last executing test programs: 25m58.245235923s ago: executing program 32 (id=6694): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x10}]}) write$ppp(r0, &(0x7f0000000300)="4daf", 0x2) 23m31.566490969s ago: executing program 33 (id=9665): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) 20m46.42151045s ago: executing program 34 (id=13610): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000001f00)={0x2020}, 0x2020) 20m31.720216137s ago: executing program 35 (id=13840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0x5000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x80, 0x1}, {0x2000, 0x0, 0x0, 0xff, 0x2, 0x1, 0x6, 0xf, 0x8, 0x9, 0x2}, {0xffff1000, 0x100000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x7, 0x86, 0xf3, 0x42}, {0x4, 0x4, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0x4}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x2, 0x3, 0x8, 0x8, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0x0, [0x5, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m10.315653678s ago: executing program 36 (id=14208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7f, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x4, 0x5, 0x12, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m38.882285223s ago: executing program 37 (id=14832): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r0, &(0x7f0000001600)="d93f71a95fe1c4b31a", 0x9) 18m43.525551046s ago: executing program 38 (id=15473): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x40000023, 0x0, 0x80}]}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x1a0, 0x0, 0x7}]}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 17m31.566942556s ago: executing program 39 (id=16184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)={0x1, 0x0, [{0xffff1000, 0x31, &(0x7f00000001c0)=""/49}]}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1800, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x6, 0xc0, 0x1ff, 0x4, 0x4, 0x0}) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000240)={r3, 0x0, 0x3}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000300)={{0x8, 0x5}, 0x100, './file0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f00000014c0)={0x1, 0x2, 0x1000, 0x62, &(0x7f0000000440)="febb746ab38187079fa5637d3fd2cb542c25f584119878185693aea6ed72d09e029b039dbb119c3abed65093a481ab32318fe1c5ce391a574f2a2c10b0d077be4d2e32e50f7239bc8d0de54c26de9cdf2bd4c586d347789ebe4db7d59884e68c09ef", 0x1000, 0x0, &(0x7f00000004c0)="15a8bb39d9b68500f582673d5334ac61f9fc0aed87bf419f68c8274b0e9bfc3c073eae9bbdf5a5f81deb7c27e9c1d0dd8012e617fc2522815a315b288937731072356240958839be3ad2a9ebc97d7e75cf1f020df82cffdd3cd5be4dd242d46bc9ef1248c5b507864c39766bc3ba5b465731b541a22c32721e73f65548e512d46b8c69b254b6cb7a3738c019fdc6111f5bbaaa1e3c7dd12d7c8204d220455a0c4148cff3a15c54bfb249d0a5d6c28d267bdf516ac49843280a08d0bb88c2ed26ee2db2336e1a7bce7afea33f6389dd8046b5d7ac34cb40ab3aff8b04c023832a9fe38c2a600635886d6775fbff96cf9f7b996ef4388107f791e9e8470c3d8951c5e770431d321337bb67c36844f27c544889dc50f955a893f690cb97aa5b78195b0aa4050e9304e74f2acaba13a816c10ffca1e0595caccc784f6a80b0c6590dfc76a2d6027e3f411f491a050722dd1ba0eddd0ee70808991ab2b45fe57d25fcdf8c4978e2dc7cbfae7e1e3ee848483e1b2094989a05d40a62a240c2d03a59952b5c9996b7cb09f083e946e6fdde7a6134ca0c234046b6b08b12ced496f83571a83a326aaffff4c203fefff5a4232a37d78ecce9a139c2123c4a6d7e12ff7ba9626f00518b83dafae719bc0a137645ed52757ee8aa57c336bd2186bcb6b057b28d42fe75185c74b79398b7ec83962e5945508af210fc1bb89cd06530706a4a502683381458b5c1dac2e5150d3c904f21c9de3d04f1c32085075a695f6ce2ae8df18348b2a08dfa293e29c25b78702ab133b25ace321f44d45e0d77f8edf9b789fbcb89aec6a5828b69577b3e45369aa1859a34f08dd717c327ac5209b11e62f3c35b27b6c46d08fd1c82f0079492de1ef9ea79d137247ce587d6ca2cd9e4844f7ccabc528d3ffef2f5dfca2984a017daa7127396bcda4d6421de12cf1d70eeec96960ba2ac7a04f18234fd9751156d0490aa472b96aedd3197c24cd237788ff327e9d7929fa8bf0f4cb3b531386d45d3da17b0a27ebdf5f96ede6f05ef264bb17abb28d29f75d2fa6e7d3a8483c7cfb36d37603af2ea8af03a986ad832dea270a215442b4f64bcce026c753cf3fd91c63077edfcad9bdecbe293a09ecf2ab63d4f7c12ab1e6d929b84ab99cce84963f443c8307c7de0383529ca2e827efc9aca94c0ddbad467a7b13bd309778fbc9833226ac0c230ce9c1374519f887ccf885f88f6de5122a10ed32aeb1597fc2e72ab7ca0ab200c6c00ff8ee7199a630cab39299def88643c0bcb105290ded4f0a6944b1daa15ae3a0c7641605f7bf0deae13504ae87615fb1b6cad3ce419f2fb8c8eda74a4f3abb5131fa43794e31577124d90da232a08136e8cb0b500341a80b7aa14bb82729874b322b28c76856b9203712f74ae676d88ad79e3b4c56ce369877f7c86df681956265d0c3d52d17db83978ed9fa1103ae7ac8eef3a8e0ffb5c1679ff6fffe5651177f8186fea873c6fa7f33530c9797f8896c6e49e9db415151809b3cd65bc03e1a350bc0b674f7c3ffcf036423e48d9f298cccde0b7b218ad55e01a1eb3edb7f01f4381a10479e2d90cbfb75b7e1978f1a85ff9895fdc19cbf1523dc6facf154227162d944a817aaabc642ec4524cad06963f295142920b8dbddfec836c22a7a81069d9874b7dd78c7aa15fd5cc71bb30c575cebd9fa5b18a7f33ae853a764d2cbe42190046963754ef50ea012b6961b4b230a1943f2875f3960b370aab5b4e84f9f6627be1d9199fcf3374d10d0fb29666a9017db6fa26836cab83a30b6a41baeccf58f583e3ddd2561e1587298ce31e48a9920ad5a3e6eabdca2334cb38bf171943503b0dc5888b503d63d7019e8e2521c3accda123f58142820be5d34736758104a454a38dda60c692c5dba00432d5dc12cdf790eb174cf36928977c303263e3d26438b8e991bb1ef7f55e4a025273be21b0f7ddf777739f3c37a5572bb456bd8af39a282f06d00940ce4f72193da8deabc1c76132cbdd9f002d5e41d02ce63cc00958d3c18ea657529fca3d41894e5a4c3de2ffda3970c09d0c2097fc40584339c76e461b7539e9082a8cd65d185cffe92e2e9842c4aaff6bf0962237d662b34117bb2fa234202dbfa92792109759500948f259b6cac0331b511fe6bb49be0da80961f8a6d8d497bcf56c1920655d279a0b3c0e76de69603092ba7bd441f63dece026edea1af8384da4465fd34b2ea3caf9507027453f3565f8e54a99124247d34f22530db5f8f372f6b94d41cfe4ee64b969c087f662df4219a444b95a5932e94f1fc80da450c5e009caa8b618def1d30df247b445a7341e66f444b014c96cd6919b7f19661e66d46d001ed7b44b1ca229914e3d441fd9bc0e340c75fae0f89ab72917de72c7ced6426ba71ac3c4b209a0c00aec6fe486717152b8f431a992dced425ce1b3462f77f88a3910eee8b73dc3264a5fe7678b27cf245ceca03f732d7e78b012ed800f2e3042e2cf3e6da1dd925a4d3a30f2001a42164939b9a7c3299193703143446293f11e91a2ec0f34dc65a907a9315808464230e2674d249f419b51d246cacdba4b31bd23dc88f427df80204e63ddb0046f5850a2ad5744240545da2a8ac71572aa3606f5fc3078eb4950051d7a9022a4761502248ffcbcb3465a3c4c9e594c80f5ca423127d7a202c4f324c3aff8611ae815d50268ce3122410e1ab8cf3f96e497f56893d2d5358c18a432bf759ba9a072ba4148554d354fc1f6cd1e299e0ab19f97ae383f4bd7f2c59247142e2b6531f66ebe9cda7da697174159aa9ba78ddc7ccfbc550a67efca43d4cb39d3555283661c50b6ed66ab73abd7ec55512ff0a75a76413d99947eeb34f4dfab7bf08d813c8c72130fb67a2dab35661cdbe087449fe47f57d28813f4000c906daaa103e16eb3881bd1fa3048fb4aabc47ce31a6132d2198dfac44d0ecd70339496f1ca39aae253f4fa3e3c353e9aafc283840b6fae97ea613906a84e6cf89e91f44afb31c4ca1dc23ebb3e20f5ab48acf64e28de99e22f228aed2357bf8368b32b08ba7d12af4517721e158ee3ebe10fdda830aebf2f74a84e9771fb1b917f42fe0e75fbdd7d3f02a5141c09dc3bf83f746d8e1b972b088218393b9a092ab754158b7e4dcb43dc6892987dc042e55a54b87ff0463bc01775b5b96e79a40a890df042dbac4371146c69d4d3c65bdf53e5a0f2bc27f1673a286a39834d9c3c2529997009acb58e83b7387a8c19a25d0bbd1d43be64c3a8348cd6d46883ce6c40528bc067f9b6f29c73887b1af0e142687221f0d17adaf8ec9809bab26d0c22940bace46f4230572e052d3a377a8c462046821700f86aecc5233367e019c899e7eaf2758425b1c4e0231ae1c9d1df0068cfd439ac8e22e25bbfae4ef01a869eb2f2dd4e576e21cac59770af8c65f21155af7df9c206aed0d322a06645f50f043945ec8eaca00610d1210093bb7741f6bc0a0914811f32e3723c331d006659e25872d0961105309950987ed4ed82f4467755ae620c73170d750340359b42b467a90a4c199ad85b10c38044e7dbb088bec3584d862773a1ab04e6419e61eb6b8e9ec88149932ee132af8f75a0894444695b4fc8a422a84464c7c2020f6d52abe97239e88375b5d382450e097d6b80c52716dbfa199ce4c97247a7db78465ec4ad7c3cc8747438972aafdaffb52d5d44f878e63b9c8bcab87295c89aac256c6e6cf19c3610983d85dc00d4d9ad958b4f2eb6c3cb7aba240a311bb2ac2ed5cade706e1271d71b1a42abfd2cb9de96eb6432622fd6f8b089413a57c05bbdbd5ad525a5eca048336ce802c5cd60dc9c848fbfc6bcc9f8fe5a37f1720b28a9e1286fdf87b154054545ea4fa5b1f8713ef512a28e4ec1f875abe860bcda85a22cad055df9a25e69df1f235d25e72156c47f2d967687b27dc85a07d0b91117b6e2f6420801c167c28204f0e1aeaafb5ea83d2663ce133610642a5aeab4c8c9b13b926ffbbe70db46f1edec21cc5a5a80d0af38063d2ab8d9cab076eaf8fac778f7108a4e34061ed5c5df55dddeb07bae3ea23d18921d2e849b669fd25219138303c99a69221157444941593b29ce4227c5c7c9792a0fe0f5745ce6b969d6a8423163f88f81418432737116a7a4a32ec71eb70d47e38f034252f5132f4407e66b4ba20ef93d0e13463ae1e1703f85fa93374aa0f66c2803a0409e59ad25f83541f6651e77a9b9324d1db01f17158cedf27ac028d7af5ceb01936828450f54ffe88cc493c4956b9d18679675adf72c8911071ebe5b0c779c20708eeff67fc54e674bd48367db63155f1ecf6ad9f2baa4d22d24edfe120ad6e8e2b4e8621ee1c7fcc5021f7fd59eaa481595c4aa82339cb6342fd8e6506dd2e7b909fb61240d8ff6c28516e1108a4453b126c1396b3ce2a32980cf4da7818c4649678b5ac41f4fdc9aa930dce11366c1b27d984f61c8ba9dc74733f5b9eab67aed8ea620fe2bdeaf7971b03cb3139355aa47de2cc8735413c3f78a0e6b7b5b20173de35d4e801c7425e3648983ab04777aea20c20943bc14c98f9b86e078ab9f10f3537738da3220ffa5b69292a2389cdec57a5982ffa6cacd4594d43b7534ed7128e13acac1bbc3bd593097ea2033061cd6132572c83296d3f1f6f6f46c644ea2a9d1cd6e53e9476cdd446447adbfcf8d5990b5c4e0a1ebebdb934a24a45b13b955c0dce41b6386fb9d0374b0670f1b2ecc048e14165306f1d7a5aece96971ff4fdf6808407d5c9633a8dd189afd7b207dc66214946635475f01b8c69c3080dadb9f67a4a82f3c49a6b88d00f0e440e4b39493a04bf7ef71ac10dfeef1823cbec0c674d172b7af52f3642f1659430a767d9af737b58abae5fb277ee676cec5d062032d7278fec4b244d46bf148a5121006d1ac20eca2e5a1763fbf6a6b22f9fdd19bc73dc1dc6bfdd63f9bd9837bdf5e16a2f7c457b01f8e7c91fe1a27397acf8c47fe4302a42d82dc5d51616bfa7a85e88cf86def988d97acaa01327ed6286fc2f05572c58347e39e2eb340508b29e2f8319105369e621910dd3b08c4a4eff6de606b6adf921985009523d0357f279c3d86dd669d10ede462475b3d09b68a383561113e213fedfca849b3a1a6caffeb66aabedad0e19dde72295994825cf4740f7d3e5e697adae28f858f7f07e2226dc1793e934ef5521e987699bdae5f626c3339c671bccbc43fa3a40e29d99603861b0b6ea80b4e2ae24071d935f387beab1633bd4800a4f6e3375948879abbf9d83c7599d14093215cbf39bed40a0d19b888cc7dee25ea6c804473fdc0a0d73e11d76691e3c96ba8e071158b3a84eb1aa83888a2da8232a7b699805d2f435c942f4d7f04757843e05cfb7d3419171e0bfe541e51e06fa6eadbcdf5424bf2b65dc711df20f9be96cfd0ed468cbacb0a8c39282fb52eb8589e6c748a06652c4e72cc5e84088b554c3efdee5dd8eb2384464a1a51338972495cb3777bb5fd304a18479977c83db14a9d2d0c07b90a67eba51a787381a41975586ba2c86dc4607f55da0d0ac97c588839889bc427c9b4b92dc7b9df47704977550beecfc1902ea0124f2c7c2b07d6ed2ad1a9fe80f7934b9553657313bf1567d46e8b1d9a74236ea83c71784841ae35ec45f4f02fd4c81b86c577a42a42007cecc8053c3abfb84af1cd5d1c6cc9e6056c08a11462ff42dd960ed85c48049b68beac54a03be47d8f6198333fb068653d2892de1876c3fe092cf6226ae17d743cf62531676e8cbe393e12c0003f4e834558511b8d6fbd6eecb43f62d90"}) 16m24.997898694s ago: executing program 40 (id=16882): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x3000) (async) 13m6.602460439s ago: executing program 41 (id=19216): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d80)={0x8, {"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", 0x1000}}, 0x1006) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x586, 0x0, 0xfffffffffffff10f}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(r0, 0x0, 0x0) 13m0.178125146s ago: executing program 7 (id=19425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="2d71b628") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0x20, 0x0, 0x7, 0xfffff00c}, {0x6}]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 12m59.584522585s ago: executing program 7 (id=19428): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) (fail_nth: 7) 12m59.529706986s ago: executing program 7 (id=19429): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae09, &(0x7f0000000000)) (fail_nth: 3) 12m59.446746887s ago: executing program 7 (id=19430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x104000, 0x104) mkdirat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0) 12m59.398050038s ago: executing program 7 (id=19432): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$TIOCCBRK(r0, 0x5428) 12m59.397711188s ago: executing program 7 (id=19433): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000140)={0x2, 0x1000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xb, 0x3}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) 12m44.350194706s ago: executing program 42 (id=19433): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=']') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000140)={0x2, 0x1000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xb, 0x3}) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r2, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) 11m24.478056996s ago: executing program 4 (id=20595): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000e68304"]) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) 11m24.349198578s ago: executing program 4 (id=20596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x110b}, @fda={0x66646185, 0x7, 0x0, 0x33}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}], 0xb3, 0x0, &(0x7f00000002c0)="8312ff7dd29cc9907d9f6ed940408f63831ab9838ef30ccab2a3f26df511dce52c9e908cbc53bb0280452c381cce05388c04781ebf31c845bc03d47e84dafaeebf4d705072c54126e55a9e84b075b49b04390af051a2a80a3f145cc61b2f72abc683558d449ebcb99b5f60dc7ff4b97cd7e75a83252be0b2ac634ca932a7510914912c46266fa589f4cef1dd26ce3c06ac20c29ebeb5b95401369a26e4c420ccd945068f6d9429f0e3f015b317f83339165f8d"}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) 11m24.134037341s ago: executing program 4 (id=20598): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x20000000008) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 11m24.133808641s ago: executing program 4 (id=20599): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="36a346ed"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/199) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) close(r3) 11m23.858109005s ago: executing program 4 (id=20602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x40a02, 0x0) write$khugepaged_scan(r2, &(0x7f0000000000), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x662541, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r9, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 11m23.53668386s ago: executing program 4 (id=20606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 11m8.495183168s ago: executing program 43 (id=20606): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 8m54.080842121s ago: executing program 6 (id=22349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x64a, 0x0, 0x3}, {0xb40, 0x0, 0x8e1}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010112}]}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="6465636f646573206d65ae"], 0xc) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m53.798131505s ago: executing program 6 (id=22350): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) close(r0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kheaders.tar.xz', 0x2400, 0x124) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000000c0)={0x1, r2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x3) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000180)) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000004240)={0x60, 0x0, r4, {{0x924, 0xce9, 0x80, 0x80000001, 0x13a0, 0x7f, 0x3, 0xfffffbff}}}, 0x60) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000042c0)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000004480)={0x2, 0x0, [{0x80a0000, 0x9c, &(0x7f0000004300)=""/156}, {0x100000, 0xbb, &(0x7f00000043c0)=""/187}]}) write$cgroup_subtree(r2, &(0x7f0000004500)={[{0x2d, 'cpu'}, {0x2d, 'cpuacct'}, {0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0x2b, 'freezer'}, {0x2b, 'memory'}, {0x2b, 'perf_event'}, {0x2d, 'freezer'}, {0x0, 'blkio'}, {0x2b, 'freezer'}]}, 0x55) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf, 0x13, r1, 0xc1f08000) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000004580), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000045c0)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000004600)={0xa708, 0x6, 0x400}) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000004640)) write$cgroup_pid(r2, &(0x7f0000004680)=r3, 0x12) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000046c0), 0x2, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000004700)={0x20, 0x0, 0x0, {0x6, 0x0, 0x4, 0x1}}, 0x20) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000004740)={0x90, 0x0, r4, {0x3, 0x3, 0x7, 0x9, 0x6, 0x100, {0x6, 0x8, 0x5, 0x3ff, 0x8, 0xa, 0x0, 0x7e, 0xccef, 0xc000, 0x80, r5, r6, 0x80000000, 0xc}}}, 0x90) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000004800)={0x2}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000004840)={{r1}, "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"}) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000005840)) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000005880)=@attr_pmu_init) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000005900)={0x4, &(0x7f00000058c0)=[{0x356, 0x2}, {0x7, 0x2}, {0x3, 0x7fff}, {0x3, 0x974}]}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005940), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000005980)) 8m53.666115958s ago: executing program 6 (id=22355): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000e, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 8m53.583291879s ago: executing program 6 (id=22359): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) 8m53.555806799s ago: executing program 6 (id=22361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) write$cgroup_devices(r3, &(0x7f0000002d80)=ANY=[], 0xffdd) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, 0x0) 8m53.555285069s ago: executing program 3 (id=22362): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) close(r1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/93, 0x5d, 0x1, 0x31}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 8m53.47802033s ago: executing program 3 (id=22364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1fc}]}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 8m53.347610842s ago: executing program 3 (id=22369): syz_clone3(&(0x7f0000002b00)={0x2000500, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m53.238136934s ago: executing program 3 (id=22371): ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000600)={0x0, 0x7, 0x8000000000000001}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x20) 8m53.211809484s ago: executing program 3 (id=22373): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x1b) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000240)) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000280)={0x1, 0x2, 0x7f, 0x0, 0x6, "3d11ad18fa0ce2c290d7631fd6f18c0e4f93d3"}) ioctl$KVM_CREATE_IRQCHIP(r4, 0x8010aebb) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) 8m53.175384265s ago: executing program 6 (id=22374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0xa8480f039ecd90f8, &(0x7f0000000080)=ANY=[@ANYBLOB="04966ca7808d7f0c435362dd31c0645ccf79ab86000000502fa091bf1c2d8c785171ab672feb7ed4dc75b0005dd9d731da59fab9194274897862fcc2f7db76c117fad4d833b2364f09"]) 8m52.771172621s ago: executing program 3 (id=22380): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7, 0xbb4}) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x618cb000) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x6}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x3800000000000000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x54, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x341001, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x10800, 0x24) close(r0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000240)) write$cgroup_int(r3, &(0x7f0000000280)=0xfffffffffffffff7, 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x9ab2}) write$binfmt_register(r2, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3d5d, 0x3a, '/dev/null\x00', 0x3a, '\'^%+.+', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x43, 0x46]}, 0x3b) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x7ff, 0x8}) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2800008, 0x4000010, r0, 0xcaee9000) r4 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x119a40, 0x12) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0)) read$ptp(r0, &(0x7f0000000400)=""/35, 0x23) syz_clone(0x8000080, &(0x7f0000000440)="1a6cde5570b980671b935d246e056264cbb1541cfe9b78c39b3a32d0a6d67f14ba3414f13253be61c41395bd6e55d32cb02e12704f2133fec038", 0x3a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="73166641784bb0fea9186352089bf1e53d23689f449121af94a7032317f3232c63e9584f902e86211ccdb4756f35be37d00ccefd00806b2c6b69bf66e28cf11f4269a893c5086d832f49f0d933a95dafb9994228c0ab23d06fcf5fff8381c7a874ded5f86ac44e43defc41d6528f7836c367868abffceb676e76b5f29e763db5969d208456db75df4cb07f9da996bc6418f74e8ed91a646dae1181a5136eeb6e560b8677fe52bd17701bff5e3bd21f81ec01acdee2c3ea7e5ab888ad17bd52c7357bd5e58049dcf4ea0e464ec667d4d19a740c8057327db20253f044b789a44af37582887f628ee5554bb98f") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'dummy0\x00', 0x200}) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000640)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000006c0)={0x0, 0x3, 0xffffffffffffffcc}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000700)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000740)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) 8m38.069821134s ago: executing program 44 (id=22374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x26e1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xcca, 0x1, 0x1000, 0x6, 0x17}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0xa8480f039ecd90f8, &(0x7f0000000080)=ANY=[@ANYBLOB="04966ca7808d7f0c435362dd31c0645ccf79ab86000000502fa091bf1c2d8c785171ab672feb7ed4dc75b0005dd9d731da59fab9194274897862fcc2f7db76c117fad4d833b2364f09"]) 8m37.549315401s ago: executing program 45 (id=22380): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x7, 0xbb4}) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'rm\x00'}, 0x9) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x618cb000) write$cgroup_devices(r0, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x6}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x3800000000000000}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x54, 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x341001, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x10800, 0x24) close(r0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000240)) write$cgroup_int(r3, &(0x7f0000000280)=0xfffffffffffffff7, 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x9ab2}) write$binfmt_register(r2, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3d5d, 0x3a, '/dev/null\x00', 0x3a, '\'^%+.+', 0x3a, './file0', 0x3a, [0x4f, 0x4f, 0x43, 0x46]}, 0x3b) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x7ff, 0x8}) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2800008, 0x4000010, r0, 0xcaee9000) r4 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x119a40, 0x12) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0)) read$ptp(r0, &(0x7f0000000400)=""/35, 0x23) syz_clone(0x8000080, &(0x7f0000000440)="1a6cde5570b980671b935d246e056264cbb1541cfe9b78c39b3a32d0a6d67f14ba3414f13253be61c41395bd6e55d32cb02e12704f2133fec038", 0x3a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="73166641784bb0fea9186352089bf1e53d23689f449121af94a7032317f3232c63e9584f902e86211ccdb4756f35be37d00ccefd00806b2c6b69bf66e28cf11f4269a893c5086d832f49f0d933a95dafb9994228c0ab23d06fcf5fff8381c7a874ded5f86ac44e43defc41d6528f7836c367868abffceb676e76b5f29e763db5969d208456db75df4cb07f9da996bc6418f74e8ed91a646dae1181a5136eeb6e560b8677fe52bd17701bff5e3bd21f81ec01acdee2c3ea7e5ab888ad17bd52c7357bd5e58049dcf4ea0e464ec667d4d19a740c8057327db20253f044b789a44af37582887f628ee5554bb98f") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'dummy0\x00', 0x200}) ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000640)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000006c0)={0x0, 0x3, 0xffffffffffffffcc}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000700)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000740)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000780)) 2m46.258637571s ago: executing program 9 (id=26855): mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x36e, 0x5, 0xd, 0xfffffffe, 0x0, 0x40}]}) 2m46.240814202s ago: executing program 9 (id=26856): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x81, 0x5, 0x7, 0x5}, 'syz0\x00', 0x40}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x14) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) 2m46.178075992s ago: executing program 9 (id=26857): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="977e13ee0e7e85d52130a449e44fbdbe551a2bd409685b61eecdb2d06c66b9e0a68979a853e28f23df4c98c9115a8959c8dc488ab6a7e494ba38d18c27fd31e2983ef28119574a03c3aa55f0dfe841f1"}) close(r0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) r1 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x80000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x1}, @increfs, @request_death={0x400c630e, 0x1}, @decrefs, @free_buffer={0x40086303, r1}, @increfs={0x40046304, 0x1}], 0xef, 0x0, &(0x7f00000001c0)="37de483d3c3e6221a9a273d42a536d7b081c6e474b57ab5d3e217f66d023ac19347d2873082de690564ee384be3b9e1cb289e3b2e57e26b4ed7aa8818abcacda61f48cde1effb79132a89f164e7594011ac4c01e7db99646585d1856d2ec8ea73a035dd24243f6a73b94215b7dcf0ccb1766640498ba59bf5e1a9a0cae97deb4c15ea30a0e23ca8c80e7b21ba3157054039adc91ca2aad4a91271877c88169c1fe26acc03b2877bf1b0bbab101bd6910d20a61aad53c4afff4f04e604aeb96b9f1a35ce17bebf639ed4c679de6f1a789e9b253f71e507c79749dc51f61b3d5cfdeedf550e36c54575f0ef7dc9f8731"}) 2m45.568604032s ago: executing program 9 (id=26874): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x7706, 0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0) write$UHID_INPUT2(r3, 0x0, 0xff0f) (async) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x300000a, 0x10, r0, 0x77f3d000) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2m45.486232733s ago: executing program 9 (id=26867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 2m45.455727234s ago: executing program 9 (id=26869): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0x0, 0x65, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xdddd0000, 0x8, 0x8, 0xff, 0x4, 0x81, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x45}, {0xf000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x138, 0x8000000000b, 0xf801, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x5406, 0xfffffffffffffffe) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc001102c}]}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x207, 0x0, 0x400}]}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 2m30.437881551s ago: executing program 46 (id=26869): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400), 0x48) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0xf, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x13}, {0x8080000, 0x4, 0xc, 0x8, 0x0, 0x0, 0x0, 0x65, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0xdddd0000, 0x8, 0x8, 0xff, 0x4, 0x81, 0xe, 0x0, 0x3c, 0x7d}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0xdddd0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xff}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x10, 0x45}, {0xf000}, {0xeeee8000}, 0xfdfcffdb, 0x0, 0xdddd0000, 0x138, 0x8000000000b, 0xf801, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x7]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r5, 0x5406, 0xfffffffffffffffe) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc001102c}]}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x207, 0x0, 0x400}]}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 1m48.075582622s ago: executing program 1 (id=27469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) syz_clone3(&(0x7f00000029c0)={0x100000000000000, 0x0, 0x0, 0x0, {0x8004}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m48.053839623s ago: executing program 1 (id=27471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc001001f, 0x0, 0x4}]}) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESHEX], 0xffdd) 1m47.52780205s ago: executing program 1 (id=27481): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:N/', @ANYRESOCT], 0x31) 1m47.501281721s ago: executing program 1 (id=27482): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[{@stats}], [{@dont_hash}]}) 1m47.426182542s ago: executing program 1 (id=27483): prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000000000000070000000200000004040000e30600003ca4831e09c6c7a7429328b500000000000000000000000001000000e100000002000000ff0e0200610e000065"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000400)) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f0000000040)={{0x7, 0x800}, {0x8, 0x96}, 0x19}) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5}) 1m47.290117454s ago: executing program 1 (id=27487): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000080)='syz0\x00') r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008e"]) write$selinux_load(r3, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0"}, 0x20) 1m31.883068358s ago: executing program 47 (id=27487): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000080)='syz0\x00') r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008e"]) write$selinux_load(r3, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "a5199fcdafdf3bb7cc4c8bc74a5ec2b0"}, 0x20) 1.153042902s ago: executing program 0 (id=28796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000018010040"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) 1.090100934s ago: executing program 8 (id=28797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455cb, 0x6800000000000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x0, 0x300000b, 0x50, r4, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000060000000400000000800000dac7000009000000000000400800000072470000080000000400000000000000000000000a000000ff030000000000c00500000000000010000000800600000003000000090000000300000000000001bf7606e79f01a2b9b38803afdfe91ae644afc7205e2bad25fd501edc6b96149c9e4dce0e20c5faae35762872e456"]) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x4, 0x4, 0x6, '\x00', 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 918.221247ms ago: executing program 0 (id=28798): openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8527d000) 917.970707ms ago: executing program 8 (id=28799): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 917.830196ms ago: executing program 0 (id=28800): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 910.496656ms ago: executing program 8 (id=28801): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, 0xffffffffffffffff, 0x31b8d000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000040)='.\x00', 0x0) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r1, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10010, 0xffffffffffffffff, 0x31b8d000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (async) unlinkat(r2, &(0x7f0000000040)='.\x00', 0x0) (async) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r1, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) (async) 901.684656ms ago: executing program 0 (id=28802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f00000004c0)) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x4003831, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x2, 0x4003831, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000040)='\x00') mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x3000007, 0x2012, r6, 0x0) ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x80004, 0x6) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) read$FUSE(r8, &(0x7f0000000ac0)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$VT_OPENQRY(r8, 0x5600, &(0x7f0000000100)) close(r10) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x2000007, 0x2012, r6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 837.855528ms ago: executing program 8 (id=28804): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='1\x00', 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="55dd"}) 818.121948ms ago: executing program 2 (id=28805): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000004a00), 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="977e13ee0e7e85d52130a449e44fbdbe551a2bd409685b61eecdb2d06c66b9e0a68979a853e28f23df4c98c9115a8959c8dc488ab6a7e494ba38d18c27fd31e2983ef28119574a03c3aa55f0dfe841f1"}) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4b49, 0x2000000c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) 808.519998ms ago: executing program 8 (id=28806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r3, &(0x7f00000010c0), 0x3fffff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f00000000c0)={0x94, 0x0, 0x8000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xb675, 0x9}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[], 0xffdd) close(r0) 582.159832ms ago: executing program 2 (id=28807): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 460.820783ms ago: executing program 2 (id=28809): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0xf1f8, 0xe}, 'syz1\x00', 0x22}) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$kvm(0x0, &(0x7f0000000040), 0x800800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x2000004002004c2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000400)={0x0, r1}) mmap(&(0x7f0000598000/0x4000)=nil, 0x4000, 0x9, 0x28011, r0, 0xc1211000) 366.160815ms ago: executing program 0 (id=28810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000001040)={0x0, 0x2000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000011c0)={0x6000, 0x8000}) 365.866565ms ago: executing program 8 (id=28811): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x91, 0x0, 0x0, 0x5, 0x6, 0x9, 0x7f, 0x2, 0x0, 0x4, 0x9, 0x0, 0xfffffffd, 0x1, 0x1, 0x5, 0xd, 0x8, '\x00', 0xe, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd}, &(0x7f00000020c0)}}], 0xffffffffffffff95, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 272.089986ms ago: executing program 5 (id=28812): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000001200)) mkdirat(r1, &(0x7f0000000000)='./file2\x00', 0x15c) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1000}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) 220.486607ms ago: executing program 5 (id=28813): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000040), 0x0) mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, r0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x200000000, 0x3a, '/dev/ashmem\x00', 0x3a, '0*+*@$', 0x3a, './file0', 0x3a, [0x43, 0x50, 0x50, 0x43, 0x50]}, 0x3e) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 154.261928ms ago: executing program 5 (id=28814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000001040)={0x0, 0x2000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000011c0)={0x6000, 0x8000, 0x2000000}) 128.765118ms ago: executing program 0 (id=28815): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000080)={0xdc}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000140)=0x3) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, 0x0) 110.868288ms ago: executing program 2 (id=28816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000021c0)=[@dead_binder_done, @dead_binder_done, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={@fd, @fda={0x66646185, 0x8, 0x1, 0x33}, @fd}, &(0x7f00000020c0)}}], 0xffffffffffffff95, 0x0, 0x0}) 77.143839ms ago: executing program 2 (id=28817): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r0, 0x0, 0x0) 6.18044ms ago: executing program 5 (id=28818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100)=0x2000, 0x1001) 5.83702ms ago: executing program 5 (id=28819): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x2) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000001c0)={{r0}, "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"}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000001240)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001280)={r0, 0x7fff, 0x5, 0xb4c9}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000012c0)) write$tcp_mem(r3, &(0x7f0000001300)={0x8, 0x20, 0x8, 0x20, 0x9}, 0x48) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x210000, 0x0) write$tcp_mem(r4, &(0x7f00000013c0)={0x3, 0x20, 0x1, 0x20, 0x4}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001440)={r0, 0xfffffffffffffff8, 0x9, 0x5}) write$cgroup_int(r4, &(0x7f0000001480)=0xfffffffffffffff6, 0x12) write$UHID_CREATE2(r4, &(0x7f00000014c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x89, 0x100, 0x0, 0x9, 0x6, 0x7, "6b006f70593bd1064236ffc353ffc6588ad0da9c2d70c9a6cb3435c5f6ca19d2cad98687c8fd83314f487164db77350c769667fa315a827cc8d5a563f6415efa85cf68683f0ff045c060970c7b412a17c317523cc6131d13a93cd46d4b0400bc8e294224baef6fa2587e1f13bd577436572e8c2115e3ab4e3e6d72ed9af4347f883e8f020399e0f536"}}, 0x1a1) write$cgroup_subtree(r5, &(0x7f0000001680)={[{0x2b, 'perf_event'}, {0x2d, 'cpu'}]}, 0x11) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000001900)=r7) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001940)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r8, &(0x7f0000001980)={0x7, 0x20, 0x2, 0x20, 0x7}, 0x48) r9 = openat$cgroup_int(r5, &(0x7f0000001a00)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000001a40), 0x12) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) ioctl$FIONCLEX(r9, 0x5450) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000001a80), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, &(0x7f0000001ac0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$FUSE(r6, &(0x7f0000001b00)={0x2020}, 0x2020) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000003b40)) 5.698611ms ago: executing program 2 (id=28820): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 9) 0s ago: executing program 5 (id=28821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$RTC_WKALM_SET(r3, 0x40187013, &(0x7f0000000080)={0x1}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r6, &(0x7f0000000480)="534287ac770767f7429748", 0xb) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0x5000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0xc, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2}, {0x8080000, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xfd}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x8080000, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1]}) ioctl$KVM_GET_SREGS(r7, 0x8138ae83, &(0x7f0000000840)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x20b, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.003733][ T36] audit: type=1400 audit(1750305089.649:231997): avc: denied { read write open } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.028889][ T36] audit: type=1400 audit(1750305089.649:231998): avc: denied { ioctl } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.054577][ T36] audit: type=1400 audit(1750305089.659:231999): avc: denied { read write } for pid=7655 comm="syz-executor" name="loop5" dev="devtmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.079045][ T36] audit: type=1400 audit(1750305089.659:232000): avc: denied { read write open } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.106920][ T36] audit: type=1400 audit(1750305089.659:232001): avc: denied { ioctl } for pid=7655 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=1033 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1751.141028][ T36] audit: type=1400 audit(1750305089.669:232002): avc: denied { read } for pid=9031 comm="syz.8.28194" name="binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1751.167864][ T36] audit: type=1400 audit(1750305089.679:232003): avc: denied { read open } for pid=9031 comm="syz.8.28194" path="/dev/binderfs/binder0" dev="binder" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1751.192599][ T36] audit: type=1400 audit(1750305089.679:232004): avc: denied { read } for pid=9031 comm="syz.8.28194" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1751.215802][ T36] audit: type=1400 audit(1750305089.679:232005): avc: denied { read open } for pid=9031 comm="syz.8.28194" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1751.371072][ T9042] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 1751.379545][ T9042] rust_binder: Write failure EINVAL in pid:397 [ 1752.280731][ T9072] binder: Unknown parameter 'dev/rtc0' [ 1752.330536][ T9078] input: syz0 as /devices/virtual/input/input1448 [ 1752.437056][ T9081] binder: Unknown parameter 'coyBLV"i5ntext' [ 1752.568961][ T9088] FAULT_INJECTION: forcing a failure. [ 1752.568961][ T9088] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.583954][ T9088] CPU: 1 UID: 0 PID: 9088 Comm: syz.2.28216 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1752.583984][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1752.583996][ T9088] Call Trace: [ 1752.584002][ T9088] [ 1752.584009][ T9088] __dump_stack+0x21/0x30 [ 1752.584033][ T9088] dump_stack_lvl+0x10c/0x190 [ 1752.584052][ T9088] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1752.584072][ T9088] ? __kasan_check_write+0x18/0x20 [ 1752.584092][ T9088] ? _raw_spin_lock+0x8c/0x120 [ 1752.584112][ T9088] dump_stack+0x19/0x20 [ 1752.584130][ T9088] should_fail_ex+0x3d9/0x530 [ 1752.584148][ T9088] should_failslab+0xac/0x100 [ 1752.584170][ T9088] kmem_cache_alloc_noprof+0x42/0x3a0 [ 1752.584189][ T9088] ? alloc_file_pseudo_noaccount+0x145/0x300 [ 1752.584213][ T9088] ? _raw_spin_unlock+0x45/0x60 [ 1752.584233][ T9088] alloc_file_pseudo_noaccount+0x145/0x300 [ 1752.584256][ T9088] ? __kasan_check_write+0x18/0x20 [ 1752.584277][ T9088] ? __cfi_alloc_file_pseudo_noaccount+0x10/0x10 [ 1752.584300][ T9088] ? iput+0x2b5/0x8d0 [ 1752.584322][ T9088] bdev_file_open_by_dev+0x17e/0x240 [ 1752.584343][ T9088] swsusp_check+0x59/0x490 [ 1752.584361][ T9088] software_resume+0x46/0x310 [ 1752.584377][ T9088] resume_store+0x2ed/0x430 [ 1752.584393][ T9088] ? __cfi_resume_store+0x10/0x10 [ 1752.584409][ T9088] ? _copy_from_iter+0x212/0x14b0 [ 1752.584432][ T9088] ? __kasan_check_write+0x18/0x20 [ 1752.584450][ T9088] ? __cfi_resume_store+0x10/0x10 [ 1752.584466][ T9088] kobj_attr_store+0x73/0xa0 [ 1752.584487][ T9088] ? __cfi_kobj_attr_store+0x10/0x10 [ 1752.584506][ T9088] sysfs_kf_write+0x13e/0x160 [ 1752.584526][ T9088] kernfs_fop_write_iter+0x2fb/0x4d0 [ 1752.584550][ T9088] ? __cfi_sysfs_kf_write+0x10/0x10 [ 1752.584568][ T9088] vfs_write+0x694/0xe80 [ 1752.584587][ T9088] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 1752.584611][ T9088] ? __cfi_vfs_write+0x10/0x10 [ 1752.584631][ T9088] ? __cfi_mutex_lock+0x10/0x10 [ 1752.584655][ T9088] ksys_write+0x141/0x250 [ 1752.584672][ T9088] ? __cfi_ksys_write+0x10/0x10 [ 1752.584692][ T9088] ? __kasan_check_read+0x15/0x20 [ 1752.584710][ T9088] __x64_sys_write+0x7f/0x90 [ 1752.584729][ T9088] x64_sys_call+0x271c/0x2ee0 [ 1752.584750][ T9088] do_syscall_64+0x58/0xf0 [ 1752.584770][ T9088] ? clear_bhb_loop+0x35/0x90 [ 1752.584792][ T9088] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1752.584815][ T9088] RIP: 0033:0x7f1505f8e929 [ 1752.584830][ T9088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.584851][ T9088] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1752.584872][ T9088] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1752.584886][ T9088] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 1752.584899][ T9088] RBP: 00007f1506d61090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.584911][ T9088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.584922][ T9088] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1752.584935][ T9088] [ 1752.927210][ T9090] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 1753.038588][ T64] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1753.042919][ T9099] __vm_enough_memory: pid: 9099, comm: syz.0.28221, bytes: 281474976845824 not enough memory for the allocation [ 1753.079958][ T9099] input: syz1 as /devices/virtual/input/input1449 [ 1753.086103][ T64] hid-generic 0000:0000:0000.0060: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1753.110177][ T9099] rust_binder: Write failure EINVAL in pid:28 [ 1753.193284][ T9101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318 [ 1753.252971][ T9105] rust_binder: Error while translating object. [ 1753.262242][ T9105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1753.278247][ T9105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:320 [ 1753.621536][ T9127] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 1753.868030][ T9137] random: crng reseeded on system resumption [ 1753.896677][ T9137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 1754.265712][T26032] hid-generic 0000:0000:0000.0061: unknown main item tag 0x0 [ 1754.285304][T26032] hid-generic 0000:0000:0000.0061: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1754.569472][ T9170] FAULT_INJECTION: forcing a failure. [ 1754.569472][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 1754.596688][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.0.28245 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1754.596718][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1754.596730][ T9170] Call Trace: [ 1754.596737][ T9170] [ 1754.596744][ T9170] __dump_stack+0x21/0x30 [ 1754.596769][ T9170] dump_stack_lvl+0x10c/0x190 [ 1754.596788][ T9170] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1754.596808][ T9170] dump_stack+0x19/0x20 [ 1754.596826][ T9170] should_fail_ex+0x3d9/0x530 [ 1754.596845][ T9170] should_failslab+0xac/0x100 [ 1754.596866][ T9170] kmem_cache_alloc_noprof+0x42/0x3a0 [ 1754.596885][ T9170] ? seq_open+0x6f/0x1d0 [ 1754.596907][ T9170] seq_open+0x6f/0x1d0 [ 1754.596933][ T9170] ? __kasan_check_write+0x18/0x20 [ 1754.596951][ T9170] kernfs_fop_open+0x555/0xe20 [ 1754.596968][ T9170] ? __cfi_kernfs_fop_open+0x10/0x10 [ 1754.596984][ T9170] do_dentry_open+0x978/0x1510 [ 1754.597009][ T9170] vfs_open+0x86/0x230 [ 1754.597024][ T9170] ? __cfi_vfs_open+0x10/0x10 [ 1754.597040][ T9170] ? may_open+0x352/0x430 [ 1754.597059][ T9170] path_openat+0x2b6c/0x34b0 [ 1754.597080][ T9170] ? kasan_save_alloc_info+0x40/0x50 [ 1754.597098][ T9170] ? getname_flags+0xc6/0x710 [ 1754.597117][ T9170] ? do_sys_openat2+0xcb/0x1c0 [ 1754.597133][ T9170] ? __x64_sys_openat+0x13a/0x170 [ 1754.597150][ T9170] ? do_filp_open+0x3e0/0x3e0 [ 1754.597173][ T9170] do_filp_open+0x1c6/0x3e0 [ 1754.597195][ T9170] ? __cfi_do_filp_open+0x10/0x10 [ 1754.597220][ T9170] ? alloc_fd+0x4e7/0x5a0 [ 1754.597241][ T9170] do_sys_openat2+0x12c/0x1c0 [ 1754.597256][ T9170] ? fput+0x1a5/0x240 [ 1754.597279][ T9170] ? do_sys_open+0x100/0x100 [ 1754.597293][ T9170] ? ksys_write+0x1ef/0x250 [ 1754.597311][ T9170] ? __cfi_ksys_write+0x10/0x10 [ 1754.597328][ T9170] __x64_sys_openat+0x13a/0x170 [ 1754.597346][ T9170] x64_sys_call+0xe69/0x2ee0 [ 1754.597366][ T9170] do_syscall_64+0x58/0xf0 [ 1754.597387][ T9170] ? clear_bhb_loop+0x35/0x90 [ 1754.597409][ T9170] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1754.597428][ T9170] RIP: 0033:0x7f0742b8e929 [ 1754.597441][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1754.597453][ T9170] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1754.597470][ T9170] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1754.597482][ T9170] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1754.597493][ T9170] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1754.597505][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1754.597517][ T9170] R13: 0000000000000000 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1754.597532][ T9170] [ 1754.934709][ T9177] random: crng reseeded on system resumption [ 1754.962051][ T9177] Restarting kernel threads ... done. [ 1755.017216][ T9179] FAULT_INJECTION: forcing a failure. [ 1755.017216][ T9179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.033353][ T9179] CPU: 1 UID: 0 PID: 9179 Comm: syz.5.28249 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1755.033382][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1755.033393][ T9179] Call Trace: [ 1755.033400][ T9179] [ 1755.033408][ T9179] __dump_stack+0x21/0x30 [ 1755.033432][ T9179] dump_stack_lvl+0x10c/0x190 [ 1755.033452][ T9179] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1755.033475][ T9179] dump_stack+0x19/0x20 [ 1755.033490][ T9179] should_fail_ex+0x3d9/0x530 [ 1755.033507][ T9179] should_fail+0xf/0x20 [ 1755.033522][ T9179] should_fail_usercopy+0x1e/0x30 [ 1755.033540][ T9179] _copy_from_user+0x22/0xb0 [ 1755.033561][ T9179] kvm_arch_dev_ioctl+0x192/0x890 [ 1755.033582][ T9179] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 1755.033604][ T9179] ? selinux_file_ioctl+0x6e0/0x1360 [ 1755.033637][ T9179] ? vfs_write+0x8ba/0xe80 [ 1755.033656][ T9179] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1755.033678][ T9179] ? __cfi_vfs_write+0x10/0x10 [ 1755.033697][ T9179] ? __kasan_check_write+0x18/0x20 [ 1755.033715][ T9179] ? mutex_unlock+0x8b/0x240 [ 1755.033739][ T9179] kvm_dev_ioctl+0x48d/0x14d0 [ 1755.033760][ T9179] ? __fget_files+0x2c5/0x340 [ 1755.033781][ T9179] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 1755.033805][ T9179] ? bpf_lsm_file_ioctl+0xd/0x20 [ 1755.033823][ T9179] ? security_file_ioctl+0x34/0xd0 [ 1755.033843][ T9179] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 1755.033862][ T9179] __se_sys_ioctl+0x132/0x1b0 [ 1755.033884][ T9179] __x64_sys_ioctl+0x7f/0xa0 [ 1755.033903][ T9179] x64_sys_call+0x1878/0x2ee0 [ 1755.033924][ T9179] do_syscall_64+0x58/0xf0 [ 1755.033943][ T9179] ? clear_bhb_loop+0x35/0x90 [ 1755.033964][ T9179] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1755.033983][ T9179] RIP: 0033:0x7faf8e78e929 [ 1755.033996][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.034012][ T9179] RSP: 002b:00007faf8f54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.034030][ T9179] RAX: ffffffffffffffda RBX: 00007faf8e9b5fa0 RCX: 00007faf8e78e929 [ 1755.034043][ T9179] RDX: 0000200000000180 RSI: 00000000c004ae02 RDI: 0000000000000003 [ 1755.034055][ T9179] RBP: 00007faf8f54a090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.034066][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.034077][ T9179] R13: 0000000000000000 R14: 00007faf8e9b5fa0 R15: 00007ffe54c0c228 [ 1755.034091][ T9179] [ 1755.036463][ T9181] Bluetooth: hci1: Frame reassembly failed (-84) [ 1755.299874][ T9187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:413 [ 1755.318527][ T9185] Bluetooth: hci1: Frame reassembly failed (-84) [ 1755.451104][ T9202] rust_binder: Write failure EFAULT in pid:344 [ 1755.480553][ T9205] FAULT_INJECTION: forcing a failure. [ 1755.480553][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1755.499806][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.5.28259 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1755.499834][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1755.499845][ T9205] Call Trace: [ 1755.499851][ T9205] [ 1755.499859][ T9205] __dump_stack+0x21/0x30 [ 1755.499883][ T9205] dump_stack_lvl+0x10c/0x190 [ 1755.499902][ T9205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1755.499923][ T9205] dump_stack+0x19/0x20 [ 1755.499940][ T9205] should_fail_ex+0x3d9/0x530 [ 1755.499958][ T9205] should_fail+0xf/0x20 [ 1755.499972][ T9205] should_fail_usercopy+0x1e/0x30 [ 1755.499987][ T9205] strncpy_from_user+0x28/0x270 [ 1755.500002][ T9205] ? getname_flags+0xc6/0x710 [ 1755.500020][ T9205] getname_flags+0x102/0x710 [ 1755.500038][ T9205] ? build_open_flags+0x487/0x600 [ 1755.500052][ T9205] getname+0x1b/0x30 [ 1755.500066][ T9205] do_sys_openat2+0xcb/0x1c0 [ 1755.500081][ T9205] ? fput+0x1a5/0x240 [ 1755.500102][ T9205] ? do_sys_open+0x100/0x100 [ 1755.500117][ T9205] ? ksys_write+0x1ef/0x250 [ 1755.500134][ T9205] ? __cfi_ksys_write+0x10/0x10 [ 1755.500153][ T9205] __x64_sys_openat+0x13a/0x170 [ 1755.500170][ T9205] x64_sys_call+0xe69/0x2ee0 [ 1755.500190][ T9205] do_syscall_64+0x58/0xf0 [ 1755.500209][ T9205] ? clear_bhb_loop+0x35/0x90 [ 1755.500229][ T9205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1755.500249][ T9205] RIP: 0033:0x7faf8e78e929 [ 1755.500263][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.500277][ T9205] RSP: 002b:00007faf8f54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1755.500296][ T9205] RAX: ffffffffffffffda RBX: 00007faf8e9b5fa0 RCX: 00007faf8e78e929 [ 1755.500310][ T9205] RDX: 00000000001090c2 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1755.500323][ T9205] RBP: 00007faf8f54a090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.500335][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.500347][ T9205] R13: 0000000000000000 R14: 00007faf8e9b5fa0 R15: 00007ffe54c0c228 [ 1755.500362][ T9205] [ 1755.725633][ T9208] rust_binder: inc_ref_done called when no active inc_refs [ 1755.725655][ T9208] rust_binder: Write failure EINVAL in pid:421 [ 1755.798507][ T306] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 1755.819366][ T306] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1755.994272][ T36] kauditd_printk_skb: 697 callbacks suppressed [ 1755.994290][ T36] audit: type=1400 audit(1750305094.679:232701): avc: denied { read } for pid=9213 comm="syz.0.28261" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.035320][ T36] audit: type=1400 audit(1750305094.679:232702): avc: denied { read open } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.059252][ T36] audit: type=1400 audit(1750305094.679:232703): avc: denied { read } for pid=9213 comm="syz.0.28261" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.083368][ T36] audit: type=1400 audit(1750305094.679:232704): avc: denied { read open } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.109545][ T36] audit: type=1400 audit(1750305094.679:232705): avc: denied { ioctl } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.134429][ T36] audit: type=1400 audit(1750305094.689:232706): avc: denied { read } for pid=9213 comm="syz.0.28261" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.157472][ T36] audit: type=1400 audit(1750305094.689:232707): avc: denied { read open } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.181289][ T36] audit: type=1400 audit(1750305094.689:232708): avc: denied { ioctl } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.206338][ T36] audit: type=1400 audit(1750305094.719:232709): avc: denied { ioctl } for pid=9213 comm="syz.0.28261" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1756.231284][ T36] audit: type=1400 audit(1750305094.719:232710): avc: denied { read } for pid=9213 comm="syz.0.28261" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1756.590362][ T9219] binder: Unknown parameter 'sbclabel' [ 1756.645260][ T9221] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 1756.645282][ T9221] rust_binder: Error while translating object. [ 1756.654348][ T9221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1756.661191][ T9221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352 [ 1756.694113][ T9223] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 1756.703302][ T9223] rust_binder: Error while translating object. [ 1756.712103][ T9223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1756.718309][ T9223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354 [ 1757.207752][ T52] Bluetooth: hci1: command 0x1003 tx timeout [ 1757.222935][ T3402] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1757.399041][ T9258] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1757.399063][ T9258] rust_binder: Read failure Err(EFAULT) in pid:438 [ 1758.094730][ T9289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:436 [ 1758.143391][ T9293] SELinux: security_context_str_to_sid (eckreqprot) failed with errno=-22 [ 1758.683000][ T9312] input: syz1 as /devices/virtual/input/input1454 [ 1759.112480][ T9325] random: crng reseeded on system resumption [ 1759.143274][ T9325] Restarting kernel threads ... done. [ 1759.431999][ T9336] rust_binder: Error while translating object. [ 1759.432041][ T9336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1759.439135][ T9336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:462 [ 1759.460295][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.495478][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.502472][ T9338] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1759.502527][ T9338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69 [ 1759.509367][ T9300] bridge_slave_0: entered allmulticast mode [ 1759.524190][ T9338] rust_binder: Write failure EFAULT in pid:69 [ 1759.544235][ T9300] bridge_slave_0: entered promiscuous mode [ 1759.579659][ T9342] SELinux: failed to load policy [ 1759.718354][ T60] bridge_slave_1: left allmulticast mode [ 1759.724037][ T60] bridge_slave_1: left promiscuous mode [ 1759.729723][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.778248][ T60] bridge_slave_0: left allmulticast mode [ 1759.786119][ T60] bridge_slave_0: left promiscuous mode [ 1759.791816][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.056877][ T9353] rust_binder: Write failure EINVAL in pid:465 [ 1760.078969][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.092411][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.099538][ T9300] bridge_slave_1: entered allmulticast mode [ 1760.105807][ T9300] bridge_slave_1: entered promiscuous mode [ 1760.392275][ T9348] FAULT_INJECTION: forcing a failure. [ 1760.392275][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 1760.404993][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.0.28313 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1760.405018][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1760.405030][ T9348] Call Trace: [ 1760.405036][ T9348] [ 1760.405042][ T9348] __dump_stack+0x21/0x30 [ 1760.405066][ T9348] dump_stack_lvl+0x10c/0x190 [ 1760.405080][ T9348] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1760.405098][ T9348] ? __kasan_kmalloc+0x96/0xb0 [ 1760.405119][ T9348] dump_stack+0x19/0x20 [ 1760.405132][ T9348] should_fail_ex+0x3d9/0x530 [ 1760.405147][ T9348] should_failslab+0xac/0x100 [ 1760.405164][ T9348] __kmalloc_node_noprof+0x6c/0x450 [ 1760.405181][ T9348] ? __kvmalloc_node_noprof+0x11d/0x300 [ 1760.405196][ T9348] ? dev_addr_init+0x17b/0x230 [ 1760.405213][ T9348] __kvmalloc_node_noprof+0x11d/0x300 [ 1760.405227][ T9348] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 1760.405242][ T9348] alloc_netdev_mqs+0x880/0x13e0 [ 1760.405257][ T9348] ppp_ioctl+0x629/0x16b0 [ 1760.405272][ T9348] ? __fget_files+0x2c5/0x340 [ 1760.405288][ T9348] ? __cfi_ppp_ioctl+0x10/0x10 [ 1760.405302][ T9348] ? __fget_files+0x2c5/0x340 [ 1760.405318][ T9348] ? bpf_lsm_file_ioctl+0xd/0x20 [ 1760.405332][ T9348] ? security_file_ioctl+0x34/0xd0 [ 1760.405349][ T9348] ? __cfi_ppp_ioctl+0x10/0x10 [ 1760.405362][ T9348] __se_sys_ioctl+0x132/0x1b0 [ 1760.405379][ T9348] __x64_sys_ioctl+0x7f/0xa0 [ 1760.405396][ T9348] x64_sys_call+0x1878/0x2ee0 [ 1760.405412][ T9348] do_syscall_64+0x58/0xf0 [ 1760.405435][ T9348] ? clear_bhb_loop+0x35/0x90 [ 1760.405453][ T9348] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1760.405470][ T9348] RIP: 0033:0x7f0742b8e929 [ 1760.405482][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1760.405494][ T9348] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.405509][ T9348] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1760.405520][ T9348] RDX: 0000200000000080 RSI: 00000000c004743e RDI: 0000000000000003 [ 1760.405529][ T9348] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1760.405538][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1760.405547][ T9348] R13: 0000000000000000 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1760.405558][ T9348] [ 1760.788090][ T60] veth1_macvtap: left promiscuous mode [ 1760.793637][ T60] veth0_vlan: left promiscuous mode [ 1761.045002][ T36] kauditd_printk_skb: 464 callbacks suppressed [ 1761.045018][ T36] audit: type=1400 audit(1750305099.729:233175): avc: denied { read write } for pid=8851 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.077269][ T36] audit: type=1400 audit(1750305099.729:233176): avc: denied { read write open } for pid=8851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.123501][ T36] audit: type=1400 audit(1750305099.729:233177): avc: denied { ioctl } for pid=8851 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1385 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1761.150396][ T36] audit: type=1400 audit(1750305099.769:233178): avc: denied { read } for pid=9361 comm="syz.0.28318" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.173303][ T36] audit: type=1400 audit(1750305099.769:233179): avc: denied { read open } for pid=9361 comm="syz.0.28318" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.198374][ T36] audit: type=1400 audit(1750305099.769:233180): avc: denied { ioctl } for pid=9361 comm="syz.0.28318" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.223232][ T36] audit: type=1400 audit(1750305099.809:233181): avc: denied { read } for pid=9361 comm="syz.0.28318" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.246117][ T36] audit: type=1400 audit(1750305099.809:233182): avc: denied { read open } for pid=9361 comm="syz.0.28318" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.269906][ T36] audit: type=1400 audit(1750305099.809:233183): avc: denied { ioctl } for pid=9361 comm="syz.0.28318" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1761.294712][ T36] audit: type=1400 audit(1750305099.919:233184): avc: denied { read } for pid=9361 comm="syz.0.28318" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1761.767010][ T9381] binder: Unknown parameter '/selinux/status' [ 1761.975475][ T9395] syz.0.28330: attempt to access beyond end of device [ 1761.975475][ T9395] ram200: rw=2048, sector=350748672, nr_sectors = 8 limit=16384 [ 1762.106876][ T9395] rust_binder: Error while translating object. [ 1762.106895][ T9395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1762.113204][ T9395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 1763.104524][ T1549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.120601][ T1549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.143471][T32037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.150556][T32037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.196400][ T31] hid-generic 0000:0000:0000.0063: unknown main item tag 0x0 [ 1763.213104][ T31] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1763.279620][ T9300] veth0_vlan: entered promiscuous mode [ 1763.488798][ T9300] veth1_macvtap: entered promiscuous mode [ 1763.528919][ T9437] FAULT_INJECTION: forcing a failure. [ 1763.528919][ T9437] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.541620][ T9437] CPU: 1 UID: 0 PID: 9437 Comm: syz.8.28343 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1763.541643][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1763.541651][ T9437] Call Trace: [ 1763.541655][ T9437] [ 1763.541659][ T9437] __dump_stack+0x21/0x30 [ 1763.541676][ T9437] dump_stack_lvl+0x10c/0x190 [ 1763.541687][ T9437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1763.541699][ T9437] dump_stack+0x19/0x20 [ 1763.541709][ T9437] should_fail_ex+0x3d9/0x530 [ 1763.541721][ T9437] should_failslab+0xac/0x100 [ 1763.541734][ T9437] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 1763.541746][ T9437] ? sel_write_validatetrans+0x237/0x600 [ 1763.541757][ T9437] ? selinux_file_permission+0x309/0xb30 [ 1763.541771][ T9437] memdup_user_nul+0x40/0x1a0 [ 1763.541782][ T9437] ? sel_write_validatetrans+0x19d/0x600 [ 1763.541791][ T9437] sel_write_validatetrans+0x237/0x600 [ 1763.541802][ T9437] ? __cfi_sel_write_validatetrans+0x10/0x10 [ 1763.541812][ T9437] ? proc_fail_nth_write+0x17e/0x210 [ 1763.541822][ T9437] ? bpf_lsm_file_permission+0xd/0x20 [ 1763.541832][ T9437] ? __cfi_sel_write_validatetrans+0x10/0x10 [ 1763.541842][ T9437] vfs_write+0x3c0/0xe80 [ 1763.541854][ T9437] ? __cfi_vfs_write+0x10/0x10 [ 1763.541866][ T9437] ? __kasan_check_write+0x18/0x20 [ 1763.541877][ T9437] ? mutex_lock+0x92/0x1c0 [ 1763.541891][ T9437] ? __cfi_mutex_lock+0x10/0x10 [ 1763.541904][ T9437] ? __fget_files+0x2c5/0x340 [ 1763.541918][ T9437] ksys_write+0x141/0x250 [ 1763.541928][ T9437] ? __cfi_ksys_write+0x10/0x10 [ 1763.541939][ T9437] ? __kasan_check_read+0x15/0x20 [ 1763.541950][ T9437] __x64_sys_write+0x7f/0x90 [ 1763.541961][ T9437] x64_sys_call+0x271c/0x2ee0 [ 1763.541973][ T9437] do_syscall_64+0x58/0xf0 [ 1763.541985][ T9437] ? clear_bhb_loop+0x35/0x90 [ 1763.541998][ T9437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1763.542011][ T9437] RIP: 0033:0x7f6b7d58e929 [ 1763.542020][ T9437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.542029][ T9437] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1763.542042][ T9437] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1763.542049][ T9437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1763.542055][ T9437] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1763.542062][ T9437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1763.542068][ T9437] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1763.542076][ T9437] [ 1763.970912][ T9444] random: crng reseeded on system resumption [ 1764.243992][ T9459] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1764.244025][ T9459] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495 [ 1764.288661][ T9462] input: syz1 as /devices/virtual/input/input1457 [ 1764.807942][ T9484] SELinux: ebitmap: truncated map [ 1764.815003][ T9484] SELinux: failed to load policy [ 1764.941730][ T9495] FAULT_INJECTION: forcing a failure. [ 1764.941730][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.954913][ T9493] input: syz1 as /devices/virtual/input/input1458 [ 1764.961826][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.8.28365 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1764.961857][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1764.961869][ T9495] Call Trace: [ 1764.961875][ T9495] [ 1764.961883][ T9495] __dump_stack+0x21/0x30 [ 1764.961908][ T9495] dump_stack_lvl+0x10c/0x190 [ 1764.961928][ T9495] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1764.961950][ T9495] dump_stack+0x19/0x20 [ 1764.961967][ T9495] should_fail_ex+0x3d9/0x530 [ 1764.961987][ T9495] should_fail+0xf/0x20 [ 1764.962004][ T9495] should_fail_usercopy+0x1e/0x30 [ 1764.962023][ T9495] _copy_to_user+0x24/0xa0 [ 1764.962045][ T9495] simple_read_from_buffer+0xed/0x160 [ 1764.962071][ T9495] proc_fail_nth_read+0x19e/0x210 [ 1764.962088][ T9495] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1764.962105][ T9495] ? bpf_lsm_file_permission+0xd/0x20 [ 1764.962123][ T9495] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1764.962140][ T9495] vfs_read+0x278/0xb60 [ 1764.962159][ T9495] ? __cfi_do_mmap+0x10/0x10 [ 1764.962182][ T9495] ? __cfi_down_write_killable+0x10/0x10 [ 1764.962202][ T9495] ? __cfi_vfs_read+0x10/0x10 [ 1764.962220][ T9495] ? __kasan_check_write+0x18/0x20 [ 1764.962239][ T9495] ? mutex_lock+0x92/0x1c0 [ 1764.962262][ T9495] ? __cfi_mutex_lock+0x10/0x10 [ 1764.962284][ T9495] ? __fget_files+0x2c5/0x340 [ 1764.962304][ T9495] ksys_read+0x141/0x250 [ 1764.962322][ T9495] ? xfd_validate_state+0x68/0x150 [ 1764.962341][ T9495] ? __cfi_ksys_read+0x10/0x10 [ 1764.962360][ T9495] ? __kasan_check_read+0x15/0x20 [ 1764.962377][ T9495] __x64_sys_read+0x7f/0x90 [ 1764.962395][ T9495] x64_sys_call+0x2638/0x2ee0 [ 1764.962416][ T9495] do_syscall_64+0x58/0xf0 [ 1764.962436][ T9495] ? clear_bhb_loop+0x35/0x90 [ 1764.962459][ T9495] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1764.962481][ T9495] RIP: 0033:0x7f6b7d58d33c [ 1764.962496][ T9495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1764.962512][ T9495] RSP: 002b:00007f6b7e486030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1764.962533][ T9495] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58d33c [ 1764.962548][ T9495] RDX: 000000000000000f RSI: 00007f6b7e4860a0 RDI: 0000000000000003 [ 1764.962560][ T9495] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 00000000ffffc000 [ 1764.962572][ T9495] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000002 [ 1764.962584][ T9495] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1764.962600][ T9495] [ 1765.255454][ T9498] SELinux: failed to load policy [ 1765.767167][ T9517] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1766.019898][ T8177] hid-generic 0000:0000:0000.0064: unknown main item tag 0x0 [ 1766.028804][ T8177] hid-generic 0000:0000:0000.0064: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1766.058911][ T9532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1766.068006][ T9532] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1766.079500][ T36] kauditd_printk_skb: 642 callbacks suppressed [ 1766.079513][ T36] audit: type=1400 audit(1750305104.769:233827): avc: denied { read } for pid=9531 comm="syz.8.28381" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1766.139228][ T36] audit: type=1400 audit(1750305104.799:233828): avc: denied { read open } for pid=9531 comm="syz.8.28381" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1766.164164][ T36] audit: type=1400 audit(1750305104.799:233829): avc: denied { ioctl } for pid=9531 comm="syz.8.28381" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1766.212890][ T36] audit: type=1400 audit(1750305104.899:233830): avc: denied { read } for pid=9539 comm="syz.2.28383" name="binder1" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1766.216241][ T9540] input: syz1 as /devices/virtual/input/input1459 [ 1766.253469][ T36] audit: type=1400 audit(1750305104.899:233831): avc: denied { read open } for pid=9539 comm="syz.2.28383" path="/dev/binderfs/binder1" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1766.284406][ T36] audit: type=1400 audit(1750305104.899:233832): avc: denied { read } for pid=9539 comm="syz.2.28383" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1766.308445][ T36] audit: type=1400 audit(1750305104.899:233833): avc: denied { read open } for pid=9539 comm="syz.2.28383" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1766.334291][ T36] audit: type=1400 audit(1750305104.899:233834): avc: denied { ioctl } for pid=9539 comm="syz.2.28383" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1766.365834][ T36] audit: type=1400 audit(1750305104.899:233835): avc: denied { ioctl } for pid=9539 comm="syz.2.28383" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1766.371228][ T9540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1766.391287][ T36] audit: type=1400 audit(1750305104.899:233836): avc: denied { ioctl } for pid=9539 comm="syz.2.28383" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1766.964415][ T9563] FAULT_INJECTION: forcing a failure. [ 1766.964415][ T9563] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1766.984231][ T9561] rust_binder: Write failure EINVAL in pid:524 [ 1766.999158][ T9565] input: syz1 as /devices/virtual/input/input1460 [ 1767.011847][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.2.28394 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1767.011875][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1767.011885][ T9563] Call Trace: [ 1767.011892][ T9563] [ 1767.011900][ T9563] __dump_stack+0x21/0x30 [ 1767.011923][ T9563] dump_stack_lvl+0x10c/0x190 [ 1767.011943][ T9563] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1767.011963][ T9563] dump_stack+0x19/0x20 [ 1767.011981][ T9563] should_fail_ex+0x3d9/0x530 [ 1767.011999][ T9563] should_fail_alloc_page+0xeb/0x110 [ 1767.012021][ T9563] __alloc_pages_noprof+0x19d/0x6c0 [ 1767.012039][ T9563] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1767.012057][ T9563] ? memcg1_commit_charge+0xec/0x2b0 [ 1767.012078][ T9563] pte_alloc_one+0x97/0x520 [ 1767.012099][ T9563] ? __cfi_pte_alloc_one+0x10/0x10 [ 1767.012116][ T9563] ? blk_cgroup_congested+0x121/0x130 [ 1767.012137][ T9563] ? __folio_throttle_swaprate+0x98/0x160 [ 1767.012161][ T9563] ? folio_prealloc+0xe5/0x240 [ 1767.012184][ T9563] do_pte_missing+0x1d44/0x3e50 [ 1767.012208][ T9563] ? kmem_cache_free+0x472/0x4c0 [ 1767.012227][ T9563] ? vm_area_free+0xee/0x140 [ 1767.012249][ T9563] ? percpu_counter_add_batch+0xfc/0x1b0 [ 1767.012267][ T9563] ? pte_marker_clear+0x1b0/0x1b0 [ 1767.012289][ T9563] ? __cfi_uprobe_mmap+0x10/0x10 [ 1767.012311][ T9563] ? vms_complete_munmap_vmas+0x56c/0x6c0 [ 1767.012333][ T9563] handle_mm_fault+0x1166/0x1b90 [ 1767.012357][ T9563] ? __cfi_handle_mm_fault+0x10/0x10 [ 1767.012380][ T9563] ? __cfi_find_vma+0x10/0x10 [ 1767.012398][ T9563] ? vma_is_secretmem+0x11/0x50 [ 1767.012415][ T9563] __get_user_pages+0x1169/0x22d0 [ 1767.012439][ T9563] ? __cfi_mt_find+0x10/0x10 [ 1767.012460][ T9563] ? populate_vma_page_range+0x230/0x230 [ 1767.012483][ T9563] ? down_read+0x79/0xe0 [ 1767.012499][ T9563] ? __cfi_down_read+0x10/0x10 [ 1767.012515][ T9563] __mm_populate+0x2f9/0x440 [ 1767.012537][ T9563] vm_mmap_pgoff+0x454/0x4e0 [ 1767.012558][ T9563] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1767.012576][ T9563] ? __fget_files+0x2c5/0x340 [ 1767.012599][ T9563] ksys_mmap_pgoff+0x166/0x1e0 [ 1767.012618][ T9563] __x64_sys_mmap+0x121/0x140 [ 1767.012640][ T9563] x64_sys_call+0x13bf/0x2ee0 [ 1767.012661][ T9563] do_syscall_64+0x58/0xf0 [ 1767.012680][ T9563] ? clear_bhb_loop+0x35/0x90 [ 1767.012703][ T9563] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1767.012725][ T9563] RIP: 0033:0x7f1505f8e929 [ 1767.012740][ T9563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1767.012754][ T9563] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1767.012774][ T9563] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1767.012794][ T9563] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 00002000009c5000 [ 1767.012806][ T9563] RBP: 00007f1506d61090 R08: 0000000000000003 R09: 0000000000000000 [ 1767.012818][ T9563] R10: 0000000000028012 R11: 0000000000000246 R12: 0000000000000001 [ 1767.012830][ T9563] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1767.012845][ T9563] [ 1767.100357][ T9565] FAULT_INJECTION: forcing a failure. [ 1767.100357][ T9565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.334677][ T9565] CPU: 1 UID: 0 PID: 9565 Comm: syz.0.28393 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1767.334706][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1767.334717][ T9565] Call Trace: [ 1767.334723][ T9565] [ 1767.334731][ T9565] __dump_stack+0x21/0x30 [ 1767.334765][ T9565] dump_stack_lvl+0x10c/0x190 [ 1767.334784][ T9565] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1767.334805][ T9565] ? _parse_integer_limit+0x195/0x1e0 [ 1767.334822][ T9565] dump_stack+0x19/0x20 [ 1767.334838][ T9565] should_fail_ex+0x3d9/0x530 [ 1767.334856][ T9565] should_fail+0xf/0x20 [ 1767.334873][ T9565] should_fail_usercopy+0x1e/0x30 [ 1767.334891][ T9565] _copy_from_user+0x22/0xb0 [ 1767.334912][ T9565] input_event_from_user+0xb3/0x280 [ 1767.334935][ T9565] ? __cfi_input_event_from_user+0x10/0x10 [ 1767.334959][ T9565] ? input_event+0x3a/0xc0 [ 1767.334977][ T9565] uinput_write+0x22c/0xef0 [ 1767.334997][ T9565] ? __cfi_uinput_write+0x10/0x10 [ 1767.335016][ T9565] ? proc_fail_nth_write+0x17e/0x210 [ 1767.335034][ T9565] ? bpf_lsm_file_permission+0xd/0x20 [ 1767.335052][ T9565] ? __cfi_uinput_write+0x10/0x10 [ 1767.335071][ T9565] vfs_write+0x3c0/0xe80 [ 1767.335092][ T9565] ? __cfi_vfs_write+0x10/0x10 [ 1767.335111][ T9565] ? __fget_files+0x2c5/0x340 [ 1767.335134][ T9565] ksys_write+0x141/0x250 [ 1767.335153][ T9565] ? __cfi_ksys_write+0x10/0x10 [ 1767.335174][ T9565] ? __kasan_check_read+0x15/0x20 [ 1767.335192][ T9565] __x64_sys_write+0x7f/0x90 [ 1767.335211][ T9565] x64_sys_call+0x271c/0x2ee0 [ 1767.335229][ T9565] do_syscall_64+0x58/0xf0 [ 1767.335247][ T9565] ? clear_bhb_loop+0x35/0x90 [ 1767.335268][ T9565] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1767.335288][ T9565] RIP: 0033:0x7f0742b8e929 [ 1767.335302][ T9565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1767.335316][ T9565] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1767.335334][ T9565] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1767.335346][ T9565] RDX: 000000000000045c RSI: 0000200000002f40 RDI: 0000000000000003 [ 1767.335357][ T9565] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.335367][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.335377][ T9565] R13: 0000000000000000 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1767.335392][ T9565] [ 1767.813910][ T9585] kvm: kvm [9584]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 1768.360355][ T9598] rust_binder: Write failure EINVAL in pid:156 [ 1768.364467][ T9599] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1768.556714][ T9616] FAULT_INJECTION: forcing a failure. [ 1768.556714][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.576016][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.8.28414 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1768.576045][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1768.576055][ T9616] Call Trace: [ 1768.576062][ T9616] [ 1768.576069][ T9616] __dump_stack+0x21/0x30 [ 1768.576094][ T9616] dump_stack_lvl+0x10c/0x190 [ 1768.576113][ T9616] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1768.576133][ T9616] dump_stack+0x19/0x20 [ 1768.576151][ T9616] should_fail_ex+0x3d9/0x530 [ 1768.576170][ T9616] should_failslab+0xac/0x100 [ 1768.576191][ T9616] __kmalloc_cache_noprof+0x41/0x3c0 [ 1768.576210][ T9616] ? pty_unix98_install+0xfb/0x6b0 [ 1768.576231][ T9616] pty_unix98_install+0xfb/0x6b0 [ 1768.576251][ T9616] tty_init_dev+0xe3/0x4f0 [ 1768.576267][ T9616] ptmx_open+0xe1/0x300 [ 1768.576286][ T9616] ? selinux_file_open+0x457/0x610 [ 1768.576309][ T9616] chrdev_open+0x4db/0x5f0 [ 1768.576329][ T9616] ? __cfi_chrdev_open+0x10/0x10 [ 1768.576350][ T9616] ? bpf_lsm_file_open+0xd/0x20 [ 1768.576368][ T9616] ? __cfi_chrdev_open+0x10/0x10 [ 1768.576386][ T9616] do_dentry_open+0x978/0x1510 [ 1768.576418][ T9616] vfs_open+0x86/0x230 [ 1768.576432][ T9616] ? __cfi_vfs_open+0x10/0x10 [ 1768.576447][ T9616] ? may_open+0x352/0x430 [ 1768.576469][ T9616] path_openat+0x2b6c/0x34b0 [ 1768.576492][ T9616] ? kasan_save_alloc_info+0x40/0x50 [ 1768.576509][ T9616] ? getname_flags+0xc6/0x710 [ 1768.576528][ T9616] ? do_sys_openat2+0xcb/0x1c0 [ 1768.576543][ T9616] ? __x64_sys_openat+0x13a/0x170 [ 1768.576560][ T9616] ? do_filp_open+0x3e0/0x3e0 [ 1768.576583][ T9616] do_filp_open+0x1c6/0x3e0 [ 1768.576605][ T9616] ? __cfi_do_filp_open+0x10/0x10 [ 1768.576630][ T9616] ? alloc_fd+0x4e7/0x5a0 [ 1768.576651][ T9616] do_sys_openat2+0x12c/0x1c0 [ 1768.576666][ T9616] ? fput+0x1a5/0x240 [ 1768.576687][ T9616] ? do_sys_open+0x100/0x100 [ 1768.576702][ T9616] ? ksys_write+0x1ef/0x250 [ 1768.576720][ T9616] ? __cfi_ksys_write+0x10/0x10 [ 1768.576740][ T9616] __x64_sys_openat+0x13a/0x170 [ 1768.576757][ T9616] x64_sys_call+0xe69/0x2ee0 [ 1768.576777][ T9616] do_syscall_64+0x58/0xf0 [ 1768.576797][ T9616] ? clear_bhb_loop+0x35/0x90 [ 1768.576819][ T9616] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1768.576841][ T9616] RIP: 0033:0x7f6b7d58e929 [ 1768.576856][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.576871][ T9616] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1768.576891][ T9616] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1768.576904][ T9616] RDX: 0000000000000400 RSI: 0000200000000e00 RDI: ffffffffffffff9c [ 1768.576917][ T9616] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.576929][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1768.576941][ T9616] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1768.576956][ T9616] [ 1769.083057][ T9638] input: syz0 as /devices/virtual/input/input1462 [ 1769.142425][ T9638] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1769.142819][ T9638] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1769.179552][ T9638] SELinux: failed to load policy [ 1769.186065][ T9643] FAULT_INJECTION: forcing a failure. [ 1769.186065][ T9643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1769.225453][ T9643] CPU: 0 UID: 0 PID: 9643 Comm: syz.0.28425 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1769.225483][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1769.225495][ T9643] Call Trace: [ 1769.225502][ T9643] [ 1769.225510][ T9643] __dump_stack+0x21/0x30 [ 1769.225535][ T9643] dump_stack_lvl+0x10c/0x190 [ 1769.225554][ T9643] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1769.225574][ T9643] ? kasan_save_alloc_info+0x40/0x50 [ 1769.225592][ T9643] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 1769.225611][ T9643] ? security_inode_alloc+0x51/0x200 [ 1769.225629][ T9643] ? inode_init_always_gfp+0x756/0x9e0 [ 1769.225651][ T9643] ? new_inode+0x25/0x1e0 [ 1769.225673][ T9643] dump_stack+0x19/0x20 [ 1769.225691][ T9643] should_fail_ex+0x3d9/0x530 [ 1769.225710][ T9643] should_fail_alloc_page+0xeb/0x110 [ 1769.225731][ T9643] __alloc_pages_noprof+0x19d/0x6c0 [ 1769.225748][ T9643] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1769.225766][ T9643] ? __kasan_check_write+0x18/0x20 [ 1769.225785][ T9643] ? lockref_get+0x127/0x1b0 [ 1769.225809][ T9643] ? __kasan_check_write+0x18/0x20 [ 1769.225828][ T9643] get_free_pages_noprof+0x14/0x40 [ 1769.225845][ T9643] selinux_genfs_get_sid+0x63/0x2d0 [ 1769.225863][ T9643] ? security_inode_alloc+0x51/0x200 [ 1769.225882][ T9643] inode_doinit_with_dentry+0x7f0/0xdd0 [ 1769.225902][ T9643] ? sb_finish_set_opts+0xa00/0xa00 [ 1769.225920][ T9643] ? alloc_inode+0xdb/0x270 [ 1769.225942][ T9643] selinux_d_instantiate+0x2b/0x40 [ 1769.225959][ T9643] security_d_instantiate+0xb5/0xf0 [ 1769.225977][ T9643] d_splice_alias+0x71/0x3a0 [ 1769.225996][ T9643] proc_lookup_de+0x298/0x300 [ 1769.226015][ T9643] proc_lookup+0xc6/0xf0 [ 1769.226032][ T9643] proc_root_lookup+0x3b/0x50 [ 1769.226052][ T9643] path_openat+0x12fe/0x34b0 [ 1769.226079][ T9643] ? do_filp_open+0x3e0/0x3e0 [ 1769.226103][ T9643] do_filp_open+0x1c6/0x3e0 [ 1769.226126][ T9643] ? __cfi_do_filp_open+0x10/0x10 [ 1769.226149][ T9643] ? alloc_fd+0x4e7/0x5a0 [ 1769.226171][ T9643] do_sys_openat2+0x12c/0x1c0 [ 1769.226187][ T9643] ? fput+0x1a5/0x240 [ 1769.226209][ T9643] ? do_sys_open+0x100/0x100 [ 1769.226224][ T9643] ? ksys_write+0x1ef/0x250 [ 1769.226240][ T9643] ? __cfi_ksys_write+0x10/0x10 [ 1769.226259][ T9643] __x64_sys_openat+0x13a/0x170 [ 1769.226275][ T9643] x64_sys_call+0xe69/0x2ee0 [ 1769.226296][ T9643] do_syscall_64+0x58/0xf0 [ 1769.226316][ T9643] ? clear_bhb_loop+0x35/0x90 [ 1769.226339][ T9643] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1769.226362][ T9643] RIP: 0033:0x7f0742b8e929 [ 1769.226383][ T9643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.226399][ T9643] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1769.226419][ T9643] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1769.226434][ T9643] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1769.226448][ T9643] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.226461][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1769.226472][ T9643] R13: 0000000000000001 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1769.226485][ T9643] [ 1769.486361][ T9646] tun0: tun_chr_ioctl cmd 1074025675 [ 1769.585085][ T9646] tun0: persist enabled [ 1769.590633][ T9648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1769.591257][ T9648] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1769.591260][ T9649] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 1769.598464][ T9650] tun0: tun_chr_ioctl cmd 1074025675 [ 1769.668075][ T9650] tun0: persist enabled [ 1770.049639][ T9674] FAULT_INJECTION: forcing a failure. [ 1770.049639][ T9674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.062713][ T9674] CPU: 1 UID: 0 PID: 9674 Comm: syz.8.28436 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1770.062736][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1770.062743][ T9674] Call Trace: [ 1770.062748][ T9674] [ 1770.062753][ T9674] __dump_stack+0x21/0x30 [ 1770.062776][ T9674] dump_stack_lvl+0x10c/0x190 [ 1770.062794][ T9674] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1770.062815][ T9674] dump_stack+0x19/0x20 [ 1770.062830][ T9674] should_fail_ex+0x3d9/0x530 [ 1770.062841][ T9674] should_fail+0xf/0x20 [ 1770.062850][ T9674] should_fail_usercopy+0x1e/0x30 [ 1770.062861][ T9674] copy_page_from_iter_atomic+0x346/0x1730 [ 1770.062875][ T9674] ? shmem_get_folio+0xc0/0xc0 [ 1770.062888][ T9674] ? __cfi_copy_page_from_iter_atomic+0x10/0x10 [ 1770.062901][ T9674] ? inode_to_bdi+0x6d/0x100 [ 1770.062911][ T9674] ? __kasan_check_read+0x15/0x20 [ 1770.062922][ T9674] generic_perform_write+0x588/0x960 [ 1770.062933][ T9674] ? __cfi_generic_perform_write+0x10/0x10 [ 1770.062943][ T9674] ? down_write+0xe9/0x2a0 [ 1770.062954][ T9674] ? file_update_time+0xa3/0x220 [ 1770.062963][ T9674] shmem_file_write_iter+0x105/0x130 [ 1770.062973][ T9674] vfs_write+0x694/0xe80 [ 1770.062984][ T9674] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 1770.062994][ T9674] ? __cfi_vfs_write+0x10/0x10 [ 1770.063004][ T9674] ? __cfi_mutex_lock+0x10/0x10 [ 1770.063019][ T9674] ksys_write+0x141/0x250 [ 1770.063030][ T9674] ? __cfi_ksys_write+0x10/0x10 [ 1770.063041][ T9674] ? __kasan_check_read+0x15/0x20 [ 1770.063051][ T9674] __x64_sys_write+0x7f/0x90 [ 1770.063062][ T9674] x64_sys_call+0x271c/0x2ee0 [ 1770.063074][ T9674] do_syscall_64+0x58/0xf0 [ 1770.063085][ T9674] ? clear_bhb_loop+0x35/0x90 [ 1770.063099][ T9674] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1770.063111][ T9674] RIP: 0033:0x7f6b7d58e929 [ 1770.063120][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1770.063129][ T9674] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1770.063141][ T9674] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1770.063148][ T9674] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 1770.063155][ T9674] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1770.063161][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1770.063168][ T9674] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1770.063175][ T9674] [ 1770.419098][ T9683] FAULT_INJECTION: forcing a failure. [ 1770.419098][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1770.432222][ T9683] CPU: 0 UID: 0 PID: 9683 Comm: syz.2.28440 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1770.432241][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1770.432248][ T9683] Call Trace: [ 1770.432253][ T9683] [ 1770.432269][ T9683] __dump_stack+0x21/0x30 [ 1770.432285][ T9683] dump_stack_lvl+0x10c/0x190 [ 1770.432296][ T9683] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1770.432308][ T9683] dump_stack+0x19/0x20 [ 1770.432318][ T9683] should_fail_ex+0x3d9/0x530 [ 1770.432330][ T9683] should_fail+0xf/0x20 [ 1770.432339][ T9683] should_fail_usercopy+0x1e/0x30 [ 1770.432349][ T9683] _copy_to_user+0x24/0xa0 [ 1770.432362][ T9683] simple_read_from_buffer+0xed/0x160 [ 1770.432377][ T9683] proc_fail_nth_read+0x19e/0x210 [ 1770.432386][ T9683] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1770.432396][ T9683] ? bpf_lsm_file_permission+0xd/0x20 [ 1770.432406][ T9683] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1770.432415][ T9683] vfs_read+0x278/0xb60 [ 1770.432426][ T9683] ? __cfi_do_mmap+0x10/0x10 [ 1770.432437][ T9683] ? __cfi_down_write_killable+0x10/0x10 [ 1770.432447][ T9683] ? __cfi_vfs_read+0x10/0x10 [ 1770.432457][ T9683] ? __kasan_check_write+0x18/0x20 [ 1770.432468][ T9683] ? mutex_lock+0x92/0x1c0 [ 1770.432480][ T9683] ? __cfi_mutex_lock+0x10/0x10 [ 1770.432493][ T9683] ? __fget_files+0x2c5/0x340 [ 1770.432506][ T9683] ksys_read+0x141/0x250 [ 1770.432517][ T9683] ? __cfi_ksys_read+0x10/0x10 [ 1770.432528][ T9683] ? __kasan_check_read+0x15/0x20 [ 1770.432538][ T9683] __x64_sys_read+0x7f/0x90 [ 1770.432548][ T9683] x64_sys_call+0x2638/0x2ee0 [ 1770.432560][ T9683] do_syscall_64+0x58/0xf0 [ 1770.432572][ T9683] ? clear_bhb_loop+0x35/0x90 [ 1770.432585][ T9683] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1770.432597][ T9683] RIP: 0033:0x7f1505f8d33c [ 1770.432606][ T9683] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1770.432615][ T9683] RSP: 002b:00007f1506d61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1770.432627][ T9683] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8d33c [ 1770.432635][ T9683] RDX: 000000000000000f RSI: 00007f1506d610a0 RDI: 0000000000000003 [ 1770.432642][ T9683] RBP: 00007f1506d61090 R08: 0000000000000000 R09: 00000000ffffc000 [ 1770.432649][ T9683] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000002 [ 1770.432655][ T9683] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1770.432663][ T9683] [ 1770.779158][ T9694] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1770.817766][ T9694] input: syz1 as /devices/virtual/input/input1464 [ 1770.896005][ T9689] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1770.901715][ T9689] pim6reg0: linktype set to 769 [ 1771.008570][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.026134][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.050021][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.057471][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.067553][ T9708] rust_binder: Write failure EFAULT in pid:556 [ 1771.067732][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.081310][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.089242][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.096638][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.104970][ T36] kauditd_printk_skb: 501 callbacks suppressed [ 1771.104985][ T36] audit: type=1400 audit(1750305109.779:234338): avc: denied { read write } for pid=7497 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1771.107067][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.121515][ T36] audit: type=1400 audit(1750305109.799:234339): avc: denied { read write open } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1771.136598][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.168011][ T36] audit: type=1400 audit(1750305109.799:234340): avc: denied { ioctl } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1771.202469][ T36] audit: type=1400 audit(1750305109.879:234341): avc: denied { read write } for pid=9710 comm="syz.8.28451" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1771.206837][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.227872][ T36] audit: type=1400 audit(1750305109.879:234342): avc: denied { read write open } for pid=9710 comm="syz.8.28451" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1771.235617][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.266277][ T36] audit: type=1400 audit(1750305109.879:234343): avc: denied { ioctl } for pid=9710 comm="syz.8.28451" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1771.267074][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.291314][ T36] audit: type=1400 audit(1750305109.889:234344): avc: denied { read } for pid=9710 comm="syz.8.28451" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1771.299328][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.322492][ T36] audit: type=1400 audit(1750305109.889:234345): avc: denied { read open } for pid=9710 comm="syz.8.28451" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1771.329585][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.352684][ T36] audit: type=1400 audit(1750305109.889:234346): avc: denied { ioctl } for pid=9710 comm="syz.8.28451" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1771.360684][ T31] hid-generic 109C:0008:0003.0065: unknown main item tag 0x0 [ 1771.386001][ T36] audit: type=1400 audit(1750305109.889:234347): avc: denied { read } for pid=9710 comm="syz.8.28451" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1771.431625][ T31] hid-generic 109C:0008:0003.0065: hidraw0: HID v0.09 Device [syz1] on syz0 [ 1771.496025][ T9719] binder: Bad value for 'max' [ 1771.601611][ T9722] fido_id[9722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1771.693705][ T9729] FAULT_INJECTION: forcing a failure. [ 1771.693705][ T9729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1771.706826][ T9729] CPU: 1 UID: 0 PID: 9729 Comm: syz.8.28457 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1771.706855][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1771.706868][ T9729] Call Trace: [ 1771.706874][ T9729] [ 1771.706882][ T9729] __dump_stack+0x21/0x30 [ 1771.706905][ T9729] dump_stack_lvl+0x10c/0x190 [ 1771.706924][ T9729] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1771.706944][ T9729] ? avc_policy_seqno+0xd/0x30 [ 1771.706961][ T9729] ? selinux_file_permission+0x309/0xb30 [ 1771.706984][ T9729] dump_stack+0x19/0x20 [ 1771.707002][ T9729] should_fail_ex+0x3d9/0x530 [ 1771.707021][ T9729] should_fail+0xf/0x20 [ 1771.707038][ T9729] should_fail_usercopy+0x1e/0x30 [ 1771.707057][ T9729] _copy_to_user+0x24/0xa0 [ 1771.707078][ T9729] simple_transaction_read+0x13e/0x1b0 [ 1771.707109][ T9729] ? __cfi_simple_transaction_read+0x10/0x10 [ 1771.707131][ T9729] vfs_read+0x278/0xb60 [ 1771.707149][ T9729] ? __cfi_vfs_read+0x10/0x10 [ 1771.707166][ T9729] ? __kasan_check_write+0x18/0x20 [ 1771.707185][ T9729] ? mutex_lock+0x92/0x1c0 [ 1771.707207][ T9729] ? __cfi_mutex_lock+0x10/0x10 [ 1771.707230][ T9729] ? __fget_files+0x2c5/0x340 [ 1771.707253][ T9729] ksys_read+0x141/0x250 [ 1771.707271][ T9729] ? __cfi_ksys_read+0x10/0x10 [ 1771.707291][ T9729] ? __kasan_check_read+0x15/0x20 [ 1771.707309][ T9729] __x64_sys_read+0x7f/0x90 [ 1771.707329][ T9729] x64_sys_call+0x2638/0x2ee0 [ 1771.707349][ T9729] do_syscall_64+0x58/0xf0 [ 1771.707368][ T9729] ? clear_bhb_loop+0x35/0x90 [ 1771.707391][ T9729] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1771.707413][ T9729] RIP: 0033:0x7f6b7d58e929 [ 1771.707428][ T9729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1771.707445][ T9729] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1771.707464][ T9729] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1771.707478][ T9729] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000003 [ 1771.707491][ T9729] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1771.707503][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1771.707515][ T9729] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1771.707530][ T9729] [ 1771.717430][ T9730] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 1772.038888][ T9741] FAULT_INJECTION: forcing a failure. [ 1772.038888][ T9741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.059974][ T9741] CPU: 1 UID: 0 PID: 9741 Comm: syz.2.28463 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1772.060004][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1772.060014][ T9741] Call Trace: [ 1772.060019][ T9741] [ 1772.060024][ T9741] __dump_stack+0x21/0x30 [ 1772.060041][ T9741] dump_stack_lvl+0x10c/0x190 [ 1772.060052][ T9741] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1772.060063][ T9741] ? random_recv_done+0x180/0x180 [ 1772.060076][ T9741] dump_stack+0x19/0x20 [ 1772.060088][ T9741] should_fail_ex+0x3d9/0x530 [ 1772.060100][ T9741] should_fail+0xf/0x20 [ 1772.060109][ T9741] should_fail_usercopy+0x1e/0x30 [ 1772.060120][ T9741] _copy_to_user+0x24/0xa0 [ 1772.060132][ T9741] rng_dev_read+0x4bc/0x920 [ 1772.060143][ T9741] ? __cfi_rng_dev_read+0x10/0x10 [ 1772.060154][ T9741] ? bpf_lsm_file_permission+0xd/0x20 [ 1772.060165][ T9741] ? __cfi_rng_dev_read+0x10/0x10 [ 1772.060175][ T9741] vfs_read+0x278/0xb60 [ 1772.060187][ T9741] ? __cfi_vfs_read+0x10/0x10 [ 1772.060198][ T9741] ? __fget_files+0x2c5/0x340 [ 1772.060211][ T9741] ksys_read+0x141/0x250 [ 1772.060221][ T9741] ? xfd_validate_state+0x68/0x150 [ 1772.060233][ T9741] ? __cfi_ksys_read+0x10/0x10 [ 1772.060244][ T9741] ? __kasan_check_read+0x15/0x20 [ 1772.060255][ T9741] __x64_sys_read+0x7f/0x90 [ 1772.060265][ T9741] x64_sys_call+0x2638/0x2ee0 [ 1772.060277][ T9741] do_syscall_64+0x58/0xf0 [ 1772.060289][ T9741] ? clear_bhb_loop+0x35/0x90 [ 1772.060303][ T9741] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1772.060316][ T9741] RIP: 0033:0x7f1505f8e929 [ 1772.060326][ T9741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.060340][ T9741] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1772.060353][ T9741] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1772.060361][ T9741] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 1772.060368][ T9741] RBP: 00007f1506d61090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.060375][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.060382][ T9741] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1772.060390][ T9741] [ 1772.372517][ T9755] FAULT_INJECTION: forcing a failure. [ 1772.372517][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.385246][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.2.28469 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1772.385273][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1772.385284][ T9755] Call Trace: [ 1772.385290][ T9755] [ 1772.385298][ T9755] __dump_stack+0x21/0x30 [ 1772.385321][ T9755] dump_stack_lvl+0x10c/0x190 [ 1772.385339][ T9755] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1772.385358][ T9755] dump_stack+0x19/0x20 [ 1772.385376][ T9755] should_fail_ex+0x3d9/0x530 [ 1772.385394][ T9755] should_failslab+0xac/0x100 [ 1772.385415][ T9755] __kmalloc_cache_noprof+0x41/0x3c0 [ 1772.385432][ T9755] ? mutex_lock+0x92/0x1c0 [ 1772.385454][ T9755] ? alloc_info_private+0xbc/0x240 [ 1772.385475][ T9755] alloc_info_private+0xbc/0x240 [ 1772.385495][ T9755] snd_info_text_entry_open+0x77/0x2d0 [ 1772.385515][ T9755] ? proc_reg_open+0x21b/0x640 [ 1772.385534][ T9755] proc_reg_open+0x27c/0x640 [ 1772.385552][ T9755] ? __cfi_proc_reg_open+0x10/0x10 [ 1772.385569][ T9755] do_dentry_open+0x978/0x1510 [ 1772.385593][ T9755] vfs_open+0x86/0x230 [ 1772.385605][ T9755] ? __cfi_vfs_open+0x10/0x10 [ 1772.385620][ T9755] ? may_open+0x352/0x430 [ 1772.385641][ T9755] path_openat+0x2b6c/0x34b0 [ 1772.385664][ T9755] ? kasan_save_alloc_info+0x40/0x50 [ 1772.385681][ T9755] ? getname_flags+0xc6/0x710 [ 1772.385700][ T9755] ? do_sys_openat2+0xcb/0x1c0 [ 1772.385716][ T9755] ? __x64_sys_openat+0x13a/0x170 [ 1772.385734][ T9755] ? do_filp_open+0x3e0/0x3e0 [ 1772.385758][ T9755] do_filp_open+0x1c6/0x3e0 [ 1772.385781][ T9755] ? __cfi_do_filp_open+0x10/0x10 [ 1772.385805][ T9755] ? alloc_fd+0x4e7/0x5a0 [ 1772.385826][ T9755] do_sys_openat2+0x12c/0x1c0 [ 1772.385842][ T9755] ? fput+0x1a5/0x240 [ 1772.385864][ T9755] ? do_sys_open+0x100/0x100 [ 1772.385880][ T9755] ? ksys_write+0x1ef/0x250 [ 1772.385899][ T9755] ? __cfi_ksys_write+0x10/0x10 [ 1772.385918][ T9755] __x64_sys_openat+0x13a/0x170 [ 1772.385935][ T9755] x64_sys_call+0xe69/0x2ee0 [ 1772.385955][ T9755] do_syscall_64+0x58/0xf0 [ 1772.385975][ T9755] ? clear_bhb_loop+0x35/0x90 [ 1772.385998][ T9755] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1772.386019][ T9755] RIP: 0033:0x7f1505f8e929 [ 1772.386046][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.386060][ T9755] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1772.386079][ T9755] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1772.386092][ T9755] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1772.386105][ T9755] RBP: 00007f1506d61090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.386117][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1772.386129][ T9755] R13: 0000000000000001 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1772.386144][ T9755] [ 1772.859235][ T9779] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 1772.869474][ T9779] SELinux: failed to load policy [ 1773.000128][ T9790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1773.307674][ T9816] kvm: kvm [9815]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 1773.589447][T26032] hid-generic 0000:0000:0000.0066: unknown main item tag 0x4 [ 1773.596880][T26032] hid-generic 0000:0000:0000.0066: unknown main item tag 0x2 [ 1773.619254][T26032] hid-generic 0000:0000:0000.0066: unknown main item tag 0x3 [ 1773.628986][T26032] hid-generic 0000:0000:0000.0066: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1773.720372][ T9838] fido_id[9838]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1773.803383][ T9829] binder: Unknown parameter ' XIj2sADmo' [ 1773.813569][ T9829] binder: Bad value for 'max' [ 1773.906663][ T9856] binder: Unknown parameter '/selinux/user' [ 1774.376117][ T9903] binder: Unknown parameter 'dont_hash' [ 1774.554233][ T9912] input: syz1 as /devices/virtual/input/input1470 [ 1774.700569][ T9920] rust_binder: Read failure Err(EAGAIN) in pid:114 [ 1774.875947][ T9936] FAULT_INJECTION: forcing a failure. [ 1774.875947][ T9936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.895727][ T9936] CPU: 0 UID: 0 PID: 9936 Comm: syz.8.28538 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1774.895757][ T9936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.895768][ T9936] Call Trace: [ 1774.895774][ T9936] [ 1774.895782][ T9936] __dump_stack+0x21/0x30 [ 1774.895806][ T9936] dump_stack_lvl+0x10c/0x190 [ 1774.895825][ T9936] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1774.895845][ T9936] ? random_recv_done+0x180/0x180 [ 1774.895872][ T9936] dump_stack+0x19/0x20 [ 1774.895890][ T9936] should_fail_ex+0x3d9/0x530 [ 1774.895908][ T9936] should_fail+0xf/0x20 [ 1774.895924][ T9936] should_fail_usercopy+0x1e/0x30 [ 1774.895943][ T9936] _copy_to_user+0x24/0xa0 [ 1774.895964][ T9936] rng_dev_read+0x4bc/0x920 [ 1774.895982][ T9936] ? __cfi_rng_dev_read+0x10/0x10 [ 1774.896002][ T9936] ? bpf_lsm_file_permission+0xd/0x20 [ 1774.896020][ T9936] ? __cfi_rng_dev_read+0x10/0x10 [ 1774.896038][ T9936] vfs_read+0x278/0xb60 [ 1774.896057][ T9936] ? __cfi_vfs_read+0x10/0x10 [ 1774.896076][ T9936] ? __fget_files+0x2c5/0x340 [ 1774.896099][ T9936] ksys_read+0x141/0x250 [ 1774.896117][ T9936] ? __cfi_ksys_read+0x10/0x10 [ 1774.896136][ T9936] ? __kasan_check_read+0x15/0x20 [ 1774.896155][ T9936] __x64_sys_read+0x7f/0x90 [ 1774.896174][ T9936] x64_sys_call+0x2638/0x2ee0 [ 1774.896195][ T9936] do_syscall_64+0x58/0xf0 [ 1774.896215][ T9936] ? clear_bhb_loop+0x35/0x90 [ 1774.896237][ T9936] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1774.896258][ T9936] RIP: 0033:0x7f6b7d58e929 [ 1774.896274][ T9936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.896288][ T9936] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1774.896308][ T9936] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1774.896322][ T9936] RDX: 0000000000002020 RSI: 0000200000000340 RDI: 0000000000000003 [ 1774.896334][ T9936] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.896346][ T9936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.896359][ T9936] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1774.896374][ T9936] [ 1775.140057][ T9938] binder: Unknown parameter 's' [ 1775.334225][ T9958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 1775.377212][ T9964] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1775.405702][ T9964] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1775.500238][ T9970] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 89) [ 1775.500262][ T9970] rust_binder: Error while translating object. [ 1775.517631][ T9970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1775.523898][ T9970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125 [ 1775.822924][ T9987] rust_binder: Write failure EFAULT in pid:644 [ 1775.857993][ T9985] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1775.952541][ T9996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1775.952837][ T9996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1775.970361][ T9996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1775.971291][ T9996] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1775.986849][ T9995] SELinux: failed to load policy [ 1776.259390][ T36] kauditd_printk_skb: 808 callbacks suppressed [ 1776.259406][ T36] audit: type=1400 audit(1750305114.949:235154): avc: denied { read write } for pid=10003 comm="syz.8.28564" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.305781][ T36] audit: type=1400 audit(1750305114.979:235155): avc: denied { read write open } for pid=10003 comm="syz.8.28564" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.331248][ T36] audit: type=1400 audit(1750305114.979:235156): avc: denied { map } for pid=10003 comm="syz.8.28564" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.376121][ T36] audit: type=1400 audit(1750305114.979:235157): avc: denied { read } for pid=10003 comm="syz.8.28564" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.412392][ T36] audit: type=1400 audit(1750305114.979:235158): avc: denied { ioctl } for pid=10003 comm="syz.8.28564" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.457775][ T36] audit: type=1400 audit(1750305115.019:235159): avc: denied { read } for pid=10010 comm="syz.2.28566" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.497767][ T36] audit: type=1400 audit(1750305115.019:235160): avc: denied { read open } for pid=10010 comm="syz.2.28566" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.552292][ T36] audit: type=1400 audit(1750305115.019:235161): avc: denied { ioctl } for pid=10010 comm="syz.2.28566" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.559701][T10014] rust_binder: Error while translating object. [ 1776.600466][ T36] audit: type=1400 audit(1750305115.239:235162): avc: denied { read } for pid=10013 comm="syz.0.28567" name="binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1776.611265][T10014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1776.631151][ T36] audit: type=1400 audit(1750305115.239:235163): avc: denied { read open } for pid=10013 comm="syz.0.28567" path="/dev/binderfs/binder0" dev="binder" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1776.655593][T10014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:244 [ 1776.667059][T10011] FAULT_INJECTION: forcing a failure. [ 1776.667059][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 1776.714206][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.2.28566 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1776.714237][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1776.714248][T10011] Call Trace: [ 1776.714253][T10011] [ 1776.714261][T10011] __dump_stack+0x21/0x30 [ 1776.714284][T10011] dump_stack_lvl+0x10c/0x190 [ 1776.714302][T10011] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1776.714323][T10011] dump_stack+0x19/0x20 [ 1776.714340][T10011] should_fail_ex+0x3d9/0x530 [ 1776.714360][T10011] should_failslab+0xac/0x100 [ 1776.714383][T10011] __kmalloc_cache_noprof+0x41/0x3c0 [ 1776.714402][T10011] ? kvm_set_irq_routing+0x1ba/0xbc0 [ 1776.714421][T10011] kvm_set_irq_routing+0x1ba/0xbc0 [ 1776.714440][T10011] kvm_setup_default_irq_routing+0x27/0x30 [ 1776.714463][T10011] kvm_arch_vm_ioctl+0x1274/0x14e0 [ 1776.714485][T10011] ? avc_has_perm_noaudit+0x286/0x360 [ 1776.714504][T10011] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 1776.714526][T10011] ? avc_has_perm+0x144/0x220 [ 1776.714543][T10011] ? __cfi_avc_has_perm+0x10/0x10 [ 1776.714559][T10011] ? avc_perm_nonode+0x101/0x1b0 [ 1776.714577][T10011] ? selinux_file_open+0x457/0x610 [ 1776.714600][T10011] ? __cfi_selinux_file_open+0x10/0x10 [ 1776.714623][T10011] ? is_bpf_text_address+0x17b/0x1a0 [ 1776.714644][T10011] ? kernel_text_address+0xa9/0xe0 [ 1776.714661][T10011] ? __kernel_text_address+0x11/0x40 [ 1776.714678][T10011] ? do_vfs_ioctl+0xeda/0x1e30 [ 1776.714699][T10011] ? arch_stack_walk+0x10b/0x170 [ 1776.714721][T10011] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 1776.714744][T10011] ? _parse_integer_limit+0x195/0x1e0 [ 1776.714761][T10011] ? _parse_integer+0x2e/0x40 [ 1776.714778][T10011] kvm_vm_ioctl+0x791/0xb80 [ 1776.714798][T10011] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 1776.714817][T10011] ? ioctl_has_perm+0x1aa/0x4d0 [ 1776.714840][T10011] ? __asan_memcpy+0x5a/0x80 [ 1776.714859][T10011] ? ioctl_has_perm+0x3e0/0x4d0 [ 1776.714888][T10011] ? has_cap_mac_admin+0xd0/0xd0 [ 1776.714911][T10011] ? proc_fail_nth_write+0x17e/0x210 [ 1776.714929][T10011] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1776.714946][T10011] ? selinux_file_ioctl+0x6e0/0x1360 [ 1776.714969][T10011] ? vfs_write+0x8ba/0xe80 [ 1776.714988][T10011] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1776.715011][T10011] ? __cfi_vfs_write+0x10/0x10 [ 1776.715030][T10011] ? __kasan_check_write+0x18/0x20 [ 1776.715048][T10011] ? mutex_unlock+0x8b/0x240 [ 1776.715072][T10011] ? __cfi_mutex_unlock+0x10/0x10 [ 1776.715094][T10011] ? __fget_files+0x2c5/0x340 [ 1776.715117][T10011] ? __fget_files+0x2c5/0x340 [ 1776.715137][T10011] ? bpf_lsm_file_ioctl+0xd/0x20 [ 1776.715154][T10011] ? security_file_ioctl+0x34/0xd0 [ 1776.715175][T10011] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 1776.715193][T10011] __se_sys_ioctl+0x132/0x1b0 [ 1776.715215][T10011] __x64_sys_ioctl+0x7f/0xa0 [ 1776.715240][T10011] x64_sys_call+0x1878/0x2ee0 [ 1776.715261][T10011] do_syscall_64+0x58/0xf0 [ 1776.715281][T10011] ? clear_bhb_loop+0x35/0x90 [ 1776.715304][T10011] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1776.715326][T10011] RIP: 0033:0x7f1505f8e929 [ 1776.715342][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1776.715358][T10011] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.715378][T10011] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1776.715393][T10011] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 1776.715405][T10011] RBP: 00007f1506d61090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.715418][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1776.715430][T10011] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1776.715445][T10011] [ 1777.487332][T10040] input: syz1 as /devices/virtual/input/input1471 [ 1777.507744][T10040] kvm: user requested TSC rate below hardware speed [ 1777.845320][T10055] kvm: kvm [10053]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1778.035121][T10064] rust_binder: Write failure EFAULT in pid:148 [ 1778.274010][T10073] rust_binder: Write failure EFAULT in pid:151 [ 1778.281743][T10074] SELinux: ebitmap: truncated map [ 1778.293976][T10074] SELinux: failed to load policy [ 1778.823565][T10098] binder: Bad value for 'stats' [ 1778.850417][T10096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 1779.651438][T10134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:262 [ 1779.791157][T10148] random: crng reseeded on system resumption [ 1779.829809][T10148] FAULT_INJECTION: forcing a failure. [ 1779.829809][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.849304][T10148] CPU: 1 UID: 0 PID: 10148 Comm: syz.8.28613 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1779.849333][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1779.849353][T10148] Call Trace: [ 1779.849359][T10148] [ 1779.849367][T10148] __dump_stack+0x21/0x30 [ 1779.849391][T10148] dump_stack_lvl+0x10c/0x190 [ 1779.849411][T10148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1779.849431][T10148] ? pointer+0xdd0/0xdd0 [ 1779.849450][T10148] dump_stack+0x19/0x20 [ 1779.849469][T10148] should_fail_ex+0x3d9/0x530 [ 1779.849488][T10148] should_failslab+0xac/0x100 [ 1779.849510][T10148] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 1779.849532][T10148] ? sidtab_sid2str_get+0x139/0x370 [ 1779.849555][T10148] kmemdup_noprof+0x31/0x80 [ 1779.849574][T10148] sidtab_sid2str_get+0x139/0x370 [ 1779.849594][T10148] security_sid_to_context_core+0x30d/0x5d0 [ 1779.849616][T10148] security_sid_to_context+0x2e/0x50 [ 1779.849636][T10148] avc_audit_post_callback+0x107/0x780 [ 1779.849655][T10148] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1779.849674][T10148] ? audit_log_untrustedstring+0xea/0x100 [ 1779.849692][T10148] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1779.849711][T10148] common_lsm_audit+0x147a/0x1860 [ 1779.849729][T10148] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 1779.849750][T10148] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1779.849766][T10148] ? __cfi_common_lsm_audit+0x10/0x10 [ 1779.849783][T10148] ? avc_denied+0x112/0x180 [ 1779.849798][T10148] slow_avc_audit+0x18d/0x1f0 [ 1779.849812][T10148] ? __cfi_slow_avc_audit+0x10/0x10 [ 1779.849828][T10148] ? avc_has_perm_noaudit+0x21c/0x360 [ 1779.849844][T10148] avc_has_perm+0x1cd/0x220 [ 1779.849860][T10148] ? __cfi_avc_has_perm+0x10/0x10 [ 1779.849876][T10148] ? mutex_lock+0x92/0x1c0 [ 1779.849901][T10148] sel_write_load+0x198/0x5e0 [ 1779.849925][T10148] ? proc_fail_nth_write+0x17e/0x210 [ 1779.849942][T10148] ? __cfi_sel_write_load+0x10/0x10 [ 1779.849965][T10148] ? bpf_lsm_file_permission+0xd/0x20 [ 1779.849984][T10148] ? __cfi_sel_write_load+0x10/0x10 [ 1779.850007][T10148] vfs_write+0x3c0/0xe80 [ 1779.850026][T10148] ? __cfi_vfs_write+0x10/0x10 [ 1779.850045][T10148] ? __kasan_check_write+0x18/0x20 [ 1779.850063][T10148] ? mutex_lock+0x92/0x1c0 [ 1779.850084][T10148] ? __cfi_mutex_lock+0x10/0x10 [ 1779.850105][T10148] ? __fget_files+0x2c5/0x340 [ 1779.850126][T10148] ksys_write+0x141/0x250 [ 1779.850143][T10148] ? xfd_validate_state+0x68/0x150 [ 1779.850160][T10148] ? __cfi_ksys_write+0x10/0x10 [ 1779.850178][T10148] ? __kasan_check_read+0x15/0x20 [ 1779.850195][T10148] __x64_sys_write+0x7f/0x90 [ 1779.850214][T10148] x64_sys_call+0x271c/0x2ee0 [ 1779.850234][T10148] do_syscall_64+0x58/0xf0 [ 1779.850254][T10148] ? clear_bhb_loop+0x35/0x90 [ 1779.850277][T10148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1779.850300][T10148] RIP: 0033:0x7f6b7d58e929 [ 1779.850315][T10148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1779.850330][T10148] RSP: 002b:00007f6b7e486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1779.850359][T10148] RAX: ffffffffffffffda RBX: 00007f6b7d7b5fa0 RCX: 00007f6b7d58e929 [ 1779.850373][T10148] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 1779.850386][T10148] RBP: 00007f6b7e486090 R08: 0000000000000000 R09: 0000000000000000 [ 1779.850398][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1779.850410][T10148] R13: 0000000000000000 R14: 00007f6b7d7b5fa0 R15: 00007ffeec9a1658 [ 1779.850423][T10148] [ 1779.850618][T10148] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1780.206611][T10148] SELinux: failed to load policy [ 1780.297711][T10168] input: syz0 as /devices/virtual/input/input1474 [ 1780.304164][T10168] input: failed to attach handler leds to device input1474, error: -6 [ 1780.353572][T10168] binder: Unknown parameter 'sUclabel' [ 1780.651632][T10184] kvm: kvm [10183]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 1780.994558][T10205] FAULT_INJECTION: forcing a failure. [ 1780.994558][T10205] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.008385][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.5.28635 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1781.008416][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1781.008428][T10205] Call Trace: [ 1781.008435][T10205] [ 1781.008443][T10205] __dump_stack+0x21/0x30 [ 1781.008469][T10205] dump_stack_lvl+0x10c/0x190 [ 1781.008489][T10205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1781.008509][T10205] dump_stack+0x19/0x20 [ 1781.008527][T10205] should_fail_ex+0x3d9/0x530 [ 1781.008547][T10205] should_failslab+0xac/0x100 [ 1781.008569][T10205] __kmalloc_node_noprof+0x6c/0x450 [ 1781.008588][T10205] ? __vmalloc_node_range_noprof+0x544/0x1420 [ 1781.008606][T10205] __vmalloc_node_range_noprof+0x544/0x1420 [ 1781.008623][T10205] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1781.008645][T10205] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 1781.008663][T10205] ? __kasan_check_write+0x18/0x20 [ 1781.008681][T10205] ? kobject_put+0x1cc/0x2a0 [ 1781.008701][T10205] ? class_find_device+0x2f3/0x360 [ 1781.008724][T10205] ? n_tty_open+0x38/0x1d0 [ 1781.008742][T10205] vzalloc_noprof+0xfd/0x1d0 [ 1781.008760][T10205] ? n_tty_open+0x38/0x1d0 [ 1781.008778][T10205] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1781.008799][T10205] ? __cfi_vzalloc_noprof+0x10/0x10 [ 1781.008815][T10205] n_tty_open+0x38/0x1d0 [ 1781.008832][T10205] tty_ldisc_setup+0xe8/0x390 [ 1781.008855][T10205] tty_init_dev+0x28b/0x4f0 [ 1781.008870][T10205] tty_open+0xb1c/0x1100 [ 1781.008886][T10205] ? __cfi_tty_open+0x10/0x10 [ 1781.008902][T10205] ? selinux_file_open+0x457/0x610 [ 1781.008923][T10205] chrdev_open+0x4db/0x5f0 [ 1781.008942][T10205] ? __cfi_chrdev_open+0x10/0x10 [ 1781.008962][T10205] ? bpf_lsm_file_open+0xd/0x20 [ 1781.008982][T10205] ? __cfi_chrdev_open+0x10/0x10 [ 1781.009000][T10205] do_dentry_open+0x978/0x1510 [ 1781.009024][T10205] vfs_open+0x86/0x230 [ 1781.009037][T10205] ? __cfi_vfs_open+0x10/0x10 [ 1781.009052][T10205] ? may_open+0x352/0x430 [ 1781.009073][T10205] path_openat+0x2b6c/0x34b0 [ 1781.009096][T10205] ? kasan_save_alloc_info+0x40/0x50 [ 1781.009113][T10205] ? getname_flags+0xc6/0x710 [ 1781.009133][T10205] ? do_sys_openat2+0xcb/0x1c0 [ 1781.009149][T10205] ? __x64_sys_openat+0x13a/0x170 [ 1781.009166][T10205] ? do_filp_open+0x3e0/0x3e0 [ 1781.009189][T10205] do_filp_open+0x1c6/0x3e0 [ 1781.009209][T10205] ? __cfi_do_filp_open+0x10/0x10 [ 1781.009231][T10205] ? alloc_fd+0x4e7/0x5a0 [ 1781.009250][T10205] do_sys_openat2+0x12c/0x1c0 [ 1781.009274][T10205] ? fput+0x1a5/0x240 [ 1781.009294][T10205] ? do_sys_open+0x100/0x100 [ 1781.009309][T10205] ? ksys_write+0x1ef/0x250 [ 1781.009327][T10205] ? __cfi_ksys_write+0x10/0x10 [ 1781.009347][T10205] __x64_sys_openat+0x13a/0x170 [ 1781.009363][T10205] x64_sys_call+0xe69/0x2ee0 [ 1781.009384][T10205] do_syscall_64+0x58/0xf0 [ 1781.009404][T10205] ? clear_bhb_loop+0x35/0x90 [ 1781.009425][T10205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1781.009445][T10205] RIP: 0033:0x7fca0e18e929 [ 1781.009460][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.009474][T10205] RSP: 002b:00007fca0ef8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1781.009492][T10205] RAX: ffffffffffffffda RBX: 00007fca0e3b5fa0 RCX: 00007fca0e18e929 [ 1781.009505][T10205] RDX: 0000000000121400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1781.009517][T10205] RBP: 00007fca0ef8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.009528][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.009539][T10205] R13: 0000000000000001 R14: 00007fca0e3b5fa0 R15: 00007ffecf692d18 [ 1781.009553][T10205] [ 1781.009562][T10205] syz.5.28635: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 1781.018783][T10208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1781.023400][T10205] ,cpuset=syz5,mems_allowed=0 [ 1781.393845][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.5.28635 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1781.393865][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1781.393873][T10205] Call Trace: [ 1781.393876][T10205] [ 1781.393882][T10205] __dump_stack+0x21/0x30 [ 1781.393898][T10205] dump_stack_lvl+0x10c/0x190 [ 1781.393909][T10205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1781.393921][T10205] dump_stack+0x19/0x20 [ 1781.393931][T10205] warn_alloc+0x1bc/0x2a0 [ 1781.393941][T10205] ? __cfi_warn_alloc+0x10/0x10 [ 1781.393950][T10205] ? __kasan_kmalloc+0x28/0xb0 [ 1781.393963][T10205] ? __kmalloc_node_noprof+0x1b1/0x450 [ 1781.393974][T10205] ? __vmalloc_node_range_noprof+0x544/0x1420 [ 1781.393984][T10205] __vmalloc_node_range_noprof+0x68e/0x1420 [ 1781.393996][T10205] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 1781.394006][T10205] ? __kasan_check_write+0x18/0x20 [ 1781.394017][T10205] ? kobject_put+0x1cc/0x2a0 [ 1781.394029][T10205] ? class_find_device+0x2f3/0x360 [ 1781.394043][T10205] ? n_tty_open+0x38/0x1d0 [ 1781.394054][T10205] vzalloc_noprof+0xfd/0x1d0 [ 1781.394063][T10205] ? n_tty_open+0x38/0x1d0 [ 1781.394074][T10205] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1781.394086][T10205] ? __cfi_vzalloc_noprof+0x10/0x10 [ 1781.394097][T10205] n_tty_open+0x38/0x1d0 [ 1781.394108][T10205] tty_ldisc_setup+0xe8/0x390 [ 1781.394121][T10205] tty_init_dev+0x28b/0x4f0 [ 1781.394131][T10205] tty_open+0xb1c/0x1100 [ 1781.394142][T10205] ? __cfi_tty_open+0x10/0x10 [ 1781.394152][T10205] ? selinux_file_open+0x457/0x610 [ 1781.394166][T10205] chrdev_open+0x4db/0x5f0 [ 1781.394179][T10205] ? __cfi_chrdev_open+0x10/0x10 [ 1781.394190][T10205] ? bpf_lsm_file_open+0xd/0x20 [ 1781.394201][T10205] ? __cfi_chrdev_open+0x10/0x10 [ 1781.394212][T10205] do_dentry_open+0x978/0x1510 [ 1781.394229][T10205] vfs_open+0x86/0x230 [ 1781.394237][T10205] ? __cfi_vfs_open+0x10/0x10 [ 1781.394246][T10205] ? may_open+0x352/0x430 [ 1781.394259][T10205] path_openat+0x2b6c/0x34b0 [ 1781.394272][T10205] ? kasan_save_alloc_info+0x40/0x50 [ 1781.394282][T10205] ? getname_flags+0xc6/0x710 [ 1781.394297][T10205] ? do_sys_openat2+0xcb/0x1c0 [ 1781.394306][T10205] ? __x64_sys_openat+0x13a/0x170 [ 1781.394316][T10205] ? do_filp_open+0x3e0/0x3e0 [ 1781.394330][T10205] do_filp_open+0x1c6/0x3e0 [ 1781.394343][T10205] ? __cfi_do_filp_open+0x10/0x10 [ 1781.394357][T10205] ? alloc_fd+0x4e7/0x5a0 [ 1781.394369][T10205] do_sys_openat2+0x12c/0x1c0 [ 1781.394378][T10205] ? fput+0x1a5/0x240 [ 1781.394390][T10205] ? do_sys_open+0x100/0x100 [ 1781.394399][T10205] ? ksys_write+0x1ef/0x250 [ 1781.394409][T10205] ? __cfi_ksys_write+0x10/0x10 [ 1781.394420][T10205] __x64_sys_openat+0x13a/0x170 [ 1781.394430][T10205] x64_sys_call+0xe69/0x2ee0 [ 1781.394442][T10205] do_syscall_64+0x58/0xf0 [ 1781.394453][T10205] ? clear_bhb_loop+0x35/0x90 [ 1781.394471][T10205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1781.394484][T10205] RIP: 0033:0x7fca0e18e929 [ 1781.394493][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.394501][T10205] RSP: 002b:00007fca0ef8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1781.394513][T10205] RAX: ffffffffffffffda RBX: 00007fca0e3b5fa0 RCX: 00007fca0e18e929 [ 1781.394521][T10205] RDX: 0000000000121400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1781.394528][T10205] RBP: 00007fca0ef8c090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.394535][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.394542][T10205] R13: 0000000000000001 R14: 00007fca0e3b5fa0 R15: 00007ffecf692d18 [ 1781.394549][T10205] [ 1781.394554][T10205] Mem-Info: [ 1781.751611][T10205] active_anon:6530 inactive_anon:0 isolated_anon:0 [ 1781.751611][T10205] active_file:26730 inactive_file:3043 isolated_file:0 [ 1781.751611][T10205] unevictable:0 dirty:236 writeback:0 [ 1781.751611][T10205] slab_reclaimable:7553 slab_unreclaimable:72464 [ 1781.751611][T10205] mapped:30736 shmem:160 pagetables:839 [ 1781.751611][T10205] sec_pagetables:0 bounce:0 [ 1781.751611][T10205] kernel_misc_reclaimable:0 [ 1781.751611][T10205] free:1491916 free_pcp:18711 free_cma:0 [ 1781.799107][T10205] Node 0 active_anon:26120kB inactive_anon:0kB active_file:106920kB inactive_file:12172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122944kB dirty:944kB writeback:0kB shmem:640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4736kB pagetables:3356kB sec_pagetables:0kB all_unreclaimable? no [ 1781.831506][T10205] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:0kB free_cma:0kB [ 1781.861278][T10205] lowmem_reserve[]: 0 3921 3921 [ 1781.866152][T10205] Normal free:3007452kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26120kB inactive_anon:0kB active_file:106920kB inactive_file:12172kB unevictable:0kB writepending:944kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:69152kB local_pcp:1340kB free_cma:0kB [ 1781.897646][T10205] lowmem_reserve[]: 0 0 0 [ 1781.902015][T10205] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 1781.921110][T10205] Normal: 215*4kB (UME) 180*8kB (UME) 236*16kB (UM) 597*32kB (UME) 456*64kB (UME) 113*128kB (UE) 31*256kB (UME) 28*512kB (UME) 20*1024kB (UME) 10*2048kB (UM) 702*4096kB (UM) = 3007452kB [ 1781.929242][ T36] kauditd_printk_skb: 556 callbacks suppressed [ 1781.929257][ T36] audit: type=1400 audit(1750305120.609:235720): avc: denied { read write } for pid=10213 comm="syz.0.28639" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1781.942085][T10205] 29929 total pagecache pages [ 1781.948577][ T36] audit: type=1400 audit(1750305120.629:235721): avc: denied { read write open } for pid=10213 comm="syz.0.28639" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1781.985373][T10205] 0 pages in swap cache [ 1782.004899][T10205] Free swap = 124996kB [ 1782.009663][T10205] Total swap = 124996kB [ 1782.013822][T10205] 2097051 pages RAM [ 1782.024724][ T36] audit: type=1400 audit(1750305120.689:235722): avc: denied { read write } for pid=10213 comm="syz.0.28639" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1782.043608][T10214] input: syz1 as /devices/virtual/input/input1475 [ 1782.049055][ T36] audit: type=1400 audit(1750305120.689:235723): avc: denied { read write open } for pid=10213 comm="syz.0.28639" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1782.080070][T10205] 0 pages HighMem/MovableOnly [ 1782.082043][ T36] audit: type=1400 audit(1750305120.689:235724): avc: denied { ioctl } for pid=10213 comm="syz.0.28639" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1782.084745][T10205] 351520 pages reserved [ 1782.084753][T10205] 0 pages cma reserved [ 1782.111455][ T36] audit: type=1400 audit(1750305120.709:235725): avc: denied { read } for pid=10213 comm="syz.0.28639" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1782.141660][T10205] Memory allocations: [ 1782.147348][T10205] 0 B 0 init/main.c:1370 func:do_initcalls [ 1782.154792][T10205] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 1782.159336][ T36] audit: type=1400 audit(1750305120.709:235726): avc: denied { read open } for pid=10213 comm="syz.0.28639" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1782.177336][T10205] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 1782.201801][ T36] audit: type=1400 audit(1750305120.709:235727): avc: denied { read } for pid=10213 comm="syz.0.28639" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1782.213450][T10205] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 1782.232877][T10205] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 1782.236565][ T36] audit: type=1400 audit(1750305120.709:235728): avc: denied { read open } for pid=10213 comm="syz.0.28639" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1782.241488][T10205] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 1782.265740][ T36] audit: type=1400 audit(1750305120.709:235729): avc: denied { ioctl } for pid=10213 comm="syz.0.28639" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1782.273399][T10205] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 1782.317803][T10205] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 1782.326427][T10205] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 1782.347806][T10205] 0 B 0 init/initramfs.c:101 func:find_link [ 1782.357738][T10205] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1782.707220][T10246] rust_binder: Write failure EFAULT in pid:708 [ 1782.939869][T10269] random: crng reseeded on system resumption [ 1783.038633][T10269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:718 [ 1783.044219][T10269] binder: Unknown parameter 'func' [ 1783.130505][T10284] input: syz1 as /devices/virtual/input/input1478 [ 1783.264291][T10299] binder: Unknown parameter 'con' [ 1783.970368][T10317] input: syz1 as /devices/virtual/input/input1479 [ 1784.165253][T10334] FAULT_INJECTION: forcing a failure. [ 1784.165253][T10334] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.178455][T10334] CPU: 1 UID: 0 PID: 10334 Comm: syz.0.28685 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1784.178484][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1784.178495][T10334] Call Trace: [ 1784.178501][T10334] [ 1784.178509][T10334] __dump_stack+0x21/0x30 [ 1784.178534][T10334] dump_stack_lvl+0x10c/0x190 [ 1784.178552][T10334] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1784.178572][T10334] ? pointer+0xdd0/0xdd0 [ 1784.178591][T10334] dump_stack+0x19/0x20 [ 1784.178609][T10334] should_fail_ex+0x3d9/0x530 [ 1784.178627][T10334] should_failslab+0xac/0x100 [ 1784.178650][T10334] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 1784.178670][T10334] ? sidtab_sid2str_get+0x139/0x370 [ 1784.178691][T10334] kmemdup_noprof+0x31/0x80 [ 1784.178710][T10334] sidtab_sid2str_get+0x139/0x370 [ 1784.178731][T10334] security_sid_to_context_core+0x30d/0x5d0 [ 1784.178751][T10334] security_sid_to_context+0x2e/0x50 [ 1784.178770][T10334] avc_audit_post_callback+0x107/0x780 [ 1784.178788][T10334] ? audit_log_format+0xdb/0x140 [ 1784.178805][T10334] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1784.178822][T10334] ? __cfi_audit_log_format+0x10/0x10 [ 1784.178839][T10334] ? audit_log_untrustedstring+0xea/0x100 [ 1784.178855][T10334] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1784.178873][T10334] common_lsm_audit+0x147a/0x1860 [ 1784.178890][T10334] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1784.178907][T10334] ? kmem_cache_free+0x1c1/0x4c0 [ 1784.178925][T10334] ? avc_node_kill+0x29e/0x2f0 [ 1784.178942][T10334] ? __cfi_common_lsm_audit+0x10/0x10 [ 1784.178958][T10334] ? avc_node_kill+0x2b6/0x2f0 [ 1784.178974][T10334] ? __kasan_check_write+0x18/0x20 [ 1784.178991][T10334] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1784.179011][T10334] slow_avc_audit+0x18d/0x1f0 [ 1784.179027][T10334] ? __cfi_slow_avc_audit+0x10/0x10 [ 1784.179042][T10334] ? avc_denied+0x112/0x180 [ 1784.179058][T10334] ? avc_perm_nonode+0x177/0x1b0 [ 1784.179074][T10334] audit_inode_permission+0x192/0x270 [ 1784.179097][T10334] ? may_create+0x800/0x800 [ 1784.179117][T10334] ? selinux_inode_permission+0x3d5/0x5a0 [ 1784.179138][T10334] ? avc_has_perm_noaudit+0x21c/0x360 [ 1784.179155][T10334] selinux_inode_permission+0x4c1/0x5a0 [ 1784.179176][T10334] ? __cfi_selinux_inode_permission+0x10/0x10 [ 1784.179198][T10334] ? make_vfsuid+0x4d/0xa0 [ 1784.179222][T10334] ? generic_permission+0x1e7/0x580 [ 1784.179244][T10334] security_inode_permission+0xaa/0x120 [ 1784.179265][T10334] inode_permission+0xf3/0x4c0 [ 1784.179286][T10334] may_open+0x197/0x430 [ 1784.179309][T10334] path_openat+0x2a13/0x34b0 [ 1784.179333][T10334] ? kasan_save_alloc_info+0x40/0x50 [ 1784.179350][T10334] ? getname_flags+0xc6/0x710 [ 1784.179369][T10334] ? do_sys_openat2+0xcb/0x1c0 [ 1784.179385][T10334] ? __x64_sys_openat+0x13a/0x170 [ 1784.179402][T10334] ? do_filp_open+0x3e0/0x3e0 [ 1784.179426][T10334] do_filp_open+0x1c6/0x3e0 [ 1784.179447][T10334] ? __cfi_do_filp_open+0x10/0x10 [ 1784.179473][T10334] ? alloc_fd+0x4e7/0x5a0 [ 1784.179494][T10334] do_sys_openat2+0x12c/0x1c0 [ 1784.179509][T10334] ? fput+0x1a5/0x240 [ 1784.179530][T10334] ? do_sys_open+0x100/0x100 [ 1784.179545][T10334] ? ksys_write+0x1ef/0x250 [ 1784.179564][T10334] ? __cfi_ksys_write+0x10/0x10 [ 1784.179584][T10334] __x64_sys_openat+0x13a/0x170 [ 1784.179601][T10334] x64_sys_call+0xe69/0x2ee0 [ 1784.179621][T10334] do_syscall_64+0x58/0xf0 [ 1784.179640][T10334] ? clear_bhb_loop+0x35/0x90 [ 1784.179663][T10334] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1784.179684][T10334] RIP: 0033:0x7f0742b8e929 [ 1784.179700][T10334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1784.179715][T10334] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1784.179735][T10334] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1784.179749][T10334] RDX: 0000000000040200 RSI: 0000200000001780 RDI: ffffffffffffff9c [ 1784.179762][T10334] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.179775][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.179786][T10334] R13: 0000000000000001 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1784.179801][T10334] [ 1784.599452][T10336] rust_binder: Write failure EFAULT in pid:297 [ 1784.608620][T10336] rust_binder: Write failure EINVAL in pid:297 [ 1784.955048][T10354] rust_binder: Error while translating object. [ 1784.961654][T10354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1784.968471][T10354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:304 [ 1785.486908][T10378] FAULT_INJECTION: forcing a failure. [ 1785.486908][T10378] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.508641][T10378] CPU: 1 UID: 0 PID: 10378 Comm: syz.5.28702 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1785.508670][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1785.508682][T10378] Call Trace: [ 1785.508689][T10378] [ 1785.508696][T10378] __dump_stack+0x21/0x30 [ 1785.508721][T10378] dump_stack_lvl+0x10c/0x190 [ 1785.508740][T10378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1785.508761][T10378] dump_stack+0x19/0x20 [ 1785.508779][T10378] should_fail_ex+0x3d9/0x530 [ 1785.508798][T10378] should_failslab+0xac/0x100 [ 1785.508826][T10378] kmem_cache_alloc_noprof+0x42/0x3a0 [ 1785.508845][T10378] ? getname_flags+0xc6/0x710 [ 1785.508869][T10378] getname_flags+0xc6/0x710 [ 1785.508890][T10378] user_path_at+0x2b/0x60 [ 1785.508912][T10378] __se_sys_mount+0x288/0x480 [ 1785.508932][T10378] ? ksys_write+0x1ef/0x250 [ 1785.508951][T10378] ? __x64_sys_mount+0xf0/0xf0 [ 1785.508971][T10378] __x64_sys_mount+0xc3/0xf0 [ 1785.508990][T10378] x64_sys_call+0x2021/0x2ee0 [ 1785.509011][T10378] do_syscall_64+0x58/0xf0 [ 1785.509039][T10378] ? clear_bhb_loop+0x35/0x90 [ 1785.509063][T10378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1785.509083][T10378] RIP: 0033:0x7fca0e18e929 [ 1785.509098][T10378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.509113][T10378] RSP: 002b:00007fca0ef8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1785.509132][T10378] RAX: ffffffffffffffda RBX: 00007fca0e3b5fa0 RCX: 00007fca0e18e929 [ 1785.509147][T10378] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 1785.509160][T10378] RBP: 00007fca0ef8c090 R08: 0000200000000180 R09: 0000000000000000 [ 1785.509174][T10378] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000001 [ 1785.509186][T10378] R13: 0000000000000000 R14: 00007fca0e3b5fa0 R15: 00007ffecf692d18 [ 1785.509202][T10378] [ 1785.811885][T10388] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 1786.490899][T10416] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 1786.730592][T10423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 1786.730622][T10423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:242 [ 1786.787281][T10427] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 1786.803675][T10427] rust_binder: Write failure EINVAL in pid:244 [ 1786.886766][T10429] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 1786.893741][T10429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 1786.901976][T10429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:768 [ 1786.918798][T10429] rust_binder: Error while translating object. [ 1786.928171][T10429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 1786.934743][ T36] kauditd_printk_skb: 615 callbacks suppressed [ 1786.934758][ T36] audit: type=1400 audit(1750305125.619:236345): avc: denied { read write } for pid=10431 comm="syz.5.28721" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1786.935008][T10429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:768 [ 1786.944808][ T36] audit: type=1400 audit(1750305125.619:236346): avc: denied { read write open } for pid=10431 comm="syz.5.28721" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1787.008376][ T36] audit: type=1400 audit(1750305125.639:236347): avc: denied { read write } for pid=10431 comm="syz.5.28721" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1787.037758][ T36] audit: type=1400 audit(1750305125.639:236348): avc: denied { read write open } for pid=10431 comm="syz.5.28721" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1787.065387][ T36] audit: type=1400 audit(1750305125.649:236349): avc: denied { ioctl } for pid=10431 comm="syz.5.28721" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1787.091550][ T36] audit: type=1400 audit(1750305125.679:236350): avc: denied { read write } for pid=7497 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.117789][ T36] audit: type=1400 audit(1750305125.679:236351): avc: denied { read write open } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.143562][ T36] audit: type=1400 audit(1750305125.679:236352): avc: denied { ioctl } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1787.169851][ T36] audit: type=1400 audit(1750305125.729:236353): avc: denied { read } for pid=10434 comm="syz.8.28722" name="binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1787.194533][ T36] audit: type=1400 audit(1750305125.729:236354): avc: denied { read open } for pid=10434 comm="syz.8.28722" path="/dev/binderfs/binder1" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1788.076716][T10463] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1788.200857][T10474] binder: Unknown parameter '' [ 1788.232283][T10471] SELinux: failed to load policy [ 1788.237657][T10471] binfmt_misc: register: failed to install interpreter file ./file0 [ 1788.562163][T10485] FAULT_INJECTION: forcing a failure. [ 1788.562163][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.578739][T10485] CPU: 1 UID: 0 PID: 10485 Comm: syz.0.28741 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1788.578766][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1788.578775][T10485] Call Trace: [ 1788.578782][T10485] [ 1788.578788][T10485] __dump_stack+0x21/0x30 [ 1788.578815][T10485] dump_stack_lvl+0x10c/0x190 [ 1788.578830][T10485] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1788.578847][T10485] ? pointer+0xdd0/0xdd0 [ 1788.578864][T10485] dump_stack+0x19/0x20 [ 1788.578881][T10485] should_fail_ex+0x3d9/0x530 [ 1788.578898][T10485] should_failslab+0xac/0x100 [ 1788.578920][T10485] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 1788.578940][T10485] ? sidtab_sid2str_get+0x139/0x370 [ 1788.578962][T10485] kmemdup_noprof+0x31/0x80 [ 1788.578981][T10485] sidtab_sid2str_get+0x139/0x370 [ 1788.578999][T10485] security_sid_to_context_core+0x30d/0x5d0 [ 1788.579017][T10485] security_sid_to_context+0x2e/0x50 [ 1788.579034][T10485] avc_audit_post_callback+0x107/0x780 [ 1788.579050][T10485] ? audit_log_format+0xdb/0x140 [ 1788.579066][T10485] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1788.579084][T10485] ? __cfi_audit_log_format+0x10/0x10 [ 1788.579101][T10485] ? audit_log_untrustedstring+0xea/0x100 [ 1788.579119][T10485] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1788.579135][T10485] common_lsm_audit+0x147a/0x1860 [ 1788.579152][T10485] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1788.579170][T10485] ? kmem_cache_free+0x1c1/0x4c0 [ 1788.579189][T10485] ? avc_node_kill+0x29e/0x2f0 [ 1788.579203][T10485] ? __cfi_common_lsm_audit+0x10/0x10 [ 1788.579219][T10485] ? avc_node_kill+0x2b6/0x2f0 [ 1788.579236][T10485] ? __kasan_check_write+0x18/0x20 [ 1788.579254][T10485] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 1788.579276][T10485] slow_avc_audit+0x18d/0x1f0 [ 1788.579293][T10485] ? __cfi_slow_avc_audit+0x10/0x10 [ 1788.579310][T10485] ? avc_denied+0x112/0x180 [ 1788.579328][T10485] ? avc_perm_nonode+0x177/0x1b0 [ 1788.579345][T10485] audit_inode_permission+0x192/0x270 [ 1788.579369][T10485] ? may_create+0x800/0x800 [ 1788.579390][T10485] ? selinux_inode_permission+0x3d5/0x5a0 [ 1788.579412][T10485] ? avc_has_perm_noaudit+0x21c/0x360 [ 1788.579430][T10485] selinux_inode_permission+0x4c1/0x5a0 [ 1788.579452][T10485] ? __cfi_selinux_inode_permission+0x10/0x10 [ 1788.579475][T10485] ? make_vfsuid+0x4d/0xa0 [ 1788.579493][T10485] ? generic_permission+0x1e7/0x580 [ 1788.579515][T10485] security_inode_permission+0xaa/0x120 [ 1788.579534][T10485] inode_permission+0xf3/0x4c0 [ 1788.579553][T10485] may_open+0x197/0x430 [ 1788.579573][T10485] path_openat+0x2a13/0x34b0 [ 1788.579597][T10485] ? kasan_save_alloc_info+0x40/0x50 [ 1788.579614][T10485] ? getname_flags+0xc6/0x710 [ 1788.579632][T10485] ? do_sys_openat2+0xcb/0x1c0 [ 1788.579648][T10485] ? __x64_sys_openat+0x13a/0x170 [ 1788.579665][T10485] ? do_filp_open+0x3e0/0x3e0 [ 1788.579689][T10485] do_filp_open+0x1c6/0x3e0 [ 1788.579710][T10485] ? __cfi_do_filp_open+0x10/0x10 [ 1788.579735][T10485] ? alloc_fd+0x4e7/0x5a0 [ 1788.579756][T10485] do_sys_openat2+0x12c/0x1c0 [ 1788.579772][T10485] ? fput+0x1a5/0x240 [ 1788.579793][T10485] ? do_sys_open+0x100/0x100 [ 1788.579818][T10485] ? ksys_write+0x1ef/0x250 [ 1788.579836][T10485] ? __cfi_ksys_write+0x10/0x10 [ 1788.579856][T10485] __x64_sys_openat+0x13a/0x170 [ 1788.579874][T10485] x64_sys_call+0xe69/0x2ee0 [ 1788.579895][T10485] do_syscall_64+0x58/0xf0 [ 1788.579915][T10485] ? clear_bhb_loop+0x35/0x90 [ 1788.579938][T10485] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1788.579960][T10485] RIP: 0033:0x7f0742b8e929 [ 1788.579975][T10485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.579990][T10485] RSP: 002b:00007f0743988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1788.580011][T10485] RAX: ffffffffffffffda RBX: 00007f0742db5fa0 RCX: 00007f0742b8e929 [ 1788.580025][T10485] RDX: 0000000000000802 RSI: 0000200000001180 RDI: ffffffffffffff9c [ 1788.580039][T10485] RBP: 00007f0743988090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.580052][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1788.580064][T10485] R13: 0000000000000001 R14: 00007f0742db5fa0 R15: 00007ffd97149bc8 [ 1788.580080][T10485] [ 1789.123642][T10494] SELinux: failed to load policy [ 1789.138815][T10497] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1789.742943][T10526] kvm: user requested TSC rate below hardware speed [ 1789.759988][T10526] kvm: user requested TSC rate below hardware speed [ 1790.027827][T10539] input: syz0 as /devices/virtual/input/input1483 [ 1790.322830][T10556] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1790.729583][T10569] binder: Unknown parameter 'dozyz' [ 1790.948190][T10575] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 1791.699181][T10607] SELinux: policydb version 592713773 does not match my version range 15-33 [ 1791.708236][T10607] SELinux: failed to load policy [ 1791.710077][T10609] binder: Unknown parameter '0x0000000000000000' [ 1792.102921][ T36] kauditd_printk_skb: 454 callbacks suppressed [ 1792.102937][ T36] audit: type=1400 audit(1750305130.789:236807): avc: denied { read } for pid=10620 comm="syz.2.28788" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1792.132727][ T36] audit: type=1400 audit(1750305130.789:236808): avc: denied { read open } for pid=10620 comm="syz.2.28788" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1792.158011][ T36] audit: type=1400 audit(1750305130.819:236809): avc: denied { ioctl } for pid=10620 comm="syz.2.28788" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1792.193951][ T36] audit: type=1400 audit(1750305130.879:236810): avc: denied { read } for pid=10620 comm="syz.2.28788" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1792.237348][ T36] audit: type=1400 audit(1750305130.879:236811): avc: denied { read open } for pid=10620 comm="syz.2.28788" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1792.247411][T10623] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1792.261967][ T36] audit: type=1400 audit(1750305130.879:236812): avc: denied { ioctl } for pid=10620 comm="syz.2.28788" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1792.294915][ T36] audit: type=1400 audit(1750305130.919:236813): avc: denied { read write } for pid=7497 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.302923][T10623] input: syz0 as /devices/virtual/input/input1485 [ 1792.346597][ T36] audit: type=1400 audit(1750305130.919:236814): avc: denied { read write open } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.407754][ T36] audit: type=1400 audit(1750305130.919:236815): avc: denied { ioctl } for pid=7497 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1792.433896][ T36] audit: type=1400 audit(1750305130.929:236816): avc: denied { mounton } for pid=10622 comm="syz.8.28790" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1792.535842][T10635] SELinux: policydb version -417322484 does not match my version range 15-33 [ 1792.545129][T10635] SELinux: failed to load policy [ 1792.588005][T10637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:367 [ 1792.843416][T10644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1792.862010][T10644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1793.067946][T10663] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 1793.067967][T10663] rust_binder: Read failure Err(EFAULT) in pid:831 [ 1793.091244][T10655] kvm: user requested TSC rate below hardware speed [ 1793.178763][T10668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:376 [ 1793.461310][T10675] input: syz1 as /devices/virtual/input/input1486 [ 1793.564817][T10679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1793.586901][T10679] rust_binder: Write failure EFAULT in pid:835 [ 1793.594846][T10679] tun1: tun_chr_ioctl cmd 1074025675 [ 1793.610076][T10679] tun1: persist disabled [ 1793.871944][T10701] rust_binder: Write failure EFAULT in pid:383 [ 1793.909167][T10704] FAULT_INJECTION: forcing a failure. [ 1793.909167][T10704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1793.929769][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.2.28820 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1793.929800][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1793.929812][T10704] Call Trace: [ 1793.929819][T10704] [ 1793.929828][T10704] __dump_stack+0x21/0x30 [ 1793.929853][T10704] dump_stack_lvl+0x10c/0x190 [ 1793.929872][T10704] ? __cfi_dump_stack_lvl+0x10/0x10 [ 1793.929891][T10704] ? kasan_save_free_info+0x4a/0x60 [ 1793.929908][T10704] ? kmem_cache_free+0x1c1/0x4c0 [ 1793.929928][T10704] ? unlink_anon_vmas+0x2c6/0x5c0 [ 1793.929947][T10704] ? free_pgtables+0x2a9/0x730 [ 1793.929964][T10704] ? vms_clean_up_area+0x66/0x1d0 [ 1793.929984][T10704] dump_stack+0x19/0x20 [ 1793.930003][T10704] should_fail_ex+0x3d9/0x530 [ 1793.930022][T10704] should_fail_alloc_page+0xeb/0x110 [ 1793.930044][T10704] __alloc_pages_noprof+0x19d/0x6c0 [ 1793.930062][T10704] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 1793.930078][T10704] ? is_bpf_text_address+0x17b/0x1a0 [ 1793.930098][T10704] ? kernel_text_address+0xa9/0xe0 [ 1793.930116][T10704] ? unwind_get_return_address+0x51/0x90 [ 1793.930134][T10704] pte_alloc_one+0x97/0x520 [ 1793.930154][T10704] ? __cfi_pte_alloc_one+0x10/0x10 [ 1793.930172][T10704] ? pagerange_is_ram_callback+0xf4/0x150 [ 1793.930191][T10704] __pte_alloc+0x79/0x420 [ 1793.930206][T10704] ? __cfi___pte_alloc+0x10/0x10 [ 1793.930220][T10704] ? pat_pagerange_is_ram+0xf4/0x140 [ 1793.930237][T10704] ? cattr_name+0xc0/0xc0 [ 1793.930253][T10704] remap_pfn_range_notrack+0x8d0/0xb00 [ 1793.930270][T10704] ? lookup_memtype+0xe3/0x190 [ 1793.930287][T10704] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 1793.930304][T10704] ? __kasan_check_read+0x15/0x20 [ 1793.930318][T10704] ? track_pfn_remap+0x2a7/0x340 [ 1793.930343][T10704] remap_pfn_range+0xf1/0x170 [ 1793.930359][T10704] ? __cfi_remap_pfn_range+0x10/0x10 [ 1793.930375][T10704] ? kasan_save_alloc_info+0x40/0x50 [ 1793.930390][T10704] sel_mmap_handle_status+0x2d8/0x3c0 [ 1793.930407][T10704] mmap_region+0x1371/0x1bd0 [ 1793.930425][T10704] ? __cfi_mmap_region+0x10/0x10 [ 1793.930441][T10704] ? avc_compute_av+0x443/0x770 [ 1793.930459][T10704] ? __kasan_check_read+0x15/0x20 [ 1793.930476][T10704] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 1793.930500][T10704] ? __get_unmapped_area+0x407/0x470 [ 1793.930519][T10704] ? file_mmap_ok+0x147/0x1a0 [ 1793.930537][T10704] do_mmap+0xb6d/0x13c0 [ 1793.930555][T10704] ? __cfi_do_mmap+0x10/0x10 [ 1793.930573][T10704] ? down_write_killable+0xe9/0x2d0 [ 1793.930592][T10704] ? __cfi_down_write_killable+0x10/0x10 [ 1793.930612][T10704] vm_mmap_pgoff+0x38f/0x4e0 [ 1793.930632][T10704] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1793.930651][T10704] ? __fget_files+0x2c5/0x340 [ 1793.930673][T10704] ksys_mmap_pgoff+0x166/0x1e0 [ 1793.930693][T10704] __x64_sys_mmap+0x121/0x140 [ 1793.930714][T10704] x64_sys_call+0x13bf/0x2ee0 [ 1793.930735][T10704] do_syscall_64+0x58/0xf0 [ 1793.930755][T10704] ? clear_bhb_loop+0x35/0x90 [ 1793.930778][T10704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1793.930799][T10704] RIP: 0033:0x7f1505f8e929 [ 1793.930814][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.930830][T10704] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1793.930850][T10704] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1793.930864][T10704] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 1793.930875][T10704] RBP: 00007f1506d61090 R08: 0000000000000003 R09: 0000000000000000 [ 1793.930886][T10704] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1793.930896][T10704] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1793.930910][T10704] [ 1793.942199][T10706] rust_binder: Error while translating object. [ 1793.945689][T10704] ------------[ cut here ]------------ [ 1793.981789][T10706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 1793.985076][T10704] WARNING: CPU: 0 PID: 10704 at arch/x86/mm/pat/memtype.c:983 untrack_pfn+0x450/0x540 [ 1793.992256][T10706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:312 [ 1793.994903][T10704] Modules linked in: [ 1793.994918][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.2.28820 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 1794.351985][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1794.362046][T10704] RIP: 0010:untrack_pfn+0x450/0x540 [ 1794.367327][T10704] Code: 00 00 fc ff df 0f 84 a8 00 00 00 e8 7a 5f 3f 00 4c 8b 74 24 10 4d 85 f6 0f 85 bf fe ff ff e8 67 5f 3f 00 eb 47 e8 60 5f 3f 00 <0f> 0b 49 bd 00 00 00 00 00 fc ff df eb 34 e8 4d 5f 3f 00 4c 8b 7c [ 1794.386962][T10704] RSP: 0018:ffffc9000182f380 EFLAGS: 00010293 [ 1794.393069][T10704] RAX: ffffffff81461df0 RBX: 1ffff92000305e74 RCX: ffff8881103f8000 [ 1794.401052][T10704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 1794.409116][T10704] RBP: ffffc9000182f490 R08: ffffc9000182f417 R09: 0000000000000000 [ 1794.417095][T10704] R10: ffffc9000182f3f0 R11: fffff52000305e83 R12: ffffc9000182f3e0 [ 1794.425075][T10704] R13: 1ffff110222e22c8 R14: 0000000000000000 R15: 0000000000000000 [ 1794.433067][T10704] FS: 00007f1506d616c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1794.442013][T10704] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1794.448607][T10704] CR2: 00007f1506d60f98 CR3: 000000012e8b8000 CR4: 00000000003526b0 [ 1794.456570][T10704] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 1794.464543][T10704] DR3: 000000000000000c DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1794.472528][T10704] Call Trace: [ 1794.475795][T10704] [ 1794.478727][T10704] ? __cfi_untrack_pfn+0x10/0x10 [ 1794.483666][T10704] ? lru_add_drain_cpu+0x2f7/0x430 [ 1794.488798][T10704] ? uprobe_munmap+0x181/0x490 [ 1794.493563][T10704] ? tlb_gather_mmu+0x236/0x300 [ 1794.498432][T10704] zap_page_range_single+0x462/0x470 [ 1794.503714][T10704] ? __cfi_zap_page_range_single+0x10/0x10 [ 1794.509527][T10704] ? pagerange_is_ram_callback+0xf4/0x150 [ 1794.515243][T10704] ? __cfi___pte_alloc+0x10/0x10 [ 1794.520182][T10704] ? pat_pagerange_is_ram+0xf4/0x140 [ 1794.525481][T10704] ? cattr_name+0xc0/0xc0 [ 1794.529815][T10704] remap_pfn_range_notrack+0x9be/0xb00 [ 1794.535277][T10704] ? lookup_memtype+0xe3/0x190 [ 1794.540056][T10704] ? __cfi_remap_pfn_range_notrack+0x10/0x10 [ 1794.546031][T10704] ? __kasan_check_read+0x15/0x20 [ 1794.551083][T10704] ? track_pfn_remap+0x2a7/0x340 [ 1794.556014][T10704] remap_pfn_range+0xf1/0x170 [ 1794.560710][T10704] ? __cfi_remap_pfn_range+0x10/0x10 [ 1794.565991][T10704] ? kasan_save_alloc_info+0x40/0x50 [ 1794.571294][T10704] sel_mmap_handle_status+0x2d8/0x3c0 [ 1794.576661][T10704] mmap_region+0x1371/0x1bd0 [ 1794.581255][T10704] ? __cfi_mmap_region+0x10/0x10 [ 1794.586184][T10704] ? avc_compute_av+0x443/0x770 [ 1794.591054][T10704] ? __kasan_check_read+0x15/0x20 [ 1794.596069][T10704] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 1794.602318][T10704] ? __get_unmapped_area+0x407/0x470 [ 1794.607595][T10704] ? file_mmap_ok+0x147/0x1a0 [ 1794.612284][T10704] do_mmap+0xb6d/0x13c0 [ 1794.616437][T10704] ? __cfi_do_mmap+0x10/0x10 [ 1794.621033][T10704] ? down_write_killable+0xe9/0x2d0 [ 1794.626227][T10704] ? __cfi_down_write_killable+0x10/0x10 [ 1794.631856][T10704] vm_mmap_pgoff+0x38f/0x4e0 [ 1794.636443][T10704] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1794.641574][T10704] ? __fget_files+0x2c5/0x340 [ 1794.646248][T10704] ksys_mmap_pgoff+0x166/0x1e0 [ 1794.651028][T10704] __x64_sys_mmap+0x121/0x140 [ 1794.655706][T10704] x64_sys_call+0x13bf/0x2ee0 [ 1794.660389][T10704] do_syscall_64+0x58/0xf0 [ 1794.664799][T10704] ? clear_bhb_loop+0x35/0x90 [ 1794.669506][T10704] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 1794.675393][T10704] RIP: 0033:0x7f1505f8e929 [ 1794.679814][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.699437][T10704] RSP: 002b:00007f1506d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1794.707866][T10704] RAX: ffffffffffffffda RBX: 00007f15061b5fa0 RCX: 00007f1505f8e929 [ 1794.715828][T10704] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 1794.723803][T10704] RBP: 00007f1506d61090 R08: 0000000000000003 R09: 0000000000000000 [ 1794.731788][T10704] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1794.739783][T10704] R13: 0000000000000000 R14: 00007f15061b5fa0 R15: 00007ffec9e471c8 [ 1794.747774][T10704] [ 1794.750786][T10704] ---[ end trace 0000000000000000 ]---