xafde, 0x675, 0x8001, 0xc, 0x7, 0x4, 0x200, 0x0, 0x3, 0x1, 0x8, 0x9, 0x9, 0x6, 0x9c8, 0x80000000, 0x5, 0x7f, 0x1, 0x9, 0x7fff, 0x1, 0x9, 0xc1b, 0x8, 0x4, 0x6, 0x8, 0x1, 0x6, 0x1, 0xd, 0x10000, 0x9, 0x1, 0x6, 0x2f, 0x5, 0x8, 0x5, 0xffffffff, 0x5, 0xc42, 0x0, 0x7, 0x3, 0xfffffffd, 0x1000], [0x3ff, 0xb, 0x2, 0x7f, 0xfffffe00, 0x5, 0x0, 0x4, 0x8, 0x8001, 0x2, 0x1, 0x5, 0x8c0, 0x6, 0x1, 0x7fffffff, 0x7, 0x2, 0x2, 0x2, 0x0, 0x4, 0x4, 0x1000, 0xff, 0x3, 0x3, 0x8, 0x5a, 0x5d, 0x3, 0x7fff, 0xb11, 0xfffffff2, 0x401, 0xa30, 0x6ac, 0x4, 0x8000, 0x7, 0x6, 0x7, 0x8000, 0x8, 0xb, 0x401, 0x5, 0x3, 0x6, 0x9, 0x6, 0xa000, 0x6, 0x7, 0xc6, 0x5, 0x9, 0x0, 0x7, 0x8, 0x2, 0xfe56, 0x2]}, 0x45c) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000a00)={0x1, 0x1, 0x1a, 0x8, 0xec, &(0x7f0000000600)}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a40)={0x6b22, 0x1, 0xd0a, 0x8, 0x5, "5be00e3114d5ef17b5667b5d0a3835c4645768", 0x3, 0x2}) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a40)={0x6b22, 0x1, 0xd0a, 0x8, 0x5, "5be00e3114d5ef17b5667b5d0a3835c4645768", 0x3, 0x2}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ac0)={'syz0\x00', {0x4c00, 0x8, 0x800, 0x4}, 0x48, [0x9, 0xf0c, 0x0, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x9fb9, 0x4d04, 0x6, 0x400, 0x7, 0xb, 0x8, 0x5, 0x2, 0x2854, 0x9, 0x2, 0xffff, 0xffff, 0x80, 0x0, 0x0, 0x9, 0xb, 0x1, 0x3, 0x3, 0x4, 0x3, 0x7fffffff, 0x7f, 0x80000000, 0x61d4ad69, 0x1, 0x80, 0x101, 0x8, 0x3, 0x7, 0x9, 0x3, 0x5, 0x6, 0x84, 0x3a56, 0x0, 0x5, 0x9, 0x3, 0x9, 0x401, 0xa, 0x4, 0x8000, 0x7, 0x6, 0xffffffff, 0x0, 0x0, 0x4, 0x2a, 0xca7b], [0x3, 0x800, 0xa06, 0xdb0, 0x80, 0x7a, 0x1, 0x5, 0x1, 0x8, 0xe, 0x4, 0x43, 0xfffffff7, 0x78, 0x80000000, 0x8, 0x0, 0x1e4, 0x1, 0x81, 0x6, 0x7ff, 0x6, 0x5, 0x79f0, 0x7, 0x679, 0x5, 0xb6bc, 0xca4, 0x3, 0xdb6, 0xd2, 0x1, 0x0, 0x3, 0x5, 0x8, 0xa035, 0x8, 0x93, 0xeaf, 0x5, 0x4, 0x6, 0xfff, 0x4, 0x4, 0x2, 0x6, 0x4cb, 0x8, 0x7, 0xffff, 0x0, 0x5, 0x9, 0xffffffff, 0x93, 0x3, 0xfffffff8, 0x10001, 0x200], [0x2, 0x0, 0x8, 0x45f, 0x3, 0x7f, 0x50000, 0x3, 0x1ff, 0x6, 0x5, 0xcd0, 0x80000001, 0x0, 0xe, 0x7, 0x2, 0x1000, 0x10000, 0xac, 0x5, 0x5, 0x7cbb, 0x0, 0x67, 0x5, 0x4, 0x1, 0x2, 0x1, 0xea50, 0xa20, 0x80000000, 0x5e53, 0xff, 0x80000001, 0xf, 0x9, 0xfffffff8, 0x2, 0x200, 0x0, 0x7fffffff, 0x4, 0x7fffffff, 0x401, 0xfe6, 0x0, 0x8, 0x7fffffff, 0x8, 0x1, 0x401, 0x739, 0x0, 0x9, 0x8, 0x1, 0xfffffff8, 0x4, 0x12000000, 0x0, 0x9, 0x4], [0x7, 0x8, 0x7ff, 0x4, 0x4, 0x100, 0x10, 0x7, 0x2, 0x800, 0x3, 0x0, 0x0, 0x6, 0x5, 0xfffff800, 0x6, 0xb, 0x2, 0xffff, 0x1000, 0x4, 0xfffffff0, 0x5, 0x3ff, 0x1e, 0x0, 0x200, 0x8, 0x296, 0xfffffff9, 0x8, 0x8, 0x9672, 0x9f7, 0x8c, 0x3, 0x45, 0x8000, 0xfffffffb, 0x6, 0x81, 0x4, 0xffff, 0x1, 0x200, 0x8, 0x1, 0x401, 0x1, 0x5, 0x4, 0x80, 0x9b, 0x0, 0x80000000, 0x2, 0x5, 0x6, 0x2a82, 0xcca, 0x0, 0x8, 0x4d78]}, 0x45c) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x427) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001340)={0x1, 0x1, 0x18, 0xb, 0x11c, &(0x7f0000000f40)}) (async) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001340)={0x1, 0x1, 0x18, 0xb, 0x11c, &(0x7f0000000f40)}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001380)=0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000017c0)={0x1, 0x1, 0x15, 0x1, 0x59, &(0x7f00000013c0)}) read(r1, &(0x7f0000001800)=""/255, 0xff) (async) read(r1, &(0x7f0000001800)=""/255, 0xff) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001900), 0x24000, 0x0) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001900), 0x24000, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000001940)) (async) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000001940)) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000001980)) openat$bsg(0xffffffffffffff9c, &(0x7f00000019c0), 0x40, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001a00)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001a40)=0x7) syz_clone3(&(0x7f0000002e40)={0xc000c000, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40), {0x5}, &(0x7f0000001d80)=""/96, 0x60, &(0x7f0000001e00)=""/4096, &(0x7f0000002e00)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) (async) syz_clone3(&(0x7f0000002e40)={0xc000c000, &(0x7f0000001cc0), &(0x7f0000001d00)=0x0, &(0x7f0000001d40), {0x5}, &(0x7f0000001d80)=""/96, 0x60, &(0x7f0000001e00)=""/4096, &(0x7f0000002e00)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) syz_clone3(&(0x7f0000004040)={0x200000000, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00), {0x38}, &(0x7f0000001b40)=""/249, 0xf9, &(0x7f0000001c40)=""/122, &(0x7f0000004000)=[r5, 0x0], 0x2, {r0}}, 0x58) 794.983077ms ago: executing program 3 (id=265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000000000000000040"]) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r4, 0x2000) 536.042591ms ago: executing program 1 (id=266): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x6, 0xd, 0x0, 0x7, 0x5, 0x6, 0x2, 0x4, 0x4, 0x5, 0x83, 0x0, 0x0, 0x1f, 0x3, 0x2, 0x0, 0x0, '\x00', 0x3, 0x7f}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x80010, r1, 0x7837c000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x12, r0, 0x4d75d000) 485.474522ms ago: executing program 3 (id=267): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='-+\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000001c0)='!{[\x00') (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) (async) close_range(r1, r0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='!{[\x00') 484.938702ms ago: executing program 1 (id=268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x100010, r0, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d07, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 470.347182ms ago: executing program 3 (id=269): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 399.623463ms ago: executing program 3 (id=270): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700)) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4220, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x8) ioctl$PPPIOCSDEBUG(r4, 0x40047440, 0x0) close(r6) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r8, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0xc2a4a000) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x1100, 0x0, 0xffffffffffffffff, 0x7fffffffffffffff}) read(r9, &(0x7f00000004c0)=""/92, 0x5c) 398.627993ms ago: executing program 1 (id=271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001240)={'\x00', 0x4, 0x615e4d0e, 0x100, 0x8, 0x1, 0xffffffffffffffff}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) syz_clone3(&(0x7f0000001340)={0x20210000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x16}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/195, &(0x7f00000012c0)=[r1, r2], 0x2, {r3}}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 323.842174ms ago: executing program 1 (id=272): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) syz_clone(0x22822400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 235.010136ms ago: executing program 1 (id=273): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)={0x0, 0x4000003, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$selinux_load(r8, &(0x7f0000000340)={0xf97cff8c, 0x8, 'SE Linux', "b992bfff4aa826cb65b7a68e3315a872e08f2b32dacd95861e52734aadcee48b9cb72527485025f954d10120cfb49fe0106bff106b0de35e29b0ebfb962c0c581a05be852e0b33035d774bae3e4ff8de8561c127e4f29e39aa343a78011cd29878227c28ca40904b3d0ab2439388abb05e55c1b7f801c98e4f5d7f9fc423f6cc385dda"}, 0x93) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000005c0)={0x6, 0x0, [{0x3a8, 0x0, 0x1}, {0x299, 0x0, 0x3}, {0x330, 0x0, 0xffff}, {0xab7, 0x0, 0x7}, {0xaf7, 0x0, 0x10001}, {0x854, 0x0, 0x7}]}) write$UHID_CREATE(r3, &(0x7f0000000480)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/162, 0xa2, 0x1, 0x40, 0x7, 0x7, 0x10001}}, 0x120) (async) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000000000000d0000000700000029000000000040003600000001000000030000000000000000000000000000000800008009000000060000000f39"]) (async) r11 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x10) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) (async) ioctl$TIOCGPTPEER(r11, 0x5441, 0x563d) (async) ioctl$KVM_SMI(r2, 0xaeb7) (async) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b67d54c135932ab700dc2c8a11", @ANYRES16=r12]) (async) r15 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r16 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r16, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800004503"]) (async) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) (async) ioctl$TIOCSBRK(r15, 0x5427) 165.141307ms ago: executing program 3 (id=274): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x230c00, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x58ac2, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x293, 0x0, 0x9}]}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000f00)={'binder0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r6, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x75d4fedc97d21119}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 128.003598ms ago: executing program 4 (id=264): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x0, 0x8}}, 0xa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r1, 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r3, 0x125f, 0x0) 93.504828ms ago: executing program 1 (id=275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x7fa8c000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) 0s ago: executing program 4 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x10, r0, 0x1000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffffffc1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000140)) mmap(&(0x7f00004b3000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x1f96e000) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. [ 22.636461][ T36] audit: type=1400 audit(1750405224.890:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.637921][ T281] cgroup: Unknown subsys name 'net' [ 22.659213][ T36] audit: type=1400 audit(1750405224.890:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.686625][ T36] audit: type=1400 audit(1750405224.920:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.686831][ T281] cgroup: Unknown subsys name 'devices' [ 22.872841][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.878488][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.054668][ T36] audit: type=1400 audit(1750405225.310:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.079258][ T36] audit: type=1400 audit(1750405225.310:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.104373][ T36] audit: type=1400 audit(1750405225.310:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.116236][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.136408][ T36] audit: type=1400 audit(1750405225.390:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.161875][ T36] audit: type=1400 audit(1750405225.390:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.195518][ T36] audit: type=1400 audit(1750405225.450:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.221241][ T36] audit: type=1400 audit(1750405225.450:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.221328][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.043559][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.050778][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.057896][ T288] bridge_slave_0: entered allmulticast mode [ 24.064335][ T288] bridge_slave_0: entered promiscuous mode [ 24.072632][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.079686][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.086813][ T288] bridge_slave_1: entered allmulticast mode [ 24.093185][ T288] bridge_slave_1: entered promiscuous mode [ 24.206071][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.213227][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.220319][ T293] bridge_slave_0: entered allmulticast mode [ 24.226938][ T293] bridge_slave_0: entered promiscuous mode [ 24.233575][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.240707][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.247936][ T293] bridge_slave_1: entered allmulticast mode [ 24.256276][ T293] bridge_slave_1: entered promiscuous mode [ 24.293074][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.300164][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.307348][ T295] bridge_slave_0: entered allmulticast mode [ 24.313686][ T295] bridge_slave_0: entered promiscuous mode [ 24.326495][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.333587][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.340729][ T295] bridge_slave_1: entered allmulticast mode [ 24.346992][ T295] bridge_slave_1: entered promiscuous mode [ 24.377331][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.384518][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.391644][ T294] bridge_slave_0: entered allmulticast mode [ 24.398038][ T294] bridge_slave_0: entered promiscuous mode [ 24.417069][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.424188][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.431595][ T294] bridge_slave_1: entered allmulticast mode [ 24.437956][ T294] bridge_slave_1: entered promiscuous mode [ 24.486771][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.493876][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.501223][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.508262][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.606492][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.613593][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.620905][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.627952][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.639019][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.646114][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.653432][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.660942][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.685671][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.692775][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.700060][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.707140][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.718745][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.726456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.734173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.741931][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.749114][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.756538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.813192][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.820271][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.829500][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836607][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.845155][ T288] veth0_vlan: entered promiscuous mode [ 24.863330][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.870428][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.878203][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.885314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.894325][ T288] veth1_macvtap: entered promiscuous mode [ 24.929451][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.936562][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.950721][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.957801][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.966697][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.976157][ T294] veth0_vlan: entered promiscuous mode [ 25.013452][ T293] veth0_vlan: entered promiscuous mode [ 25.029422][ T294] veth1_macvtap: entered promiscuous mode [ 25.056119][ T293] veth1_macvtap: entered promiscuous mode [ 25.065106][ T295] veth0_vlan: entered promiscuous mode [ 25.092523][ T295] veth1_macvtap: entered promiscuous mode [ 25.126883][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.166518][ T317] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 25.187363][ T317] rust_binder: Write failure EINVAL in pid:5 [ 25.214095][ T315] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 25.234924][ T323] input: syz1 as /devices/virtual/input/input4 [ 25.242727][ T315] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 25.251254][ T313] rust_binder: Write failure EINVAL in pid:2 [ 25.251865][ T326] rust_binder: Write failure EINVAL in pid:7 [ 25.251938][ T315] kvm: requested 27657 ns i8254 timer period limited to 200000 ns [ 25.278922][ T315] binder: Bad value for 'max' [ 25.721382][ T351] input: syz1 as /devices/virtual/input/input5 [ 25.828189][ T358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 25.828238][ T358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:11 [ 25.840987][ T355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 25.851918][ T348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 26.025104][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.051029][ T375] binder: Unknown parameter 'processor : 0 [ 26.051029][ T375] vendor_id : GenuineIntel [ 26.051029][ T375] cpu family : 6 [ 26.051029][ T375] model : 79 [ 26.051029][ T375] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 26.051029][ T375] stepping : 0 [ 26.051029][ T375] microcode : 0xffffffff [ 26.051029][ T375] cpu MHz : 2199.998 [ 26.051029][ T375] cache size : 56320 KB [ 26.051029][ T375] physical id : 0 [ 26.051029][ T375] siblings : 2 [ 26.051029][ T375] core id : 0 [ 26.051029][ T375] cpu cores : 1 [ 26.051029][ T375] apicid : 0 [ 26.051029][ T375] initial apicid : 0 [ 26.051029][ T375] fpu : yes [ 26.051029][ T375] fpu_exception : yes [ 26.051029][ T375] cpuid level : 13 [ 26.051029][ T375] wp : yes [ 26.051029][ T375] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 26.051029][ T375] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 26.191820][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.191854][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.198341][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.206390][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.251119][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.257575][ T369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 26.274431][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.274474][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.284582][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.287551][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.318220][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.318253][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.326076][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.332711][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.339157][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.345835][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.355589][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.363596][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.371053][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.383649][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.390699][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.397424][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.404723][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.424797][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.431434][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.438083][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.445628][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.458298][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.465026][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.473712][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.480313][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.497629][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.505959][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.516200][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.523189][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.529922][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.536745][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.543877][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.552761][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.568330][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.574864][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.581532][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.588010][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.596893][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.605343][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.612798][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.619434][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.626617][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.634198][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.640866][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.648814][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.656156][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.664211][ T396] rust_binder: Write failure EFAULT in pid:32 [ 26.666162][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.676898][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.697449][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.704213][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.704497][ T401] SELinux: failed to load policy [ 26.710759][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.722416][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.722547][ T401] binder: Bad value for 'max' [ 26.728915][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.728933][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.728949][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.728964][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.759739][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.766700][ T370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.928428][ T416] rust_binder: Write failure EINVAL in pid:39 [ 26.935216][ T416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.959712][ T420] rust_binder: Write failure EFAULT in pid:12 [ 27.086488][ T431] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 27.235947][ T433] ======================================================= [ 27.235947][ T433] WARNING: The mand mount option has been deprecated and [ 27.235947][ T433] and is ignored by this kernel. Remove the mand [ 27.235947][ T433] option from the mount to silence this warning. [ 27.235947][ T433] ======================================================= [ 27.278982][ T433] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 27.382123][ T438] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 27.382148][ T438] rust_binder: Error while translating object. [ 27.391389][ T438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.398039][ T438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 27.916463][ T454] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 27.925750][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 27.934404][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:16 [ 27.987056][ T456] rust_binder: Write failure EFAULT in pid:18 [ 27.999299][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 27.999319][ T36] audit: type=1400 audit(1750405230.250:152): avc: denied { relabelfrom } for pid=455 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.050404][ T36] audit: type=1400 audit(1750405230.250:153): avc: denied { relabelto } for pid=455 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.138711][ T466] tun0: tun_chr_ioctl cmd 1074025676 [ 28.144142][ T466] tun0: owner set to 0 [ 28.263997][ T474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.264089][ T474] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 28.565469][ T36] audit: type=1400 audit(1750405230.820:154): avc: denied { execute } for pid=492 comm="syz.2.62" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.677015][ T495] rust_binder: Write failure EINVAL in pid:46 [ 28.804357][ T36] audit: type=1400 audit(1750405231.060:155): avc: denied { write } for pid=496 comm="syz.2.64" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.853472][ T512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.865822][ T513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:32 [ 28.891309][ T512] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 28.911450][ T36] audit: type=1400 audit(1750405231.170:156): avc: denied { write } for pid=511 comm="syz.1.69" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.920439][ T513] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 28.960267][ T513] rust_binder: Read failure Err(EFAULT) in pid:32 [ 28.980071][ T516] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 29.010464][ T512] rust_binder: Write failure EINVAL in pid:55 [ 29.010613][ T516] rust_binder: Write failure EINVAL in pid:55 [ 29.284026][ T36] audit: type=1326 audit(1750405231.540:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05af8e929 code=0x7ffc0000 [ 29.300838][ T525] binder: Unknown parameter 'context' [ 29.390097][ T36] audit: type=1326 audit(1750405231.540:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05af8e929 code=0x7ffc0000 [ 29.429987][ T533] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 29.430014][ T533] rust_binder: Error while translating object. [ 29.450466][ T36] audit: type=1326 audit(1750405231.560:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe05af8e929 code=0x7ffc0000 [ 29.509774][ T533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.509814][ T533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 29.510399][ T36] audit: type=1326 audit(1750405231.590:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05af8e929 code=0x7ffc0000 [ 29.561052][ T36] audit: type=1326 audit(1750405231.590:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=520 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe05af8e929 code=0x7ffc0000 [ 30.059883][ T573] rust_binder: Write failure EFAULT in pid:46 [ 30.064607][ T575] rust_binder: Write failure EINVAL in pid:86 [ 30.074571][ T573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.091008][ T576] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 30.137870][ T576] rust_binder: Write failure EINVAL in pid:86 [ 30.173902][ T581] binder: Unknown parameter 'posixacl' [ 30.173939][ T582] binder: Unknown parameter 'posixacl' [ 30.205739][ T578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 30.248276][ T585] rust_binder: Write failure EINVAL in pid:89 [ 30.329205][ T592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 30.362556][ T594] binder: Unknown parameter 'defcontext01777777777777777777777' [ 30.467480][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.467505][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.506073][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.506106][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.540530][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.540560][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.581290][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.581322][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.622895][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.622925][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.663798][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.663830][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.700448][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.700480][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.720653][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.767028][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.767063][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.797592][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.797626][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.807355][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.831021][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.850987][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.857477][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.904447][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.918088][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.955108][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.962317][ T619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.969344][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:106 [ 30.970421][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.041534][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.056430][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.074378][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.107928][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.122501][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.142289][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.156484][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.170498][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.190370][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.204519][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.217707][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.225548][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.238873][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.253457][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.266943][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.280242][ T599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.421594][ T633] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 31.450548][ T633] rust_binder: Write failure EINVAL in pid:57 [ 31.820468][ T652] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 31.838033][ T653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 31.856887][ T652] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 31.886523][ T652] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 32.128276][ T677] binder: Unknown parameter '' [ 32.198698][ T684] binder: Unknown parameter 'non' [ 32.219495][ T679] rust_binder: Error in use_page_slow: ESRCH [ 32.219519][ T679] rust_binder: use_range failure ESRCH [ 32.238939][ T679] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 32.250512][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 32.258483][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:133 [ 32.510026][ T691] binder: Bad value for 'max' [ 32.543336][ T693] binder: Bad value for 'max' [ 32.551610][ T693] binder: Unknown parameter 'processor : 0 [ 32.551610][ T693] vendor_id : GenuineIntel [ 32.551610][ T693] cpu family : 6 [ 32.551610][ T693] model : 79 [ 32.551610][ T693] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 32.551610][ T693] stepping : 0 [ 32.551610][ T693] microcode : 0xffffffff [ 32.551610][ T693] cpu MHz : 2199.998 [ 32.551610][ T693] cache size : 56320 KB [ 32.551610][ T693] physical id : 0 [ 32.551610][ T693] siblings : 2 [ 32.551610][ T693] core id : 0 [ 32.551610][ T693] cpu cores : 1 [ 32.551610][ T693] apicid : 0 [ 32.551610][ T693] initial apicid : 0 [ 32.551610][ T693] fpu : yes [ 32.551610][ T693] fpu_exception : yes [ 32.551610][ T693] cpuid level : 13 [ 32.551610][ T693] wp : yes [ 32.551610][ T693] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 32.551610][ T693] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 32.575695][ T695] binder: Bad value for 'stats' [ 32.877507][ T703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 32.895976][ T702] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 32.984370][ T710] binder: Unknown parameter 'processor : 0 [ 32.984370][ T710] vendor_id : GenuineIntel [ 32.984370][ T710] cpu family : 6 [ 32.984370][ T710] model : 7' [ 33.098439][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 33.098459][ T36] audit: type=1400 audit(1750405235.350:178): avc: denied { setcheckreqprot } for pid=712 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.152697][ T716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 33.152732][ T716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:85 [ 33.255129][ T720] SELinux: policydb magic number 0x30300003 does not match expected magic number 0xf97cff8c [ 33.274687][ T720] SELinux: failed to load policy [ 33.339318][ T725] rust_binder: Error in use_page_slow: ESRCH [ 33.339357][ T725] rust_binder: use_range failure ESRCH [ 33.345566][ T725] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 33.352248][ T725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 33.361459][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.370854][ T725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:92 [ 33.377397][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.394822][ T729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.401583][ T729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.408060][ T729] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.426355][ T728] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.512953][ T742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.519912][ T742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.540129][ T742] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 33.546813][ T742] rust_binder: Read failure Err(EFAULT) in pid:150 [ 33.609353][ T747] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 33.947292][ T750] rust_binder: Error while translating object. [ 33.955258][ T750] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 33.965973][ T750] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:104 [ 34.008713][ T752] KVM: debugfs: duplicate directory 752-4 [ 34.541730][ T36] audit: type=1326 audit(1750405236.800:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.580175][ T775] binder: Unknown parameter '0x0000000000000006' [ 34.601011][ T36] audit: type=1326 audit(1750405236.820:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.629620][ T36] audit: type=1326 audit(1750405236.820:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.653502][ T36] audit: type=1326 audit(1750405236.820:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.677454][ T36] audit: type=1326 audit(1750405236.820:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.768980][ T36] audit: type=1326 audit(1750405236.820:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.792504][ T36] audit: type=1326 audit(1750405236.820:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.821805][ T36] audit: type=1326 audit(1750405236.820:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.845515][ T36] audit: type=1326 audit(1750405236.820:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=774 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef92d8e929 code=0x7ffc0000 [ 34.881049][ T789] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 34.993318][ T799] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 35.241069][ T813] rust_binder: Error in use_page_slow: ESRCH [ 35.241088][ T813] rust_binder: use_range failure ESRCH [ 35.247127][ T813] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 35.264631][ T813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.273039][ T813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:128 [ 35.282548][ T818] rust_binder: Write failure EFAULT in pid:174 [ 35.314538][ T820] rust_binder: Got transaction with invalid offset. [ 35.330574][ T820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.337433][ T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 35.422817][ T826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.460629][ T826] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.640176][ T844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.660987][ T844] rust_binder: Write failure EINVAL in pid:140 [ 36.387755][ T888] rust_binder: Write failure EINVAL in pid:144 [ 36.431029][ T9] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 36.445150][ T9] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 36.453458][ T888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:144 [ 36.460515][ T9] hid-generic C98F:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.564122][ T905] rust_binder: Read failure Err(EAGAIN) in pid:147 [ 36.564595][ T901] fido_id[901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.566048][ T905] input: syz1 as /devices/virtual/input/input6 [ 36.703956][ T916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 36.705197][ T916] rust_binder: Read failure Err(EFAULT) in pid:156 [ 36.820902][ T925] kvm: kvm [923]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 36.904771][ T928] binder: Bad value for 'max' [ 37.332184][ T946] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 37.332210][ T946] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 37.340935][ T946] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 37.348618][ T946] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 37.358705][ T946] rust_binder: Read failure Err(EFAULT) in pid:223 [ 37.549714][ T951] binder: Unknown parameter 'processor : 0 [ 37.549714][ T951] vendor_id : GenuineIntel [ 37.549714][ T951] cpu family : 6 [ 37.549714][ T951] model : 79 [ 37.549714][ T951] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 37.549714][ T951] stepping : 0 [ 37.549714][ T951] microcode : 0xffffffff [ 37.549714][ T951] cpu MHz : 2199.998 [ 37.549714][ T951] cache size : 56320 KB [ 37.549714][ T951] physical id : 0 [ 37.549714][ T951] siblings : 2 [ 37.549714][ T951] core id : 0 [ 37.549714][ T951] cpu cores : 1 [ 37.549714][ T951] apicid : 0 [ 37.549714][ T951] initial apicid : 0 [ 37.549714][ T951] fpu : yes [ 37.549714][ T951] fpu_exception : yes [ 37.549714][ T951] cpuid level : 13 [ 37.549714][ T951] wp : yes [ 37.549714][ T951] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 37.549714][ T951] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 37.559923][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.715974][ T955] rust_binder: Error while translating object. [ 37.716003][ T955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.722376][ T955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 37.737320][ T955] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 37.755927][ T951] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 38.272835][ T972] input: syz1 as /devices/virtual/input/input7 [ 38.611781][ T982] rust_binder: Error while translating object. [ 38.611833][ T982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.618169][ T982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 38.900307][ T992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 38.912031][ T992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:253 [ 38.954241][ T995] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 38.981505][ T997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170 [ 39.023615][ T1000] rust_binder: Write failure EINVAL in pid:173 [ 39.062526][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 39.062546][ T36] audit: type=1400 audit(1750405241.320:226): avc: denied { setattr } for pid=293 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.111277][ T36] audit: type=1400 audit(1750405241.360:227): avc: denied { append } for pid=1001 comm="syz.3.218" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.129401][ T1004] rust_binder: inc_ref_done called when no active inc_refs [ 39.134720][ T36] audit: type=1400 audit(1750405241.370:228): avc: denied { read write } for pid=1001 comm="syz.3.218" name="binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.141368][ T1004] rust_binder: Write failure EFAULT in pid:175 [ 39.143098][ T36] audit: type=1400 audit(1750405241.370:229): avc: denied { open } for pid=1001 comm="syz.3.218" path="/dev/binderfs/binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.196238][ T1002] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 39.196263][ T1002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.204402][ T1002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:258 [ 39.219918][ T36] audit: type=1400 audit(1750405241.380:230): avc: denied { ioctl } for pid=1003 comm="syz.1.219" path="/dev/binderfs/binder0" dev="binder" ino=27 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.255362][ T36] audit: type=1400 audit(1750405241.380:231): avc: denied { set_context_mgr } for pid=1003 comm="syz.1.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.278716][ T36] audit: type=1400 audit(1750405241.390:232): avc: denied { map } for pid=1001 comm="syz.3.218" path="/dev/binderfs/binder0" dev="binder" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.309269][ T36] audit: type=1400 audit(1750405241.450:233): avc: denied { call } for pid=1001 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.347845][ T36] audit: type=1400 audit(1750405241.460:234): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.372535][ T36] audit: type=1400 audit(1750405241.460:235): avc: denied { open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.447406][ T1022] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 39.447432][ T1022] rust_binder: Error while translating object. [ 39.458662][ T1022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.465513][ T1022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:264 [ 39.499542][ T1025] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 39.517716][ T1025] rust_binder: Write failure EINVAL in pid:266 [ 39.624369][ T1033] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 39.638270][ T461] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.640478][ T953] Bluetooth: hci0: command 0x1003 tx timeout [ 39.650665][ T1033] SELinux: failed to load policy [ 39.659479][ T1033] SELinux: security_context_str_to_sid (uGй :) failed with errno=-22 [ 39.753618][ T1036] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 40.556236][ T1063] random: crng reseeded on system resumption [ 40.614766][ T1063] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 40.826980][ T1074] binder: Unknown parameter 'tats' Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... [ 41.064194][ T1093] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 174) [ 41.064219][ T1093] rust_binder: Error while translating object. [ 41.070289][ T1097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 stopped /sbin/dhcpcd (pid 147) [ 41.088772][ T1093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } Stopping network: [ 41.109468][ T1093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 OK [ 41.371830][ T1119] rust_binder: Write failure EFAULT in pid:219 [ 41.484189][ T1125] binder: Unknown parameter 'e tat' Stopping iptables: OK [ 41.551544][ T1133] can0: slcan on ptm0. Stopping system message bus: [ 41.629854][ T1133] rust_binder: Write failure EFAULT in pid:222 done [ 41.671358][ T1140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.735947][ T1132] can0 (unregistered): slcan off ptm0. [ 41.748669][ T1143] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 41.767553][ T1144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.928408][ T1149] SELinux: policydb version 1455170311 does not match my version range 15-33 [ 41.962473][ T1149] SELinux: failed to load policy Stopping klogd: OK Stopping acpid: [ 42.150795][ T1168] rust_binder: Error while translating object. [ 42.150842][ T1168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 42.157062][ T1168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:233 [ 42.204995][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 42.225614][ T1174] rust_binder: Write failure EINVAL in pid:235 [ 42.240606][ T1176] rust_binder: Error while translating object. [ 42.246832][ T1176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.270486][ T1176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 42.385465][ T1186] rust_binder: Write failure EINVAL in pid:315 [ 42.629353][ T1195] rust_binder: Write failure EINVAL in pid:319 [ 42.629821][ T1195] rust_binder: got new transaction with bad transaction stack [ 42.636183][ T1195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:319 [ 42.779746][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.796014][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.803232][ T1199] bridge_slave_0: entered allmulticast mode [ 42.809620][ T1199] bridge_slave_0: entered promiscuous mode [ 42.816087][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.823175][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.830256][ T1199] bridge_slave_1: entered allmulticast mode [ 42.836530][ T1199] bridge_slave_1: entered promiscuous mode [ 42.885336][ T305] bridge_slave_1: left allmulticast mode [ 42.891613][ T305] bridge_slave_1: left promiscuous mode [ 42.897327][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.904956][ T305] bridge_slave_0: left allmulticast mode [ 42.910753][ T305] bridge_slave_0: left promiscuous mode [ 42.916400][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.026061][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.033194][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.040525][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.047579][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.059057][ T305] veth1_macvtap: left promiscuous mode [ 43.070138][ T305] veth0_vlan: left promiscuous mode [ 43.143020][ T1218] cgroup: fork rejected by pids controller in /syz1 [ 43.158256][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.167237][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.178420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.185498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.195051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.202167][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state OK Stopping syslogd: [ 43.262793][ T1199] veth0_vlan: entered promiscuous mode stopped /sbin/syslogd (pid 91) OK [ 43.283659][ T1199] veth1_macvtap: entered promiscuous mode umount: can't remount debugfs read-only Connection to 10.128.0.32 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 43.616961][ T305] bridge_slave_1: left allmulticast mode [ 43.630385][ T305] bridge_slave_1: left promiscuous mode [ 43.636132][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.643791][ T305] bridge_slave_0: left allmulticast mode [ 43.649448][ T305] bridge_slave_0: left promiscuous mode [ 43.655252][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.976216][ T305] veth1_macvtap: left promiscuous mode [ 43.981892][ T305] veth0_vlan: left promiscuous mode [ 44.452378][ T305] bridge_slave_1: left allmulticast mode [ 44.458047][ T305] bridge_slave_1: left promiscuous mode [ 44.463753][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.471261][ T305] bridge_slave_0: left allmulticast mode [ 44.476903][ T305] bridge_slave_0: left promiscuous mode [ 44.482878][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.490780][ T305] bridge_slave_1: left allmulticast mode [ 44.496428][ T305] bridge_slave_1: left promiscuous mode [ 44.502109][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.509575][ T305] bridge_slave_0: left allmulticast mode [ 44.515342][ T305] bridge_slave_0: left promiscuous mode [ 44.521010][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.528724][ T305] bridge_slave_1: left allmulticast mode [ 44.534470][ T305] bridge_slave_1: left promiscuous mode [ 44.540101][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.547692][ T305] bridge_slave_0: left allmulticast mode [ 44.553409][ T305] bridge_slave_0: left promiscuous mode [ 44.559001][ T305] bridge0: port 1(bridge_slave_0) entered disabled state Sent SIGKILL to all processes Requesting system poweroff [ 44.895096][ T305] veth1_macvtap: left promiscuous mode [ 44.900685][ T305] veth0_vlan: left promiscuous mode [ 44.906059][ T305] veth1_macvtap: left promiscuous mode [ 44.911646][ T305] veth0_vlan: left promiscuous mode [ 44.917249][ T305] veth1_macvtap: left promiscuous mode [ 44.922792][ T305] veth0_vlan: left promiscuous mode [ 45.662981][ T1334] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 45.669655][ T1334] ACPI: PM: Preparing to enter system sleep state S5 [ 45.676620][ T1334] kvm: exiting hardware virtualization [ 45.682145][ T1334] reboot: Power down serialport: VM disconnected.