last executing test programs: 3.756022402s ago: executing program 1 (id=209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'wg0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 3.636984574s ago: executing program 1 (id=212): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x5087, 0x2, 0xb5e, 0xe55c, 0x6, 0x4, 0x0, 0x14fd, 0x5, 0x63b9, 0x10000, 0x9, 0x7, 0x800, 0x0, 0x100000000], 0x0, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 3.607700835s ago: executing program 1 (id=214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=[@clear_death, @register_looper, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x1}, @free_buffer={0x40086303, r1}, @request_death], 0xb8, 0x0, &(0x7f0000000100)="ea3a33b3c5a2ef2eb1ce41952882ec03e39d12e4c91cc9d4be0fe3bfec7f36fba1a4a5fbdfbbdb47724f21a68b3532a5fc2940297e9d556b5f7a4616bf578e37a68ea6684a9c583b4c9e02aa52e5e4f8edb64383b560bd7fe1da70f36b713b20c3dc4c44caa849ed7c6ea203e6b886701b995aaac9365701803703f5a3f07683ad41749330144bc0d88e4839def472e5433adfb741fe27ad89aae21d6f19e8319fd3f1f55707a044f7d3411044c339d43944f894412333b0"}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 3.529471296s ago: executing program 1 (id=215): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3.467791877s ago: executing program 1 (id=219): openat$rnullb(0xffffffffffffff9c, 0x0, 0x20a241, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x0, 0x4, 0x9}}, 0xa) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)) (async) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4100, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x5418c0, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) read$FUSE(r2, 0x0, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000535100c00000000002000000000800cdf766e07b2dfbce77844852b098ec04578cc82a680ae69c02c1f085f8143cd83b0936efac08d8080e1ec3599aeb9481756c74c7fcbea9c60f0af8565f147c90af658c59d11ecffde0a5561b2b3da48988dbcaee22ebfa0e39b89a965f60ea314c112b4fa728f8cde3e0ed4fd6aacd543e0aac7ec23f60fd131bed1b33b055692987c730098d8efe9f7834ee35"]) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xd, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @decrefs, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) (async, rerun: 32) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) (rerun: 32) write$cgroup_int(r10, &(0x7f0000000000)=0xfe8e, 0x12) openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r11 = openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$vga_arbiter(r11, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0xa) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x1, 0x5, 0x8000000000000001, 0x3, 0x5, 0x80, 0x8000000000000, 0xc5, 0x0, 0xa, 0x3ff, 0x1, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff9], 0x0, 0x1}) 3.334427799s ago: executing program 1 (id=225): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xc44) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000002, 0x10, r0, 0x71d75000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f3}]}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="c390f55d11769b88abd25b0717d227679817cacfd059ccafe5a4c6d570bd8954ee249a89cf0dba7b58cd56092ef95aca8a744f", 0x33) 3.162129572s ago: executing program 2 (id=228): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4b) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r0, &(0x7f0000000080)=""/4096, 0x1000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/resume_offset', 0x8400, 0x2) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/resume_offset', 0x8400, 0x2) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000010c0)={0x8f, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001140)={0x3, 0x0, [{0x26b, 0x0, 0x8000000000000000}, {0x27d, 0x0, 0x5}, {0x21f, 0x0, 0x8}]}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000011c0)='./binderfs/binder0\x00', 0x3, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x8) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000001240)={{0x3, 0x7, 0x5d50}, 'syz1\x00', 0x3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000012c0)={"ce589603cc9a33a4209a2299565f7a4d", 0x0, 0x0, {0x9, 0x5}, {0x3, 0x5}, 0x333, [0x7, 0xd, 0x0, 0x8, 0x7ff, 0x0, 0x737a, 0x1, 0x0, 0x7, 0x40, 0x6, 0x0, 0x9, 0x6, 0x401]}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000013c0)={{r3}, r6, 0x0, @unused=[0xff, 0x10, 0x1ff, 0x1], @subvolid=0x2}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000002400)={0x1, 0x18, [0x866, 0x0, 0x7, 0x7ff], &(0x7f00000023c0)=[0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000002400)={0x1, 0x18, [0x866, 0x0, 0x7, 0x7ff], &(0x7f00000023c0)=[0x0, 0x0, 0x0]}) syz_clone(0x200000, &(0x7f0000002440)="b029839f79343f26c8159e5ac42b10b71fab099c1c72e7867320d1c8209828ef9bd5e84cd2321539b8f1fa1e875964b3f2902d82aec0d49cb251be3954a4aff3169def8a1d409fb000f7324849fde4f8abe0e60ee98a47e866980808d23120ac0dce137e200864f9434261662c342e1c9742f3b144a4d1ef61207463606e2773d7c34afdb038adf730cb09e7853d1602862543f37ae6c588248f8a296da6416e74a6fbead021825e570b02cb74926bb4790c79b6e59eff1572597d4d2fd2edd22ee3ca3dc1a2bb1dd29c4e31", 0xcc, &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)="2786ad0cfc079b097c4bba204c99774fccadbcc1fec02be879d6a7943ed3d5c34f56499133ce22d23404b8559510c25fb7e45065ad0805807bf50399acde762e56b8afe910745cf0fbde398f3a0c364990c9cc199c1468cb83c4a2b02afd7e9f2938581aa154efebe0415c2c80f5c5dd53e683b07b70c8fee7c56702471cdc4f7e694bb6690ea54c8959f6e09cf4c3bfc1d006") (async) syz_clone(0x200000, &(0x7f0000002440)="b029839f79343f26c8159e5ac42b10b71fab099c1c72e7867320d1c8209828ef9bd5e84cd2321539b8f1fa1e875964b3f2902d82aec0d49cb251be3954a4aff3169def8a1d409fb000f7324849fde4f8abe0e60ee98a47e866980808d23120ac0dce137e200864f9434261662c342e1c9742f3b144a4d1ef61207463606e2773d7c34afdb038adf730cb09e7853d1602862543f37ae6c588248f8a296da6416e74a6fbead021825e570b02cb74926bb4790c79b6e59eff1572597d4d2fd2edd22ee3ca3dc1a2bb1dd29c4e31", 0xcc, &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)="2786ad0cfc079b097c4bba204c99774fccadbcc1fec02be879d6a7943ed3d5c34f56499133ce22d23404b8559510c25fb7e45065ad0805807bf50399acde762e56b8afe910745cf0fbde398f3a0c364990c9cc199c1468cb83c4a2b02afd7e9f2938581aa154efebe0415c2c80f5c5dd53e683b07b70c8fee7c56702471cdc4f7e694bb6690ea54c8959f6e09cf4c3bfc1d006") ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000002680)={0x0, 0x6, [0x2, 0xa857, 0x2, 0x2, 0x80, 0x100000001]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f00000026c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000002700), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000002700), 0x802, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000002740)={0x10002, 0x4, 0xeeee0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000002780)=""/228) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000002880)={0x6186, 0x7fff, 0xffc0, 0x6, 0x3, "b5f7847f6cbc98aa"}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000028c0)={0x9, 0x9, 0x68d, 0x6, 0xb, "e501cc75b67ce013cc05d21ee27ff590d7baea"}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002900), 0x34501, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002940)=0x7) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000002980)) (async) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000002980)) 2.726040168s ago: executing program 2 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f000009df00)={0x79, 0x0, 0x1}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800000, 0x32, 0xffffffffffffffff, 0x2ec37000) ioctl$BINDER_CTL_ADD(r6, 0xc1086201, &(0x7f0000000540)={'binder1\x00'}) 2.199429906s ago: executing program 2 (id=237): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x29]}) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x29]}) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xeeef0000, 0xdddd0000, 0xdddd0000, 0x1000], 0xc1}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x4, 0xff, 0x6, 0x5, 0x2, 0x8, 0x3, 0x4, 0x1, 0x66, 0x9, 0x2}, {0xaa7b8ee, 0xa5, 0x4, 0x9, 0x7, 0x5, 0x4, 0x7, 0x3, 0x6, 0x42, 0x5, 0xffffffffffffff80}, {0x3, 0x60d, 0x2, 0x1, 0x1, 0x9, 0xb, 0x7, 0x8, 0xea, 0x0, 0x10, 0x3}], 0xfff}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000080)) 2.198911537s ago: executing program 3 (id=238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) mkdirat(r1, &(0x7f0000000180)='./cgroup\x00', 0x100) close(r1) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x183081, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock m'], 0xa) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xc, 0x7, 0xa76}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 1.532564307s ago: executing program 2 (id=240): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0xa0400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kheaders.tar.xz', 0x101000, 0x82) read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002140), 0x101040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 1.532008387s ago: executing program 3 (id=241): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x4010e501, 0x0) close(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, r8, 0x4d9f880ba3ca8d4e, 0x12, r7, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0xc2a4a000) 860.405227ms ago: executing program 2 (id=243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2011, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x8000000, 0xe0000, 0x9, 0x3, 0x0, [{0x2, 0x3, 0x5, '\x00', 0x7}, {0xd, 0x7, 0x96, '\x00', 0x3}, {0xff, 0xf2, 0x3, '\x00', 0x5}, {0x17, 0xf8, 0x4, '\x00', 0xf4}, {0x5, 0xd, 0x4, '\x00', 0x9}, {0x5b, 0xc, 0xb, '\x00', 0x8}, {0xb0, 0x1, 0x3, '\x00', 0x1}, {0x7, 0x5, 0x93, '\x00', 0xfd}, {0x1, 0x1, 0x5}, {0x75, 0x81, 0xd, '\x00', 0x7}, {0x0, 0x7, 0xb, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x9}, {0x2, 0x26, 0x7b, '\x00', 0xb}, {0xb, 0x6, 0x3}, {0x5, 0x10, 0x22, '\x00', 0xc}, {0xe, 0x1, 0x8, '\x00', 0x82}, {0x5, 0x2, 0xa6, '\x00', 0x9}, {0xf, 0xd, 0x9, '\x00', 0x68}, {0x8, 0x5, 0xf2, '\x00', 0x1}, {0x5, 0x8, 0x1, '\x00', 0x3}, {0xc, 0x7, 0x0, '\x00', 0x7}, {0x6, 0xa1, 0x4}, {0xf9, 0x70, 0xe, '\x00', 0x1c}, {0x76, 0x1, 0xff, '\x00', 0x10}]}}) write$cgroup_subtree(r3, 0x0, 0x9) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2020) (async, rerun: 32) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) (async, rerun: 32) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x6, 0x0, 0x0, 0x7fffffff], 0x80a0000, 0x200}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) read$FUSE(r9, &(0x7f0000002880)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r9, &(0x7f0000000140)={0x18, 0x0, r10, {0x6}}, 0x18) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) ioctl$TUNSETVNETLE(r12, 0x5452, &(0x7f0000000000)) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) 826.277498ms ago: executing program 3 (id=244): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wake_lock', 0x40802, 0x122) write$tcp_mem(r1, &(0x7f0000000200)={0x9ac, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x70) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000002c0)={0x130001, 0x0, [0x3, 0x3, 0xd, 0x3ff, 0x7, 0xc6c8, 0x1, 0x1]}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r0, 0xb95cd000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103403, 0x0) syz_clone(0x28820000, &(0x7f0000000340)="4a508024fb922a10610bb5a43c006220143515740709acc5560c21860372ae8cc074f36bb6c6214e07fd8e79264118edebe929581294179d9d72eb9b9a7096882ce4827ba11956611ae12b47ea782bd3e76e0fd279a7951042ed2403c4be93c791ef599c68963eb65070b0e5b0c9617a", 0x70, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000540)="0d5ade6733d200c2e906a3d49b2c49e52d8fa2f3f702bf2f9170c1d227106938ebbffa16a2f0da447757581a90fede8babb57584738a22a4103c360927d9b438ac2a4bfc6868837e087f005eb66a0173475ec69a79e7ecc68e45aa519ee24ca6d9642d6be03026f8164cf22a0fa6a11bc2c26598e307e5fa643595a4e2033cea7af7eea85446c8cba868fc75c7b4522698d961a18fbe7dc8773178d0c1e36780f152485a29fe12da808ecaebbed573b6413a9e782d5d526cd4745fe6a1b5f8b4758e31e3d44306cd5e78ae6643b34ecb417bf88954fd6cf4f214a4269fb32c7c040227f070e4a41de2d60df036ca9984ae20e3e846c4990e550df1833a322dead368721e53ac23fe4dbd462f303293595608b42c9ab87cadc8c729a9786e91c63b3f45ecc19d38381d94cce199424708760ade341f9d428e3db54c94b44bba34854cbc5fae42b1c89ef875b9004adc9f9f65569d75d88edd0b377bc16dba7c796daf307122e7b5baece2305ce682e1f673ade9c900727d1a97616f9647f6587652dae1c171dddf07549a4bdaed365daea62223a97bb05eead5346b3e5d9c912e685ff6e00bc61fb187b6f786127d39b4fc75ea490687d3ede489fd273055fe9b34ff71c42968a513d345edbd1044bedfcd42b8328a2e3d7df9b72556ef6240546cc4cc0ee376c80123635ef4a6c3aebea7146433a51421a58003ea4205aad1a2317477f00acdc70cbde2cd6677a5e9f30c227070accdd364173aa92f5988442871f4a627173553ed4351f40e2cf410aa1d9c5927180988b163f07b3bf06bbbef9e864ccc592362012204463bed50b350733b9c2d0f94f37b2a18315eb35f5ce9f97ecd8a70759a77e4ae0b17edb6a0aa0810a22774e117462badb4576c4fbaccb66ec48cb9dbb7f472ef7b00942681042cc75f544c9482ef448aa372b4a16e09d9f11f8b11fe2f666ad69321a95f0fd88d2ef970c8f88dadf7310795695e2412192ae0ca792d7fe939d6b30dcdd271c05d9a9754cb0e620a4869e9cfc04d2e38d7bbeb0c7953f9e6e5f52ded0a4188d92dce655bcc613f40329c331fd80e449f10f06f8d31b8efa1334befa918786013ddd0eda44d5c399c801cc96f1b6f595e823e0645b3b39a31ddc5a0ece3a75485a3697dfa24842a4601e77793c1587014ac448cca0bbc276b8771e1b20589f06a0f826f9390f331b70e1388806e1b3b86b9e659f0da339340397048629146b8b3f2adaa6743ec22633f0e5883857e7ddbe94efc64c5ac1934daf88f4e9ab45831d794a2e32afc69f5aabe83304b4f5b0650e8270e96fe5d21e7b944a4bc90410d6f308f9464a0dc3a9de59800dc26d87d87bda01b577db37a8f288dee184a5597c003f4e13df648174aa96dfb032648c39b3f5b0932aa15b7a49343d7051efbd55bfb6466bdd73dcf1a50348b899b70f03824af7121eb12c6f62922469d11c34014fa39761504a6d32a317220fe171495124f94160cf36f0ce16ddad9b3da4f26a13b719073f13094e9031b904e23fcc1496f776171ed854da95fdc1e576f161829107732de2c61a86f72b3e65cd62c21df8672796058ffee99dc79ff26570e48a82a5605bdae98aa7ae2a0a1ebd56f29a798d4c29d96da66b4331c847796289b784375146d4d5d7d2556337fba55a3f6b82460fb068cfe8bf9f0fa7081ffa0cf42ed1636a28979883a1918f70318793a8c3cbaff0aff18c1e9a9fc85b77cd0e18d2ae514fd6ec4df274480fa3ed2170b05848faebcf5ebba06c6aa0222852a748afb93a79eb59a59424806f8797327d5c67b877665ec3ea8a5ad71ddea9874fd1f32947769ae980af8febf8ba4c123dd6bf5c5b2a495eddfaade3e3ff26fd8722fa9a360246ffeb876cb3c9b26e21326e28c47eae46dd7158916f026d1d7fd2a90afca44c2b12db8e9dd7fb42d9b0f2608999ea9ebcdcd94f35e1bcc5fbde90af1cc2ac0d59af47f0b634c956f80b69186af6f0ab958e076701acf83493f5b12932593f947c7dddb4e2bc7dedde8abd5df050d80d094b8e4ee06083909aabfb27827b7f1ef38440d9f8171698bbc8559b59cddf06a35c9b2f8827ba93ebccc6ce837a4fdec2d6357cf422c81043558ba2f8a8eaac116a39fd7b7931aae9604ef9fa868b9aa26ea95798af6f6517e8b7a5db1092aa5fcd6821387ecc289ba8196055610eb164226dc8d3dad4e03c315fcbabf4eebf51d28283286ecd7d6f958e4e05fd603a9ecac388917da41663a3373b18ab3d60b3a27a24cbaa342b922b76e2146f304c2223df166bea179c241c8364e3f20ec2fd57824e20c231cc6f0dc23214110b3ad91a1f8c6667e1ae37452fc5986e337b444a7d6ece53cff6fbea657ccf740e3fbe9ecc9798caa1da74601a5810a8605e6cd15863a2b4a1e4df300d4e55738ecac323c2756a2ed650f36cc9e39eba01849ee27dee9188198c19a052e840ca29a9e03e044959924667fade67305bdfa4294c693178bebc6a4182dd0d1fda49efcf71e93c8f60b364d6f528dbc1300a46f46a9b2e48674fa77f5f14dce6873e8acb41f84119c2b7eefdb03f50ed3c0551aeb2e03108589c365cad4a4a326a0d44b5ab9fc506cb2812baaee045e696f0d93f894a6b2fe341afcc690afbe6f4432518ca6946aea52b21cb6e0f77eeaa8bd58f101cae29ed89b8c12363fe868e2b7899bc8e07123a297c8ddeace4718e6f4b4489b714bd604a67189bbe681a5fde607a7b2fd1da1298163e182e489e414e22451d2fe76e06ab27cf5a47192544c4f49b71485ff64bae077ba5c1a086e840123b97ac73086726e4d23f940be6b64ac76b33e6d334135aef018782c8bddf3165bf27e79505e641d6ea6dac0799998b6410a72a1e24352c9a38dc302b0d60b246f90b00382cffe443ff82f0506e4cbf193a88ab65165f7de86347b4b026a456353e27ed17d9317d4bdaca76fdd4577bd41484e86d252b20bc79a228fd42db54a9562fd58d307ffcd30c2afdea406d129b8b9e22a203df52a6c7a520b0c70786fd74d6228a7f1d7153bd73777fcd4fa94d49a17dd57204c269f502832faa7b6ceaca7c4f112f8107a6ec236ceaea6efe99ea0f4d3fa63b0450cacbd2f980c59d4f242cf5549d7446c3a8599f106d0d719a5478ec4653482e375bebddac0d274397f1f3039680b88d6a66896803b4a7e37aeb45b728d96058c51c175f69a444e9c60bb5a145a197d351daebfcff9831dd71144df48f2dc0982c4b5a8804284209e9d0f1ff9dc0d8e7117978d97e8070ff7d1a2cdd85a24bc645476c5ce3ef185e43b81cf68a06ae78fa0213aa9cf0f0ce00256c3c26616b87e546b921b749a3fba5207dc6612be195723f56af48c78ccb142b4f6c64fde3e4d3c824f6cf1a4ab416f616bc6b094386d205dc820737f592523f7d274c4d270c6f13ecd454bbc2a147f029e2863e1e3b1f074f4cb599a7c022965a3155dc5793b255dc794371db482e23246a7d22f7ead0c9c5b7b9edd3eaa6098d6393f9b8a61221b7d17dbaf8d300aa61170633dd00ff6abfea543a289fed448ffa15c0aa350b49036de99223f32804a26a749913d76160da7f79b982b564313b878b6849ae017a09348b40d664228e44355295c8f867769263ad48ed36955b1951e5d96ee052c74b196066c0832b14c69fd5fcc9209874db6833aa39dfb9779ef02a9d618d7a8184ec687c32567d381d01320cb3326242f2b0bb40d5181c4c4a9beaa6488bde4e6f81aca989d3c42f3b778954e227e456c875550bd963ee9f917bd2ca872bea29ba9ca8ab9e3ac08a1c84f07dca72e7298aeaa8bc37a6b5dcd89717a15edab4c1303c8f90fe4126426be761d5d92a9fdd43b6b9b09466c3cc45d66e4c759ea285ea867eb174c16f8c3c07e2b16b0c6385a9379ebd54361cb22846991af636f5f1edef84dfa7135a5993912996c841112ea5fe484880bddd2751d200afad74923d33c3f03f56c1d991368014ffaf0d466b09299188c270b89b6a8a889ac4004453544e60d49c8538985ebfd29e56d946dc2f5ede084a4b7e70cbef7946458e4cafd4351c8893ffeb7f28e4a1b270b368567e84749a59a37abb2cac3f02a4df8dccdaf6d90d4abee90e4bd86cc38d6a054727ee022da8f6fde0fcb119c52b276f40b3bc647d6a1d1c0b862b727133812e0dc4579da9799e603cb632f65c05afb9905b42245ca7dcd7339339b2f946d11a1b6079041c5c027c65bed0d555baacf2b4d402d10464ab6cda88b0dfb1c347a48f07f1ce7443d6f0dca3785509cdda10405a0de3615eac264694ae74b756153e454ea3892cafc9a9b49ae96d812a7a96fda7e9702380bee10191def5089a8e3e67e4eda1d429fccb56f4da89dda5b13f0e3c76d48a6bc31b29b270be559bb37b043da878996489c9b88274707cd352125a4a18e0f1fb624010db30889d2db6ef172f4dfe9f3df83116f6a44ceb60822d619af9c55afe8c31bef07f31f80b1c461020784fc643e01a025021b1cba3d03140608844d2b0c40bb480d2ade2f5b39c4ab8e756ae5d1394bafbb0c8d40ebe02a2ea2cd3cfffe6d67d3df84fa99e77f2ac510692f974b41921cf7dd00b85151f899d1d228de01021a7ed3835b78d9f03cb3a291eaa68533afe566b8b56ddbd616f1bb09d5cbf14511d61a3f62f8ca503ab2b02ba1b1814790eedac5fd3821ae67e81ce34776dc60c15ac0cbf46bbca57eaa451aa049a548b36d8001b7aa73d0428fe63af26959988f76ee78bf4ea0946d835db3438c0888543605b9bb48c91a558f3b2881faccee36d49bc0b38cdf480b848825171bfc899a1f2ebe02601cfe412db2f8d5551079967971ba3fbf8b6fd269b2c8297cbb727ac497919f6084f6f9a5e915cec4b7c7878b222c008a4fabc609f3e909f1e2f44d7a3fa18f3713263708fc56fea9e3892cd9fad734987670471275ec73d736aa1f3296cfaf4891c34dda32a13ddb85dc2550a2c415d758a6c47679f3acb84de012e68f70d50eeecefb787aea678c7745ec129c8dccee80bcb35b6a95a06fb1f411740680ffbdf46455eed5f6f61f7ff480c3890a596a49c2656f785ea8079ea2bbae6715279f3be8f2bed85560eaff72f03e7a7b1eeb24bbc1c1abce7e2fd96763c7fc3e159cefa59a0d6294c92e4e6cf29f1d512e1d9cae6e3fc7cdf27d956737e46b73d35b354e228a1b8a5e23090ca2b70f7e47aa44037d9008cf3b7522c6e9e3210e959bd37b5299d7fb6ee6ae6d0ea2cf7cea5b973439d42d72ab16615250afd32af936ac744f67980309bf16e4010182c8736ba504992be8e649de2df5f8971ec98d3cbb4d8af7afcb9c5b9b52992626b64f600cf3c5555f2e057cdd2601286bbf7e53da6daccdfbc61fb9f909281f116e9f3148b3798aede5cf39c6c3f5a81e2acdb7ceabea5529a7959fdc19c8f0f90119e63c1f296658058d4160111178a18ac2aabb425b3641a13daa0ab8218f32c38d008f779b9450c2fce51eaf5857f730e9fac23aac7ccb80997075ea3d7d065e37dfed2a584b3903464a76df5acd641a894fcc03968b230e44cfde56c1f8b05fdf8f00b3f968a4bcd4036bbc7a23b9c628bb7b869263cafa39940db23dd75ce15d352f41ffb04d1b87766e03a4135b8bc5b475edc475fcaf6d77059726ec7087b6d87fb7f9d78caf1f0648b00430bf85298f69e7324c24bd3c5a57c36e6a525d8819ac8db63dbfd84757cd151630b7c617d4570699ae6a2df3bc4465b224556c4acdfea077a0b604b802ad468368c0a0a5b3587fbb76e0ec8e") r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000001540)={0x0, 0x2c01, @ioapic={0x100010000, 0x1, 0x0, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x10, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0xb, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0xff}, {0x4, 0x80, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x3, 0x2, '\x00', 0x5}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x1, 0x26, 0x5, '\x00', 0x8}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x81, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x5, 0x80a0000, 0x2000, &(0x7f0000700000/0x2000)=nil}) 703.5668ms ago: executing program 2 (id=246): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2046) mmap(&(0x7f00002b3000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 656.46981ms ago: executing program 3 (id=247): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000003c0)) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010117, 0x0, 0xffffffff80000001}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) (async) write$cgroup_pid(r7, &(0x7f0000000000), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) close_range(r2, 0xffffffffffffffff, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) (async) r9 = openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000140)={'veth0', 0x32, 0x35}, 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r10, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0xc2a4a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0xc2a4a000) 528.290723ms ago: executing program 3 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0xffff1000, 0x2000, &(0x7f0000895000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 283.307356ms ago: executing program 0 (id=251): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1e5003, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x4, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5}) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f00000022c0)) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0xc, &(0x7f0000002200)={[{}], [{@subj_role={'subj_role', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r7}}]}) 272.603116ms ago: executing program 3 (id=252): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0xc75d39c0fedd494a, &(0x7f0000000000)=ANY=[]) 168.614318ms ago: executing program 0 (id=253): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) 144.851218ms ago: executing program 0 (id=254): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 105.247019ms ago: executing program 0 (id=255): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 454.3µs ago: executing program 0 (id=256): ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000140)=""/154) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757811"], 0x65) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=257): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d06}]}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f000041e000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x9a5ad000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.36' (ED25519) to the list of known hosts. [ 26.418520][ T36] audit: type=1400 audit(1750378296.720:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.420004][ T281] cgroup: Unknown subsys name 'net' [ 26.441297][ T36] audit: type=1400 audit(1750378296.720:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.468799][ T36] audit: type=1400 audit(1750378296.740:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.468984][ T281] cgroup: Unknown subsys name 'devices' [ 26.591332][ T281] cgroup: Unknown subsys name 'hugetlb' [ 26.597284][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.692256][ T36] audit: type=1400 audit(1750378296.990:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.715853][ T36] audit: type=1400 audit(1750378296.990:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.740616][ T36] audit: type=1400 audit(1750378296.990:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.763377][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.772650][ T36] audit: type=1400 audit(1750378297.070:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.792706][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.798078][ T36] audit: type=1400 audit(1750378297.070:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.832396][ T36] audit: type=1400 audit(1750378297.090:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.858255][ T36] audit: type=1400 audit(1750378297.090:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.144817][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.152156][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.159393][ T288] bridge_slave_0: entered allmulticast mode [ 28.165729][ T288] bridge_slave_0: entered promiscuous mode [ 28.173273][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.180437][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.187715][ T288] bridge_slave_1: entered allmulticast mode [ 28.194307][ T288] bridge_slave_1: entered promiscuous mode [ 28.200647][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.207712][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.214943][ T290] bridge_slave_0: entered allmulticast mode [ 28.221457][ T290] bridge_slave_0: entered promiscuous mode [ 28.235685][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.242834][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.250107][ T290] bridge_slave_1: entered allmulticast mode [ 28.256391][ T290] bridge_slave_1: entered promiscuous mode [ 28.306616][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.313751][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.320954][ T289] bridge_slave_0: entered allmulticast mode [ 28.327297][ T289] bridge_slave_0: entered promiscuous mode [ 28.345323][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.352434][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.359553][ T289] bridge_slave_1: entered allmulticast mode [ 28.365855][ T289] bridge_slave_1: entered promiscuous mode [ 28.392875][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.400069][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.407343][ T291] bridge_slave_0: entered allmulticast mode [ 28.413722][ T291] bridge_slave_0: entered promiscuous mode [ 28.420698][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.427770][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.434956][ T291] bridge_slave_1: entered allmulticast mode [ 28.441245][ T291] bridge_slave_1: entered promiscuous mode [ 28.555903][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.563104][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.570525][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.577569][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.602275][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.609388][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.616684][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.623850][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.670634][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.677800][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.685218][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.692278][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.710766][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.717842][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.725173][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.732237][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.754146][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.761692][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.769235][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.776636][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.784042][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.791597][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.798975][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.806291][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.819742][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.826823][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.843327][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.850425][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.871239][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.878723][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.887311][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.894418][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.905844][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.912941][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.933583][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.940684][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.967122][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.974228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.982619][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.989703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.035165][ T288] veth0_vlan: entered promiscuous mode [ 29.042097][ T290] veth0_vlan: entered promiscuous mode [ 29.059694][ T289] veth0_vlan: entered promiscuous mode [ 29.072062][ T290] veth1_macvtap: entered promiscuous mode [ 29.081718][ T291] veth0_vlan: entered promiscuous mode [ 29.094325][ T288] veth1_macvtap: entered promiscuous mode [ 29.104419][ T289] veth1_macvtap: entered promiscuous mode [ 29.137253][ T291] veth1_macvtap: entered promiscuous mode [ 29.170222][ T290] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.215391][ T313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 29.235909][ T315] rust_binder: Write failure EINVAL in pid:2 [ 29.270377][ T322] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 29.271244][ T319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.284590][ T319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2 [ 29.294919][ T319] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 29.314869][ T319] rust_binder: Read failure Err(EFAULT) in pid:2 [ 29.370457][ T328] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.900135][ T390] input: syz0 as /devices/virtual/input/input4 [ 29.916598][ T390] input: failed to attach handler leds to device input4, error: -6 [ 30.104630][ T402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.104725][ T402] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 30.124574][ T402] tap0: tun_chr_ioctl cmd 2148553947 [ 30.285410][ T409] input: syz1 as /devices/virtual/input/input5 [ 30.302147][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 30.303774][ T409] input: syz0 as /devices/virtual/input/input6 [ 30.346194][ T413] binder: Unknown parameter '' [ 30.390344][ T417] rust_binder: Write failure EFAULT in pid:32 [ 30.545678][ T427] binder: Bad value for 'stats' [ 30.579495][ T307] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 30.597913][ T307] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 30.618347][ T307] hid-generic C98F:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 30.724623][ T442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.735301][ T437] kernel profiling enabled (shift: 63) [ 30.757270][ T437] profiling shift: 63 too large [ 30.797681][ T445] rust_binder: Write failure EFAULT in pid:34 [ 30.864532][ T451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.002454][ T465] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 31.009370][ T465] rust_binder: Error while translating object. [ 31.022331][ T465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.028577][ T465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 31.048418][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.065125][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.074099][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.081781][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.093953][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.102724][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.110508][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.118267][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.125871][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.133536][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.141175][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.149633][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.157317][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.165031][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.169303][ T472] SELinux: policydb version -845211227 does not match my version range 15-33 [ 31.173037][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.181755][ T472] SELinux: failed to load policy [ 31.188834][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.201606][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.209298][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.216729][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.224511][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.233695][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.243422][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.246780][ T474] ======================================================= [ 31.246780][ T474] WARNING: The mand mount option has been deprecated and [ 31.246780][ T474] and is ignored by this kernel. Remove the mand [ 31.246780][ T474] option from the mount to silence this warning. [ 31.246780][ T474] ======================================================= [ 31.252322][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.307254][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.315423][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.322966][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.343744][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.351698][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.365257][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.372950][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.388497][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.396171][ T307] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 31.405024][ T307] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.430515][ T490] rust_binder: Write failure EINVAL in pid:43 [ 31.437760][ T490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 31.452484][ T488] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 31.475574][ T494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.489683][ T494] rust_binder: Error in use_page_slow: ESRCH [ 31.502498][ T494] rust_binder: use_range failure ESRCH [ 31.517125][ T495] fido_id[495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.522265][ T488] SELinux: failed to load policy [ 31.525746][ T494] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 31.558093][ T494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 31.570089][ T494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:57 [ 31.586734][ T505] rust_binder: Write failure EINVAL in pid:40 [ 31.598523][ T503] rust_binder: Write failure EINVAL in pid:46 [ 31.610259][ T507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.655842][ T513] geneve1: tun_chr_ioctl cmd 1074025672 [ 31.668800][ T513] geneve1: ignored: set checksum enabled [ 31.764557][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.764581][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.778103][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.778113][ T519] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 31.791899][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.808992][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.814150][ T523] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.823284][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.836406][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.848124][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.870291][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.883240][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.892531][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.899743][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.906351][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.913188][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.920799][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.929463][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.936053][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.943796][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.952506][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.959317][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.965903][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.972705][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.979480][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.986093][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 31.992898][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.000481][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.018490][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.025299][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.032342][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.043699][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.051057][ T533] input: syz1 as /devices/virtual/input/input9 [ 32.082544][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 32.084574][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.093236][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.111105][ T535] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.120151][ T537] rust_binder: BC_FREEZE_NOTIFICATION_DONE 00002000000a0000 not found [ 32.121896][ T36] audit: type=1400 audit(1750378302.380:158): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.126707][ T537] rust_binder: Write failure EINVAL in pid:67 [ 32.157375][ T36] audit: type=1400 audit(1750378302.380:159): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=445 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.164172][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.201608][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.218031][ T36] audit: type=1400 audit(1750378302.380:160): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=445 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.221774][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.224871][ T36] audit: type=1400 audit(1750378302.410:161): avc: denied { read } for pid=532 comm="syz.0.65" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.280011][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.280037][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.298632][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.305233][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.313050][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.319789][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.326385][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.333119][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.339810][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.346367][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.353383][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.360242][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.367366][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.398119][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.402829][ T544] input: syz0 as /devices/virtual/input/input11 [ 32.404804][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.420882][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.443621][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.458094][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.479068][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 32.485956][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 32.495365][ T552] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 32.498055][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.514675][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.521216][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.527711][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.534294][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.540806][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.547260][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.553835][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.560323][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.566871][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.573685][ T520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.744321][ T568] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 32.751249][ T568] rust_binder: Read failure Err(EFAULT) in pid:57 [ 32.759852][ T568] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 32.766637][ T568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 32.830922][ T554] rust_binder: Read failure Err(EFAULT) in pid:63 [ 32.923786][ T576] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 32.937700][ T576] rust_binder: Write failure EINVAL in pid:67 [ 32.971758][ T586] binder: Bad value for 'stats' [ 32.992927][ T36] audit: type=1400 audit(1750378303.290:162): avc: denied { map } for pid=585 comm="syz.3.83" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 33.033596][ T588] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 33.063846][ T36] audit: type=1400 audit(1750378303.360:163): avc: denied { write } for pid=589 comm="syz.1.85" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 33.129861][ T36] audit: type=1400 audit(1750378303.430:164): avc: denied { read } for pid=595 comm="syz.0.87" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.144690][ T598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97 [ 33.153598][ T36] audit: type=1400 audit(1750378303.430:165): avc: denied { open } for pid=595 comm="syz.0.87" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.297448][ T36] audit: type=1400 audit(1750378303.590:166): avc: denied { execute } for pid=605 comm="syz.0.89" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 33.339617][ T36] audit: type=1326 audit(1750378303.600:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=609 comm="syz.3.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e5f8e929 code=0x7ffc0000 [ 33.341962][ T613] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.435505][ T621] rust_binder: Read failure Err(EAGAIN) in pid:52 [ 33.463590][ T625] rust_binder: Write failure EFAULT in pid:67 [ 33.473799][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 33.491517][ T625] binder: Unknown parameter 'noninderfs/binder1' [ 33.585571][ T636] rust_binder: Write failure EFAULT in pid:69 [ 33.781008][ T646] rust_binder: Write failure EINVAL in pid:56 [ 33.790528][ T644] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 33.868375][ T654] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.871861][ T654] rust_binder: Error while translating object. [ 33.878775][ T654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.884999][ T654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 33.897407][ T654] rust_binder: Error while translating object. [ 33.906642][ T654] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 33.912935][ T654] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 33.952556][ T656] SELinux: policydb version -845211227 does not match my version range 15-33 [ 33.970607][ T656] SELinux: failed to load policy [ 33.994246][ T658] input: syz0 as /devices/virtual/input/input13 [ 34.027187][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74 [ 34.052994][ T662] rust_binder: Error while translating object. [ 34.062164][ T662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.068421][ T662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 34.165090][ T679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.174724][ T679] rust_binder: Error in use_page_slow: ESRCH [ 34.181767][ T679] rust_binder: use_range failure ESRCH [ 34.188768][ T679] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 34.194432][ T679] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 34.202657][ T679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:124 [ 34.256914][ T683] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 34.277860][ T685] binfmt_misc: register: failed to install interpreter file ./cgroup [ 34.286619][ T685] rust_binder: Write failure EINVAL in pid:100 [ 34.334487][ T692] kvm: kvm [691]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 34.506476][ T718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.510495][ T718] cgroup: fork rejected by pids controller in /syz3 [ 34.554378][ T718] rust_binder: Error while translating object. [ 34.554445][ T718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.560821][ T718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 34.683302][ T292] bridge_slave_1: left allmulticast mode [ 34.704847][ T733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 34.704875][ T733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:104 [ 34.716026][ T292] bridge_slave_1: left promiscuous mode [ 34.746460][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.756028][ T292] bridge_slave_0: left allmulticast mode [ 34.761877][ T292] bridge_slave_0: left promiscuous mode [ 34.767869][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.944107][ T741] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.952100][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.959511][ T741] bridge_slave_0: entered allmulticast mode [ 34.966036][ T741] bridge_slave_0: entered promiscuous mode [ 34.981935][ T292] veth1_macvtap: left promiscuous mode [ 34.987535][ T292] veth0_vlan: left promiscuous mode [ 35.061511][ T741] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.073201][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.080398][ T741] bridge_slave_1: entered allmulticast mode [ 35.086890][ T741] bridge_slave_1: entered promiscuous mode [ 35.157700][ T741] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.164910][ T741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.172242][ T741] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.179317][ T741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.203870][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.211389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.221072][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.228261][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.237283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.244396][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.272458][ T741] veth0_vlan: entered promiscuous mode [ 35.283616][ T741] veth1_macvtap: entered promiscuous mode [ 35.375088][ T770] rust_binder: Write failure EINVAL in pid:7 [ 35.375158][ T773] rust_binder: Write failure EINVAL in pid:7 [ 35.381598][ T770] rust_binder: Write failure EINVAL in pid:7 [ 35.387739][ T773] rust_binder: Write failure EINVAL in pid:7 [ 35.506461][ T783] binder: Bad value for 'max' [ 35.553280][ T785] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 35.586399][ T787] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 35.586423][ T787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 35.595078][ T787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:18 [ 35.725221][ T791] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 35.856597][ T807] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.875868][ T804] rust_binder: Error in use_page_slow: ESRCH [ 35.875900][ T804] rust_binder: use_range failure ESRCH [ 35.883089][ T804] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 35.895578][ T804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.903731][ T804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:22 [ 36.045260][ T811] block device autoloading is deprecated and will be removed. [ 36.062846][ T811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.063206][ T811] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.185204][ T818] KVM: debugfs: duplicate directory 818-6 [ 36.203611][ T818] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 36.203650][ T818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.212916][ T818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:124 [ 36.237573][ T817] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 36.247284][ T817] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 36.256644][ T817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:84 [ 36.407422][ T844] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.438736][ T846] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 36.644812][ T863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 36.705796][ T865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 37.169225][ T871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.169518][ T870] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 37.176171][ T870] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 37.184741][ T870] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:32 [ 37.250837][ T875] tap0: tun_chr_ioctl cmd 1074812118 [ 37.481072][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.481107][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.487673][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.506879][ T884] can0: slcan on ptm0. [ 37.508239][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.527749][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 37.527768][ T36] audit: type=1400 audit(1750378307.820:194): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.564944][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.564969][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.574114][ T877] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 37.617016][ T36] audit: type=1400 audit(1750378307.820:195): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=1555 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.649545][ T881] can0 (unregistered): slcan off ptm0. [ 37.673055][ T36] audit: type=1400 audit(1750378307.820:196): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1555 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.696863][ T36] audit: type=1400 audit(1750378307.820:197): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1555 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.726862][ T36] audit: type=1400 audit(1750378307.960:198): avc: denied { map } for pid=898 comm="syz.1.180" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 37.768031][ T36] audit: type=1400 audit(1750378308.050:199): avc: denied { create } for pid=886 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.844305][ T36] audit: type=1400 audit(1750378308.050:200): avc: denied { write } for pid=886 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=1585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.878178][ T36] audit: type=1400 audit(1750378308.050:201): avc: denied { append } for pid=886 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=1585 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.890480][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 37.902509][ T925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 37.976211][ T931] can0: slcan on ttyS3. [ 38.029739][ T931] can0 (unregistered): slcan off ttyS3. [ 38.582408][ T1009] cgroup: fork rejected by pids controller in /syz1 [ 38.763427][ T12] bridge_slave_1: left allmulticast mode [ 38.769209][ T12] bridge_slave_1: left promiscuous mode [ 38.780749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.800338][ T12] bridge_slave_0: left allmulticast mode [ 38.828380][ T12] bridge_slave_0: left promiscuous mode [ 38.834089][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.002748][ T12] veth1_macvtap: left promiscuous mode [ 39.023857][ T12] veth0_vlan: left promiscuous mode [ 41.270607][ T291] cgroup: fork rejected by pids controller in /syz2 [ 41.350697][ T12] bridge_slave_1: left allmulticast mode [ 41.356425][ T12] bridge_slave_1: left promiscuous mode [ 41.365085][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.379203][ T12] bridge_slave_0: left allmulticast mode [ 41.384894][ T12] bridge_slave_0: left promiscuous mode [ 41.406857][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.557128][ T12] veth1_macvtap: left promiscuous mode [ 41.564119][ T12] veth0_vlan: left promiscuous mode [ 41.954432][ T12] bridge_slave_1: left allmulticast mode [ 41.962126][ T12] bridge_slave_1: left promiscuous mode [ 41.969341][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.977739][ T12] bridge_slave_0: left allmulticast mode [ 41.994723][ T12] bridge_slave_0: left promiscuous mode [ 42.006216][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.173086][ T12] veth1_macvtap: left promiscuous mode [ 42.183718][ T12] veth0_vlan: left promiscuous mode [ 42.461278][ T12] bridge_slave_1: left allmulticast mode [ 42.467014][ T12] bridge_slave_1: left promiscuous mode [ 42.472969][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.481237][ T12] bridge_slave_0: left allmulticast mode [ 42.487087][ T12] bridge_slave_0: left promiscuous mode [ 42.492966][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.528173][ T36] kauditd_printk_skb: 35107 callbacks suppressed [ 42.528193][ T36] audit: type=1400 audit(1750378312.820:34576): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 42.536968][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.555940][ T36] audit: type=1400 audit(1750378312.830:34577): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 42.562396][ T148] audit: audit_lost=246 audit_rate_limit=0 audit_backlog_limit=64 [ 42.584660][ T36] audit: type=1400 audit(1750378312.830:34578): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 42.591835][ T148] audit: backlog limit exceeded [ 42.613619][ T36] audit: type=1400 audit(1750378312.830:34579): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 42.618516][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 42.643392][ T36] audit: type=1400 audit(1750378312.830:34580): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 42.646647][ T148] audit: audit_lost=247 audit_rate_limit=0 audit_backlog_limit=64 [ 42.700636][ T12] veth1_macvtap: left promiscuous mode [ 42.706235][ T12] veth0_vlan: left promiscuous mode [ 47.538082][ T36] kauditd_printk_skb: 49251 callbacks suppressed [ 47.538100][ T36] audit: type=1400 audit(1750378317.840:83618): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.565885][ T36] audit: type=1400 audit(1750378317.840:83619): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.572547][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 47.587590][ T36] audit: type=1400 audit(1750378317.840:83620): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.594184][ T148] audit: audit_lost=319 audit_rate_limit=0 audit_backlog_limit=64 [ 47.615711][ T36] audit: type=1400 audit(1750378317.840:83621): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.623612][ T148] audit: backlog limit exceeded [ 47.645227][ T36] audit: type=1400 audit(1750378317.840:83622): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 47.650923][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 47.672005][ T36] audit: type=1400 audit(1750378317.840:83623): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0