last executing test programs: 17.457526209s ago: executing program 0 (id=296): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x800, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x8}}], [{@fowner_gt={'fowner>', r0}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@measure}, {@dont_hash}, {@context={'context', 0x3d, 'system_u'}}, {@audit}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise}, {@permit_directio}]}) 17.271723722s ago: executing program 0 (id=298): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1413c0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000001000e3090000000000000000000000210216943caae3000000cde4e3efaa6a86cdf37eeb900d7764a1fd98649d532807d899a22f635a624dba6cedd79d1ed621c7b93b4aefc5f941e1fbded64c06f0ac4cd7f57fa914002071e2d804075021a782089b84ebe39645b91b63a137633114fdc0ff6bde4cd4d50bf4d2c4eef3deb0b2ba92bce38850286af041b2aeb0fbd215ba0effdfbc481246bc30000000000000000000000000006173c21306ef4b757a404c63d300"/199]) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x60) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) r9 = ioctl$TIOCGPTPEER(r8, 0x5441, 0xfffffffffffffffc) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x18000, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x1) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x222000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x12) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000d, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000000000000c000000040000000100000000000000090000001400000000000000000000000000000000000000000000000000000010000000040000000000000000000000000000000400000006000000270d000000000000000000000000000000000000030000000400000000000000000000000100000000000000000000000000000000000000000000000000000000000000080000000300000001000000000000000200000070000000000000000000000000000000000000000000000000000000f5ffffff0300000001000000000000000200000000000000000000000000000079000000000000007f0000000500000003000000000000000100000000000000070000000000000005000000000000000400000000000000050000000400000035022232efd7b9a3e8a290653723999982ed70707351d2b9c7b1209af7b5fe5a71e070c29ad01e08f6c589144ec88b7d78556e703b83dedfd3ceeb0b6f746cb958ef8ec11f766561f68851ce9ce4b6ee5010acaec42b3d4868f4a237267d7b84e54f233b3e0c4514eb5bbc6bd36f624f63f91134cd73d0a202e13dcfecd8b08ee29c161deadfe3882c5197e9e4a20f1ff61edd4af8a4fb7dab73a0257656b575d469b0c3ad"]) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000240)={0xb, 0x2, 0x4, 0xe7, 0x76, "abcb26759c46c1d42d7b7f1de0b80405cc998c", 0x5, 0x200}) r14 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$TIOCMSET(r14, 0x5418, &(0x7f0000000040)=0x10000) 17.015749316s ago: executing program 0 (id=301): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x0, 0x0, 0xaab7, 0x4}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040), 0xe4c, 0x0, &(0x7f00000013c0)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a36801ee633024efb1a2036568fda9354167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b335d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df03000000000000001ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc994e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1c2a3516ea20a93d868e27c3c9b68a9cda4befc389b57661a4ff37137628ec96bcb625fd10324625ac1589c2918c66f811a323a19ab30bcf28fc20b64176e319d58f74578093e32ba9f51b255693dda9514ff43f6ef6010143554305073e94be322daa024cb7efcf405ea4924bfa72633b766365fee1d59d1a94717450657ff3b72853785e91f94ca1502b129eafa718633bec1557fb1e0ae2887e6e8c0fdd9f3f99de03c0af7364781766520d90c15b0e2a4c43613089dbecc4dd68be74204809f0270370097642d54388ccbb54b58be8b5796eac48ef5f17752eaa7301f075faee593aae71ee0e0ca1f45a22e7cede3597f14a344796ceec33e98b3b89e031c0d757e83d5093322d9afc9898f80b2e9bb17bc8b2b164d048c1b912f6cd92979df629efcb94968cca6e65b9b078677698fa4937a2ec23edd00971a5505ecc65fe150d3d00a34e52cc64951937fc79014b0df8d2c9c35f06209f45556278fa7ecfc70a92eca165bbd493686fb4c0cd607cec994657149a61da2e09414944c557be54908197724174247194d435b25bf78ec4cc164a574662eb4d1e4d784a6ea0c71dd1a16e53a7b8a27fcec679346afe90a05e06b276fe972d5e1d3486e0452d0a9a1636ab9c517f371a0592ef34513a9a4e961cd79c86891f460becb57f41e22b2a72ae175e29344184cde0b2beae00f90a6a79dc689da4b4b1da0e9758854d404a9cbcf725c68b6f2de865b2b5e12124d09f8745208b5cc544522f7c8bcfceb907422502f1641b600a60a5aef28be5a92ff71755efaf29e23c8ca52ad945bbdc4d6e7502adee312ea8d9338a80671f36309026c0d9c2ceb14da0b8beb087853b8014d30372f0d58448530f1bed15c4caaf8a844853030aab1ba6de9891678a16a2d9b9889d4a367753f0aacda03ce6fae1f62b34a3317a704527e65b18dc3186f32c5caa2d82f058066274e145f3cfe0bb5d40a77f54fb0de584d5f50de29d1c3aa29acea2363ef5c1e0592ef94370936df0152871396c13a89e56086f381862edb6f4bec0d937e94a689a8c5c87a51e073fdaa935591bbccff359e0805ded9ac71e3b295fdd05bc2b03d7af58a393778c9dfdfd8101b3503c86a6d9e2fdeb215be40f90bb7360a04e111d743207a8742275ee7df2508b909ea4d3a7af7886d3f26aa58943edbbcbd686bf9cf9a78b43dd9792bca97cda65083404b9dbefa3e707fc682d7ab227f68e18cd87541bf069bde649a0b9ef1346a748d794685339973d6b59dcbe74a3caf48f4628eedfcd6900c56746f017f0845fea8c95ac7b2a4ff90940f98a163afc082ef6de72f5fddf056e5fe2d42a173f7fd5f6100933a38fad60000"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x98, 0x0, &(0x7f00000003c0)=[@release, @exit_looper, @dead_binder_done, @acquire_done={0x40106309, 0x2}, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x9, 0x2000000002, 0x8}, @flat=@weak_binder={0x77622a85, 0x110f, 0x2}, @fda={0x66646185, 0x5, 0x0, 0x11}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}, 0x40}, @release={0x40046306, 0x3}, @clear_death], 0xff, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xffffffffffffffff) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x1) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x3) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x2}) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,st']) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 16.784846869s ago: executing program 0 (id=306): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2804c0, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 16.644921012s ago: executing program 0 (id=308): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x313802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xe8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5433, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) 16.509830414s ago: executing program 0 (id=311): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40087705, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x145480, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000180)=r2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x2}, {0x6, 0x80, 0x8, 0xc4, 0x9, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x11, 0x9, 0x2, 0x6, 0x9, 0x45, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x8000, 0x100000040, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7fffffff], 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x1d9, 0x8004, 0x1, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)) 4.95102441s ago: executing program 1 (id=419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xa594, 0x1, 0x0, 0x10000000000081, 0x100000, 0x0, 0x2004cc, 0x8000000, 0x0, 0x100000020000003, 0xfffffffffffffffe, 0xfffb, 0x6, 0x9, 0x80003ffffffff, 0x787f], 0xeeee8000, 0x10200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000006140)={0x2020}, 0x2020) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='8-N:2/N'], 0x6a) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x2000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 4.011170585s ago: executing program 1 (id=425): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) 3.440772854s ago: executing program 1 (id=429): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) read(r0, &(0x7f0000000040)=""/106, 0x6a) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x10a, 0x0, 0x100000002}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010141, 0x0, 0x3}]}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000007000000000000000007000000d901000004800000010000000100"/48]) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x22001, 0x100) 3.209250188s ago: executing program 3 (id=431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.730233436s ago: executing program 3 (id=434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xb0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac1"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.690917786s ago: executing program 1 (id=435): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x2000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000240)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000002ce0000000300000019276782"]) r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r9, &(0x7f0000000440)=ANY=[@ANYBLOB='unlock me'], 0xb) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) write$binfmt_format(r8, &(0x7f0000000000)='0\x00', 0x2) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) 2.343990412s ago: executing program 3 (id=436): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 2.010823517s ago: executing program 3 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xa594, 0x1, 0x0, 0x10000000000081, 0x100000, 0x0, 0x2004cc, 0x8000000, 0x0, 0x100000020000003, 0xfffffffffffffffe, 0xfffb, 0x6, 0x9, 0x80003ffffffff, 0x787f], 0xeeee8000, 0x10200}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) (async) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x16, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.730879792s ago: executing program 1 (id=440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000013c0)=ANY=[]) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000019000048000000000000000800000000000000192c8666a8"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNGETDEVNETNS(r1, 0xff05, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@fda={0x66646185, 0x1, 0x2, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/176, 0x0, 0x1, 0x18}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x81}, {0x6}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 1.589528964s ago: executing program 3 (id=441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x83040, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xbc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10000000000003) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x30003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xb]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9]) mkdirat$cgroup(r6, 0x0, 0x1ff) openat$cgroup_subtree(r6, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_freezer_state(r6, &(0x7f00000003c0), 0x2, 0x0) read(r7, &(0x7f0000000080)=""/265, 0x109) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 1.310810908s ago: executing program 32 (id=311): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40087705, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x145480, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000180)=r2) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x7ffd, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x1, 0x80, 0x9, 0x2}, {0x6, 0x80, 0x8, 0xc4, 0x9, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x11, 0x9, 0x2, 0x6, 0x9, 0x45, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x7, 0x8000, 0x100000040, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0xffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x7fffffff], 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd, 0x0, 0x7, 0x1d9, 0x8004, 0x1, 0x1}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)) 912.147105ms ago: executing program 2 (id=445): openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa000, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) 760.058328ms ago: executing program 2 (id=446): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00') r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mount$binderfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYRES16=r0]) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYRESDEC=0x0]) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) 732.584228ms ago: executing program 2 (id=447): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002080), 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x5, 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)={0x0, 0x7, [@remote, @link_local, @broadcast, @remote, @link_local, @random="db6576d74337", @random="bb8021e9da14"]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xaf6f, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@exit_looper, @release], 0x0, 0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000000)=0x800, 0x12) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 498.010471ms ago: executing program 2 (id=448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xffffffff, 0x9, 0x9bc, 0x4}, {0x1, 0x0, 0x8, 0x1, 0x130}]}) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x10}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80040, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000040001c000000000a4030000000000fb00c2c77adb9a434119e1dfd193f687"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) 335.910794ms ago: executing program 3 (id=449): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000580)=[@free_buffer], 0x1000, 0x0, &(0x7f0000000ac0)="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"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x8}, {}, {0x2000, 0x0, 0x0, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0x2, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x26}, {}, {0xd000}, {0x0, 0x9}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x8080000}) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1, 0x8000000a, 0x2, 0x5, 0x0, 0x4002004c4, 0x2000001000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7], 0x8080000, 0x10}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb2, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r11, &(0x7f0000000000), 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 236.230656ms ago: executing program 2 (id=450): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 215.017136ms ago: executing program 1 (id=451): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write(r0, &(0x7f0000004600)="a2d8", 0x2) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000180)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc2401, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) write(r3, 0x0, 0x0) (async) write(r3, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) (async) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0xfffffffffffffff7, 0xffffffffffffffff, 0xffffffff00000000, 0x5, 0x1d9e, 0xe, 0x69ba, 0x8001, 0x4, 0x0, 0xd389, 0x6, 0x0, 0x4, 0x800, 0xfffffffffffffffa], 0x8000000, 0x2}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 0s ago: executing program 2 (id=452): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffd32) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x25470000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000fc0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7xqg\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf25\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\xd4W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3\xc2\t\x1f\x9b\x1a\xff\xbb\x88\xce7\x15\x90\xf2\xd0la\x9d\x82\xb4\xad\\\x8d\a\x99\x17\x85\x9a\x05\xb1\x00'/712) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x462760, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000240)={0x2, r1}) write$cgroup_subtree(r1, &(0x7f0000000000), 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 32.131001][ T36] audit: type=1400 audit(1750399893.910:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.132519][ T281] cgroup: Unknown subsys name 'net' [ 32.154983][ T36] audit: type=1400 audit(1750399893.910:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.183975][ T36] audit: type=1400 audit(1750399893.940:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.184183][ T281] cgroup: Unknown subsys name 'devices' [ 32.295699][ T281] cgroup: Unknown subsys name 'hugetlb' [ 32.302164][ T281] cgroup: Unknown subsys name 'rlimit' [ 32.477409][ T36] audit: type=1400 audit(1750399894.260:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.502553][ T36] audit: type=1400 audit(1750399894.260:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.505140][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.529069][ T36] audit: type=1400 audit(1750399894.260:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.562601][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.563884][ T36] audit: type=1400 audit(1750399894.320:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.604705][ T36] audit: type=1400 audit(1750399894.320:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.633050][ T36] audit: type=1400 audit(1750399894.340:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.661116][ T36] audit: type=1400 audit(1750399894.340:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.383890][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.391449][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.422996][ T288] bridge_slave_0: entered allmulticast mode [ 33.430264][ T288] bridge_slave_0: entered promiscuous mode [ 33.437959][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.445950][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.455385][ T288] bridge_slave_1: entered allmulticast mode [ 33.463145][ T288] bridge_slave_1: entered promiscuous mode [ 33.630431][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.637998][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.646121][ T292] bridge_slave_0: entered allmulticast mode [ 33.653592][ T292] bridge_slave_0: entered promiscuous mode [ 33.667601][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.675697][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.683486][ T294] bridge_slave_0: entered allmulticast mode [ 33.690494][ T294] bridge_slave_0: entered promiscuous mode [ 33.697541][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.704971][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.712769][ T294] bridge_slave_1: entered allmulticast mode [ 33.719410][ T294] bridge_slave_1: entered promiscuous mode [ 33.725530][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.732593][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.740347][ T292] bridge_slave_1: entered allmulticast mode [ 33.747906][ T292] bridge_slave_1: entered promiscuous mode [ 33.818022][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.828378][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.836587][ T293] bridge_slave_0: entered allmulticast mode [ 33.844313][ T293] bridge_slave_0: entered promiscuous mode [ 33.862185][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.869793][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.878319][ T293] bridge_slave_1: entered allmulticast mode [ 33.885957][ T293] bridge_slave_1: entered promiscuous mode [ 33.905524][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.913602][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.921576][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.929600][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.057482][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.064921][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.072671][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.079810][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.093711][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.100899][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.108353][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.115426][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.125662][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.133662][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.142345][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.151081][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.159064][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.167069][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.193546][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.201338][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.209595][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.216989][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.279098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.286404][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.296435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.303637][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.325594][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.334149][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.342765][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.350236][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.364393][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.372088][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.380674][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.388262][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.414192][ T288] veth0_vlan: entered promiscuous mode [ 34.451642][ T292] veth0_vlan: entered promiscuous mode [ 34.483869][ T293] veth0_vlan: entered promiscuous mode [ 34.503030][ T292] veth1_macvtap: entered promiscuous mode [ 34.515317][ T294] veth0_vlan: entered promiscuous mode [ 34.530268][ T288] veth1_macvtap: entered promiscuous mode [ 34.572452][ T293] veth1_macvtap: entered promiscuous mode [ 34.588937][ T294] veth1_macvtap: entered promiscuous mode [ 34.650094][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.743725][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.782702][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.782769][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.812155][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.825326][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.832298][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.840599][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.849155][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.856917][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.866170][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.884520][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.892034][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.910148][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.916653][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.923920][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.930775][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.938738][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.947076][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.953959][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.960583][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.967922][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.975504][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.981802][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.988172][ T322] rust_binder: Write failure EINVAL in pid:2 [ 34.996450][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.002775][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.009866][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.011356][ T337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 35.017135][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.024063][ T338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 35.033192][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.056747][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.063892][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.074123][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.080931][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.088163][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.095254][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.101860][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.109825][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.116753][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.124205][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.135526][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.143341][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.165297][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.171796][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.178621][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.187038][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.194102][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.201032][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.209162][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.217533][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.225785][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.232710][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.239492][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.247757][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.248807][ T353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 35.254587][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.274691][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.281743][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.290646][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.297455][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.304976][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.316109][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.322486][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.330198][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.338138][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.344895][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.351249][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.362122][ T322] rust_binder: Write failure EINVAL in pid:2 [ 35.447697][ T371] rust_binder: Write failure EINVAL in pid:10 [ 35.499888][ T377] binder: Bad value for 'stats' [ 35.500497][ T378] binder: Bad value for 'stats' [ 35.575975][ T383] cgroup: fork rejected by pids controller in /syz2 [ 35.648241][ T386] input: syz0 as /devices/virtual/input/input4 [ 35.792346][ T397] random: crng reseeded on system resumption [ 35.852173][ T394] binder: Bad value for 'max' [ 35.885742][ T401] ======================================================= [ 35.885742][ T401] WARNING: The mand mount option has been deprecated and [ 35.885742][ T401] and is ignored by this kernel. Remove the mand [ 35.885742][ T401] option from the mount to silence this warning. [ 35.885742][ T401] ======================================================= [ 35.933554][ T401] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 35.966267][ T403] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 36.005298][ T407] rust_binder: Error while translating object. [ 36.005346][ T407] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 36.007509][ T405] binder: Binderfs stats mode cannot be changed during a remount [ 36.012060][ T407] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31 [ 36.048150][ T305] bridge_slave_1: left allmulticast mode [ 36.076111][ T305] bridge_slave_1: left promiscuous mode [ 36.087645][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.103856][ T305] bridge_slave_0: left allmulticast mode [ 36.110833][ T305] bridge_slave_0: left promiscuous mode [ 36.130038][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.302300][ T417] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 36.302360][ T417] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 36.315008][ T305] veth1_macvtap: left promiscuous mode [ 36.329293][ T417] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 36.330479][ T420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.350774][ T305] veth0_vlan: left promiscuous mode [ 36.416182][ T420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 36.416220][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:37 [ 36.651549][ T436] input: syz1 as /devices/virtual/input/input5 [ 36.701654][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.721661][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.741776][ T427] bridge_slave_0: entered allmulticast mode [ 36.748884][ T427] bridge_slave_0: entered promiscuous mode [ 36.759290][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.766863][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.775121][ T427] bridge_slave_1: entered allmulticast mode [ 36.784095][ T427] bridge_slave_1: entered promiscuous mode [ 37.134879][ T36] kauditd_printk_skb: 115 callbacks suppressed [ 37.134899][ T36] audit: type=1400 audit(1750399898.920:189): avc: denied { create } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.179759][ T36] audit: type=1400 audit(1750399898.950:190): avc: denied { write } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.219568][ T36] audit: type=1400 audit(1750399898.950:191): avc: denied { read } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.248027][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.255541][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.263872][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.271738][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.281970][ T36] audit: type=1400 audit(1750399898.950:192): avc: denied { read } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.346133][ T36] audit: type=1400 audit(1750399898.950:193): avc: denied { write } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.411711][ T36] audit: type=1400 audit(1750399898.990:194): avc: denied { read } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.489050][ T36] audit: type=1400 audit(1750399898.990:195): avc: denied { write } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.538127][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.556558][ T36] audit: type=1400 audit(1750399898.990:196): avc: denied { read } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.557726][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.592966][ T36] audit: type=1400 audit(1750399898.990:197): avc: denied { write } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.640005][ T454] rust_binder: Error while translating object. [ 37.640051][ T454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 37.655515][ T454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48 [ 37.667207][ T36] audit: type=1400 audit(1750399898.990:198): avc: denied { read } for pid=427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.731228][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.740506][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.750184][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.755520][ T462] SELinux: failed to load policy [ 37.758540][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.845442][ T462] binder: Unknown parameter 'fscontext?}Linux!' [ 38.232705][ T427] veth0_vlan: entered promiscuous mode [ 38.234811][ T466] rust_binder: Write failure EFAULT in pid:52 [ 38.362097][ T427] veth1_macvtap: entered promiscuous mode [ 38.571104][ T480] binder: Unknown parameter '8EL<dg3;jtE4@ 6u`m7&|-Rv]X5dPiS$[ڥj4F&4u`2' [ 38.933053][ T493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 38.933089][ T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:58 [ 38.984492][ T497] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 39.005091][ T496] rust_binder: Write failure EFAULT in pid:62 [ 39.013104][ T497] rust_binder: Error while translating object. [ 39.049704][ T497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.087456][ T497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 39.336492][ T510] rust_binder: Error while translating object. [ 39.354160][ T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 39.371201][ T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:40 [ 39.494607][ T514] rust_binder: Error in use_page_slow: ESRCH [ 39.494640][ T514] rust_binder: use_range failure ESRCH [ 39.518964][ T514] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 39.533687][ T514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 39.543022][ T514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62 [ 39.557589][ T521] __vm_enough_memory: pid: 521, comm: syz.3.66, bytes: 281474976845824 not enough memory for the allocation [ 39.693280][ T528] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 39.712992][ T528] rust_binder: Write failure EINVAL in pid:67 [ 39.802100][ T531] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 39.838755][ T531] SELinux: failed to load policy [ 39.962093][ T542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.164837][ T548] rust_binder: Write failure EFAULT in pid:70 [ 40.403488][ T555] rust_binder: Write failure EFAULT in pid:74 [ 40.518434][ T560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 40.592012][ T564] SELinux: failed to load policy [ 40.878913][ T570] rust_binder: Error in use_page_slow: ESRCH [ 40.878945][ T570] rust_binder: use_range failure ESRCH [ 40.913550][ T570] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 40.925272][ T570] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.949811][ T570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:77 [ 41.065611][ T578] rust_binder: Error while translating object. [ 41.075305][ T575] rust_binder: Got transaction with invalid offset. [ 41.084189][ T578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 41.109007][ T578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:79 [ 41.113029][ T575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.143022][ T575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 41.226024][ T584] binder: Unknown parameter 'fsmagic' [ 41.296679][ T588] binder: Unknown parameter 'fsmagic' [ 41.537298][ T597] binder: Bad value for 'max' [ 41.595022][ T601] random: crng reseeded on system resumption [ 41.879377][ T619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 42.059777][ T627] rust_binder: Error while translating object. [ 42.084989][ T627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 42.108787][ T627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 42.156933][ T36] kauditd_printk_skb: 899 callbacks suppressed [ 42.156952][ T36] audit: type=1400 audit(1750399903.940:1098): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.253211][ T36] audit: type=1400 audit(1750399903.980:1099): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.306331][ T36] audit: type=1400 audit(1750399903.980:1100): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.347589][ T36] audit: type=1400 audit(1750399904.010:1101): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.416388][ T36] audit: type=1400 audit(1750399904.010:1102): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.443856][ T36] audit: type=1400 audit(1750399904.010:1103): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.502957][ T36] audit: type=1400 audit(1750399904.060:1104): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.532721][ T36] audit: type=1400 audit(1750399904.060:1105): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.599188][ T36] audit: type=1400 audit(1750399904.060:1106): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.660669][ T36] audit: type=1400 audit(1750399904.080:1107): avc: denied { mounton } for pid=629 comm="syz.0.103" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.724870][ T650] input: syz0 as /devices/virtual/input/input9 [ 42.813979][ T661] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 42.838253][ T661] rust_binder: Write failure EINVAL in pid:84 [ 42.894997][ T666] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 42.932377][ T668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 42.969440][ T665] rust_binder: Write failure EINVAL in pid:38 [ 42.983306][ T673] rust_binder: Write failure EINVAL in pid:86 [ 42.988929][ T668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:86 [ 43.208794][ T684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 43.244776][ T684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:89 [ 43.266633][ T683] kvm: kvm [676]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000401 [ 43.343710][ T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 43.421077][ T9] hid-generic C98F:0003:0000.0001: unknown main item tag 0x0 [ 43.484523][ T9] hid-generic C98F:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 43.672137][ T698] rust_binder: Error while translating object. [ 43.672179][ T698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 43.711054][ T698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 44.116224][ T704] fido_id[704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 44.324227][ T714] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 44.473277][ T719] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.664728][ T727] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 44.664757][ T727] rust_binder: Error while translating object. [ 44.702982][ T727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 44.723098][ T732] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 44.734012][ T727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 44.781838][ T731] rust_binder: Error in use_page_slow: ESRCH [ 44.792949][ T731] rust_binder: use_range failure ESRCH [ 44.799439][ T731] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 44.871509][ T731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 44.937808][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 45.017348][ T737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.032423][ T738] input: syz1 as /devices/virtual/input/input10 [ 45.107739][ T738] rust_binder: Error while translating object. [ 45.107781][ T738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 45.135196][ T738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 45.181903][ T738] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 45.204639][ T741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.248858][ T741] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.447851][ T754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 45.636526][ T763] rust_binder: Write failure EFAULT in pid:130 [ 45.732492][ T763] rust_binder: Write failure EFAULT in pid:130 [ 45.736270][ T31] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 45.784175][ T31] hid-generic C98F:0003:0000.0002: unknown main item tag 0x0 [ 45.814292][ T776] binder: Unknown parameter 'smackfshat' [ 45.822517][ T31] hid-generic C98F:0003:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.055046][ T790] rust_binder: Write failure EFAULT in pid:135 [ 46.117390][ T793] binder: Unknown parameter 'rw' [ 46.387126][ T807] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 46.387172][ T807] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 46.434915][ T807] rust_binder: Read failure Err(EFAULT) in pid:123 [ 46.646253][ T817] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 46.753795][ T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 46.874563][ T831] rust_binder: Error in use_page_slow: ESRCH [ 46.915336][ T831] rust_binder: use_range failure ESRCH [ 46.988120][ T831] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 47.039790][ T831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 47.083019][ T831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138 [ 47.119365][ T843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:132 [ 47.181720][ T36] kauditd_printk_skb: 813 callbacks suppressed [ 47.181759][ T36] audit: type=1400 audit(1750399908.960:1887): avc: denied { read write } for pid=294 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.233178][ T36] audit: type=1400 audit(1750399908.960:1888): avc: denied { read write open } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.326991][ T846] audit: audit_lost=13 audit_rate_limit=0 audit_backlog_limit=64 [ 47.335632][ T846] audit: out of memory in audit_log_start [ 47.370507][ T36] audit: type=1400 audit(1750399908.960:1889): avc: denied { ioctl } for pid=294 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.507554][ T844] fido_id[844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 47.554757][ T36] audit: type=1400 audit(1750399909.110:1890): avc: denied { read write } for pid=845 comm="syz.3.176" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.683059][ T36] audit: type=1400 audit(1750399909.110:1891): avc: denied { read open } for pid=845 comm="syz.3.176" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.798714][ T36] audit: type=1400 audit(1750399909.110:1892): avc: denied { ioctl } for pid=845 comm="syz.3.176" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.879787][ T852] audit: audit_backlog=65 > audit_backlog_limit=64 [ 47.879966][ T861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.316448][ T868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.316495][ T868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 48.655780][ T884] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 48.813508][ T892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 49.183348][ T903] binder: Bad value for 'max' [ 49.313800][ T911] rust_binder: Write failure EFAULT in pid:153 [ 49.432758][ T921] rust_binder: Write failure EINVAL in pid:149 [ 49.462016][ T925] input: syz1 as /devices/virtual/input/input13 [ 49.615921][ T932] kvm: kvm [931]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 49.721373][ T937] FAULT_INJECTION: forcing a failure. [ 49.721373][ T937] name failslab, interval 1, probability 0, space 0, times 0 [ 49.752983][ T937] CPU: 0 UID: 0 PID: 937 Comm: syz.1.205 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 49.753021][ T937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.753043][ T937] Call Trace: [ 49.753050][ T937] [ 49.753059][ T937] __dump_stack+0x21/0x30 [ 49.753098][ T937] dump_stack_lvl+0x10c/0x190 [ 49.753123][ T937] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.753149][ T937] ? pointer+0xdd0/0xdd0 [ 49.753175][ T937] dump_stack+0x19/0x20 [ 49.753199][ T937] should_fail_ex+0x3d9/0x530 [ 49.753224][ T937] should_failslab+0xac/0x100 [ 49.753261][ T937] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 49.753289][ T937] ? sidtab_sid2str_get+0x139/0x370 [ 49.753321][ T937] kmemdup_noprof+0x31/0x80 [ 49.753344][ T937] sidtab_sid2str_get+0x139/0x370 [ 49.753373][ T937] security_sid_to_context_core+0x30d/0x5d0 [ 49.753401][ T937] security_sid_to_context+0x2e/0x50 [ 49.753426][ T937] avc_audit_post_callback+0x107/0x780 [ 49.753448][ T937] ? audit_log_format+0xdb/0x140 [ 49.753470][ T937] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.753492][ T937] ? __cfi_audit_log_format+0x10/0x10 [ 49.753512][ T937] ? audit_log_untrustedstring+0xea/0x100 [ 49.753534][ T937] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.753556][ T937] common_lsm_audit+0x147a/0x1860 [ 49.753577][ T937] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 49.753605][ T937] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 49.753628][ T937] ? __cfi_common_lsm_audit+0x10/0x10 [ 49.753649][ T937] ? avc_denied+0x112/0x180 [ 49.753672][ T937] slow_avc_audit+0x18d/0x1f0 [ 49.753693][ T937] ? __cfi_slow_avc_audit+0x10/0x10 [ 49.753715][ T937] ? avc_has_perm_noaudit+0x21c/0x360 [ 49.753737][ T937] avc_has_perm+0x1cd/0x220 [ 49.753758][ T937] ? __cfi_avc_has_perm+0x10/0x10 [ 49.753780][ T937] ? __kasan_check_write+0x18/0x20 [ 49.753804][ T937] ? proc_fail_nth_write+0x17e/0x210 [ 49.753826][ T937] selinux_mmap_file+0x1f3/0x320 [ 49.753855][ T937] ? __cfi_selinux_mmap_file+0x10/0x10 [ 49.753897][ T937] ? vfs_write+0x8ba/0xe80 [ 49.753924][ T937] security_mmap_file+0x2af/0x350 [ 49.753952][ T937] vm_mmap_pgoff+0x11d/0x4e0 [ 49.753978][ T937] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 49.754003][ T937] ? __fget_files+0x2c5/0x340 [ 49.754032][ T937] ksys_mmap_pgoff+0x166/0x1e0 [ 49.754058][ T937] __x64_sys_mmap+0x121/0x140 [ 49.754086][ T937] x64_sys_call+0x13bf/0x2ee0 [ 49.754114][ T937] do_syscall_64+0x58/0xf0 [ 49.754141][ T937] ? clear_bhb_loop+0x35/0x90 [ 49.754175][ T937] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.754205][ T937] RIP: 0033:0x7fb9ec58e929 [ 49.754245][ T937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.754261][ T937] RSP: 002b:00007fb9ed380038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 49.754293][ T937] RAX: ffffffffffffffda RBX: 00007fb9ec7b5fa0 RCX: 00007fb9ec58e929 [ 49.754312][ T937] RDX: 0000000001000008 RSI: 0000000000001000 RDI: 0000200000fff000 [ 49.754327][ T937] RBP: 00007fb9ed380090 R08: 0000000000000003 R09: 000000004d75d000 [ 49.754341][ T937] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 49.754355][ T937] R13: 0000000000000000 R14: 00007fb9ec7b5fa0 R15: 00007fff1be30658 [ 49.754374][ T937] [ 50.963166][ T981] binder: Unknown parameter 'coyBLV"i5ntext' [ 50.964300][ T982] binder: Unknown parameter 'coyBLV"i5ntext' [ 51.164086][ T986] input: syz1 as /devices/virtual/input/input14 [ 51.197851][ T989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 51.197889][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:189 [ 51.568597][ T998] input: syz1 as /devices/virtual/input/input15 [ 51.667723][ T1002] binder: Unknown parameter 'coyBLV"i5ntext' [ 51.738492][ T998] rust_binder: Error while translating object. [ 51.738568][ T998] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 51.773643][ T998] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 52.010751][ T1018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.073643][ T1023] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 52.073685][ T1023] rust_binder: Error while translating object. [ 52.115303][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.143012][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 52.158011][ T1022] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.199517][ T36] kauditd_printk_skb: 748 callbacks suppressed [ 52.199540][ T36] audit: type=1400 audit(1750399913.980:2631): avc: denied { ioctl } for pid=1019 comm="syz.1.230" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.244857][ T1026] rust_binder: Write failure EINVAL in pid:171 [ 52.275568][ T1023] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 52.282525][ T1023] rust_binder: Error while translating object. [ 52.292513][ T1022] rust_binder: Read failure Err(EFAULT) in pid:171 [ 52.299033][ T1018] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.331789][ T36] audit: type=1400 audit(1750399913.980:2632): avc: denied { set_context_mgr } for pid=1019 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 52.363093][ T1023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.363135][ T1023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 52.388386][ T36] audit: type=1400 audit(1750399914.030:2633): avc: denied { ioctl } for pid=1020 comm="syz.3.231" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.479081][ T36] audit: type=1400 audit(1750399914.030:2634): avc: denied { map } for pid=1019 comm="syz.1.230" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.542060][ T36] audit: type=1400 audit(1750399914.030:2635): avc: denied { read } for pid=1019 comm="syz.1.230" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.603320][ T1031] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 52.612557][ T1031] rust_binder: Write failure EINVAL in pid:180 [ 52.640271][ T36] audit: type=1400 audit(1750399914.030:2636): avc: denied { ioctl } for pid=1020 comm="syz.3.231" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.760281][ T1035] kvm: user requested TSC rate below hardware speed [ 52.767477][ T36] audit: type=1400 audit(1750399914.040:2637): avc: denied { read } for pid=1019 comm="syz.1.230" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.802944][ T36] audit: type=1400 audit(1750399914.040:2638): avc: denied { read open } for pid=1019 comm="syz.1.230" path="/dev/binderfs/binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 52.813075][ T1037] kvm: kvm [1036]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 52.873256][ T36] audit: type=1400 audit(1750399914.040:2639): avc: denied { append } for pid=1019 comm="syz.1.230" name="pfkey" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.953128][ T36] audit: type=1400 audit(1750399914.040:2640): avc: denied { append } for pid=1019 comm="syz.1.230" path="/proc/177/net/pfkey" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.076172][ T1043] __vm_enough_memory: pid: 1043, comm: syz.0.237, bytes: 281474976845824 not enough memory for the allocation [ 53.188936][ T1046] rust_binder: Write failure EINVAL in pid:187 [ 53.245943][ T1046] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 53.267149][ T1046] rust_binder: Write failure EINVAL in pid:187 [ 53.277376][ T1049] rust_binder: Error in use_page_slow: ESRCH [ 53.320119][ T1049] rust_binder: use_range failure ESRCH [ 53.320157][ T1049] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 53.337694][ T1048] SELinux: failed to load policy [ 53.354509][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 53.354548][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:203 [ 53.433036][ T1051] input: syz1 as /devices/virtual/input/input16 [ 53.437421][ T1048] binder: Unknown parameter 'stats ' [ 53.536734][ T1051] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 53.536766][ T1051] rust_binder: Error while translating object. [ 53.613232][ T1051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.694962][ T1051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 53.785843][ T1065] input: syz0 as /devices/virtual/input/input17 [ 54.256524][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.260601][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.297411][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.297759][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.317680][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.329488][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.368238][ T1085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 54.394438][ T1083] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 54.405202][ T1081] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 54.405238][ T1081] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 54.545872][ T1090] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 54.644545][ T1100] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.955218][ T1110] binder: Unknown parameter 'context' [ 55.262261][ T1119] binder: Binderfs stats mode cannot be changed during a remount [ 55.333536][ T1122] input: syz0 as /devices/virtual/input/input18 [ 55.340190][ T1122] input: failed to attach handler leds to device input18, error: -6 [ 55.872914][ T1143] SELinux: security_context_str_to_sid (sytem_uGй ) failed with errno=-22 [ 56.224296][ T1154] input: syz0 as /devices/virtual/input/input20 [ 56.230889][ T1154] input: failed to attach handler leds to device input20, error: -6 [ 56.332337][ T1163] rust_binder: Error while translating object. [ 56.332388][ T1163] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 56.358017][ T1163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:245 [ 56.565247][ T1169] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 56.723166][ T1172] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 56.963101][ T1180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:250 [ 57.095753][ T1186] rust_binder: Write failure EINVAL in pid:219 [ 57.174202][ T1190] random: crng reseeded on system resumption [ 57.243426][ T36] kauditd_printk_skb: 696 callbacks suppressed [ 57.243444][ T36] audit: type=1400 audit(1750399919.030:3337): avc: denied { read } for pid=1189 comm="syz.0.283" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.280298][ T1195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 57.281949][ T1195] binder: Unknown parameter 'noninderfs/binder1' [ 57.303321][ T1193] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.313411][ T1194] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.346708][ T36] audit: type=1400 audit(1750399919.060:3338): avc: denied { read } for pid=1187 comm="syz.3.282" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.382996][ T1194] SELinux: failed to load policy [ 57.411480][ T36] audit: type=1400 audit(1750399919.060:3339): avc: denied { read open } for pid=1187 comm="syz.3.282" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.446093][ T1194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:222 [ 57.472943][ T36] audit: type=1400 audit(1750399919.060:3340): avc: denied { ioctl } for pid=1187 comm="syz.3.282" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.569791][ T36] audit: type=1400 audit(1750399919.060:3341): avc: denied { mounton } for pid=1187 comm="syz.3.282" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.623854][ T1201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 57.655730][ T1205] rust_binder: Write failure EINVAL in pid:256 [ 57.666877][ T36] audit: type=1400 audit(1750399919.080:3342): avc: denied { read open } for pid=1189 comm="syz.0.283" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.782988][ T36] audit: type=1400 audit(1750399919.080:3343): avc: denied { ioctl } for pid=1189 comm="syz.0.283" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.849988][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.850965][ T427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.857685][ T1209] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.945925][ T1218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 57.945985][ T1218] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 57.963060][ T1218] rust_binder: Read failure Err(EFAULT) in pid:214 [ 58.306287][ T1231] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 58.365675][ T1229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.453712][ T1235] binder: Unknown parameter 'dont_hash' [ 58.535733][ T1239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.566135][ T1238] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.720121][ T1247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178 [ 58.721787][ T1246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:220 [ 58.864715][ T1250] input: syz1 as /devices/virtual/input/input22 [ 58.984033][ T1250] input: syz1 as /devices/virtual/input/input23 [ 59.060717][ T1260] SELinux: Context o}xd is not valid (left unmapped). [ 59.188066][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:186 [ 60.030439][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x6 [ 60.056496][ T1310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 60.105110][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x7 [ 60.129522][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.155435][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.171306][ T1314] binder: Unknown parameter 'fcnfined_u' [ 60.177680][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.178522][ T1312] rust_binder: Error while translating object. [ 60.194997][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.216697][ T1312] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 60.216740][ T1312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 60.233054][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.281650][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.300639][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.322062][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.345151][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.392953][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.412645][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.438109][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.463043][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.487618][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.511061][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.519407][ T1319] binder: Bad value for 'context' [ 60.532184][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.545711][ T1321] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 60.567366][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.653053][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.661319][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.710926][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.738150][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.772942][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.794769][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.818387][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.832937][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.853370][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.861861][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.872938][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.892272][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.915200][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.923827][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.933947][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.942164][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.961260][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.971889][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.986017][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 60.995755][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.012953][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.022824][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.038790][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.049082][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.058224][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.068976][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.077916][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.089429][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.107848][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.123635][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.131843][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.140843][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.151448][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.160548][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.171009][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.180626][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.200723][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.212626][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.223353][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.233742][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.241874][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.257487][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.273741][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.281944][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.312951][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.320955][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.340220][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.353704][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.362303][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.370949][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.381233][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.404512][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.415074][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.434026][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.442503][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.457560][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.467493][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.477921][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.487227][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.516679][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.543107][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.551390][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.572208][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.583439][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.593799][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.601952][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.613353][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.622122][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.631802][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.640521][ T1353] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 61.641549][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.659079][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.672058][ T1353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 61.673808][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.704369][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.712658][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.732942][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.739152][ T1355] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.740860][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.740897][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.769793][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.780123][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.789339][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.806088][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.817326][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.833740][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.845274][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.856073][ T1358] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 61.856102][ T1358] rust_binder: Error while translating object. [ 61.879489][ T1358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 61.889586][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.923160][ T1358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 61.923985][ T1358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 61.943012][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.983212][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 61.996326][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.012940][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.021379][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.029887][ T1363] kvm: kvm [1362]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 62.052971][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.060964][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.082946][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.090899][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.117453][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.143001][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.151534][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.173000][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.182852][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.202959][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.211042][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.225943][ T1370] rust_binder: Write failure EFAULT in pid:270 [ 62.232959][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.253861][ T36] kauditd_printk_skb: 1753 callbacks suppressed [ 62.253882][ T36] audit: type=1400 audit(1750399924.040:5073): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.263944][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.312951][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.314060][ T36] audit: type=1400 audit(1750399924.040:5074): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.321030][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.395907][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.408096][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.411977][ T36] audit: type=1400 audit(1750399924.040:5075): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.421830][ T292] audit: audit_lost=27 audit_rate_limit=0 audit_backlog_limit=64 [ 62.453580][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.461549][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.470365][ T1376] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.473081][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.479981][ T1377] audit: audit_backlog=65 > audit_backlog_limit=64 [ 62.487226][ T292] audit: backlog limit exceeded [ 62.492844][ T1376] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 62.499121][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.505645][ T36] audit: type=1400 audit(1750399924.040:5076): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.533068][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.573937][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.582460][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.605311][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.622957][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.631475][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.663019][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.671456][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.696669][ T1384] binder: Unknown parameter 'dont_hash' [ 62.703010][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.711346][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.732950][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.740856][ T64] hid-generic 0008:0000:FFFFFC01.0003: unknown main item tag 0x0 [ 62.764819][ T64] hid-generic 0008:0000:FFFFFC01.0003: hidraw0: HID v9.86 Device [syz0] on syz1 [ 62.775709][ T1386] KVM: debugfs: duplicate directory 1386-9 [ 62.957891][ T1388] rust_binder: Write failure EFAULT in pid:280 [ 62.982960][ T1390] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 63.350071][ T1406] rust_binder: Write failure EINVAL in pid:212 [ 63.367507][ T1403] SELinux: failed to load policy [ 63.369889][ T1406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 63.422849][ T1408] SELinux: security_context_str_to_sid () failed with errno=-22 [ 63.426066][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:212 [ 63.446053][ T1403] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 63.470620][ T1403] rust_binder: Error while translating object. [ 63.493459][ T1403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 63.500227][ T1406] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 63.511674][ T1403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 63.543571][ T1406] rust_binder: Read failure Err(EFAULT) in pid:212 [ 63.994388][ T1412] fido_id[1412]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.167269][ T1419] rust_binder: Error in use_page_slow: ESRCH [ 64.167297][ T1419] rust_binder: use_range failure ESRCH [ 64.205467][ T1419] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 64.212453][ T1419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 64.257714][ T1419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:291 [ 64.887998][ T1437] random: crng reseeded on system resumption [ 64.918064][ T1438] binder: Unknown parameter '00000000000000000000000' [ 65.179579][ T1437] Restarting kernel threads ... done. [ 65.907858][ T1468] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 66.265096][ T1479] serio: Serial port ttynull [ 66.475898][ T1483] rust_binder: Write failure EFAULT in pid:241 [ 66.648152][ T1490] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.779633][ T1492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 66.831962][ T1496] rust_binder: Write failure EINVAL in pid:246 [ 67.270790][ T36] kauditd_printk_skb: 2063 callbacks suppressed [ 67.270811][ T36] audit: type=1400 audit(1750399929.050:7020): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.361532][ T36] audit: type=1400 audit(1750399929.050:7021): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.429849][ T36] audit: type=1400 audit(1750399929.050:7022): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.486796][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.489882][ T36] audit: type=1400 audit(1750399929.050:7023): avc: denied { setattr } for pid=292 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.521850][ T292] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 67.525605][ T1512] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.560437][ T1512] audit: audit_lost=70 audit_rate_limit=0 audit_backlog_limit=64 [ 67.574887][ T292] audit: backlog limit exceeded [ 67.585882][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 67.681955][ T1514] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.681995][ T1514] rust_binder: Read failure Err(EFAULT) in pid:249 [ 67.909462][ T1520] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 67.935334][ T1520] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 67.961529][ T1520] rust_binder: Read failure Err(EFAULT) in pid:253 [ 68.359328][ T1530] input: syz1 as /devices/virtual/input/input25 [ 68.683581][ T1535] rust_binder: Write failure EINVAL in pid:261 [ 68.942499][ T1546] binder: Bad value for 'defcontext' [ 69.176380][ T1552] random: crng reseeded on system resumption [ 69.476274][ T1562] rust_binder: Error while translating object. [ 69.477032][ T1562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 69.513100][ T1562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:325 [ 69.994405][ T1572] rust_binder: Write failure EINVAL in pid:343 [ 70.022520][ T1571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 70.362840][ T1580] rust_binder: Failed to allocate buffer. len:18446744073709550944, is_oneway:false [ 70.393941][ T1580] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 70.432965][ T1580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:347 [ 70.475255][ T1585] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 70.888902][ T1592] can0: slcan on ttyS3. [ 70.907277][ T1592] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 71.226712][ T1592] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 71.364076][ T1605] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.375147][ T1597] rust_binder: Write failure EINVAL in pid:335 [ 71.448428][ T1592] can0 (unregistered): slcan off ttyS3. [ 72.227010][ T1628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 72.227066][ T1628] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 72.248585][ T1630] random: crng reseeded on system resumption [ 72.272933][ T36] kauditd_printk_skb: 2094 callbacks suppressed [ 72.272953][ T36] audit: type=1400 audit(1750399934.050:9054): avc: denied { search } for pid=1601 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.323011][ T1628] rust_binder: Read failure Err(EFAULT) in pid:339 [ 72.369603][ T36] audit: type=1400 audit(1750399934.050:9055): avc: denied { search } for pid=1601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.414433][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.421512][ T292] audit: audit_lost=93 audit_rate_limit=0 audit_backlog_limit=64 [ 72.456175][ T1634] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.470899][ T292] audit: backlog limit exceeded [ 72.482933][ T1634] audit: audit_lost=94 audit_rate_limit=0 audit_backlog_limit=64 [ 72.483728][ T36] audit: type=1400 audit(1750399934.050:9056): avc: denied { append } for pid=1601 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=1998 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.496148][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.519194][ T1637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.755601][ T1645] random: crng reseeded on system resumption [ 72.865761][ T1648] rust_binder: Error while translating object. [ 72.865815][ T1648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.872629][ T1648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 73.273302][ T1661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313 [ 73.604149][ T1672] rust_binder: Error in use_page_slow: ESRCH [ 73.638840][ T1672] rust_binder: use_range failure ESRCH [ 73.667542][ T1672] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 73.694071][ T1672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.753568][ T1672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:369 [ 73.991132][ T1689] rust_binder: Failed copying remainder into alloc: EFAULT [ 74.034977][ T1689] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 74.056388][ T1685] SELinux: failed to load policy [ 74.084334][ T1689] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 74.084376][ T1689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:372 [ 74.123651][ T1686] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.160833][ T1685] binder: Bad value for 'max' [ 74.692445][ T1696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:347 [ 74.693963][ T1696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 74.743380][ T46] bridge_slave_1: left allmulticast mode [ 74.761268][ T46] bridge_slave_1: left promiscuous mode [ 74.783827][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.802711][ T1709] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 74.809491][ T1709] rust_binder: Error while translating object. [ 74.817662][ T46] bridge_slave_0: left allmulticast mode [ 74.832575][ T1709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 74.832635][ T1709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:331 [ 74.857702][ T46] bridge_slave_0: left promiscuous mode [ 74.882102][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.070096][ T1717] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 75.089614][ T46] veth1_macvtap: left promiscuous mode [ 75.133899][ T46] veth0_vlan: left promiscuous mode [ 75.402640][ T1722] kvm: kvm [1721]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xfb000000000003a4 [ 75.424038][ T1722] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 75.581916][ T1710] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.642999][ T1710] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.650677][ T1710] bridge_slave_0: entered allmulticast mode [ 75.688157][ T1710] bridge_slave_0: entered promiscuous mode [ 75.711163][ T1710] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.731584][ T1710] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.745751][ T1710] bridge_slave_1: entered allmulticast mode [ 75.771904][ T1710] bridge_slave_1: entered promiscuous mode [ 75.871997][ T1731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 75.888078][ T1736] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 75.888078][ T1736] attempt to add with overflow [ 75.900622][ T1728] rust_binder: Error while translating object. [ 75.923494][ T1737] SELinux: Context is not valid (left unmapped). [ 75.950830][ T1728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 75.950869][ T1728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:380 [ 75.967658][ T1736] ------------[ cut here ]------------ [ 75.982943][ T1736] kernel BUG at rust/helpers/bug.c:7! [ 76.029915][ T1736] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 76.037217][ T1736] CPU: 0 UID: 0 PID: 1736 Comm: syz.2.452 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 76.051780][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.062768][ T1736] RIP: 0010:rust_helper_BUG+0x8/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 76.069289][ T1736] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a1 88 10 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 eb 4c 59 a3 90 90 90 90 90 90 90 90 90 [ 76.090532][ T1736] RSP: 0000:ffffc90005bf73f0 EFLAGS: 00010246 [ 76.097519][ T1736] RAX: 000000000000008c RBX: 1ffff92000b7ee80 RCX: e3a983511151a500 [ 76.106466][ T1736] RDX: ffffc9000cb18000 RSI: 0000000000007c93 RDI: 0000000000007c94 [ 76.115273][ T1736] RBP: ffffc90005bf73f0 R08: 0000000000000003 R09: 0000000000000004 [ 76.128375][ T1736] R10: dffffc0000000000 R11: fffff52000b7ede4 R12: 0000000000000000 [ 76.137817][ T1736] R13: dffffc0000000000 R14: ffffc90005bf7420 R15: ffffc90005bf7450 [ 76.146297][ T1736] FS: 00007f4b6d77f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 76.156156][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.164193][ T1736] CR2: 0000200000001000 CR3: 00000001138a2000 CR4: 00000000003526b0 [ 76.172848][ T1736] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.181406][ T1736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.190150][ T1736] Call Trace: [ 76.194442][ T1736] [ 76.197446][ T1736] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 76.205585][ T1736] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 76.213992][ T1736] ? kernel_text_address+0xa9/0xe0 [ 76.219439][ T1736] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 76.235042][ T1736] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 76.241786][ T1736] ? arch_stack_walk+0x10b/0x170 [ 76.247657][ T1736] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 76.255530][ T1736] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 76.264866][ T1736] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 76.275526][ T1736] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 76.286362][ T1736] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 76.298662][ T1736] ? mas_wr_store_type+0x8eb/0x1ad0 [ 76.302964][ T1738] random: crng reseeded on system resumption [ 76.303938][ T1736] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 76.323581][ T1736] ? mas_preallocate+0x56e/0xc60 [ 76.328799][ T1736] ? __cfi_mas_preallocate+0x10/0x10 [ 76.334230][ T1736] ? kasan_save_alloc_info+0x40/0x50 [ 76.339748][ T1736] ? __asan_memset+0x39/0x50 [ 76.345526][ T1736] mmap_region+0x1371/0x1bd0 [ 76.350441][ T1736] ? __cfi_mmap_region+0x10/0x10 [ 76.355903][ T1736] ? __kasan_check_read+0x15/0x20 [ 76.361487][ T1736] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 76.368179][ T1736] ? file_mmap_ok+0x147/0x1a0 [ 76.373019][ T1736] do_mmap+0xb6d/0x13c0 [ 76.377371][ T1736] ? __cfi_do_mmap+0x10/0x10 [ 76.382420][ T1736] ? down_write_killable+0xe9/0x2d0 [ 76.387799][ T1736] ? __cfi_down_write_killable+0x10/0x10 [ 76.393742][ T1736] vm_mmap_pgoff+0x38f/0x4e0 [ 76.398671][ T1736] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 76.404724][ T1736] ? __fget_files+0x2c5/0x340 [ 76.409719][ T1736] ksys_mmap_pgoff+0x166/0x1e0 [ 76.414835][ T1736] __x64_sys_mmap+0x121/0x140 [ 76.420116][ T1736] x64_sys_call+0x13bf/0x2ee0 [ 76.425178][ T1736] do_syscall_64+0x58/0xf0 [ 76.430463][ T1736] ? clear_bhb_loop+0x35/0x90 [ 76.435662][ T1736] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.441821][ T1736] RIP: 0033:0x7f4b6c98e929 [ 76.447389][ T1736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.469432][ T1736] RSP: 002b:00007f4b6d77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 76.478620][ T1736] RAX: ffffffffffffffda RBX: 00007f4b6cbb5fa0 RCX: 00007f4b6c98e929 [ 76.486916][ T1736] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000701000 [ 76.495111][ T1736] RBP: 00007f4b6ca10b39 R08: 0000000000000003 R09: 0000000025470000 [ 76.503310][ T1736] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 76.511411][ T1736] R13: 0000000000000000 R14: 00007f4b6cbb5fa0 R15: 00007fff1785bcf8 [ 76.519627][ T1736] [ 76.523035][ T1736] Modules linked in: [ 76.527408][ T1736] ---[ end trace 0000000000000000 ]--- [ 76.546787][ T1736] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 76.602942][ T1736] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 a1 88 10 2f 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 eb 4c 59 a3 90 90 90 90 90 90 90 90 90 [ 76.662928][ T1736] RSP: 0000:ffffc90005bf73f0 EFLAGS: 00010246 [ 76.669611][ T1736] RAX: 000000000000008c RBX: 1ffff92000b7ee80 RCX: e3a983511151a500 [ 76.704981][ T1736] RDX: ffffc9000cb18000 RSI: 0000000000007c93 RDI: 0000000000007c94 [ 76.719479][ T1736] RBP: ffffc90005bf73f0 R08: 0000000000000003 R09: 0000000000000004 [ 76.742986][ T1736] R10: dffffc0000000000 R11: fffff52000b7ede4 R12: 0000000000000000 [ 76.751579][ T1736] R13: dffffc0000000000 R14: ffffc90005bf7420 R15: ffffc90005bf7450 [ 76.762596][ T46] bridge_slave_1: left allmulticast mode [ 76.772770][ T1736] FS: 00007f4b6d77f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 76.782180][ T46] bridge_slave_1: left promiscuous mode [ 76.793043][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.801198][ T1736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.813229][ T1736] CR2: 0000000000000000 CR3: 00000001138a2000 CR4: 00000000003526b0 [ 76.822358][ T46] bridge_slave_0: left allmulticast mode [ 76.836398][ T1736] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000 [ 76.844792][ T46] bridge_slave_0: left promiscuous mode [ 76.850915][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.871626][ T1736] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.902998][ T1736] Kernel panic - not syncing: Fatal exception [ 76.909690][ T1736] Kernel Offset: disabled [ 76.914383][ T1736] Rebooting in 86400 seconds..