last executing test programs: 10m8.023971816s ago: executing program 1 (id=390): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) (async) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xf}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000000)=0x1) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009810004000"/24]) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x400}) close_range(r2, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r9}, @fd={0x66642a85, 0x0, r9}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000002c0)={0x4, {0x20, 0xf000000000000000, 0x8, 0x2, 0xb}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x9}, &(0x7f0000000500)=""/224, 0xe0, &(0x7f0000000600)=""/226, &(0x7f0000000700)=[0x0, 0x0], 0x2, {r8}}, 0x58) 10m7.846512669s ago: executing program 1 (id=394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4000009d, 0x0, 0x390}]}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 10m7.77843926s ago: executing program 1 (id=396): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x3f) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x28a, 0x0, 0x8000000000004}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x1c, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0xa4b, 0x0, &(0x7f0000000580)="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"}) 10m7.711661441s ago: executing program 1 (id=398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r2, &(0x7f0000001600)="d93f", 0x2) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 10m7.697505171s ago: executing program 1 (id=399): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000ac0)=""/4096) write(r0, &(0x7f0000000080)="01", 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x800, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) write$selinux_validatetrans(r6, 0x0, 0x0) r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) write$UHID_CREATE2(r7, &(0x7f0000003400)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1000, 0x1, 0x4, 0x9, 0x5, 0x7fff, "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"}}, 0x1118) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000000000000700000081000000000000000700000010000000ef00000006000000000000000000000000000000020000001606000004000000070000000000000006000000f7ffffff0000000000000000000000000a000000ffffff7f030000000002000002000000cb0200000500000000000000000000000000000007000080000800000200000000080000b0fa000003000000feffffff0000000000000000000000000b000000be0f00000400000000007440ff0100000500000086020000000000000000000000000000010000400300000001000000a3a900000300000062f500000300"/248]) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000020000004000000060010000000000000000000080000000000000008000000000000000500000000000000001000000700000048d1e3cb1f3e631ac76ec15ce55b243637ce03404ace29f5857a080c5ffd69f5dcdc55a44e1696d2f27f9f28b980000000caf27f78c9b643abfa037dd6ed3fccf0b3c5c400fac6405d2ab4ee874fc2e694c3b833dd0699859937467660c7a95179c5577088bc05bf360fc6602183346ebdaee42be6ef919a22ba5e4be13896f11c7d46"]) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000598000/0x4000)=nil, 0x4000, 0x9, 0x28011, r9, 0xc1211000) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000380)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0xe) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r10, 0xc06855c8, &(0x7f0000000480)={0x3, 0x7fff, {0x57, 0x3, 0x81, {0x8, 0xe2}, {0x5, 0x607}, @const={0x3, {0x401, 0x3, 0x3, 0x33}}}, {0x55, 0x3, 0x9d8b, {0x6, 0xc}, {0xb0, 0xfff7}, @rumble={0xc, 0x400}}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/116, 0x74, 0x1, 0x34}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000280)=@x86={0x9, 0x6, 0x1, 0x0, 0x61, 0x7, 0x3, 0x3, 0x2, 0x7, 0x3, 0x4, 0x0, 0xc, 0x89c2, 0x0, 0x1, 0x5, 0x2, '\x00', 0xc, 0x34b063a2}) 10m7.514813814s ago: executing program 1 (id=400): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kheaders.tar.xz', 0x0, 0x14) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) (async) write$rfkill(r1, &(0x7f0000000000)={0x4, 0x3, 0x1, 0xfc, 0xfd}, 0x8) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) (async) r4 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000640)={0xc0, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffd, 0x18, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0x110a}, @fd, @fd}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/223, 0xdf, 0x0, 0x11}, @fda={0x66646185, 0x7, 0x1, 0x23}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 10m6.508378129s ago: executing program 2 (id=425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c6343, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @pic={0x1, 0xfd, 0xa, 0xf8, 0x8, 0x5, 0x68, 0x2, 0x3, 0x9c, 0xfd, 0xa6, 0x91, 0x1, 0x2, 0x5}}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff}, {0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1a}], 0x101}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x80, 0x0, 0x2, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x2, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x10000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x5, 0x10, 0x5, 0x0, 0x970, 0x8, 0xffffffffffffffff, 0xfffffffffffffff7, 0x0, 0x5, 0x0, 0x8000000052f], 0xfffe1001, 0x3d4e00}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xffffffffffffffff, 0x100000000, 0x0, 0x81, 0xfffffffffffff800, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000100)={0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x6, 0x7, 0x8000, 0x800000000005, 0x2, 0xffffffff00000001, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x43a45}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x5, 0x2, 0x8a, 0x5}, {0x9d6f, 0x5, 0x6, 0x6}, {0x4, 0x0, 0x5, 0x1}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80082, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 10m5.610189533s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@arm64={0x8, 0x0, 0x5, '\x00', 0x2}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0x150001, 0x0, [0x6, 0x5, 0x1, 0x3715701a, 0x8, 0x299c0e99, 0x1ff, 0x92]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000000)={0x4000, 0x2000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r8, 0x4068aea3, &(0x7f0000000d40)={0xdb}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x5c, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x7, 0x2, 0x27}, @fda={0x66646185, 0x1, 0x0, 0x22}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) 10m5.340865187s ago: executing program 2 (id=435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x7d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 10m5.309774807s ago: executing program 2 (id=436): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x20000, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 10m5.252307528s ago: executing program 2 (id=437): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0xf9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10m5.14829513s ago: executing program 2 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_UNALIGN(0x6, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x0, 0x4, 0x8, 0x6, 0x5, 0x77, 0xb, 0x3, 0xe, 0x9, 0x2, 0x9}, {0xdddd0000, 0xffff1000, 0x4, 0x9, 0x6, 0x0, 0x4, 0x4, 0x8, 0x9, 0x3, 0x6}, {0x4, 0xeeee0000, 0x10, 0x80, 0x4, 0xc, 0xf4, 0x2, 0x6, 0x6, 0x80, 0xf2}, {0x8000000, 0x4, 0xe, 0x3, 0x5, 0x40, 0x5, 0x3, 0x66, 0x9, 0x9, 0x4}, {0x3000, 0x1000, 0xf, 0xe, 0x3c, 0x5, 0x8, 0x9, 0x9, 0x8, 0x1, 0x7b}, {0x8000000, 0x4000, 0xb, 0x8, 0x80, 0x81, 0xa, 0x0, 0x0, 0x8, 0x6}, {0xd000, 0x1000, 0x0, 0x8, 0x1, 0x5, 0x5, 0xd, 0x5, 0x3, 0x6, 0x80}, {0x0, 0x8000000, 0xd, 0x8, 0x7, 0x2, 0x1, 0x0, 0xff, 0x1, 0x2}, {}, {0x100000, 0xffff}, 0xc0010018, 0x0, 0xdddd0000, 0x1049a, 0x5, 0x8100, 0xd5c7a004, [0xfffffffffffff3e3, 0x3ff, 0x5, 0x7]}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r4, 0x0, 0x87) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa2d}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) 9m52.54533066s ago: executing program 32 (id=400): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/kheaders.tar.xz', 0x0, 0x14) read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020) (async) write$rfkill(r1, &(0x7f0000000000)={0x4, 0x3, 0x1, 0xfc, 0xfd}, 0x8) (async) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) (async) r4 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x4) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000640)={0xc0, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffd, 0x18, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0x110a}, @fd, @fd}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/223, 0xdf, 0x0, 0x11}, @fda={0x66646185, 0x7, 0x1, 0x23}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) 9m50.135215336s ago: executing program 33 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_UNALIGN(0x6, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0x0, 0x4, 0x8, 0x6, 0x5, 0x77, 0xb, 0x3, 0xe, 0x9, 0x2, 0x9}, {0xdddd0000, 0xffff1000, 0x4, 0x9, 0x6, 0x0, 0x4, 0x4, 0x8, 0x9, 0x3, 0x6}, {0x4, 0xeeee0000, 0x10, 0x80, 0x4, 0xc, 0xf4, 0x2, 0x6, 0x6, 0x80, 0xf2}, {0x8000000, 0x4, 0xe, 0x3, 0x5, 0x40, 0x5, 0x3, 0x66, 0x9, 0x9, 0x4}, {0x3000, 0x1000, 0xf, 0xe, 0x3c, 0x5, 0x8, 0x9, 0x9, 0x8, 0x1, 0x7b}, {0x8000000, 0x4000, 0xb, 0x8, 0x80, 0x81, 0xa, 0x0, 0x0, 0x8, 0x6}, {0xd000, 0x1000, 0x0, 0x8, 0x1, 0x5, 0x5, 0xd, 0x5, 0x3, 0x6, 0x80}, {0x0, 0x8000000, 0xd, 0x8, 0x7, 0x2, 0x1, 0x0, 0xff, 0x1, 0x2}, {}, {0x100000, 0xffff}, 0xc0010018, 0x0, 0xdddd0000, 0x1049a, 0x5, 0x8100, 0xd5c7a004, [0xfffffffffffff3e3, 0x3ff, 0x5, 0x7]}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r4, 0x0, 0x87) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6, 0x0, 0xa1}, {0x6}]}) (async) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa2d}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=0000001000000000000']) 7m1.654188337s ago: executing program 0 (id=3238): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000002640)={0xf97cff8c, 0x8, 'SE Linux', "0c2bfa35b9cb849e27df91af09b62055"}, 0x20) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x200001}) (async, rerun: 32) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x9) (rerun: 32) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x9) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7ff, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x804, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x3, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x3fc, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x4, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x10, 0x11b, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) (async, rerun: 64) ioctl$UI_DEV_CREATE(r4, 0x5501) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async, rerun: 32) write$uinput_user_dev(r6, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) (async, rerun: 32) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r6, 0x5501) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) (async) write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz0\x00', {0x9, 0x1, 0x101, 0x8}, 0x22, [0x80, 0x6, 0x56, 0x80000001, 0x1922, 0x2, 0x67a8, 0x9, 0x0, 0x2, 0x9, 0x8, 0x5e5, 0x800, 0x2, 0x9, 0x3ff, 0x20, 0xddf, 0x1, 0x1ff, 0xfffffff8, 0x1, 0x5, 0x5, 0x23, 0x5, 0xffff, 0xffff8000, 0xfffffffd, 0x3, 0x6, 0xfffffff9, 0x1, 0x4, 0x7, 0x2, 0x401, 0x94, 0x9, 0x4, 0x8, 0x3, 0x9, 0x10001, 0x3, 0x5, 0x401, 0x10001, 0x7ff, 0x40, 0xd, 0x1000, 0x5, 0x1, 0x101, 0x4, 0x80000001, 0x8, 0x8e, 0x6, 0x5, 0x3bf9, 0x91], [0xbd5, 0x9, 0x7f, 0x0, 0xfffffffc, 0x4, 0x6, 0x10001, 0x3, 0x80000001, 0x6, 0xfffffff9, 0x8, 0xe, 0xc, 0x4, 0x28f5, 0xc, 0x5, 0x38a5, 0xdaec, 0xd4, 0x0, 0x8, 0x3ff, 0x1, 0x8, 0x1, 0x200, 0x7fff, 0xfffffff9, 0x0, 0x1, 0x2f, 0x3b53, 0x8001, 0xeee, 0x9, 0x7b, 0x943, 0x8, 0xd, 0x29e, 0x9, 0x9, 0x10001, 0x3a, 0x4, 0x0, 0xf137, 0x4, 0x9, 0x9, 0x7f, 0x5, 0x9, 0x800, 0x1350, 0x35a29e2d, 0x0, 0x82b, 0x3, 0x1, 0x2], [0x0, 0x8, 0x400, 0x1, 0x9, 0x800, 0x8, 0x10001, 0x9, 0x9, 0xfffff98d, 0x7, 0x75e2f897, 0x4, 0x6, 0x9, 0x5, 0x8001, 0x5, 0x918a, 0xdfc2, 0xffffffff, 0x5, 0xd, 0xb, 0x4, 0x10000, 0x7, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5, 0xa73f, 0x6, 0x7, 0x1, 0x2, 0xffffffff, 0x9, 0x200, 0x77, 0x401, 0x0, 0x0, 0x1ff, 0x9, 0xd, 0x9, 0x52, 0x3, 0x8, 0x7, 0x80, 0xffffffff, 0x4, 0x8, 0x7, 0x7, 0x5, 0x9, 0x0, 0x1ff], [0x8, 0xfff, 0xe73, 0x1, 0x3, 0x127, 0x0, 0x8, 0x1ff, 0x7f, 0x6, 0x6, 0x7, 0x9ca, 0x9, 0x2, 0x4, 0x4, 0x8, 0xb8d, 0xbf6, 0x6, 0x5, 0x9, 0xfffffffe, 0x2, 0x2, 0x2, 0xff, 0x1, 0xcf, 0x3ff, 0x4, 0x3, 0x2, 0x369, 0x6, 0x1, 0x5, 0x1, 0xffffff3b, 0x8, 0x2, 0x8, 0xb, 0x1, 0x1, 0x0, 0x2, 0x5, 0x8, 0x7, 0x2, 0x1, 0x4, 0x7, 0x7f, 0xa4447459, 0x8, 0xf, 0x9, 0x8000c, 0x10, 0xc]}, 0x45c) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x2ff, 0x0, 0xb5b1}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0}) 7m1.336278002s ago: executing program 0 (id=3243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x4, &(0x7f00000001c0)=""/64, 0x40, 0x0, 0x32}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m1.114709715s ago: executing program 0 (id=3248): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prctl$PR_MCE_KILL(0x23, 0x1, 0x7fffffffeffe) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000001600)=ANY=[@ANYRESHEX], 0x7) write$tcp_mem(r1, &(0x7f0000000180)={0x6, 0x20, 0x2, 0x20, 0x8}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f0000000040)=""/106, 0x6a) 7m0.968331848s ago: executing program 0 (id=3249): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', 0x0, 0x2800, 0x0) (async, rerun: 64) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0x13}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2}) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1}) (async, rerun: 64) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x8, 0x0, [{0xa23, 0x0, 0xe28e}, {0x93b, 0x0, 0xc2be}, {0xad5, 0x0, 0x80}, {0x952, 0x0, 0x9}, {0xb66, 0x0, 0x3}, {0xb83, 0x0, 0x10001}, {0x207, 0x0, 0xa}, {0xa2a, 0x0, 0x7fff}]}) 7m0.900003409s ago: executing program 0 (id=3251): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)=@arm64={0x2, 0xb, 0x7e, '\x00', 0xfffffffffffffffd}) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0xffff0000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x80a0000, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {0xffff1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0xdddd0000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0xf}, {0x6000, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x10d, 0x0, 0xf000, 0x90, 0x0, 0x100, 0x900, [0x0, 0x0, 0x0, 0x4]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, &(0x7f0000000200)={&(0x7f00000000c0)="c964272e4e536505ec7a78433622476022405ce0fa25424e281df8333934fc03460c0fa678dc0b71359279117f2e8a0e68af04f7608c6e611658be69644dc4bb2d4ee0dfc9951db708e6814d113f4ac5f301a28ea10a6916e9cef6d724bda544d43c", 0x62, &(0x7f0000000180)=""/118, 0x76}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000340)={0x400, {0x0, 0x7, 0x0, 0x0, 0x7f}}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r10, 0x400454dc, &(0x7f0000001700)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa}) 7m0.15188184s ago: executing program 0 (id=3261): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "86fd8816fa6ebd200b07753ddb293030e64bf2027cde1261b573f3cf987871502a73fddd56a789434ee5e1936bf5351ce7cb201d3fd29ef5e830ca87038b0a6440e89dad34ee26c83e0bec20d9221170c60e998e79dbe126137e1817cac030d651aabc6469cf086fa9289289152512760aee8b4558ba5184e35811618597eec51eaf3d45c259d2d1a6c93919e1eead641864c9edcc06f6b14b2effe28696b02fd96103d81dc34050f89577fd74a385fc8db2e3fadd952e2822dc6574e1aba02998b3e5652fbfb1e52c6f8aa3605c029b45d7b57baf0ee64410ed92475851eb5bbb52db78e9a2130cc7ce6f7bac790f17e514ce31de9adb53f9106b84b7ef60a06d24deb02bb7b2e2264728284e76fc58165af2ce329bd1c0178afd0474d4222d8db68c3ffe35b737ed587fb7f47cd4bf953b54e8e64d2262f19a59d5260d0d872a1ebd826bf007bef32adaf81345facd982c1ce19373bdaacad6c19465a396c04769da629e840e8bf09760dbc26a95158157b09ee0a81517c84ad1ae421669a7c23b56a47992a57598fde2e342d1244b1ed1f4ebdbd382e5cb2911d4fbee243eee1d8601dccab18f477758c671d85531df80692a08882741cdbfd04a0ab39e3c3d4f942c661e0bc7712cdeee7daaeb1e6451fd77f1acb7a11c8453fd614da27838484785318c78d331897840ed33279d9ec86c2217eba82d12d11ed504c642b796f7b30efd7bd28cdb4277c74ae90f9f1d9de8417d198b935ce691b46d2663ae98194dc1bca8e7b53c849cff36a075a91b9fb0216fe16a10c54696b7cae4692cce3ab4373c34edb649c61e1c04d27dfc90131761ffc7a5ba020c11df1925d080ca204217505194c8b240149cbd96d47c0c396c5641b1e5c4ffe467f95334babf887e35074569ec63fda9de3ca378325173e258967617888ea56285e56e4c356433bc7e29d9029bc0f0b74aebf70c5fea4c87abffddbdf0c40e5f8f2286a2afa7db9be4d3f911f7d0696049e56f1d2aa92bc894ede6b8a2ee1f828e63866c6f0acda196bfd0c37e5e6a569e34eb0fb1badd0136138b283ec402306cffd69d6200fea2a08ae6573ca0c289cf92798ac3d06979f191a42ba3f56940b75972ea12a752020218002effb702e789f2106fc2a8854d94fdcfa2ecf8a3cfcbf55022fb30fcf6179ac383ed31df35c14331dafb4e419c6b93d21888e6c6b54ad60c6572eb216ec44319b2aacc012b356056167de6dbbcef74b32212ac52af458870e0c3623398796a8bf8e8d31c7f9b5b7527f450fadd671c5567cbdefd567f054ab0ff5c6f3065c4867ed67bb8805a992b6819cd91509e129d97ac6697b14caf8e8dcca65327e94a84eb49e15b6e3b518c1bb730fe8c3ac57c0f28bf1a3a0e8cfcd8c4ece4826d0d7f8c2d3aec0266d035aab78edbc28c719252a849887b2a9923104d9fd7630312dd3cb8863b5af7ded82bce428068cda9120d99096093d3d94617c60020fda658afaff31521472f35035d0877f94f79f3c4b8cf1c3c56e4eb3fb3e8faf1ccd3c68a48751e821b0fb82878bf9af869192e856bb0ff03fe0ac60974919246f5ab680fa4a463293e7c94c01c048f880aaf425ca54506b292e0a287b9c415ff287eab1d9ad74f30efae7b29e68ade01e3b9e94cf609ae1ab3376640df54c28aaf14a350421d15a41c7383d7c8ad90708792648c2c38d988ca6074befbe9e3eed467ee6331605ea7ab4e0a45630ad9e0c07e2afc6ab049c5c2678f8647da3faf33947f2e69732569f977b2042e2938ce3d18e325081ad39c72e7d51c6a0feb4a5aec66732e139901d26722a582fa9a268363e0d0ce00c6e5ca7c7e8087d2aadd653bc7bb0add036aaa7943f670c1f2c9b4eb8c10529e1397afabb6a17368d6188f0e49b742173a72da8bd0fbf06dc5fc27e05eefc80c774fee1ae6568a79be3d99f3ff86c20c7389d2908351cd45fa0c38864f94b3990da4e097ee7fd2c456918a22b0705b5d48ed3c84f11249624a6394254d4e0a937b1efce4ff9e251686d5187d7c6c3928e8e4dcf668403c2d955ef643e6bcd929e4caeff27fe949b3cefe35caac1636f83a04bd2ab68a3be2c4a0de491a1176ddb30dec34bfea09c53d715a2a0a23e53dcdc8611eddb67a97d51c164fe9e6fa47717ce8fec263048b996834019f62fb84d254f70b133d3638a13be96d89fe2095aa4b4d81f5b072284ec110cde7cc19af5c34211c099937b8d137172bb8d6e4caf83e7936751cbb5ca57436c26b183d8c8b15fe80e06058014498a501a19c5f8c9fb69d74afe048904428ff3abe9ba74f48d246ccf21124cdfa270a43060d1fcc6c065dabd69b18cd65f8b29036ff87c8bb55d4169a4c884abda60b7de76840779a9fd228c4a4fa445317365bb096c42915962db50d785dbf0ff0ee4703e81c392be6efa300ddd2ce748a0a5f528b613d52224784b29cedd93bd9ae7726515c3dabcde560b2704f51e2ed1f8967b5e9c50ea3bc685da575e7c6212b4376002c935880ffc85fbc0b3c228431baa02c0410ec8def6cd58a1094fc21fb988dcb9ad40c9cb46cc90f271a2775a2d8d1bb5f7e3c569a58c758ba4c080e3f3bc9517d63751f9cb0a25074766704cb975a214a0a33f1b62b3aa346f32be38d1ae873321129fefdd39d4b70434c9e850c75d0aff98e711dbf1a31dbe3b6c78ce00a8c9c6e35134ec54c79e4cfaa6062d1fe10ea2336177fa0a2475c0a971ae43ea0899e9b606b008ab70db45e624db454342a807bea742ba323b411bf407bf7954a79a33c7804b1130b98f11bfda9e3eecdc5f48fc3fd7773f4cd23cddaac115af305246ee133b935038560446bc5fb5ee882afa52be752d772fcd299b477136dd8714864e30a88bc0682bcfcbcdf9ea8afb0281578347668089beaa19b19c717777a55e8dbdc806f551f3ddf9332eca8afc4c4d4d9cac76bf605f1ecba05bfbde94798138c298a5942d01ef7bd63394a5eae8f4a2bd73e79671de84a937e54b57e5469bb861cef788e3e2fe05c5fe42c7ce4f7056521091011d384117e350c0f0b95655944dbf2136f8d5a2aa4c79574ad243cf9a25630585e8432b606c28b1ba8e2dbe261af4df5bc5ea3027ecddd4f56dd1629b05eebe1eb0f0ff8f7084e55f094b61f3287e9da846c4456e840b5b630f2c8eb0ebfd1a3253065ec4307eceafbed91619620a94e0e0c9b89c58c3c48597bcddfc4b54a54828ccf1dea7643e3c729fa4944fd0f167b6d4025b0ebd2c3039c9b5efb11bf95346342ccecab26a290ccea54fc67d87746db6a5e2ba5781aa2d8b7a80b2260330b43f978b941a913fa0b016fa2bf2a7adb4556d4dada8f2672d30ca6b64891e8ffb8b7e518e8a6af4a8b42e7ca2b9f9d3572590bcec439f5e1826555487588c5029fd32b0158f872f816b804a2198dd31f38edab87210dddca6a13a2afde33b96c29d96339e4025fc52a87b2183f06d3a8d3fa9abbd25ae53cf2ec0fd417db87980352cfe60ce8c5c389ee3f27ad31882c5b535b977d14c3269f8d44904f46030c604ffb1e7521bf42cc60fdff5d841e1d0aff0f4ca6d9eafbe510c87816c14c956b1732a3aacbdcd1f7162d4ac540016136ea326b9fcb780d47a5e4be70a133ca8d2d80a0a8801d3ca6d81463ac25ca2d267f4075d099f468845cad5173dbcc4569a8440a3dff6c20c74799dcc55864b96b87643eb5a09295a9b02c57f4969d76aedf0b4bee476798bb37f0b13e04976bbbb474c4b790566073a0bb1c4193a8381f13f52496dbb06f376b4032c9e5dde5407f665ded00a736bceb92ce698584d81125a8b146def724627e9fcb3a38768a8a2196c6722e610e5574b28a57b86df0911d8d180f88d83aa5ae722bc38f69c6c8e3ae2eca3864a9ba8e546131be435bb06dd291a38c20598bf9d2208362b690678af4c3b3e9cee37fc503532fb5e3a24fc006d2d8c182cdd6c87177c50b7daa396e960080f921bae721c78c36a62b11712fe23ab9f5bc0cc466d76ba74a259f0fe416c1565eb0100492e6d4344f4bfa9213c24762ba94e1fae6f2cdfbc2ead9e0f26ed1468559e7eda60b4f2619daf0898972db819868bc8ff3f52a670a120bb7d48ff61eb14a033319320170d339fbae88a120eb5a21224ac79c23f4b9da83a37e3f9b9cb07e8827e0776293fcf021deb938a80700fab3382c8d51f9e461ca2fe5ff82416d50ca310934e85c22372f416f3a7f6d2279ed503c3fdd29f4eee04a9cec5252046a5a9ffbf6e8b38992099af3e406263d307b62bf306eef04dd7c485cf5f49f80568b6c2ea9b1543dcfdf69cbc3d8c613aff96a32de425a025eb79de97bd92cbdfd75b9e59c88524da480fc0854a2e946bcaba9274875bdbed38765ccc65f4f7d1b5c9a08f726b2ab5785ef0b028be215a17d7002914358536d55faa25f68214db67af1c25f098e475755f01396189d235650fe1bf1d08f287a10dbbbf411a7f9a5af6173b165cc9ad59f38387537773ceef1dc477ddf273b01607beefe71b9dfc2a67ff71910fec1fe432ce8887d9b08d045cfc0bc3cbbf7b55ca843f7ed489a96a464658382e8975a0fa93b31edc9a8050c0221ba73edf48ef3e3b634f210c382ed8e0b598171d22d0ef43fc1822d0274a1c6df2dc0cd916ed2880051d207ce73ed67f58e9af373ddeea1f10d3cd296a5b9090cf9e3e9cbc75901009136072821046e1dbc35fbc8f3efd42a028b6104f7a3232c106018bc146c64ab361fda4df07739fd887a33001a84f5375e69eb70d7a7556c297a89683bbf10e3cfb675b1f921437455c1f83cf5bd160074372aa31a8c42623a24140cf291c487141712bede3d71c6a72877bb39ec3fbef6ae076306691638df59b0f13ae5844ff9cb95284cf384c21bb22e723593733e36602c4ec0bc8c72c515d2e89bdf369ab9cf02f4f0beecdb10e35595e83fe51b1f7985b0562697598fea8cfaa212e43832509f14ac392634232b4726f03c7c85d6204c32e6ccb42b2e4e3a4b55d08c33da5d33ab8b9b823d42c0bcbeb24c8bc1a958d30281ac1af547877e553e0dd4a1734ea92361d6c33ef4560621fa09c93c80ff5881157141adfbe62aeaa83d8cc17d5490cb5f979e1915c4e9aac6ae6049b25d5d0bc95236696b787e107d63e0ea2bfdea42fb43d5fe1e7eb75847a58ad4bc95c924aa635322b7afc456f392a692d9a1f52718d472dfeb8d72b88def991929fd5dcf6a8765ba3b65e74a429eb9061d462c22bfa0720e5f9104087629f186dbdbe036a5bdf5160574059cc82f35d2a757aee2c9b17feb7b545c2a3d8cf3ccb356f35945efdadeaca00bd0a6c4fada2dc6722b60b89a49bf5b85619adb4a5970a98d8e058881a3134b6648866b2a7af690ff0ed865c4ce3b2d10388f82b815b1756604f15b5c3e79fdb8721a5b9082aff2f26aa6e5119d772f1fd965e749068f3df7ae3063f87db1e14b9415debffe2e91c2db6fa37d9a2f6cb857f89c7c4d43aa57046d2677cbdae256587c4fafb11bb92bd0f93148c4045fec5cff1e54ee26fe948ffb0550cfe208497fb249a61c0ac4bdea2819811057b277b746c8bda91e3ba6edcb3b00833f034a8625f19ad038044b4d46a385ed346e6601cf38d6176f09b603c9150d9c88e9f940c7870dc03d508dd958e9314bd7feb1fb59df30aa0ad1fbc96f0b14b9108f614fbc021308e4c515d197b7b58106235c44bce682f1893429799577f079a26f4dbf471e2b432406d2d981894a9d5542be9cdbf9a960db22dfc0cb65d88ae30e"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001080), 0x204000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000010c0)={0x0, 0x6, [0x1fd, 0x3, 0x2, 0x9, 0x1e, 0x6]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001100)={{0x8080000, 0x5000, 0x9, 0xd2, 0x4c, 0x6e, 0x4, 0x6, 0x55, 0x1, 0x5}, {0x80a0000, 0x5000, 0x9, 0x7, 0x1, 0x8e, 0x2a, 0x0, 0x3, 0x0, 0xfb, 0xa5}, {0x4, 0xdddd0000, 0xc, 0x6, 0x4f, 0x7f, 0x2, 0x3, 0x7, 0x8, 0x0, 0xe}, {0x18081001, 0xdddd1000, 0x9, 0x2, 0x8, 0xd, 0x8, 0xf9, 0x0, 0x9, 0xa5, 0x7f}, {0x5000, 0xeeee8000, 0xe, 0x8, 0xb6, 0x9, 0x4, 0x5, 0xb5, 0x4, 0x6, 0xfa}, {0x100000, 0x2, 0xd, 0x7, 0x65, 0x9, 0x0, 0xe, 0xa, 0x4, 0x2, 0x5}, {0xeeef0000, 0xd000, 0x0, 0x5, 0xfd, 0x3, 0x7d, 0xa, 0x0, 0x51, 0x8, 0x1}, {0xf000, 0x10000, 0xd, 0x1, 0x2, 0x9, 0x7, 0xb, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x6}, {0x1, 0x1232}, 0x40040022, 0x0, 0x8000000, 0x200000, 0x0, 0x4000, 0xed095735b75f8ca5, [0xd84, 0xb7, 0x2, 0x4]}) write$selinux_create(r2, &(0x7f0000001240)=@objname={'system_u:object_r:watchdog_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xc4, 0x20, './file0\x00'}, 0x62) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001340)={[0x8, 0x2, 0xf, 0x12, 0x0, 0x3, 0x39, 0x8, 0x5, 0x100000001, 0xa, 0xf2, 0xfff, 0x81, 0x1, 0x38000000000], 0x2000, 0x2}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001440)={"06af750954d10b88d5182f8801ffff42", 0x0, 0x0, {0x4, 0xffff}, {0xf, 0x2}, 0x8, [0xff, 0xf98, 0xfffffffffffffff7, 0xc40, 0xfffffffffffffffc, 0x81, 0x1d3, 0x10, 0xfffffffeffffffff, 0x494, 0x10, 0x369, 0xfff, 0x81, 0x7, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001540)={"4f7a45cd90a6c14ee9cce41b406db1bd", r6, r7, {0xffffffff00000000, 0x7}, {0x1ff, 0xfc}, 0x720f, [0x7fffffffffffffff, 0x84, 0x6, 0x8, 0x6cc, 0x6, 0x1, 0x3, 0x2, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0x3ff, 0x8, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000001640)=r8) ioctl$FITHAW(r1, 0xc0045878) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000001680), 0x200001, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000016c0)={[0xfffffffffffffffb, 0x0, 0x4, 0x4, 0x9, 0xc64, 0x4, 0x2, 0x5, 0x7, 0x8, 0xa, 0x7, 0x2, 0x7, 0x3], 0xdddd1000, 0x80000}) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000001780)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000003800)={0x4, 0x0, [{0x9d2383afaefc6dc4, 0x0, 0x1}, {0x321}, {0x9e3, 0x0, 0x7}, {0x8b6, 0x0, 0xa7}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000003880)=@arm64={0x7f, 0x9, 0xe, '\x00', 0x5}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000038c0)={0x6, 0x1ff, 0x1, 0x1, 0x9}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000003900)) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000003940)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000039c0)={0x5, 0x0, [{0x9e8, 0x0, 0x6}, {0x871, 0x0, 0x7}, {0xbdb, 0x0, 0x7}, {0x87a, 0x0, 0x4}, {0x937, 0x0, 0xa0}]}) 6m45.104371407s ago: executing program 34 (id=3261): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "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"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000001080), 0x204000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f00000010c0)={0x0, 0x6, [0x1fd, 0x3, 0x2, 0x9, 0x1e, 0x6]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001100)={{0x8080000, 0x5000, 0x9, 0xd2, 0x4c, 0x6e, 0x4, 0x6, 0x55, 0x1, 0x5}, {0x80a0000, 0x5000, 0x9, 0x7, 0x1, 0x8e, 0x2a, 0x0, 0x3, 0x0, 0xfb, 0xa5}, {0x4, 0xdddd0000, 0xc, 0x6, 0x4f, 0x7f, 0x2, 0x3, 0x7, 0x8, 0x0, 0xe}, {0x18081001, 0xdddd1000, 0x9, 0x2, 0x8, 0xd, 0x8, 0xf9, 0x0, 0x9, 0xa5, 0x7f}, {0x5000, 0xeeee8000, 0xe, 0x8, 0xb6, 0x9, 0x4, 0x5, 0xb5, 0x4, 0x6, 0xfa}, {0x100000, 0x2, 0xd, 0x7, 0x65, 0x9, 0x0, 0xe, 0xa, 0x4, 0x2, 0x5}, {0xeeef0000, 0xd000, 0x0, 0x5, 0xfd, 0x3, 0x7d, 0xa, 0x0, 0x51, 0x8, 0x1}, {0xf000, 0x10000, 0xd, 0x1, 0x2, 0x9, 0x7, 0xb, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x6}, {0x1, 0x1232}, 0x40040022, 0x0, 0x8000000, 0x200000, 0x0, 0x4000, 0xed095735b75f8ca5, [0xd84, 0xb7, 0x2, 0x4]}) write$selinux_create(r2, &(0x7f0000001240)=@objname={'system_u:object_r:watchdog_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xc4, 0x20, './file0\x00'}, 0x62) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001340)={[0x8, 0x2, 0xf, 0x12, 0x0, 0x3, 0x39, 0x8, 0x5, 0x100000001, 0xa, 0xf2, 0xfff, 0x81, 0x1, 0x38000000000], 0x2000, 0x2}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001400)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001440)={"06af750954d10b88d5182f8801ffff42", 0x0, 0x0, {0x4, 0xffff}, {0xf, 0x2}, 0x8, [0xff, 0xf98, 0xfffffffffffffff7, 0xc40, 0xfffffffffffffffc, 0x81, 0x1d3, 0x10, 0xfffffffeffffffff, 0x494, 0x10, 0x369, 0xfff, 0x81, 0x7, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001540)={"4f7a45cd90a6c14ee9cce41b406db1bd", r6, r7, {0xffffffff00000000, 0x7}, {0x1ff, 0xfc}, 0x720f, [0x7fffffffffffffff, 0x84, 0x6, 0x8, 0x6cc, 0x6, 0x1, 0x3, 0x2, 0x3, 0x0, 0x9, 0xfffffffffffffff8, 0x3ff, 0x8, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000001640)=r8) ioctl$FITHAW(r1, 0xc0045878) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000001680), 0x200001, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000016c0)={[0xfffffffffffffffb, 0x0, 0x4, 0x4, 0x9, 0xc64, 0x4, 0x2, 0x5, 0x7, 0x8, 0xa, 0x7, 0x2, 0x7, 0x3], 0xdddd1000, 0x80000}) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) ioctl$BTRFS_IOC_SYNC(r5, 0x9408, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000001780)={{0x0, 0x0, 0x80}}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000003800)={0x4, 0x0, [{0x9d2383afaefc6dc4, 0x0, 0x1}, {0x321}, {0x9e3, 0x0, 0x7}, {0x8b6, 0x0, 0xa7}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000003880)=@arm64={0x7f, 0x9, 0xe, '\x00', 0x5}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000038c0)={0x6, 0x1ff, 0x1, 0x1, 0x9}) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000003900)) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000003940)=0x8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000039c0)={0x5, 0x0, [{0x9e8, 0x0, 0x6}, {0x871, 0x0, 0x7}, {0xbdb, 0x0, 0x7}, {0x87a, 0x0, 0x4}, {0x937, 0x0, 0xa0}]}) 4m59.764352415s ago: executing program 6 (id=4870): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x82) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 4m59.680519077s ago: executing program 6 (id=4872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) 4m59.570503089s ago: executing program 6 (id=4875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, 0x0) syz_clone3(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000092000040"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1181, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x2a, 0x6, 0x0, 0x8, 0x7, "744864ff9af294fde8318eb4454cea6b39b6d8", 0xffffffff, 0x40}) write$vga_arbiter(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="6c6fe83020086f00"], 0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 4m59.197550284s ago: executing program 6 (id=4880): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x2406c0, 0x0) (async, rerun: 64) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) (async) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000640)={[{0xe00, 0x9, 0x9, 0x2, 0x7f, 0x1, 0x2, 0x5, 0x4, 0x9, 0x9, 0x1, 0x2ba7bfe9}, {0x1a, 0x3ff, 0xe6, 0x4, 0x4, 0x0, 0x9, 0xf0, 0x9, 0x9, 0x8, 0x0, 0x4}, {0x800, 0x5, 0x46, 0x80, 0x2, 0x6, 0xfa, 0x9, 0x3, 0x5, 0x0, 0xc, 0x6}], 0x1}) (async) read$FUSE(r1, 0x0, 0x0) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (rerun: 32) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 4m59.000379977s ago: executing program 6 (id=4882): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper={0x40086303}], 0x0, 0x1000000000000, 0x0}) 4m58.944385108s ago: executing program 6 (id=4884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x24, 0x0, 0x0, 0x179}, {0x6, 0x0, 0x0, 0x4}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x40, 0x9, 0x0, 0x5}, {0x0, 0x4, 0x6, 0x6}, {0xc007, 0x80, 0x6, 0x4}]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000180)=[@acquire_done, @register_looper], 0xcf, 0x0, &(0x7f0000000240)="d0520c526b605505bfd514bb8a0f5b9372551a8c4da251fc58912976576c4d9a366a6f5ccdbf45fd8dc0ea41074e755614275aa912b32bd59076f2c6ecbe50f637de425da433c1e18dc5f94e1abc1cb4f848108c12d50a6924140e5caf383d3f5602b294d88050be4284db636a9d8ff8ac7eccbfc25bf3bb8dfb02454dcb5f914ac8dbe90c78f3d28bff06135835c657dc1dc5151be11940aab321d7ca955447862e1156143c55039488a36b4cc3a9e01c0d9e3c9d5836837221814fd0863e0d272c26fb74755989c08bd1999e927b"}) 4m43.879812115s ago: executing program 35 (id=4884): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x24, 0x0, 0x0, 0x179}, {0x6, 0x0, 0x0, 0x4}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x40, 0x9, 0x0, 0x5}, {0x0, 0x4, 0x6, 0x6}, {0xc007, 0x80, 0x6, 0x4}]}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000180)=[@acquire_done, @register_looper], 0xcf, 0x0, &(0x7f0000000240)="d0520c526b605505bfd514bb8a0f5b9372551a8c4da251fc58912976576c4d9a366a6f5ccdbf45fd8dc0ea41074e755614275aa912b32bd59076f2c6ecbe50f637de425da433c1e18dc5f94e1abc1cb4f848108c12d50a6924140e5caf383d3f5602b294d88050be4284db636a9d8ff8ac7eccbfc25bf3bb8dfb02454dcb5f914ac8dbe90c78f3d28bff06135835c657dc1dc5151be11940aab321d7ca955447862e1156143c55039488a36b4cc3a9e01c0d9e3c9d5836837221814fd0863e0d272c26fb74755989c08bd1999e927b"}) 2.421863983s ago: executing program 4 (id=9064): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2.204852346s ago: executing program 4 (id=9068): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000dc0)={0x2, 0x0, @ioapic={0x1000, 0x7, 0x2, 0x80009, 0x0, [{0xe8, 0x2c, 0x5, '\x00', 0x7f}, {0xf, 0x5, 0x75, '\x00', 0x2}, {0x1, 0x7, 0x4, '\x00', 0x6}, {0xd3, 0x8, 0xf7, '\x00', 0xf}, {0x57, 0x1, 0x19, '\x00', 0x29}, {0x0, 0x3, 0x54, '\x00', 0x2}, {0xa9, 0x40, 0xd, '\x00', 0x7f}, {0xf, 0x1, 0x1, '\x00', 0x9}, {0x9, 0x7, 0x1, '\x00', 0x1}, {0x7, 0x3, 0x80, '\x00', 0x6}, {0x80, 0x9, 0x7, '\x00', 0x73}, {0xb0, 0x6, 0x0, '\x00', 0x1}, {0x27, 0x1, 0x0, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x54}, {0x2, 0x3, 0x6, '\x00', 0x7}, {0xef, 0x8, 0x10, '\x00', 0x2}, {0x0, 0xe, 0x0, '\x00', 0x33}, {0x0, 0x4, 0xd, '\x00', 0x2}, {0x93, 0x79, 0x0, '\x00', 0xc}, {0x9, 0x0, 0x40, '\x00', 0x9}, {0x92, 0x8, 0x3, '\x00', 0x7}, {0x4, 0x80, 0x6, '\x00', 0xc3}, {0x5, 0x2, 0x4, '\x00', 0x3}, {0x8b, 0x5, 0x0, '\x00', 0xea}]}}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000000)={0x0, 0x5}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) close_range(r0, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f0000002140), 0x40, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) mmap$binder(&(0x7f0000703000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x3ad2400000000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ(r11, 0xaea2, 0x0) 2.000201129s ago: executing program 3 (id=9071): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10, 0x1, {0x52, 0x8001, 0x7f2, {}, {0x2, 0x5}, @const={0x7, {0x100, 0x959, 0xf3, 0x8}}}, {0x56, 0xbd94, 0x45, {0x4, 0x6}, {0x4, 0x610}, @rumble={0x134, 0xea}}}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001c00)={0xafd, 0x8000000000000001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000040)={0x1}) 1.720139694s ago: executing program 3 (id=9074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x26f, 0x0, 0x4f4d0b14}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 1.541918296s ago: executing program 4 (id=9076): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x3, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd837, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101}) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xda6, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200a82, 0x0) 1.144130242s ago: executing program 4 (id=9080): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)={0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x50, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(r3, 0xff09, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000280)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000000380)) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000000)={0xffff1000, 0x8000}) syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, &(0x7f0000002980)=[0x0], 0x1}, 0x58) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 1.056337964s ago: executing program 7 (id=9081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x8000, 0x8000, 0xd}}) write(r1, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3e5040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4188aea7, &(0x7f0000000080)={0x2, 0x0, [{0x2, 0x0, 0x0, 0xe57}, {0x1, 0x0, 0x1, 0x159c2, 0x4}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x80010, r2, 0x36df9000) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0xbc) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x8ffffffff) r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, 0x0) close(r0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x7f3) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x480, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r11, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0xb) ioctl$KVM_CAP_X86_DISABLE_EXITS(r10, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x7fa8c000) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 849.708917ms ago: executing program 7 (id=9082): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'bridge_slave_1\x00', @remote}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000040)={0x626, 0x80000000}) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x6, &(0x7f00000000c0)="650d8d85d7d6", 0xc2, 0x0, &(0x7f0000000180)="cce554b1dc4ac99497dd1eebbc9ef1cc2f26dfff42252ec9ad5dd28b0fb7537e18caef75f6920d0411dc1067699cfedc14bfa2015241f3b2cd7bbb82913675812b3605c2ddb5692aefc80332c87ac077f1c56fbe96073efc4df504bc367f605a9f95849f3d0369acd68fc5e9cdd214a18d2366bc433636f45b798bd08c8883cc69dd15260f2c2d07a6f315fd0ad71dbbceb96f036d5376ccbd58abaa4dc06693268637717e834db7177d5141ba55442d768fe136a0206d4622ce91d1ff0b18ec5463"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae09, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000d3936f5cd62d58355f9e008b010000000000000000000600000000"]) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0xc000, 0x79) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) read(r1, &(0x7f00000004c0)=""/92, 0x5c) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000100)) 772.221548ms ago: executing program 5 (id=9083): prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) (rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 64) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 64) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_SVE_GET_VL(0x33, 0xfc32) (async, rerun: 64) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 64) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) (rerun: 32) prctl$PR_GET_CHILD_SUBREAPER(0x25) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async, rerun: 64) prctl$PR_GET_CHILD_SUBREAPER(0x25) (rerun: 64) 771.758598ms ago: executing program 4 (id=9084): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x1, 0x100000001, 0x800000000, 0x3b, 0x0, 0x7, 0x2004cc, 0x5, 0x5b, 0x0, 0xcc2f117, 0x3, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, 0x0}, 0x10}], 0x5e, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07"}) 771.338898ms ago: executing program 3 (id=9085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad84305"], 0xffdd) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="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"}) 723.855759ms ago: executing program 5 (id=9086): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x0, 0x15ce, 0x80}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCFLSH(r4, 0x40045431, 0xfffffffffffffffd) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9250) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9250) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 653.93964ms ago: executing program 5 (id=9087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x27) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x400000f, 0x50, r1, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f00005b0000/0x2000)=nil, 0x2000, 0x1000004, 0x30, r1, 0x4c9bb000) 653.54199ms ago: executing program 3 (id=9088): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000), 0xa) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) read$FUSE(r2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r6, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000540)=0x10001) ioctl$BLKRRPART(r4, 0x125f, 0x0) 568.232051ms ago: executing program 4 (id=9089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0x4008af20, &(0x7f0000000a40)={0x0, 0x1, 0x0, [0xff, 0x7, 0x68b, 0x3, 0x401], [0x71bf62aa, 0x7fff, 0xffffffff, 0x5, 0x81, 0x81, 0x7, 0x8, 0xf841, 0x8, 0x101, 0x8, 0x4007, 0x7, 0x9, 0x7, 0x100000001, 0xdb6, 0x6, 0x9, 0x2, 0xba, 0x3, 0x7, 0x6, 0x3, 0x7f, 0x8001, 0xfffffffffffffff8, 0x4, 0x4, 0x1d, 0x10000, 0x2, 0x0, 0x6, 0x2f8, 0x3, 0x100, 0x10f9, 0xfff, 0x5, 0x9, 0xfffffffffffffffe, 0x100000000, 0xb, 0x100000001, 0x7, 0x3d, 0x10, 0x6b0, 0xee0f, 0x1, 0x3, 0x9de, 0x0, 0x7b2, 0x18000, 0x8, 0x6, 0xd, 0x8fe, 0x0, 0x100000000, 0x0, 0x7, 0x4, 0x1, 0x5, 0x5, 0xa9a, 0xffff, 0x80, 0xfffffffffffffab6, 0x3, 0x4, 0x7, 0x4, 0x974b, 0x6, 0xff, 0xfffffffffffffff8, 0x36, 0xed6, 0x9, 0x9, 0x2b2c891e, 0x9, 0xffff, 0x3ff, 0x1ff, 0x0, 0x2, 0xee, 0xa20, 0x4, 0x80, 0xfffffffffffff000, 0x0, 0x1, 0xffffffffffff7fff, 0x6, 0x0, 0x8, 0x4, 0x4, 0xeb51, 0xcdf, 0x6, 0x5, 0x5, 0x7, 0x2, 0xca96, 0x5400000000000000, 0x1800000000, 0x7fffffff, 0x6, 0x8, 0x8, 0x6]}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x205d) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000803d44b10400000000001000"/30]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01df1c00a0b964becafc9661000000000000"]) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[]) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x1, 0x6, 0x5}}, 0x30) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r13, 0x4004ae8b, &(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r5, @ANYRESDEC=r9, @ANYRES32=r7, @ANYBLOB="54aa445aabb7733f17dd2c2772586f0ae5f7acb0e5fafb3485ea941d8fdaed7b6c107846bce7e60ed9029c762d345e03a7b20045c882a5c71013d95f8848ad8e152e56b6402b55b474856f1096194a5a6f69ce840a65a7ffb4620ab28fbf63b2e06041848e2634bcd28b538a004da6321375dc182c5948a190bd2c66998ffb69015939e0a07576e32f027aa6aa58979de14fbb7653b6a172a1f75e2f27a7dd88593bfff922bfb80ca773987bb069a05d05e701cda68f53763ab8ddfde816f4414c467649b7bb2168656d4179901001f2fbb4ac320e3b29ccc5b4e42fdbca9a45ac2d8d168b", @ANYRES64=r11, @ANYRESDEC=r10, @ANYRESOCT=r8, @ANYRES16=r7, @ANYRESHEX]) prctl$PR_SET_MM_EXE_FILE(0x53564d41, 0xd, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) ioctl$KVM_RUN(r16, 0xae80, 0x0) ioctl$KVM_SET_PIT(r15, 0x8048ae66, 0x0) 567.463081ms ago: executing program 7 (id=9090): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x3, 0xbf, 0xb8, 0x3, 0xf, 0x5, 0x6}, {0x804, 0x5, 0x1, 0x5, 0x7, 0x2, 0xff, 0x5, 0x9, 0x4, 0xb, 0x7f, 0x3}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x70, 0x3, 0xa, 0x400000000006}], 0xffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 567.305521ms ago: executing program 5 (id=9091): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1000, 0x8000000001}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 503.997112ms ago: executing program 3 (id=9092): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000f4ffffff88d7c633b3faf1dbdcb335ef0c2e0200000000000000536a004e63727be5"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000040)={0x7, 0x6, 0x1, 0xe4e, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100a, 0x3}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000480)=ANY=[@ANYBLOB="0100f80000000000004005000000000000000000e0c52ebf3076aac87495e9e5f46c3f8ecd3d2c792b9cb8e2a888ca81e40b1c5d194f6a2eba56dc1eb33bd9a9220add8f3cd6d6d9f199b7e95149de75cd04ec1a693b215d5759dc8ddd1aadcbf980c813d459ccd6552ace5532f7d12e330fd3c756bad91ccbb32014a29c6042fc3578d175aedf25535dd4cf0801e81015a25fe373c19aa467c8b0b3d40dccdf0c0a162eca499d9329740c905270b221aeeb70a93a78a228c197417e0dc297475026c105086f150b131659a4d400d76841b23216dd71f893111ce823844540cce7f3be6ca4c0db"]) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 465.061083ms ago: executing program 7 (id=9093): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x4000003, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000000002"}) ioctl$TIOCGPTPEER(r5, 0x5441, 0x786d) read(r5, &(0x7f0000000100)=""/147, 0x93) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 224.282737ms ago: executing program 5 (id=9094): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 207.258697ms ago: executing program 5 (id=9095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x2000, 0x2000, &(0x7f0000115000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000500)={0xc0, 0x0, 0x4000}) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000180)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) 103.440828ms ago: executing program 7 (id=9096): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000006) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)=0x7) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x184}, {0xa, 0x2, 0x3}]}) (async, rerun: 32) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x100000009, 0xfffffffffffffffd, 0x2, 0x10000, 0x0, 0x4002004c4, 0xfff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x2, 0x2, 0x8e], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000002400)={0x80, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0x3d}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @fd}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x2}, @request_death], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) (async) ioctl$TUNSETVNETHDRSZ(r6, 0x800454e0, &(0x7f0000000140)) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0xfec1) (rerun: 32) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x8000) 220.65µs ago: executing program 3 (id=9097): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x8c8ddd2}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x12fe) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (async) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x700, 0xfdef) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x208000000000002}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000100)={0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1, 0x0) 0s ago: executing program 7 (id=9098): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009702"]) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 586.679055][T27158] rust_binder: Error while translating object. [ 586.679108][T27158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 586.680016][ T36] audit: type=1400 audit(1750409603.070:119033): avc: denied { read write open } for pid=26566 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.727978][T27158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:137 [ 586.780677][ T36] audit: type=1400 audit(1750409603.070:119034): avc: denied { ioctl } for pid=26566 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 586.840717][ T36] audit: type=1400 audit(1750409603.090:119035): avc: denied { read } for pid=27153 comm="syz.3.8121" name="binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 586.900307][T27165] block device autoloading is deprecated and will be removed. [ 586.922119][T27169] audit: audit_backlog=65 > audit_backlog_limit=64 [ 586.935348][T27169] audit: audit_lost=525 audit_rate_limit=0 audit_backlog_limit=64 [ 586.943740][T27169] audit: backlog limit exceeded [ 586.945425][ T36] audit: type=1400 audit(1750409603.090:119036): avc: denied { read open } for pid=27153 comm="syz.3.8121" path="/dev/binderfs/binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 586.949150][T27165] syz.4.8125: attempt to access beyond end of device [ 586.949150][T27165] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 587.008225][T19879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 587.227260][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x7 [ 587.236594][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 587.247725][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 587.257424][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 587.266638][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 587.276089][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 587.284489][ T31] hid-generic 0000:0000:0000.0027: unknown main item tag 0x6 [ 587.293555][ T31] hid-generic 0000:0000:0000.0027: item fetching failed at offset 30/32 [ 587.303266][ T31] hid-generic 0000:0000:0000.0027: probe with driver hid-generic failed with error -22 [ 587.348868][T27186] geneve1: tun_chr_ioctl cmd 1074025672 [ 587.378971][T27186] geneve1: ignored: set checksum enabled [ 587.546709][T27198] rust_binder: Write failure EINVAL in pid:382 [ 587.566077][T27200] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 587.591843][T27200] rust_binder: Write failure EINVAL in pid:40 [ 587.963420][T27214] binder: Unknown parameter '' [ 587.975212][T27215] binder: Unknown parameter '' [ 587.985167][T27214] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 587.992754][T27214] rust_binder: Write failure EINVAL in pid:1845 [ 588.026691][T27217] rust_binder: Write failure EINVAL in pid:1848 [ 588.498532][T27241] kvm: user requested TSC rate below hardware speed [ 588.530548][T27241] __vm_enough_memory: pid: 27241, comm: syz.4.8148, bytes: 9223372036854775808 not enough memory for the allocation [ 589.076660][T27260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:396 [ 589.251675][T27267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 589.261280][T27267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:180 [ 589.414016][T27274] rust_binder: Error while translating object. [ 589.423576][T27274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 589.430838][T27274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 589.503767][T27280] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.705954][T27288] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 589.814347][T27292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:190 [ 589.851867][T27291] rust_binder: Read failure Err(EAGAIN) in pid:1868 [ 590.093250][T27298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 590.101729][T27298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 590.250094][T27306] rust_binder: Error while translating object. [ 590.259428][T27306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 590.265724][T27306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 590.435485][T27316] rust_binder: Write failure EFAULT in pid:201 [ 590.444355][T27319] rust_binder: Write failure EFAULT in pid:201 [ 590.505151][T27314] rust_binder: Error in use_page_slow: ESRCH [ 590.505174][T27314] rust_binder: use_range failure ESRCH [ 590.520203][T27317] rust_binder: Error in use_page_slow: ESRCH [ 590.531792][T27314] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 590.545771][T27317] rust_binder: use_range failure ESRCH [ 590.555895][T27322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 590.556149][T27314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 590.561570][T27322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1881 [ 590.572549][T27317] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 590.590946][T27314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:407 [ 590.599082][T27317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 590.609345][T27317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:407 [ 590.872379][T27331] rust_binder: Write failure EINVAL in pid:412 [ 590.898085][T27333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 590.964097][T27337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 591.055738][T27343] binder: Bad value for 'stats' [ 591.097904][T27347] rust_binder: Error while translating object. [ 591.097940][T27347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 591.111746][T27347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 591.318862][T27354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 591.345669][T27358] SELinux: truncated policydb string identifier [ 591.361779][T27358] SELinux: failed to load policy [ 591.411495][T27355] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 591.419161][T27355] rust_binder: Write failure EINVAL in pid:219 [ 591.592359][ T36] kauditd_printk_skb: 1018 callbacks suppressed [ 591.592382][ T36] audit: type=1400 audit(1750409608.040:120053): avc: denied { read write } for pid=26994 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 591.623451][T27364] rust_binder: Write failure EINVAL in pid:61 [ 591.644716][ T36] audit: type=1400 audit(1750409608.040:120054): avc: denied { read write open } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 591.691438][ T36] audit: type=1400 audit(1750409608.040:120055): avc: denied { ioctl } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 591.720724][ T36] audit: type=1400 audit(1750409608.060:120056): avc: denied { read } for pid=27363 comm="syz.3.8190" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.745061][ T36] audit: type=1400 audit(1750409608.060:120057): avc: denied { read open } for pid=27363 comm="syz.3.8190" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.771694][ T36] audit: type=1400 audit(1750409608.060:120058): avc: denied { ioctl } for pid=27363 comm="syz.3.8190" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 591.798302][ T36] audit: type=1400 audit(1750409608.060:120059): avc: denied { read } for pid=27363 comm="syz.3.8190" name="binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 591.823658][ T36] audit: type=1400 audit(1750409608.060:120060): avc: denied { read open } for pid=27363 comm="syz.3.8190" path="/dev/binderfs/binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 591.854883][ T36] audit: type=1400 audit(1750409608.060:120061): avc: denied { ioctl } for pid=27363 comm="syz.3.8190" path="/dev/binderfs/binder0" dev="binder" ino=41 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 591.882652][ T36] audit: type=1400 audit(1750409608.060:120062): avc: denied { set_context_mgr } for pid=27363 comm="syz.3.8190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 592.120192][T27384] binder: Bad value for 'defcontext' [ 592.171295][T27382] rust_binder: Write failure EFAULT in pid:72 [ 592.584085][T27408] rust_binder: Error while translating object. [ 592.598448][T27408] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 592.618405][T27409] rust_binder: Error while translating object. [ 592.628338][T27408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:234 [ 592.643106][T27409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 592.665495][T27409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1893 [ 592.681666][T27409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 592.765859][T27415] rust_binder: Write failure EFAULT in pid:423 [ 593.042039][T27425] binder: Unknown parameter 'non' [ 593.168189][T27429] rust_binder: Write failure EINVAL in pid:1901 [ 593.326884][T27436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 593.365566][T27436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 593.442355][T27441] binder: Unknown parameter 'nonÿ' [ 593.550803][T27443] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 593.550833][T27443] rust_binder: Read failure Err(EFAULT) in pid:1906 [ 593.645289][T27449] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 593.766571][T27456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:439 [ 593.766627][T27456] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 593.799127][T27456] rust_binder: Read failure Err(EFAULT) in pid:439 [ 593.909564][T27463] rust_binder: Error while translating object. [ 593.915823][T27467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 593.923629][T27463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 593.947460][T27467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:442 [ 593.965498][T27463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1911 [ 593.987512][T27467] rust_binder: Write failure EFAULT in pid:442 [ 594.119793][T27479] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 594.136964][T27479] rust_binder: Write failure EINVAL in pid:1914 [ 594.302687][T27489] rust_binder: Error while translating object. [ 594.325837][T27489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 594.335084][T27489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:254 [ 594.610676][T27506] input: syz0 as /devices/virtual/input/input451 [ 594.760147][T27518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 594.823651][T27512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1920 [ 594.833629][T27504] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 594.847389][T27523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 594.874245][T27512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1920 [ 594.884322][T27504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 594.898569][T27523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98 [ 594.899625][T27512] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 594.910953][T27525] binder: Bad value for 'max' [ 594.919705][T27504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:452 [ 594.930853][T27512] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 594.940197][T27512] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 595.128397][T27533] rust_binder: Write failure EINVAL in pid:457 [ 595.334495][T27539] binder: Bad value for 'max' [ 595.998845][T27568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.004673][T27566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.046313][T27568] SELinux: failed to load policy [ 596.062139][T27568] rust_binder: Error in use_page_slow: ESRCH [ 596.062166][T27568] rust_binder: use_range failure ESRCH [ 596.068254][T27568] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 596.074074][T27568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 596.082272][T27568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:464 [ 596.132251][T27575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 596.313389][T27579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 596.340873][T27579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 596.545712][T27586] rust_binder: Write failure EINVAL in pid:281 [ 596.600622][ T36] kauditd_printk_skb: 1153 callbacks suppressed [ 596.600649][ T36] audit: type=1400 audit(1750409613.040:121216): avc: denied { read write open } for pid=26566 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.658440][ T36] audit: type=1400 audit(1750409613.040:121217): avc: denied { ioctl } for pid=26566 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 596.679708][T27589] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.697433][T27591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 596.710634][ T36] audit: type=1400 audit(1750409613.050:121218): avc: denied { read write } for pid=27587 comm="syz.3.8261" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 596.710846][T27591] audit: audit_lost=527 audit_rate_limit=0 audit_backlog_limit=64 [ 596.744803][ T36] audit: type=1400 audit(1750409613.050:121219): avc: denied { read write open } for pid=27587 comm="syz.3.8261" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 596.759063][T27589] audit: audit_lost=528 audit_rate_limit=0 audit_backlog_limit=64 [ 596.780106][ T36] audit: type=1400 audit(1750409613.050:121220): avc: denied { read write } for pid=27587 comm="syz.3.8261" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 596.786057][T27591] audit: backlog limit exceeded [ 596.815815][ T13] bridge_slave_1: left allmulticast mode [ 596.830692][ T13] bridge_slave_1: left promiscuous mode [ 596.836433][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.863222][ T13] bridge_slave_0: left allmulticast mode [ 596.869130][ T13] bridge_slave_0: left promiscuous mode [ 596.878644][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.994445][T27598] rust_binder: Write failure EFAULT in pid:286 [ 597.086702][ T13] veth1_macvtap: left promiscuous mode [ 597.101145][ T13] veth0_vlan: left promiscuous mode [ 597.293475][T27611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 597.301228][T27584] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.315346][T27584] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.324878][T27584] bridge_slave_0: entered allmulticast mode [ 597.332586][T27584] bridge_slave_0: entered promiscuous mode [ 597.340547][T27584] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.345386][T27613] rust_binder: Error while translating object. [ 597.355367][T27613] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 597.370910][T27613] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:473 [ 597.371763][T27584] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.417109][T27584] bridge_slave_1: entered allmulticast mode [ 597.424324][T27584] bridge_slave_1: entered promiscuous mode [ 597.458634][T27621] rust_binder: Read failure Err(EAGAIN) in pid:134 [ 597.609286][T27627] input: syz1 as /devices/virtual/input/input454 [ 597.641278][T27584] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.648529][T27584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.656964][T27584] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.663362][T27627] rust_binder: Error while translating object. [ 597.664337][T27627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 597.664358][T27584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.670561][T27627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:475 [ 597.868629][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.921039][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.951296][T27644] SELinux: policydb magic number 0x4 does not match expected magic number 0xf97cff8c [ 597.961736][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.969164][T16811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.987538][T27644] SELinux: failed to load policy [ 597.994363][T27645] rust_binder: Error while translating object. [ 597.994398][T27645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 598.005370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.013460][T27645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:478 [ 598.016832][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.309836][T27667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 598.309882][T27667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:313 [ 598.319314][T27584] veth0_vlan: entered promiscuous mode [ 598.343747][T27668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 598.440150][T27584] veth1_macvtap: entered promiscuous mode [ 598.470000][T27679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 598.744068][T27694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 598.770902][ T4047] hid-generic C98F:0001:0000.0028: unknown main item tag 0x0 [ 598.788603][ T4047] hid-generic C98F:0001:0000.0028: unknown main item tag 0x0 [ 598.804718][T27696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 598.812872][ T4047] hid-generic C98F:0001:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 598.848052][T27698] binder: Bad value for 'max' [ 598.978175][T27710] rust_binder: Write failure EFAULT in pid:497 [ 598.978941][T27710] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 599.067733][T27711] fido_id[27711]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 599.088690][T27719] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 599.099244][T27718] rust_binder: Error while translating object. [ 599.112955][T27717] input: syz1 as /devices/virtual/input/input456 [ 599.115536][T27718] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 599.160756][T27718] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327 [ 599.255409][T27723] binder: Unknown parameter 'processor : 0 [ 599.255409][T27723] vendor_id : GenuineIntel [ 599.255409][T27723] cpu family : 6 [ 599.255409][T27723] model : 79 [ 599.255409][T27723] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 599.255409][T27723] stepping : 0 [ 599.255409][T27723] microcode : 0xffffffff [ 599.255409][T27723] cpu MHz : 2199.998 [ 599.255409][T27723] cache size : 56320 KB [ 599.255409][T27723] physical id : 0 [ 599.255409][T27723] siblings : 2 [ 599.255409][T27723] core id : 0 [ 599.255409][T27723] cpu cores : 1 [ 599.255409][T27723] apicid : 0 [ 599.255409][T27723] initial apicid : 0 [ 599.255409][T27723] fpu : yes [ 599.255409][T27723] fpu_exception : yes [ 599.255409][T27723] cpuid level : 13 [ 599.255409][T27723] wp : yes [ 599.255409][T27723] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 599.255409][T27723] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 599.619105][T27742] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 599.835989][T16811] bridge_slave_1: left allmulticast mode [ 599.841987][T16811] bridge_slave_1: left promiscuous mode [ 599.848098][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.858387][T16811] bridge_slave_0: left allmulticast mode [ 599.865079][T16811] bridge_slave_0: left promiscuous mode [ 599.872734][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.998693][T27750] can0: slcan on ttyS3. [ 600.013258][T16811] veth1_macvtap: left promiscuous mode [ 600.020053][T16811] veth0_vlan: left promiscuous mode [ 600.266392][T27756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 600.315770][T27744] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.369261][T27744] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.400916][T27744] bridge_slave_0: entered allmulticast mode [ 600.417929][T27744] bridge_slave_0: entered promiscuous mode [ 600.429307][T27744] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.440180][T27744] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.456212][T27744] bridge_slave_1: entered allmulticast mode [ 600.477553][T27744] bridge_slave_1: entered promiscuous mode [ 600.912974][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.920259][T16811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.950937][T27793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 600.950974][T27793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:348 [ 600.958586][T27790] rust_binder: Write failure EFAULT in pid:33 [ 600.962227][T27793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 600.990720][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.005448][T27794] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 601.006228][T27794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 601.006248][T16811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.024926][T27794] rust_binder: Read failure Err(EFAULT) in pid:348 [ 601.105750][T27749] can0 (unregistered): slcan off ttyS3. [ 601.127487][T27798] binder: Unknown parameter 'defcontext01777777777777777777777' [ 601.318493][T27744] veth0_vlan: entered promiscuous mode [ 601.329637][T27808] binder: Unknown parameter 'non' [ 601.432284][T27813] rust_binder: Write failure EFAULT in pid:175 [ 601.461237][T27744] veth1_macvtap: entered promiscuous mode [ 601.613423][ T36] kauditd_printk_skb: 1318 callbacks suppressed [ 601.613444][ T36] audit: type=1400 audit(1750409618.060:122511): avc: denied { read } for pid=27819 comm="syz.3.8325" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 601.615433][T27811] kvm: Disabled LAPIC found during irq injection [ 601.620543][ T36] audit: type=1400 audit(1750409618.060:122512): avc: denied { read open } for pid=27819 comm="syz.3.8325" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 601.714140][ T36] audit: type=1400 audit(1750409618.100:122513): avc: denied { search } for pid=27818 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 601.722093][T27744] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.742046][T26994] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.751200][T27826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 601.758970][T27826] audit: audit_lost=538 audit_rate_limit=0 audit_backlog_limit=64 [ 601.762001][T26994] audit: audit_lost=539 audit_rate_limit=0 audit_backlog_limit=64 [ 601.776765][T27826] audit: backlog limit exceeded [ 601.778363][T27817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 602.154248][T27849] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 602.171299][T27849] rust_binder: Write failure EINVAL in pid:190 [ 602.322362][T27856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:361 [ 602.507291][T27863] input: syz1 as /devices/virtual/input/input457 [ 602.608678][T27870] rust_binder: Write failure EINVAL in pid:364 [ 602.609994][T27869] rust_binder: Error while translating object. [ 602.650383][T27869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 602.690208][T27869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 602.694792][T27875] rust_binder: Error while translating object. [ 602.744494][T27875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 602.756242][T27875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:10 [ 602.949264][T27890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196 [ 603.139463][T27898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 603.314015][T27910] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 603.328612][T27910] rust_binder: Write failure EFAULT in pid:379 [ 603.337082][T27908] SELinux: failed to load policy [ 603.353502][T27910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 603.353543][T27910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:379 [ 603.433824][T27917] input: syz0 as /devices/virtual/input/input459 [ 603.438955][T27913] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 603.459521][T27913] rust_binder: Write failure EINVAL in pid:382 [ 603.708776][T27930] binder: Bad value for 'stats' [ 603.802491][T27933] binder: Bad value for 'max' [ 603.896116][T27938] binder: Unknown parameter 'fscontext?}' [ 604.022796][T27946] rust_binder: Write failure EINVAL in pid:58 [ 604.037756][T27946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 604.375590][T27954] kvm_intel: kvm [27953]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 604.712724][T27976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 604.712771][T27976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 604.737819][T27977] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 605.598222][T28011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 605.598287][T28009] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 605.600680][T28011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 605.620164][T28009] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 605.656775][T28017] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 605.905540][T28032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 605.931136][T28034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.072718][T28036] SELinux: policydb magic number 0xa0000 does not match expected magic number 0xf97cff8c [ 606.102690][T28036] SELinux: failed to load policy [ 606.214865][T28052] input: syz1 as /devices/virtual/input/input460 [ 606.349511][T28059] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 606.424784][T28066] rust_binder: Write failure EINVAL in pid:229 [ 606.442638][T28066] rust_binder: inc_ref_done called when no active inc_refs [ 606.588038][T28073] rust_binder: Write failure EINVAL in pid:231 [ 606.597028][T28073] rust_binder: Write failure EFAULT in pid:231 [ 606.631299][ T36] kauditd_printk_skb: 1452 callbacks suppressed [ 606.631322][ T36] audit: type=1400 audit(1750409623.080:123934): avc: denied { read write } for pid=28074 comm="syz.4.8402" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 606.674635][ T36] audit: type=1400 audit(1750409623.110:123935): avc: denied { read write open } for pid=28074 comm="syz.4.8402" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 606.720656][ T36] audit: type=1400 audit(1750409623.140:123936): avc: denied { read write } for pid=26994 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.762876][ T36] audit: type=1400 audit(1750409623.140:123937): avc: denied { read write open } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.802988][ T36] audit: type=1400 audit(1750409623.140:123938): avc: denied { ioctl } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 606.851418][T28084] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 606.909596][ T36] audit: type=1400 audit(1750409623.240:123939): avc: denied { append } for pid=28083 comm="syz.3.8404" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 606.977601][ T36] audit: type=1400 audit(1750409623.240:123940): avc: denied { append open } for pid=28083 comm="syz.3.8404" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 607.022548][T28088] binder: Bad value for 'stats' [ 607.069225][ T36] audit: type=1400 audit(1750409623.250:123941): avc: denied { read append } for pid=28083 comm="syz.3.8404" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 607.150664][ T36] audit: type=1400 audit(1750409623.250:123942): avc: denied { read open } for pid=28083 comm="syz.3.8404" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 607.240339][ T36] audit: type=1400 audit(1750409623.250:123943): avc: denied { read } for pid=28083 comm="syz.3.8404" name="binder0" dev="binder" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 607.532579][T28110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:460 [ 607.538405][T28111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:460 [ 607.693781][T28121] rust_binder: Write failure EINVAL in pid:61 [ 607.704548][T28121] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 607.730653][T28121] rust_binder: Read failure Err(EFAULT) in pid:61 [ 607.741474][T28115] input: syz1 as /devices/virtual/input/input463 [ 607.766047][T28121] rust_binder: Write failure EINVAL in pid:61 [ 607.785185][T28121] binder: Binderfs stats mode cannot be changed during a remount [ 607.927237][T28126] binder: Unknown parameter '00000000000000000000' [ 608.048598][T28131] rust_binder: Error while translating object. [ 608.048636][T28131] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 608.062678][T28131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 608.777511][T28163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 608.830008][T28163] rust_binder: Read failure Err(EFAULT) in pid:75 [ 608.844356][T28166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 608.895951][T28168] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 608.966480][T28169] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 608.967169][T28169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 609.041419][T28171] rust_binder: Write failure EFAULT in pid:78 [ 609.351822][T28190] rust_binder: Write failure EFAULT in pid:488 [ 609.748788][T28210] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 609.908768][T28224] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 609.991303][T28229] binder: Unknown parameter 'nXI' [ 610.059868][T28231] binder: Binderfs stats mode cannot be changed during a remount [ 610.164156][T28237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:261 [ 610.420635][T28253] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.431817][T28243] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 610.578257][T28265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 610.601554][T28266] rust_binder: Write failure EFAULT in pid:106 [ 610.649493][T28267] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 610.670744][T28265] input: syz0 as /devices/virtual/input/input466 [ 610.708722][T28265] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 610.740761][T28265] rust_binder: Write failure EINVAL in pid:271 [ 610.863575][T28268] SELinux: ebitmap: truncated map [ 610.970861][T28279] rust_binder: Write failure EFAULT in pid:111 [ 611.041994][T28268] SELinux: failed to load policy [ 611.554351][T28303] rust_binder: Error while translating object. [ 611.554391][T28303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 611.561620][T28303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:117 [ 611.637678][T28309] rust_binder: Read failure Err(EAGAIN) in pid:283 [ 611.648178][ T36] kauditd_printk_skb: 810 callbacks suppressed [ 611.648203][ T36] audit: type=1400 audit(1750409628.100:124754): avc: denied { read write } for pid=28310 comm="syz.7.8475" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.690998][T28314] rust_binder: Write failure EINVAL in pid:283 [ 611.724416][ T36] audit: type=1400 audit(1750409628.100:124755): avc: denied { read write } for pid=27584 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.772065][ T36] audit: type=1400 audit(1750409628.100:124756): avc: denied { read write open } for pid=27584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.841880][ T36] audit: type=1400 audit(1750409628.100:124757): avc: denied { ioctl } for pid=27584 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 611.870288][T28322] binder: Binderfs stats mode cannot be changed during a remount [ 611.875307][ T36] audit: type=1400 audit(1750409628.140:124758): avc: denied { read open } for pid=28310 comm="syz.7.8475" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.906890][ T36] audit: type=1400 audit(1750409628.140:124759): avc: denied { ioctl } for pid=28310 comm="syz.7.8475" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 611.935623][ T36] audit: type=1326 audit(1750409628.140:124760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28310 comm="syz.7.8475" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f178e929 code=0x0 [ 611.964921][ T36] audit: type=1400 audit(1750409628.140:124761): avc: denied { ioctl } for pid=28308 comm="syz.3.8476" path="/dev/binderfs/binder0" dev="binder" ino=41 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 611.992719][ T36] audit: type=1400 audit(1750409628.150:124762): avc: denied { associate } for pid=28305 comm="syz.4.8474" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 612.014036][T28326] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 612.016807][ T36] audit: type=1400 audit(1750409628.160:124763): avc: denied { read } for pid=28313 comm="syz.5.8477" name="binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 612.116959][T28331] rust_binder: Write failure EFAULT in pid:288 [ 612.193950][T28335] random: crng reseeded on system resumption [ 612.338577][T28344] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 612.393353][T28344] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 612.395885][T28344] rust_binder: Error while translating object. [ 612.403717][T28344] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 612.410395][T28344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 612.635455][T28355] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 612.648885][T28355] rust_binder: Error while translating object. [ 612.674357][T28355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 612.688320][T28355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 612.726061][T28363] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 612.791444][T28363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 612.857241][T28374] rust_binder: Write failure EINVAL in pid:298 [ 612.957174][T28377] binder: Unknown parameter 'context' [ 613.015073][T28381] block device autoloading is deprecated and will be removed. [ 613.030734][T28381] syz.3.8497: attempt to access beyond end of device [ 613.030734][T28381] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 613.122944][T28386] binder: Unknown parameter 'fscontext?}' [ 613.213085][T28392] kvm: kvm [28391]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3 [ 613.383500][T28404] SELinux: policydb magic number 0x501d8f09 does not match expected magic number 0xf97cff8c [ 613.400752][T28404] SELinux: failed to load policy [ 613.648165][T28428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 613.648208][T28428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 613.681438][T28424] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 613.710025][T28421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 614.246256][T28463] block device autoloading is deprecated and will be removed. [ 614.269646][T28463] syz.7.8521: attempt to access beyond end of device [ 614.269646][T28463] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 615.051829][T28506] input: syz0 as /devices/virtual/input/input468 [ 615.201889][T16811] bridge_slave_1: left allmulticast mode [ 615.219233][T16811] bridge_slave_1: left promiscuous mode [ 615.241549][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.272197][T16811] bridge_slave_0: left allmulticast mode [ 615.277989][T16811] bridge_slave_0: left promiscuous mode [ 615.293578][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.578655][T16811] veth1_macvtap: left promiscuous mode [ 615.600684][T28531] input: syz1 as /devices/virtual/input/input469 [ 615.600738][T16811] veth0_vlan: left promiscuous mode [ 615.730916][T28533] input: syz1 as /devices/virtual/input/input471 [ 616.028653][T28532] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.037059][T28532] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.047249][T28532] bridge_slave_0: entered allmulticast mode [ 616.059921][T28532] bridge_slave_0: entered promiscuous mode [ 616.068691][T28532] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.076609][T28532] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.084620][T28532] bridge_slave_1: entered allmulticast mode [ 616.088222][T28539] binder: Unknown parameter 'ÿ' [ 616.092217][T28532] bridge_slave_1: entered promiscuous mode [ 616.236613][T28551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:357 [ 616.415840][T28556] rust_binder: Write failure EFAULT in pid:171 [ 616.547254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.561062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.580062][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.587404][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.664570][ T36] kauditd_printk_skb: 1067 callbacks suppressed [ 616.664595][ T36] audit: type=1400 audit(1750409633.100:125831): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.713977][T28566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 616.721175][T28568] binder: Bad value for 'stats' [ 616.727434][T28564] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 616.730358][ T36] audit: type=1400 audit(1750409633.120:125832): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.800724][ T36] audit: type=1400 audit(1750409633.120:125833): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.808770][T28532] veth0_vlan: entered promiscuous mode [ 616.833456][ T36] audit: type=1400 audit(1750409633.120:125834): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.856165][ T36] audit: type=1400 audit(1750409633.120:125835): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.884547][ T36] audit: type=1400 audit(1750409633.120:125836): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.925354][T28532] audit: audit_backlog=65 > audit_backlog_limit=64 [ 616.928431][ T36] audit: type=1400 audit(1750409633.120:125837): avc: denied { sys_module } for pid=28532 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 616.946789][T26994] audit: audit_backlog=65 > audit_backlog_limit=64 [ 616.962179][ T36] audit: type=1400 audit(1750409633.150:125838): avc: denied { read write } for pid=26566 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.016586][T28532] veth1_macvtap: entered promiscuous mode [ 617.341939][T28684] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 617.341970][T28684] rust_binder: Read failure Err(EFAULT) in pid:2 [ 617.353250][T28687] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 617.362676][T28687] rust_binder: Error while translating object. [ 617.371670][T28687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 617.379022][T28687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 617.448369][T28691] SELinux: security_context_str_to_sid () failed with errno=-22 [ 617.652609][ T389] bridge_slave_1: left allmulticast mode [ 617.658465][ T389] bridge_slave_1: left promiscuous mode [ 617.674546][T28695] random: crng reseeded on system resumption [ 617.677907][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.705976][ T389] bridge_slave_0: left allmulticast mode [ 617.718236][ T389] bridge_slave_0: left promiscuous mode [ 617.735500][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.918838][ T389] veth1_macvtap: left promiscuous mode [ 617.933167][ T389] veth0_vlan: left promiscuous mode [ 617.947906][T28714] binder: Bad value for 'max' [ 618.107827][T28704] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.116515][T28704] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.125334][T28704] bridge_slave_0: entered allmulticast mode [ 618.147313][T28704] bridge_slave_0: entered promiscuous mode [ 618.157417][T28704] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.167430][T28704] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.175636][T28704] bridge_slave_1: entered allmulticast mode [ 618.183979][T28704] bridge_slave_1: entered promiscuous mode [ 618.194634][T28727] rust_binder: Write failure EINVAL in pid:381 [ 618.290933][T28704] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.304589][T28704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.312437][T28704] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.319713][T28704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.329266][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.336846][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.404602][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.412121][T16811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.434351][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.441501][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.488546][T28736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 618.564493][T28736] rust_binder: Write failure EFAULT in pid:383 [ 618.666553][T28704] veth0_vlan: entered promiscuous mode [ 618.813267][T28704] veth1_macvtap: entered promiscuous mode [ 618.886843][T28744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 618.974037][T28757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 619.215109][T28774] SELinux: ebitmap: truncated map [ 619.242019][T28774] SELinux: failed to load policy [ 619.364447][T28784] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 619.381049][T28787] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 619.388516][T28787] rust_binder: Write failure EINVAL in pid:13 [ 619.400621][T28784] rust_binder: Write failure EINVAL in pid:39 [ 619.675577][T28817] binder: Bad value for 'max' [ 619.683841][T28819] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 619.686949][T28819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 619.698155][T28819] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 619.721193][T28819] rust_binder: Read failure Err(EFAULT) in pid:24 [ 619.766360][T28815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 619.873330][T28828] SELinux: policydb version 377117704 does not match my version range 15-33 [ 619.911969][T28828] SELinux: failed to load policy [ 619.932782][T28831] SELinux: failed to load policy [ 619.972540][T28830] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 619.976455][T28830] rust_binder: Error while translating object. [ 619.993266][T28830] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 619.999631][T28830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:388 [ 620.109861][T28838] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 620.215019][T28850] SELinux: Context system_u:object_r:watchdog_device_t:s0 is not valid (left unmapped). [ 620.294705][T28857] syz.5.8612: attempt to access beyond end of device [ 620.294705][T28857] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 620.414420][T28863] binder: Unknown parameter 'nXI' [ 620.498012][T28872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 620.498050][T28872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:401 [ 620.620879][T28873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 620.653732][T28873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:227 [ 620.695422][T28886] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 620.708170][T28886] rust_binder: Error while translating object. [ 620.720063][T28886] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 620.730884][T28886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 620.814232][T28892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 621.036934][T28905] rust_binder: Error in use_page_slow: ESRCH [ 621.036990][T28905] rust_binder: use_range failure ESRCH [ 621.050702][T28905] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 621.067193][T28905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 621.097643][T28914] input: syz1 as /devices/virtual/input/input506 [ 621.118246][T28905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:231 [ 621.215432][T28914] rust_binder: Error while translating object. [ 621.250682][T28914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 621.256954][T28914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:412 [ 621.368001][T12075] udevd[12075]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 621.487126][T28930] rust_binder: Error while translating object. [ 621.487173][T28930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 621.495060][T28930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:235 [ 621.564306][T28937] rust_binder: Error while translating object. [ 621.588106][T28937] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 621.608345][T28937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54 [ 621.672632][ T36] kauditd_printk_skb: 1336 callbacks suppressed [ 621.672657][ T36] audit: type=1400 audit(1750409638.120:127159): avc: denied { read write } for pid=27744 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.743443][ T36] audit: type=1400 audit(1750409638.120:127160): avc: denied { read write open } for pid=27744 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.748691][T28945] rust_binder: Error while translating object. [ 621.769665][T28945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 621.788095][T28945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 621.813311][ T36] audit: type=1400 audit(1750409638.120:127161): avc: denied { ioctl } for pid=27744 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.928943][ T36] audit: type=1400 audit(1750409638.150:127162): avc: denied { read } for pid=28935 comm="syz.3.8636" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 621.956180][ T36] audit: type=1400 audit(1750409638.150:127163): avc: denied { read open } for pid=28935 comm="syz.3.8636" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 621.993347][ T36] audit: type=1400 audit(1750409638.160:127164): avc: denied { write } for pid=28935 comm="syz.3.8636" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.022301][ T36] audit: type=1400 audit(1750409638.160:127165): avc: denied { write open } for pid=28935 comm="syz.3.8636" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.080681][ T36] audit: type=1400 audit(1750409638.160:127166): avc: denied { ioctl } for pid=28935 comm="syz.3.8636" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.160629][ T36] audit: type=1400 audit(1750409638.170:127167): avc: denied { ioctl } for pid=28935 comm="syz.3.8636" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 622.160693][ T13] bridge_slave_1: left allmulticast mode [ 622.229736][ T36] audit: type=1400 audit(1750409638.180:127168): avc: denied { read write } for pid=28933 comm="syz.5.8635" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 622.283819][ T13] bridge_slave_1: left promiscuous mode [ 622.290782][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.310551][ T13] bridge_slave_0: left allmulticast mode [ 622.317192][ T13] bridge_slave_0: left promiscuous mode [ 622.334466][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.441838][T28967] rust_binder: Error while translating object. [ 622.441902][T28967] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 622.469351][T28967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:100 [ 622.540778][ T13] veth1_macvtap: left promiscuous mode [ 622.568164][ T13] veth0_vlan: left promiscuous mode [ 622.880522][T28963] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.891668][T28963] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.902384][T28963] bridge_slave_0: entered allmulticast mode [ 622.909074][T28963] bridge_slave_0: entered promiscuous mode [ 622.936001][T28963] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.943360][T28963] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.951760][T28963] bridge_slave_1: entered allmulticast mode [ 622.958338][T28963] bridge_slave_1: entered promiscuous mode [ 623.037498][T28982] SELinux: failed to load policy [ 623.091690][T28982] rust_binder: Write failure EINVAL in pid:421 [ 623.134171][T28988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 623.230138][T28963] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.246691][T28963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.254155][T28963] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.261503][T28963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.383274][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.402264][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.442881][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.450011][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.472540][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.479681][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.730552][T28963] veth0_vlan: entered promiscuous mode [ 623.796043][T28963] veth1_macvtap: entered promiscuous mode [ 624.265666][T29022] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 624.335708][T29024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88 [ 624.389229][T29027] rust_binder: Error in use_page_slow: ESRCH [ 624.389264][T29027] rust_binder: use_range failure ESRCH [ 624.413930][T29027] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 624.423706][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.444152][T29027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 624.444198][T29027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:117 [ 624.456916][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.482071][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.503267][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.518653][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.531852][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.552417][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.571999][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.591899][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.612011][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.632055][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.651958][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.669187][T29042] rust_binder: Write failure EFAULT in pid:436 [ 624.670397][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.674015][T29042] rust_binder: Write failure EFAULT in pid:436 [ 624.677879][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.717012][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.730214][T29048] rust_binder: Error while translating object. [ 624.730257][T29048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 624.731281][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.738132][T29048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:440 [ 624.770761][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.802708][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.821476][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.831154][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.840114][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.866968][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.881576][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.890919][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.900298][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.910393][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.925225][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.942108][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.952274][T29061] rust_binder: Error while translating object. [ 624.952329][T29061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 624.958732][T29061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:128 [ 624.973611][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 624.995453][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.004702][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.021860][T29063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:447 [ 625.029754][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.049031][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.064809][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.081452][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.101898][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.112444][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.123096][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.133728][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.143817][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.153926][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.164064][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.174497][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.199722][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.213201][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.242909][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.253529][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.273351][T29032] SELinux: security_context_str_to_sid () failed with errno=-22 [ 625.891749][T29093] random: crng reseeded on system resumption [ 625.975478][T29097] rust_binder: Error while translating object. [ 625.975531][T29097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 625.982695][T29097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 626.065947][T29101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 626.362911][T29116] input: syz1 as /devices/virtual/input/input509 [ 626.415604][T29117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:22 [ 626.514186][T29119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 626.529918][T29119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:25 [ 626.590321][T29127] input: syz1 as /devices/virtual/input/input510 [ 626.594726][T29129] rust_binder: Write failure EINVAL in pid:28 [ 626.670616][T29132] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 626.686808][ T36] kauditd_printk_skb: 991 callbacks suppressed [ 626.686826][ T36] audit: type=1400 audit(1750409643.130:128160): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 626.736606][ T36] audit: type=1400 audit(1750409643.150:128161): avc: denied { read } for pid=29133 comm="syz.7.8698" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 626.739587][T29134] rust_binder: Write failure EINVAL in pid:30 [ 626.783016][ T36] audit: type=1400 audit(1750409643.150:128162): avc: denied { read open } for pid=29133 comm="syz.7.8698" path="/dev/binderfs/binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 626.836239][ T36] audit: type=1400 audit(1750409643.150:128163): avc: denied { read write } for pid=29133 comm="syz.7.8698" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 626.861268][ T36] audit: type=1400 audit(1750409643.150:128164): avc: denied { read open } for pid=29133 comm="syz.7.8698" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 626.937949][ T36] audit: type=1400 audit(1750409643.150:128165): avc: denied { ioctl } for pid=29133 comm="syz.7.8698" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 626.984671][ T36] audit: type=1400 audit(1750409643.170:128166): avc: denied { read open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=775 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.017251][ T36] audit: type=1400 audit(1750409643.170:128167): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=775 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 627.102411][ T36] audit: type=1400 audit(1750409643.170:128168): avc: denied { read } for pid=29133 comm="syz.7.8698" name="binder0" dev="binder" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 627.165795][T29148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 627.180241][T29148] rust_binder: Write failure EFAULT in pid:34 [ 627.183159][T29152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 627.222269][T29152] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 627.251335][T29155] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 627.311751][T29155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 627.311793][T29155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:461 [ 627.401961][T29162] kvm: kvm [29159]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 627.442997][T29162] rust_binder: Write failure EFAULT in pid:155 [ 627.665704][T29171] rust_binder: Write failure EINVAL in pid:41 [ 627.693756][T29172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 627.749940][T29177] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 627.820621][T29177] rust_binder: Write failure EINVAL in pid:157 [ 627.984370][T29190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 628.101205][T29196] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 628.143208][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.162638][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.179150][T29194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:474 [ 628.181659][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.200663][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.201576][T29202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 628.210457][T29198] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 628.220126][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.235731][T29202] rust_binder: Read failure Err(EFAULT) in pid:50 [ 628.246941][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.261796][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.269338][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.278291][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.286721][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.303216][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.312278][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.320214][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.329592][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.338272][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.349348][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.359347][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.367743][T29207] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 628.368703][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.386365][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.394812][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.398080][T29207] SELinux: failed to load policy [ 628.404005][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.427261][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.437104][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.445767][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.454373][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.462999][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.471715][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.481725][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.489277][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.504711][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.521590][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.529144][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.550030][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.558601][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.566284][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.574299][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.581864][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.589599][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.610656][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.618510][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.628554][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.640653][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.649083][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.660687][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.668245][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.680643][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.688378][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.696455][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.707546][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.720636][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.728151][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.741515][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.749128][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.758017][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.766949][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.775620][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.784031][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.792589][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.800090][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.808714][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.817169][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.830820][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.838785][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.847383][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.855659][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.865588][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.874718][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.883063][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.891803][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.899269][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.915257][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.923573][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.931631][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.947708][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.961293][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.968765][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.982925][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.991946][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 628.999633][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.008277][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.020631][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.028447][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.040652][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.052689][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.070405][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.078853][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.086583][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.094562][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.102135][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.109976][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.117531][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.125977][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.134083][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.142051][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.149658][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.158234][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.167309][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.175874][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.209425][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.220650][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.228135][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.248527][T29276] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 629.252772][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.269114][T29276] input: syz1 as /devices/virtual/input/input511 [ 629.276133][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.286946][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.294700][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.302309][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.316012][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.324916][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.332708][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.345346][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.353069][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.360541][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x7 [ 629.368405][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x7 [ 629.375992][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.383633][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.403741][T29283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 629.413885][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.429935][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.444652][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.453418][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.467660][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.476366][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.483938][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.491707][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.499267][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.511399][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.522903][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.530541][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.538397][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.547151][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.555595][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.563840][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.575129][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.583988][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.593282][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.601735][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.609273][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.616971][T29292] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 629.618330][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.627159][T29292] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 629.635173][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.650881][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.658483][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.666078][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.673755][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.681451][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.689442][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.697905][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.705418][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.713271][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.720908][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.728327][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.736155][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.744069][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.751877][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.759494][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.767070][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.774522][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.782031][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.794691][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.802266][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.809853][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.817547][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.825105][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.840633][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.853768][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.863615][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.873824][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.886304][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.895361][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.903105][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.911034][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.924861][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.945830][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.969257][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.977524][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 629.988078][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.000092][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.008446][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.016842][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.024844][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.032652][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.040496][ T305] hid-generic 01FF:0004:0400.0029: unknown main item tag 0x0 [ 630.053565][ T305] hid-generic 01FF:0004:0400.0029: hidraw0: HID v0.05 Device [syz0] on syz1 [ 630.232274][T29321] block device autoloading is deprecated and will be removed. [ 630.266307][T29321] syz.5.8740: attempt to access beyond end of device [ 630.266307][T29321] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 630.374621][T29324] fido_id[29324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 630.435378][T29333] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 630.577659][T29338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61 [ 630.851342][T29350] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 630.883126][T29350] SELinux: failed to load policy [ 630.913621][T29350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:162 [ 630.967982][T29352] rust_binder: Write failure EINVAL in pid:162 [ 631.599976][T29366] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 631.696817][ T36] kauditd_printk_skb: 931 callbacks suppressed [ 631.696841][ T36] audit: type=1400 audit(1750409648.140:129086): avc: denied { read append } for pid=29368 comm="syz.3.8755" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 631.752051][ T36] audit: type=1400 audit(1750409648.140:129087): avc: denied { read write } for pid=28704 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.774139][T29367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 631.783101][ T36] audit: type=1400 audit(1750409648.140:129088): avc: denied { read write open } for pid=28704 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.784191][T29367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 631.790543][ T36] audit: type=1400 audit(1750409648.160:129089): avc: denied { ioctl } for pid=28704 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 631.851649][ T36] audit: type=1400 audit(1750409648.170:129090): avc: denied { ioctl } for pid=29364 comm="syz.5.8754" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 631.878906][ T36] audit: type=1400 audit(1750409648.170:129091): avc: denied { read open } for pid=29368 comm="syz.3.8755" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 631.930457][ T36] audit: type=1400 audit(1750409648.170:129092): avc: denied { ioctl } for pid=29368 comm="syz.3.8755" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 631.964506][ T36] audit: type=1400 audit(1750409648.190:129093): avc: denied { read } for pid=29368 comm="syz.3.8755" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 631.990057][ T36] audit: type=1400 audit(1750409648.190:129094): avc: denied { read open } for pid=29368 comm="syz.3.8755" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.016230][ T36] audit: type=1400 audit(1750409648.190:129095): avc: denied { ioctl } for pid=29368 comm="syz.3.8755" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 632.316725][T29380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 632.316755][T29380] rust_binder: Read failure Err(EFAULT) in pid:490 [ 632.346513][T29386] rust_binder: Write failure EFAULT in pid:262 [ 632.480109][T29389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 632.538272][T29390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 632.564348][T29394] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 632.570665][T29390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265 [ 632.611179][T29397] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 632.617946][T29398] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 632.926269][T20823] hid (null): global environment stack underflow [ 632.943253][T20823] hid (null): unknown global tag 0xd [ 632.952785][T20823] hid-generic 4C80:0002:0009.002A: global environment stack underflow [ 632.969569][T20823] hid-generic 4C80:0002:0009.002A: item 0 0 1 11 parsing failed [ 632.979722][T20823] hid-generic 4C80:0002:0009.002A: probe with driver hid-generic failed with error -22 [ 633.066141][T29421] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 633.066181][T29421] rust_binder: Read failure Err(EFAULT) in pid:175 [ 633.086510][T29422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 633.097954][T29425] rust_binder: Error while translating object. [ 633.126952][T29425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 633.146446][T29425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 633.227479][T29432] kvm: kvm [29428]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 633.288104][T29435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 633.430665][T29442] rust_binder: Write failure EINVAL in pid:276 [ 633.607216][T29457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 633.875474][T29479] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 633.973415][T29489] syz.7.8794: attempt to access beyond end of device [ 633.973415][T29489] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 634.150710][T29499] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 634.150742][T29499] rust_binder: Read failure Err(EFAULT) in pid:206 [ 634.249150][T29503] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 634.270668][T29503] SELinux: failed to load policy [ 634.295328][T29503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 634.298145][T29505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:519 [ 634.320648][T29501] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 634.330002][T29501] rust_binder: Error in use_page_slow: EBUSY [ 634.344456][T29501] rust_binder: use_range failure EBUSY [ 634.350517][T29501] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 634.357107][T29501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 634.365215][T29501] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 634.410608][T29507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.435485][T29501] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:519 [ 634.453375][T29507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 634.462960][T29510] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 634.470607][T29510] rust_binder: Error while translating object. [ 634.490709][T29510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 634.497742][T29510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 634.567968][T29510] rust_binder: Got transaction with invalid offset. [ 634.578398][T29510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 634.600347][T29510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 634.709745][T29522] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 634.727105][T29522] rust_binder: Write failure EINVAL in pid:211 [ 634.904866][T29531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 634.961680][T29537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 635.073316][T29541] input: syz0 as /devices/virtual/input/input516 [ 635.139659][T29544] rust_binder: Write failure EFAULT in pid:523 [ 635.150961][T29544] rust_binder: Write failure EFAULT in pid:523 [ 635.387282][T29552] rust_binder: Error while translating object. [ 635.393845][T29552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 635.400216][T29552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:124 [ 635.472759][T29567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 635.591200][T29568] binder: Unknown parameter 'defcontext01777777777777777777777' [ 635.679898][T29574] rust_binder: Read failure Err(EAGAIN) in pid:532 [ 635.691820][T29574] rust_binder: Error while translating object. [ 635.698734][T29574] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 635.705945][T29574] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 635.840955][T29579] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 635.885679][T29578] SELinux: policydb string length 14080 does not match expected length 8 [ 635.915799][T29578] SELinux: failed to load policy [ 635.942952][T29578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 635.942992][T29578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 636.056569][T29592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.067211][T29591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.087072][T29592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 636.206605][T29592] rust_binder: Error in use_page_slow: ESRCH [ 636.206635][T29592] rust_binder: use_range failure ESRCH [ 636.224213][T29592] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 636.229773][T29592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 636.240846][T29592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:230 [ 636.422581][T29602] tap0: tun_chr_ioctl cmd 1074025677 [ 636.448022][T29602] tap0: linktype set to 774 [ 636.458385][T29604] rust_binder: Error while translating object. [ 636.458427][T29604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 636.480741][T29604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:140 [ 636.646564][T29607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 636.682152][T29607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:540 [ 636.705034][ T36] kauditd_printk_skb: 1238 callbacks suppressed [ 636.705059][ T36] audit: type=1400 audit(1750409653.150:130335): avc: denied { read } for pid=29617 comm="syz.7.8837" name="binder1" dev="binder" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 636.753397][T29618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 636.829292][ T36] audit: type=1400 audit(1750409653.150:130336): avc: denied { read open } for pid=29617 comm="syz.7.8837" path="/dev/binderfs/binder1" dev="binder" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 636.904882][ T36] audit: type=1400 audit(1750409653.150:130334): avc: denied { read write } for pid=28532 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 636.975931][ T36] audit: type=1400 audit(1750409653.150:130337): avc: denied { read write open } for pid=28532 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.016505][ T36] audit: type=1400 audit(1750409653.150:130338): avc: denied { ioctl } for pid=28532 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 637.048136][ T36] audit: type=1400 audit(1750409653.150:130339): avc: denied { read } for pid=29617 comm="syz.7.8837" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 637.076056][ T36] audit: type=1400 audit(1750409653.150:130340): avc: denied { read open } for pid=29617 comm="syz.7.8837" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 637.099953][T29628] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 637.104898][ T36] audit: type=1400 audit(1750409653.150:130341): avc: denied { ioctl } for pid=29617 comm="syz.7.8837" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 637.140921][ T36] audit: type=1400 audit(1750409653.170:130342): avc: denied { read } for pid=29619 comm="syz.5.8838" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 637.149824][T29629] audit: audit_backlog=65 > audit_backlog_limit=64 [ 637.278787][T29638] rust_binder: Read failure Err(EAGAIN) in pid:546 [ 637.708406][T29663] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 637.731596][T29663] rust_binder: Write failure EINVAL in pid:324 [ 637.801625][T29671] input: syz1 as /devices/virtual/input/input518 [ 637.846094][T29669] SELinux: security_context_str_to_sid (unconf)ndd_nõ) failed with errno=-22 [ 637.880433][T29671] rust_binder: Error while translating object. [ 637.880490][T29671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 637.905313][T29671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:549 [ 638.037730][T29680] input: syz1 as /devices/virtual/input/input519 [ 638.131315][T29680] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 638.170232][T29688] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 638.186998][T29688] rust_binder: Error in use_page_slow: EBUSY [ 638.201521][T29688] rust_binder: use_range failure EBUSY [ 638.207649][T29688] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 638.213232][T29688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 638.233500][T29688] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 638.263040][T29688] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:251 [ 638.281192][T29698] rust_binder: Failed to allocate buffer. len:168, is_oneway:false [ 638.452542][T29719] syz.4.8865: attempt to access beyond end of device [ 638.452542][T29719] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 638.487326][T29719] binder: Unknown parameter 'ÉL/¿§×éÝJoÖéG™eõ£H'' [ 638.632761][T29726] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 638.670849][T29730] SELinux: policydb version -1273614838 does not match my version range 15-33 [ 638.676338][T29732] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 638.695929][T29730] SELinux: failed to load policy [ 638.995441][T29745] random: crng reseeded on system resumption [ 639.181006][T29754] input: syz1 as /devices/virtual/input/input521 [ 639.237063][T29760] binder: Unknown parameter 'defcontext01777777777777777777777' [ 639.650316][T29776] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 639.690720][T29776] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 639.725643][T29776] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 639.916842][T29792] input: syz1 as /devices/virtual/input/input522 [ 639.995489][T29794] random: crng reseeded on system resumption [ 640.080321][T29800] rust_binder: Write failure EFAULT in pid:274 [ 640.083077][T29801] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:176 [ 640.142696][T29802] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 640.320660][T29810] binder: Bad value for 'stats' [ 640.422517][T29812] random: crng reseeded on system resumption [ 640.518777][T29815] PM: Enabling pm_trace changes system date and time during resume. [ 640.518777][T29815] PM: Correct system time has to be restored manually after resume. [ 640.627929][T29822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364 [ 640.637729][T29822] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 640.701929][T29824] geneve1: tun_chr_ioctl cmd 1074025672 [ 640.720807][T29824] geneve1: ignored: set checksum enabled [ 640.737482][T29826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:284 [ 640.807425][T29824] kvm: user requested TSC rate below hardware speed [ 640.838713][T29824] kvm: user requested TSC rate below hardware speed [ 640.848713][T29824] geneve1: tun_chr_ioctl cmd 21731 [ 641.216621][T29843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:184 [ 641.729754][ T36] kauditd_printk_skb: 1011 callbacks suppressed [ 641.729798][ T36] audit: type=1400 audit(1750409658.170:131322): avc: denied { read } for pid=29875 comm="syz.5.8913" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 641.751629][T29877] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 641.791028][T29873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:297 [ 641.815547][T29877] rust_binder: Write failure EINVAL in pid:372 [ 641.826224][ T36] audit: type=1400 audit(1750409658.170:131323): avc: denied { read open } for pid=29875 comm="syz.5.8913" path="/dev/binderfs/binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 641.876848][ T36] audit: type=1400 audit(1750409658.180:131324): avc: denied { read } for pid=29875 comm="syz.5.8913" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 641.937866][ T36] audit: type=1400 audit(1750409658.180:131325): avc: denied { read open } for pid=29875 comm="syz.5.8913" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 641.999608][ T36] audit: type=1400 audit(1750409658.180:131326): avc: denied { ioctl } for pid=29875 comm="syz.5.8913" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 642.018023][T29892] rust_binder: 29890 RLIMIT_NICE not set [ 642.065407][ T36] audit: type=1400 audit(1750409658.200:131327): avc: denied { ioctl } for pid=29875 comm="syz.5.8913" path="/dev/binderfs/binder0" dev="binder" ino=79 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 642.103101][T29894] audit: audit_backlog=65 > audit_backlog_limit=64 [ 642.110402][T29894] audit: audit_lost=573 audit_rate_limit=0 audit_backlog_limit=64 [ 642.124164][T29890] audit: audit_backlog=65 > audit_backlog_limit=64 [ 642.131508][T29894] audit: backlog limit exceeded [ 642.208171][T29902] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 642.208265][T29902] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 642.730671][T29918] rust_binder: Read failure Err(EFAULT) in pid:306 [ 643.274651][T29947] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 643.283538][T29947] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 643.380538][T29949] rust_binder: Write failure EINVAL in pid:219 [ 643.502017][T29958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 643.561146][T29963] rust_binder: Write failure EINVAL in pid:221 [ 643.880025][T29974] SELinux: truncated policydb string identifier [ 643.892507][T29974] SELinux: failed to load policy [ 643.969881][T29972] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 644.002181][T29977] random: crng reseeded on system resumption [ 644.064271][T29977] binder: Unknown parameter 'processor : 0 [ 644.064271][T29977] vendor_id : GenuineIntel [ 644.064271][T29977] cpu family : 6 [ 644.064271][T29977] model : 79 [ 644.064271][T29977] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 644.064271][T29977] stepping : 0 [ 644.064271][T29977] microcode : 0xffffffff [ 644.064271][T29977] cpu MHz : 2199.998 [ 644.064271][T29977] cache size : 56320 KB [ 644.064271][T29977] physical id : 0 [ 644.064271][T29977] siblings : 2 [ 644.064271][T29977] core id : 0 [ 644.064271][T29977] cpu cores : 1 [ 644.064271][T29977] apicid : 0 [ 644.064271][T29977] initial apicid : 0 [ 644.064271][T29977] fpu : yes [ 644.064271][T29977] fpu_exception : yes [ 644.064271][T29977] cpuid level : 13 [ 644.064271][T29977] wp : yes [ 644.064271][T29977] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 644.064271][T29977] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 644.449552][T29995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:229 [ 644.471437][T29999] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 644.490700][T29999] rust_binder: Read failure Err(EFAULT) in pid:330 [ 644.586945][T29992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 644.627436][T29992] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 644.890812][T30022] binder: Unknown parameter 'processor : 0 [ 644.890812][T30022] vendor_id : GenuineIntel [ 644.890812][T30022] cpu family : 6 [ 644.890812][T30022] model : 79 [ 644.890812][T30022] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 644.890812][T30022] stepping : 0 [ 644.890812][T30022] microcode : 0xffffffff [ 644.890812][T30022] cpu MHz : 2199.998 [ 644.890812][T30022] cache size : 56320 KB [ 644.890812][T30022] physical id : 0 [ 644.890812][T30022] siblings : 2 [ 644.890812][T30022] core id : 0 [ 644.890812][T30022] cpu cores : 1 [ 644.890812][T30022] apicid : 0 [ 644.890812][T30022] initial apicid : 0 [ 644.890812][T30022] fpu : yes [ 644.890812][T30022] fpu_exception : yes [ 644.890812][T30022] cpuid level : 13 [ 644.890812][T30022] wp : yes [ 644.890812][T30022] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 644.890812][T30022] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 644.968698][T30032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 645.112270][T30034] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 645.123224][T30030] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 645.244172][T30047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:657 [ 645.821486][T30067] rust_binder: Write failure EINVAL in pid:359 [ 645.889979][T30068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:665 [ 645.903303][T30074] binder: Bad value for 'max' [ 645.952963][T30076] rust_binder: Write failure EINVAL in pid:361 [ 646.061075][T30081] rust_binder: Write failure EINVAL in pid:248 [ 646.073442][T30081] rust_binder: Read failure Err(EAGAIN) in pid:248 [ 646.088811][T30079] SELinux: failed to load policy [ 646.135817][T30079] rust_binder: Write failure EFAULT in pid:409 [ 646.247366][T30088] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 646.267643][T30094] binder: Unknown parameter 'non' [ 646.545679][T30108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.571572][T30109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 646.664393][T30115] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.667307][T30115] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 646.681140][T30115] rust_binder: Write failure EINVAL in pid:419 [ 646.732690][ T36] kauditd_printk_skb: 1079 callbacks suppressed [ 646.732713][ T36] audit: type=1326 audit(1750409663.180:132396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30117 comm="syz.3.8982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb803b8e929 code=0x7ffc0000 [ 646.756226][T30120] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 646.799257][ T36] audit: type=1400 audit(1750409663.180:132397): avc: denied { map } for pid=30111 comm="syz.4.8980" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 646.807800][T30118] kvm: kvm [30117]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 646.851889][ T36] audit: type=1400 audit(1750409663.180:132398): avc: denied { read } for pid=30111 comm="syz.4.8980" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 646.888680][T30122] binder: Unknown parameter 'context' [ 646.917348][ T36] audit: type=1400 audit(1750409663.200:132399): avc: denied { read } for pid=30119 comm="syz.5.8983" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.960884][ T36] audit: type=1400 audit(1750409663.200:132400): avc: denied { read open } for pid=30119 comm="syz.5.8983" path="/dev/binderfs/binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 646.976382][T30124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 647.000668][ T36] audit: type=1400 audit(1750409663.200:132401): avc: denied { ioctl } for pid=30119 comm="syz.5.8983" path="/dev/binderfs/binder0" dev="binder" ino=79 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 647.046065][T30125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:382 [ 647.047656][ T36] audit: type=1400 audit(1750409663.200:132402): avc: denied { set_context_mgr } for pid=30119 comm="syz.5.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 647.079000][ T36] audit: type=1400 audit(1750409663.200:132403): avc: denied { map } for pid=30119 comm="syz.5.8983" path="/dev/binderfs/binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 647.110503][ T36] audit: type=1400 audit(1750409663.200:132404): avc: denied { read } for pid=30119 comm="syz.5.8983" path="/dev/binderfs/binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 647.138745][ T36] audit: type=1400 audit(1750409663.200:132405): avc: denied { read } for pid=30119 comm="syz.5.8983" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 647.267255][T30131] rust_binder: Write failure EINVAL in pid:426 [ 647.271346][T30131] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:426 [ 647.549017][T30135] rust_binder: Error in use_page_slow: ESRCH [ 647.549054][T30135] rust_binder: use_range failure ESRCH [ 647.572906][T30135] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 647.589955][T30135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 647.600640][T30135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:257 [ 647.822515][T30145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 647.886746][T30145] binfmt_misc: register: failed to install interpreter file ./file0 [ 647.928500][T30145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 647.928542][T30145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 648.021052][T30157] rust_binder: Write failure EFAULT in pid:438 [ 648.273775][T30163] SELinux: unknown common r [ 648.285045][T30163] SELinux: failed to load policy [ 648.457412][T30176] binder: Unknown parameter 'defcoÑ\N¸nvext01777777777777777777777' [ 648.494701][T30170] rust_binder: Write failure EINVAL in pid:387 [ 648.758385][T30187] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 648.772505][T30187] rust_binder: Write failure EINVAL in pid:279 [ 648.811377][T30189] rust_binder: Write failure EFAULT in pid:392 [ 648.992129][T30197] geneve1: tun_chr_ioctl cmd 1074025672 [ 649.006831][T30197] geneve1: ignored: set checksum enabled [ 649.014303][T30193] tun0: tun_chr_ioctl cmd 1074025676 [ 649.021225][T30197] rust_binder: Error while translating object. [ 649.021259][T30197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 649.025288][T30193] tun0: owner set to 0 [ 649.032958][T30197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:396 [ 649.049085][T30200] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 649.071551][T30202] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 649.175833][T30208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:448 [ 649.184421][T30207] SELinux: policydb magic number 0x8f does not match expected magic number 0xf97cff8c [ 649.206335][T30208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448 [ 649.230679][T30207] SELinux: failed to load policy [ 649.232226][T30210] rust_binder: Error while translating object. [ 649.251195][T30207] SELinux: policydb version 648145466 does not match my version range 15-33 [ 649.260647][T30210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 649.271876][T30210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:683 [ 649.290717][T30207] SELinux: failed to load policy [ 649.325652][T30215] binder: Bad value for 'max' [ 649.465774][T30222] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 649.484884][T30222] rust_binder: Write failure EINVAL in pid:400 [ 649.597366][T30234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 649.884110][T30242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 649.902248][T30242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:406 [ 650.100828][T30257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 650.129803][T30257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 650.196399][T30259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 650.209046][T30255] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 650.230683][T30255] rust_binder: Error in use_page_slow: EBUSY [ 650.241610][T30255] rust_binder: use_range failure EBUSY [ 650.247894][T30255] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 650.254991][T30255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 650.283712][T30255] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 650.351811][T30255] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:460 [ 650.371863][T16811] bridge_slave_1: left allmulticast mode [ 650.401287][T16811] bridge_slave_1: left promiscuous mode [ 650.417467][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.438195][T16811] bridge_slave_0: left allmulticast mode [ 650.449437][T30280] input: syz0 as /devices/virtual/input/input529 [ 650.460284][T16811] bridge_slave_0: left promiscuous mode [ 650.480766][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.537339][T30283] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 650.537439][T30283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 650.548191][T30283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:464 [ 650.704156][T16811] veth1_macvtap: left promiscuous mode [ 650.750904][T16811] veth0_vlan: left promiscuous mode [ 650.819227][T30277] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.826535][T30277] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.834051][T30277] bridge_slave_0: entered allmulticast mode [ 650.841405][T30277] bridge_slave_0: entered promiscuous mode [ 650.851225][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.858488][T30277] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.865819][T30277] bridge_slave_1: entered allmulticast mode [ 650.872945][T30277] bridge_slave_1: entered promiscuous mode [ 651.028386][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.035571][T30277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.043027][T30277] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.050190][T30277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.124241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.134250][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.151787][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.158893][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.180219][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.187890][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.463342][T30427] kvm_intel: kvm [30426]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 651.476447][T30427] binder: Unknown parameter 'ÿÿ' [ 651.521988][T16811] bridge_slave_1: left allmulticast mode [ 651.527783][T16811] bridge_slave_1: left promiscuous mode [ 651.533571][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.542105][T16811] bridge_slave_0: left allmulticast mode [ 651.547883][T16811] bridge_slave_0: left promiscuous mode [ 651.555384][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.707625][T16811] veth1_macvtap: left promiscuous mode [ 651.713304][T16811] veth0_vlan: left promiscuous mode [ 651.766223][ T36] kauditd_printk_skb: 915 callbacks suppressed [ 651.766247][ T36] audit: type=1400 audit(1750409668.210:133321): avc: denied { sys_module } for pid=30277 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 651.800268][ T36] audit: type=1400 audit(1750409668.210:133322): avc: denied { sys_module } for pid=30277 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 651.843629][T30277] veth0_vlan: entered promiscuous mode [ 651.857589][T30422] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.865377][ T36] audit: type=1400 audit(1750409668.210:133323): avc: denied { sys_module } for pid=30277 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 651.869492][T30422] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.896873][T30422] bridge_slave_0: entered allmulticast mode [ 651.904590][T30422] bridge_slave_0: entered promiscuous mode [ 651.916805][ T36] audit: type=1400 audit(1750409668.300:133324): avc: denied { read write } for pid=26994 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 651.921434][T30422] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.948991][T30422] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.956697][T30422] bridge_slave_1: entered allmulticast mode [ 651.965241][T30422] bridge_slave_1: entered promiscuous mode [ 651.999245][ T36] audit: type=1400 audit(1750409668.300:133325): avc: denied { read write open } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.031420][ T36] audit: type=1400 audit(1750409668.300:133326): avc: denied { ioctl } for pid=26994 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.065444][ T36] audit: type=1400 audit(1750409668.360:133327): avc: denied { read write } for pid=30435 comm="syz.3.9051" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 652.116142][T30440] rust_binder: Error while translating object. [ 652.116188][T30440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 652.123876][ T36] audit: type=1400 audit(1750409668.360:133328): avc: denied { ioctl open } for pid=30435 comm="syz.3.9051" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 652.131799][T30277] veth1_macvtap: entered promiscuous mode [ 652.152681][T30440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 652.174270][ T36] audit: type=1400 audit(1750409668.360:133329): avc: denied { ioctl } for pid=30435 comm="syz.3.9051" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 652.216619][T30438] SELinux: failed to load policy [ 652.235849][ T36] audit: type=1400 audit(1750409668.360:133330): avc: denied { sys_module } for pid=30277 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 652.375318][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.382526][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.396354][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.403458][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.514533][T30422] veth0_vlan: entered promiscuous mode [ 652.600116][T30422] veth1_macvtap: entered promiscuous mode [ 652.659308][T30450] rust_binder: Error while translating object. [ 652.659360][T30450] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 652.674090][T30450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5 [ 652.879983][T30459] binder: Unknown parameter 'statst' [ 652.923997][T30467] binder: Unknown parameter 'hash' [ 652.974560][T30470] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.009905][T30473] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 653.044802][T30474] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 653.140952][T30476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 653.151927][T30480] binder: Unknown parameter 'posixacl' [ 653.155194][T30476] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 653.167988][T30476] rust_binder: Read failure Err(EFAULT) in pid:9 [ 653.437315][T30493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 653.464314][T30497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.478155][T30493] rust_binder: Error while translating object. [ 653.488553][T30497] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.494050][T30493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 653.504608][T30493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 653.528942][T30497] rust_binder: Write failure EINVAL in pid:15 [ 653.539344][T30495] rust_binder: Write failure EINVAL in pid:13 [ 653.654003][T30501] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 653.821742][T30510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:742 [ 653.887979][T30513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.911712][T30513] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 653.938941][T30514] rust_binder: Write failure EINVAL in pid:742 [ 653.953058][T30513] rust_binder: Error while translating object. [ 653.971773][T30513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 653.983439][T30513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:21 [ 654.148356][T30524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 654.215309][T30516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 654.246595][T30528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:31 [ 654.292559][T30528] rust_binder: Read failure Err(EAGAIN) in pid:31 [ 654.767926][T30547] rust_binder: Write failure EFAULT in pid:745 [ 654.984889][T30562] rust_binder: Error while translating object. [ 655.019140][T30562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 655.041518][T30562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:29 [ 655.075379][T30567] random: crng reseeded on system resumption [ 655.095384][T30565] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 655.123953][T30565] rust_binder: Error while translating object. [ 655.130434][T30565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 655.140621][T30565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:749 [ 655.151078][T30567] rust_binder: Error while translating object. [ 655.168314][T30567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 655.183601][T30567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:42 [ 655.251910][T30573] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 655.488139][T30582] ------------[ cut here ]------------ [ 655.501706][T30582] WARNING: CPU: 1 PID: 30582 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0 [ 655.511245][T30582] Modules linked in: [ 655.515252][T30582] CPU: 1 UID: 0 PID: 30582 Comm: syz.3.9097 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362 [ 655.528905][T30582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 655.539108][T30582] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 655.545083][T30582] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 655.564922][T30582] RSP: 0018:ffffc9000273f5a0 EFLAGS: 00010246 [ 655.571041][T30582] RAX: 0000000000000000 RBX: 1ffff920004e7eb8 RCX: 0000000000000000 [ 655.579049][T30582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000273f648 [ 655.587095][T30582] RBP: ffffc9000273f6c8 R08: ffffc9000273f647 R09: 0000000000000000 [ 655.595140][T30582] R10: ffffc9000273f630 R11: fffff520004e7ec9 R12: ffffc9000273f5e0 [ 655.603217][T30582] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000 [ 655.611434][T30582] FS: 00007fb8049b26c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 655.620386][T30582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.627015][T30582] CR2: 0000200000001000 CR3: 000000010e3a6000 CR4: 00000000003526b0 [ 655.635115][T30582] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000800 [ 655.643318][T30582] DR3: 0000000100000001 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 655.651425][T30582] Call Trace: [ 655.654726][T30582] [ 655.657911][T30582] ? do_syscall_64+0x58/0xf0 [ 655.662751][T30582] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 655.668523][T30582] ? hashtab_init+0xdb/0x1f0 [ 655.673285][T30582] ___kmalloc_large_node+0x9c/0x1d0 [ 655.678690][T30582] ? hashtab_init+0xdb/0x1f0 [ 655.683419][T30582] __kmalloc_large_node_noprof+0x1e/0xe0 [ 655.689180][T30582] ? hashtab_init+0xdb/0x1f0 [ 655.693860][T30582] __kmalloc_noprof+0x26d/0x450 [ 655.698829][T30582] hashtab_init+0xdb/0x1f0 [ 655.703474][T30582] ? common_read+0x16d/0x480 [ 655.708108][T30582] symtab_init+0x44/0x70 [ 655.712872][T30582] common_read+0x1de/0x480 [ 655.717621][T30582] ? __cfi_common_read+0x10/0x10 [ 655.722715][T30582] ? hashtab_init+0x105/0x1f0 [ 655.727764][T30582] policydb_read+0xaa8/0x28c0 [ 655.733120][T30582] ? kasan_save_alloc_info+0x40/0x50 [ 655.738797][T30582] ? __cfi_policydb_read+0x10/0x10 [ 655.744141][T30582] ? security_load_policy+0x128/0x12f0 [ 655.749640][T30582] security_load_policy+0x162/0x12f0 [ 655.755039][T30582] ? irqentry_exit+0x4a/0x60 [ 655.759780][T30582] ? exc_page_fault+0x66/0xc0 [ 655.764785][T30582] ? asm_exc_page_fault+0x2b/0x30 [ 655.770025][T30582] ? __cfi_security_load_policy+0x10/0x10 [ 655.776020][T30582] ? rep_movs_alternative+0x4a/0xa0 [ 655.781390][T30582] sel_write_load+0x298/0x5e0 [ 655.786188][T30582] ? __cfi_sel_write_load+0x10/0x10 [ 655.791457][T30582] ? bpf_lsm_file_permission+0xd/0x20 [ 655.796856][T30582] ? __cfi_sel_write_load+0x10/0x10 [ 655.802134][T30582] vfs_write+0x3c0/0xe80 [ 655.806616][T30582] ? __cfi_vfs_write+0x10/0x10 [ 655.811612][T30582] ? __kasan_check_write+0x18/0x20 [ 655.816938][T30582] ? mutex_lock+0x92/0x1c0 [ 655.821395][T30582] ? __cfi_mutex_lock+0x10/0x10 [ 655.826548][T30582] ? __fget_files+0x2c5/0x340 [ 655.831282][T30582] ksys_write+0x141/0x250 [ 655.835658][T30582] ? xfd_validate_state+0x68/0x150 [ 655.840974][T30582] ? __cfi_ksys_write+0x10/0x10 [ 655.846049][T30582] ? __kasan_check_write+0x18/0x20 [ 655.851321][T30582] ? fpregs_restore_userregs+0x11d/0x260 [ 655.856989][T30582] __x64_sys_write+0x7f/0x90 [ 655.861638][T30582] x64_sys_call+0x271c/0x2ee0 [ 655.866687][T30582] do_syscall_64+0x58/0xf0 [ 655.871259][T30582] ? clear_bhb_loop+0x35/0x90 [ 655.876519][T30582] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 655.882592][T30582] RIP: 0033:0x7fb803b8e929 [ 655.887123][T30582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.907188][T30582] RSP: 002b:00007fb8049b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 655.916004][T30582] RAX: ffffffffffffffda RBX: 00007fb803db5fa0 RCX: 00007fb803b8e929 [ 655.924249][T30582] RDX: 00000000000012fe RSI: 0000200000000000 RDI: 0000000000000003 [ 655.932671][T30582] RBP: 00007fb803c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 655.941105][T30582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.949103][T30582] R13: 0000000000000000 R14: 00007fb803db5fa0 R15: 00007ffdc9ae1ab8 [ 655.957147][T30582] [ 655.960194][T30582] ---[ end trace 0000000000000000 ]--- [ 655.966372][T30582] SELinux: failed to load policy