last executing test programs: 1m12.774760818s ago: executing program 2 (id=1057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="80fd"], 0x5) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1m12.63229024s ago: executing program 2 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x8e8}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_NAME(0x35, &(0x7f0000000000)=""/4096) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0xa2a, 0x0, 0x5, 0xf0, 0x80000001, 0xb, 0xbdb], 0xeeee8000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0x100000, 0x10, 0x9, 0x8, 0x0, [{0x6, 0x2, 0x5}, {0x0, 0xff, 0xe7}, {0x2, 0x6a, 0xff}, {0x2, 0x0, 0x7}, {0x7, 0xfa, 0x0, '\x00', 0x5}, {0x1, 0x80, 0x4, '\x00', 0x3}, {0xc, 0x80, 0x3, '\x00', 0x80}, {0x2, 0x2, 0xf, '\x00', 0x50}, {0x8, 0xcc, 0x4}, {0x2, 0x7f, 0x6, '\x00', 0x8}, {0x78, 0x0, 0x3, '\x00', 0x7}, {0xba, 0xb, 0x7f, '\x00', 0xe0}, {0x8, 0x80, 0xc, '\x00', 0x6}, {0x6, 0x7, 0x2, '\x00', 0x2}, {0x40, 0xc7, 0x2, '\x00', 0x5}, {0x10, 0x10, 0x9, '\x00', 0x5}, {0x7, 0x0, 0x9, '\x00', 0x7f}, {0x9, 0x9, 0x4, '\x00', 0x90}, {0xa, 0x8, 0x40, '\x00', 0x1c}, {0x0, 0xfd, 0x1c, '\x00', 0xd7}, {0xc, 0x6, 0x5, '\x00', 0x2}, {0x2, 0xfd, 0x1, '\x00', 0x9}, {0x3, 0x5d, 0xff, '\x00', 0x5}, {0x0, 0x0, 0x61, '\x00', 0x4}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m12.534463461s ago: executing program 2 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xd90, 0x0, 0x319}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@stats}]}) 1m12.447195803s ago: executing program 2 (id=1065): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x3, &(0x7f0000000680)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x2c, 0x2, 0x1, 0x3}, {0x6, 0xd5, 0x9, 0x5}]}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x40000106, 0x0, 0x5}]}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffe) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v\x0e\x1d\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c7\xa7\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xfd\xba|\xa3\xd9\xb2].]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\b\x00\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16\x03\x00\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7P\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00\x03\xb6\ny\x8cP\xbcQ\x98wZ]\x9f\x16l\xd7\'\x06\xc9O{tSh\x8cWiD:\x1fDaqb\xc7\xf7+K:\xde\xa8U\xbcPw\xa4\xe5\x12\xea\xa2c\xdfX:\xf6') (async) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\x00\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r\xba\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00'/468) (async) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000001500)=0xffffffffffffffff, 0x12) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x2f}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1m12.164578067s ago: executing program 2 (id=1066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e32afbb3b0630cb35b58640afc2188a232f77968c18d2d0e8f91c974edcb3198b4520f530acacb12017216338cc479de3651e8f15f1672397c730e3ca2a189ca4cc85f35dd46aeb67b6a2eb7268a653b190d8ba670490d50f761c1fa25f1954d8fe6bcb15dbc23698c945262b991e6245b9a25b12b13c87bf8a8a06f51784007abd06e01a0c03ee80b236fabb5b22ce797c4d8a739ac96dcf16c93f454463d3631c4cdd2dea6732a486015dc9937ee4e6efbfff46bdd8887094ca4bd94d995f411421c7ef07f949fcc10132f58b7c99a871780d92464594c930b80596baab77b0d68a05d71ca8a1888f3128f12aebac362c4d80870ab3d9f2e77d51f9af16472faff98dda1e0133c8bc2510345d5eb1d64bce64761f4cc39ac6655902338bf1335dc55393995af4447ed1aa4c50bfacd576842560abca3e6c74dcea6dd03d36f9e7f8bda2cf33e3b7da195fba79f5a60421e19910f1fef31b9fa52064ce9ee8c415746a3cab47a8ad8477e9f21e9ee804a85dc568439b95c01bbbc3fa16a8c26bd81b01b8849795b2370f591e2a8e175cd465a600a541839bc734271b4b3afb2303dc1cf12bee00080ad10658c97672ad023e89f23d9301b5dbf1a7ba6d6c2b8dbd300f05f36a095f188b56fd3ba8e871aaf22e2128696e7232cb22f4f5404a3d1256a11665caaead326faad340031cafb99edbceba7bac44c7d2720aedba9cb708dae55b192a1e31835fae8756f062c151f6778b1d93c2d1f8b479ae9bbe1255abcef9beaa95b558fbbc9a979d46580aa85b10f160b438bea64f23b8e605ce34d2b46bbf8bfbfa683b10f55b3d30c58675dd1a524495e5d42c7d02dc60b853e8b3ed2caf41cd24a8a1d044e27d48b2184bac00730f7c20a1ba2bb6b6a5381a3d359d8e721504bbbce18ee49031b48c278a5730f31fb83f6cf32ac98326b722d3e2d7b38a7b80b94a3eb2b69fb1aefc8c0bbe431191f0ed76141a8365621e4f7118dd4465b4642bdb0af21d30c8cfb1d5201852c0428b1983d91f706e814c1395888b1"}) 1m12.100289248s ago: executing program 2 (id=1068): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)={0x29, 0x6, 0x0, {0x0, 0x5}}, 0x29) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000700)={[0x1, 0x7, 0x1, 0x0, 0xfffffffffffffffc, 0x6, 0x1, 0x0, 0x8000000000000000, 0x2655, 0x2, 0x7, 0x3, 0x87, 0x80000000, 0xffff], 0x4, 0x54802}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.14731883s ago: executing program 1 (id=1218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x2, 0xd3e, 0x389, 0x0, 0xe}) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000840)={"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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff77, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1m4.036767061s ago: executing program 1 (id=1220): syz_clone3(&(0x7f0000001280)={0x10000, 0x0, 0x0, 0x0, {}, &(0x7f00000011c0), 0x0, 0x0, 0x0}, 0x58) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e050602bf"], 0xffdd) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)={0x10000, 0x10e000, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x5, 0x2, 0x19}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1080, 0x2}}, &(0x7f0000000140)={0x0, 0x20, 0x9b}}, 0x400}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 1m3.910634713s ago: executing program 1 (id=1221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) 1m3.831462334s ago: executing program 1 (id=1223): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x91797000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$KDSIGACCEPT(r1, 0x800455ca, 0x2e) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0) 1m1.655797237s ago: executing program 1 (id=1251): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) (async) close_range(r0, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x290, 0x0, 0x5}]}) (async) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x290, 0x0, 0x5}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000246000/0x1000)=nil, 0x1000, 0x100000a, 0x110, r5, 0xc2a4a000) 1m1.524821299s ago: executing program 1 (id=1253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 57.111552407s ago: executing program 32 (id=1068): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000240)={0x29, 0x6, 0x0, {0x0, 0x5}}, 0x29) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000700)={[0x1, 0x7, 0x1, 0x0, 0xfffffffffffffffc, 0x6, 0x1, 0x0, 0x8000000000000000, 0x2655, 0x2, 0x7, 0x3, 0x87, 0x80000000, 0xffff], 0x4, 0x54802}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 46.261335163s ago: executing program 33 (id=1253): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) 9.816517s ago: executing program 4 (id=2171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) 9.81566272s ago: executing program 4 (id=2172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0xfffffffffffffffe, 0x1034c0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) write$ppp(r1, &(0x7f00000003c0)='\x00!', 0x100000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001640)={0x8, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0xf97ad6f95ad21833) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRESDEC]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0xe}, 0x6, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x9, 0x1, 0xd09}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$selinux_create(r7, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r12, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r12, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x4000, 0x4, 0x800000000010000, 0x100, 0x9004, 0x0, 0x8, 0x3, 0x5, 0x2, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x9a, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x0, 0x4, 0x888f, 0x1, 0x8, 0x6, 0x7, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x480, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0xff, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x5, 0x2, 0x5, 0xfff, 0x6, 0x43ea, 0x1, 0xab7, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x2000009, 0xff, 0x6, 0x28000000, 0x5, 0x80620, 0x3, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x9, 0x3fa3, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0x80dfd4, 0xfffd, 0x8, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb0, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r10}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/3, 0x3, 0x0, 0x34}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 9.763561561s ago: executing program 4 (id=2175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prctl$PR_MCE_KILL_GET(0x3d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x5, 0x0, 0xf}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 9.715340541s ago: executing program 4 (id=2176): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000040)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x42c340, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x1}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000140)={r1}) ioctl$FIOCLEX(r1, 0x5451) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000180)={'binder1\x00'}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x4}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x30, r4, 0x48f96000) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f00000007c0)='/dev/vhost-vsock\x00') ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000800)={0x2, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000880)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000cc0)={{r0}, r3, 0x10, @unused=[0x0, 0x6, 0x4, 0x6], @devid=r6}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000001cc0)={0x2, 0x7}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000001dc0)={0x2, 0x0, 0x98, &(0x7f0000001d00)={0x0, 0x9, 0x7}}) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000001e00)) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000001e40)={0x6, 0x2, [{0x9, 0x0, 0x7}, {0x0, 0x0, 0x2}, {0xfffffffd, 0x0, 0x5}, {0x5, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x9}]}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f0000001ec0)) write$cgroup_int(r5, &(0x7f0000001f40), 0x12) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001f80)={r2, 0x6}) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, &(0x7f0000002f80)=0x5) 9.655635902s ago: executing program 4 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x193080, 0x43) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r2, r2, r2, r2, r2], 0x5, {r3}}, 0x58) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900)=0x0, {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r2, r2, r2, r2, r2], 0x5, {r3}}, 0x58) r5 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000680)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) r8 = openat$cgroup_procs(r6, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_pid(r8, &(0x7f0000000640)=r4, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r11 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x197a82, 0x43) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) (async) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r10, r10, r10, r10, r10], 0x5, {r11}}, 0x58) (async) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r10, r10, r10, r10, r10], 0x5, {r11}}, 0x58) r12 = syz_clone(0x21014000, &(0x7f0000000300)="75d18da399f739f12dc727d12dfdb271eb3579da3477e6", 0x17, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="bb6469a11e44a016207cabf5bf0a506b17683418042055a473dbc52c7afdffa14988ea04a65f36c5df6f6371158ca7e521e2699387e9cd88e5a6c7d3fd3bb474a9954c8f6bf94cc245d0924db2822795715cd3f17e4ee3a0dc585c716f93eee4694dfb63951948760368eb83150dcd2fa5aca339fba03eeb1334eb63bd89372af93dc6518684ba87f4517aebf58e98c41bc4652e663bea534e39fdcafea22c4064fab7818e07fb028cb43d5e63e6a944daeaef6ba43f8055517f98a0d62626d69cab6b54290ed40ab5757cde9062b59a867553eaea70f57600488af7f68eac36") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x101, 0x0, 0x9, 0x100, 0x7, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000700)='blkio.bfq.io_service_time\x00', 0x0, 0x0) openat$cgroup_int(r15, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async) openat$cgroup_int(r15, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000580)={0x200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x21}, &(0x7f0000000240)=""/68, 0x44, &(0x7f0000001d40)=""/4096, &(0x7f0000000540)=[r1, r2, r5, r10, r12, r13, r14], 0x7, {r15}}, 0x58) 9.507145475s ago: executing program 4 (id=2183): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000001c0)={0xa53, 0xec3}) read(r1, &(0x7f0000000040)=""/106, 0x6a) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x5902}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000f6ff83020000000000000300080000000000"]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 3.299744639s ago: executing program 0 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) 3.224488381s ago: executing program 0 (id=2326): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x3}], 0x0, 0x1000000, 0x0}) 3.223600231s ago: executing program 0 (id=2327): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x100703, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x1c) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x20001, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000380)={{r2}, 0x4, 0x3, 0x7}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000400)) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000480)={0x0, "3cfcdfc376ae2e5cbe35e6db55a37be7"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001480)={r5, 0x7ff, 0x7fffffff, 0x1}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000001880)=0x101) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0x8002af76, &(0x7f00000018c0)) r6 = openat$cgroup_ro(r4, &(0x7f0000001900)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000001940)) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000001980)={0x1, 0x9, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000019c0)={0x3, 0x8, 0xeeef0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000001a00)) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000001a40)=0x1ff) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000001a80)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000001ac0)={0x3, {0x10, 0x9, 0xb3, 0x6, 0x7}}) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001b00), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000001b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.178921411s ago: executing program 0 (id=2328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) write(r3, &(0x7f0000001600)="d93f71a95fe1", 0x6) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000000000)=0x8) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)={0x3, 0x7db, 0x58f2af8b, 0xff, 0x800}) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3.138861112s ago: executing program 0 (id=2329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6b91a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x82, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f100, 0xeb4, 0x3, 0x9, 0xb692, 0xcc, 0x8, 0x3]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.956282024s ago: executing program 0 (id=2330): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e030f00fd486af2c41ccf59f5057b452e373e414c9600", @ANYRES64], 0xffdd) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00"]) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000003, 0x7, 0x1, 0xfffffffffffffffe, 0x2000000000], 0x1000, 0x4000}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{}, {0x94}]}) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 2.854764386s ago: executing program 3 (id=2332): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 32) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) (async, rerun: 32) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) (async, rerun: 32) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x12, 0x15, 0xc, 0x4a, 0x8, 0x20048000, 0x4, 0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000580)={{0x0, 0xdddd0000, 0xe, 0x81, 0x1, 0x20, 0x17, 0xde, 0xd0, 0x3, 0x1, 0x7f}, {0x2000, 0x3000, 0x8, 0xd0, 0x2e, 0x5, 0x6, 0x2, 0xb, 0x34, 0x1, 0x7f}, {0x8080000, 0x4000, 0xa, 0x7, 0xa, 0xa, 0x40, 0x3, 0xfd, 0xa9, 0x9, 0x4d}, {0x6000, 0x4, 0xd, 0x5, 0xd1, 0x2, 0x18, 0xd3, 0x9, 0x8, 0x6, 0xfe}, {0x1, 0x10000, 0xd, 0x4, 0x8, 0x1, 0x6, 0x0, 0x81, 0x2, 0x6, 0x8}, {0x5000, 0xdddd0000, 0x8, 0x0, 0x1, 0x3, 0x4, 0x4, 0x7, 0xcc, 0x7}, {0xd000, 0x100000, 0xe, 0x8, 0x81, 0x6, 0x2, 0x5, 0xfc, 0x5, 0x3, 0x1}, {0x1, 0xeeef0000, 0xb, 0x4, 0x1, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x5}, {0x1, 0x6}, {0xd000, 0xbeec}, 0x60010008, 0x0, 0xeeee0000, 0x2020, 0x0, 0x4000, 0xdddd0000, [0x81, 0x7fffffffffffffff, 0x741, 0x81]}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000001180)={0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x3}) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close(r6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 2.363343344s ago: executing program 3 (id=2334): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xb0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac1"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0xdddd1000, 0x11c000, 0x1}) 1.873716451s ago: executing program 3 (id=2336): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)=ANY=[]) read(r0, &(0x7f00000004c0)=""/92, 0x1001) 1.196261402s ago: executing program 3 (id=2338): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x50, r0, 0x44b71000) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x5, 0x2, 0x3, 0x5}, {0x9d6f, 0x5, 0x6, 0x6}, {0x804, 0x0, 0x5}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xdddd0000, 0x80000003, 0xfffffffd, 0x0, 0x0, [{0x7f, 0x80, 0x7f, '\x00', 0xf2}, {0x5, 0x39, 0xf8, '\x00', 0x4}, {0x2, 0x69, 0x3}, {0x7, 0x3, 0x4, '\x00', 0xc0}, {0x6, 0xfa, 0x5c, '\x00', 0x6}, {0x1, 0xc, 0x9, '\x00', 0x2a}, {0x9, 0x6, 0x4, '\x00', 0x40}, {0x8, 0xb, 0x1}, {0xb0, 0x81, 0x8, '\x00', 0xfd}, {0x6, 0x0, 0x9, '\x00', 0x7}, {0x3, 0x52, 0xe0, '\x00', 0x9}, {0x80, 0xa, 0x1, '\x00', 0x8}, {0x0, 0x2, 0x6, '\x00', 0x9}, {0xf, 0x7, 0x87, '\x00', 0x5}, {0x8, 0x1, 0x7e, '\x00', 0x8d}, {0x8, 0xf7, 0x81, '\x00', 0x5}, {0x6, 0x1, 0x2, '\x00', 0xc0}, {0x8, 0xdb, 0x6, '\x00', 0x4}, {0x9, 0x7, 0x8, '\x00', 0x90}, {0x9, 0x3, 0x18, '\x00', 0x8}, {0x6, 0x2, 0x94, '\x00', 0xf0}, {0xa, 0xc, 0x80, '\x00', 0x9}, {0x6e, 0x1, 0x4, '\x00', 0x4}, {0x9, 0xc, 0x1, '\x00', 0x7}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000001040)={[0x45f, 0x10001, 0x1, 0x26c, 0x8001, 0x8001, 0x7fff, 0xffffffff, 0x3c89, 0x8, 0xffff, 0x8000000000000001, 0x6, 0x5, 0x0, 0x3ff], 0x1, 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x80087601, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) ioctl$UI_SET_MSCBIT(r7, 0x4004556a, 0x25) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0xc, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, r1, 0x39c53000) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000010000c0ff0300000500000004000000ffff0000a8e9fffffe00"/48]) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 515.629022ms ago: executing program 3 (id=2340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x5}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000a00)={0x1}) 363.899514ms ago: executing program 5 (id=2341): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$PPPIOCGIDLE64(r3, 0x8010743f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 316.271435ms ago: executing program 3 (id=2342): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1, 0x400}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000100)=0xeeee0000) r2 = openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0x2721caced17b8f28, 0x92) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000180)={0x6, 0x8, 0xd4, 0x6a6, 0xff}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x3, 0x3ff, 0xffff, 0x400, 0x7fffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000280)=r4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x101ff, 0xb, 0xdddd1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KDSKBLED(r2, 0x4b65, 0x3ff) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000300)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xb, "cb4e8966ad0426"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001300)={r5, 0x0, "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", "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"}) ioctl$TCFLSH(r2, 0x540b, 0x1) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000002300), 0x80, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000002340)=0x8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002380), 0x10400, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000023c0)='rdma.current\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000002400)={0x5, 0xa}) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000002440)) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000002680)=0xb000) ioctl$BLKRASET(r2, 0x1262, &(0x7f00000026c0)=0x8) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000002700)) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000002740)) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000002780)) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000002c00)={0x1, 0x1, 0x7, 0xb, 0x149, &(0x7f0000002800)}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000002c40)) 315.797315ms ago: executing program 5 (id=2343): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010010}]}) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 254.330606ms ago: executing program 5 (id=2344): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) read(r2, &(0x7f00000001c0)=""/109, 0x6d) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) (async) read$FUSE(r4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000003c0)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x2, &(0x7f0000000100)=""/29, 0x0, 0x2, 0x1c}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/27, 0x0, 0x2, 0x7}}, &(0x7f0000000300)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 156.297417ms ago: executing program 5 (id=2345): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x400000f2}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) 36.386269ms ago: executing program 5 (id=2346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000000dfff84000040"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x8, 0x7}) 0s ago: executing program 5 (id=2347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000100)={0x4800000000000000, 0x8000000, 0x5, 0x9, 0x1c}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): z.0.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833438e929 code=0x7ffc0000 [ 70.628004][ T3558] random: crng reseeded on system resumption [ 70.752948][ T3562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 70.839189][ T3566] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 70.848610][ T3566] rust_binder: Error in use_page_slow: EBUSY [ 70.855592][ T3571] rust_binder: Write failure EINVAL in pid:240 [ 70.859397][ T3566] rust_binder: use_range failure EBUSY [ 70.871388][ T3566] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 70.876898][ T3566] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 70.884929][ T3566] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 70.894507][ T3566] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:734 [ 70.916662][ T3573] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 70.925609][ T3573] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 70.932658][ T3573] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 70.947744][ T3573] rust_binder: Write failure EINVAL in pid:739 [ 71.011298][ T3579] input: syz1 as /devices/virtual/input/input58 [ 71.018293][ T3581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:760 [ 71.059991][ T3577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.069315][ T3576] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 71.105165][ T3583] binder: Bad value for 'max' [ 71.486337][ T3618] rust_binder: Error in use_page_slow: ESRCH [ 71.486364][ T3618] rust_binder: use_range failure ESRCH [ 71.492578][ T3618] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 71.498101][ T3618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 71.506229][ T3618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:749 [ 71.561130][ T3630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:756 [ 71.657956][ T3638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:792 [ 71.667342][ T3638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:792 [ 71.676520][ T3638] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 71.685683][ T3638] rust_binder: Read failure Err(EFAULT) in pid:792 [ 71.758896][ T3645] rust_binder: Write failure EINVAL in pid:759 [ 71.799240][ T3651] SELinux: security_context_str_to_sid () failed with errno=-22 [ 71.850631][ T3659] binder: Unknown parameter 'non' [ 71.914850][ T3662] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 168, size: 255) [ 71.914869][ T3662] rust_binder: Error while translating object. [ 71.925600][ T3662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 71.931839][ T3662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:254 [ 72.019519][ T3678] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 72.036204][ T3678] rust_binder: Write failure EINVAL in pid:256 [ 72.072183][ T3687] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 72.078403][ T3687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:261 [ 72.097230][ T3690] binder: Unknown parameter 'fkcontu' [ 72.112590][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.112619][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.119074][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.126222][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.132790][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.139286][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.145743][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.152182][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.158592][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.165691][ T3691] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.188470][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.194202][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.195091][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.203882][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.210458][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.217987][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.225591][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.248863][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.249228][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.256334][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.264359][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.281124][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.283825][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.290300][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.296940][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.305033][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.312573][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.320204][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.327620][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.334800][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.342863][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.350251][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.357946][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.373292][ T3699] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 72.376676][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.378188][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.386505][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.392687][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.403453][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.407774][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.415855][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.425272][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.440788][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.454354][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.470554][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.478849][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.486672][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.496769][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.498369][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.505665][ T3701] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.512171][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.520754][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.529175][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.535969][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.551599][ T3701] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 72.561821][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.569577][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.571945][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.584918][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.592814][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.592813][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.592843][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.600597][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.609345][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.627480][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.630768][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.638688][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.659480][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.660691][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.667098][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.675397][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.682704][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.690704][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.701593][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.710346][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.717246][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.724956][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.732436][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.740068][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.747330][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.757002][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.770384][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.771312][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.785692][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.786497][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.795442][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.813118][ T3712] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 72.813146][ T3712] rust_binder: Error while translating object. [ 72.816658][ T3717] rust_binder: Write failure EFAULT in pid:820 [ 72.824219][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.830139][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.836925][ T3712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 72.851489][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.851518][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.870282][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.883928][ T3712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 72.896602][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.901466][ T3721] binder: Bad value for 'max' [ 72.906246][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.915265][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.918996][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.934313][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.941861][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.956943][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.957570][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.964666][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 72.973194][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.991018][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 72.998850][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.007001][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.009651][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.016493][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.022596][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.032454][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.045618][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.053514][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.061293][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.062424][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.070652][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.083963][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.084809][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.095724][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.099717][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.107510][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.114844][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.121785][ T3727] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 73.129361][ T3727] rust_binder: Error while translating object. [ 73.129461][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.156074][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.165301][ T3730] rust_binder: Write failure EINVAL in pid:825 [ 73.165668][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.175784][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.179298][ T3727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.187337][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.192331][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.212023][ T3727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:825 [ 73.212148][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.221643][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.236798][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.244676][ T3735] rust_binder: Error while translating object. [ 73.244722][ T3735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.245505][ T3736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:905 [ 73.255904][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.260588][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.271663][ T3735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 73.284930][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.285696][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.294441][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.301637][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.309601][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.319911][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.324789][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.333320][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.347149][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.358986][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.362890][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.377521][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.385119][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.402461][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.405917][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.411084][ T3738] binder: Unknown parameter 'contextfs/binder0' [ 73.419035][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.424204][ T3742] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.431782][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.432129][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.438861][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.446419][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.454243][ T3742] input: syz1 as /devices/virtual/input/input62 [ 73.461553][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.469475][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.475734][ T3745] rust_binder: Write failure EINVAL in pid:828 [ 73.483771][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.491180][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.502899][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.504659][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.527558][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.535098][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.537524][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.542960][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.559241][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.559503][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.574523][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.574718][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.582358][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.589953][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.597471][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.605060][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.620745][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.628637][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.636400][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.639710][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.645729][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.653939][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.661396][ T3742] rust_binder: Error in use_page_slow: ESRCH [ 73.667092][ T3742] rust_binder: use_range failure ESRCH [ 73.667466][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.674156][ T3742] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 73.679011][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.686304][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.694268][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.702861][ T3742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 73.715878][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.717515][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.729676][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.734059][ T3742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:908 [ 73.741312][ T3747] rust_binder: Write failure EINVAL in pid:831 [ 73.748664][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.758482][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.768180][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.772538][ T3747] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 73.779304][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.798975][ T3747] rust_binder: Error while translating object. [ 73.806928][ T3747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 73.813479][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.820393][ T3747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:831 [ 73.823320][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.830801][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.839995][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.847753][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.861241][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.867401][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.870451][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.878691][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.889622][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.895402][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.900906][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.908796][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.916439][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.931022][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.939349][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.948156][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.954911][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.961830][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 73.969660][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 73.997785][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.006144][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.014313][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.015812][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.027494][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.031925][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.047961][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.058746][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.067185][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.071019][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.078036][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.100778][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.106550][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.110969][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.126800][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.132764][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.137358][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.150983][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.154879][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.175837][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.179057][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.193057][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.197985][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.210569][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.212176][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.218811][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.233675][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.240991][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.259418][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.260991][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.269477][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.283356][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.296218][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.305155][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.305955][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.313466][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.325442][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.329309][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.335845][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.343737][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.351110][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.363527][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.374314][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.375049][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.382133][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.389984][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.397216][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.405140][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.412398][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.422913][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.435337][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.435877][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.443410][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.450617][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.458532][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.465832][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.476556][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.488685][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.488922][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.496590][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.504091][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.511729][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.519177][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.526809][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.534295][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.542363][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.549869][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.584591][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.594783][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.596954][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.610447][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.612744][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.626453][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.629872][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.642666][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.642720][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.658852][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.677549][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.679233][ T3779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 74.685010][ T3779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 74.690912][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.694606][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.713794][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.731570][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.736271][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.739347][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.755707][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.758146][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.763557][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.763582][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.763604][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.790907][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.794581][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.810898][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.811318][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.826667][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.837576][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.844525][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.845625][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.860916][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.860949][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.868578][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.891100][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.893732][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.906311][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.906339][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.906362][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.906391][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.908707][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.915044][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.950914][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.962469][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.968824][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.970678][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 74.985501][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 74.986212][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.000904][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.001150][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.018663][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.028430][ T3786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 75.030916][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.037268][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.055646][ T3786] SELinux: security_context_str_to_sid () failed with errno=-22 [ 75.060903][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.063681][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.089918][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.097804][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.097898][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.105657][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.113991][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.128322][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.135920][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.147579][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.156194][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.160926][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.164545][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.179995][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.180887][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.188067][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.203736][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.210065][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.219821][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.224943][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.228244][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.243588][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.250920][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.251731][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.258815][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258840][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258861][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258882][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258905][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258927][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258948][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258969][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.258991][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.259012][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.259034][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.267628][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.319610][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.326984][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.371965][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.379734][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.389875][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.402280][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.405296][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.410043][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.429617][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.449863][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.452294][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.458580][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.472993][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.478412][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.488290][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.488651][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.506237][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.516574][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.525311][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.535357][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.548571][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.556366][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.556396][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.574913][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.580928][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.582944][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.590106][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.598057][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.610932][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.614124][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.628461][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.636394][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.640939][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.644453][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.659644][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.660340][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.667286][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.675216][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.696827][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.704343][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.707491][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.720286][ T31] hid-generic A35B:FFFFFFFB:0007.000A: unknown main item tag 0x0 [ 75.726454][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.741014][ T31] hid-generic A35B:FFFFFFFB:0007.000A: hidraw0: HID v0.07 Device [syz0] on syz0 [ 75.751183][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.772702][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.780141][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.797776][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.798505][ T3809] input: syz1 as /devices/virtual/input/input63 [ 75.806027][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.822691][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.834869][ T3806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.834901][ T3806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:940 [ 75.836950][ T3809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.844460][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.870539][ T3807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 75.870570][ T3807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:940 [ 75.870908][ T3809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:847 [ 75.889444][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.906171][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.908765][ T3809] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 75.914316][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.922443][ T3809] rust_binder: Read failure Err(EFAULT) in pid:847 [ 75.929853][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.947214][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.954725][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.962484][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.975584][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 75.984711][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.000351][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.007931][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.015547][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.023212][ T3820] SELinux: security_context_str_to_sid () failed with errno=-22 [ 76.031101][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.038579][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.046128][ T10] hid-generic 0007:00A0:0002.000B: unknown main item tag 0x0 [ 76.054394][ T10] hid-generic 0007:00A0:0002.000B: hidraw1: HID v0.07 Device [syz0] on syz1 [ 76.086523][ T3822] rust_binder: Write failure EFAULT in pid:779 [ 76.210499][ T3832] fido_id[3832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.250048][ T3835] fido_id[3835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.288177][ T3839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 76.288213][ T3839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:296 [ 76.307782][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 76.307802][ T36] audit: type=1326 audit(1750380176.950:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833438e929 code=0x0 [ 76.363894][ T3844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:785 [ 76.394552][ T3848] rust_binder: Write failure EINVAL in pid:302 [ 76.436531][ T3848] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.451669][ T3848] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 76.486049][ T3850] binder: Bad value for 'max' [ 76.561695][ T36] audit: type=1400 audit(1750380177.210:443): avc: denied { mounton } for pid=3858 comm="syz.1.1050" path="/99/binderfs2" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.561715][ T3859] binder: Unknown parameter 'a|K' [ 76.607822][ T3861] rust_binder: Error while translating object. [ 76.607910][ T3861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 76.617236][ T3861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:856 [ 76.694337][ T3864] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.742479][ T3871] SELinux: security_context_str_to_sid () failed with errno=-22 [ 76.761961][ T3863] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.801334][ T3873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:318 [ 76.865206][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.881962][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.889836][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.899195][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.906741][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 76.972509][ T3879] binder: Bad value for 'defcontext' [ 77.083796][ T3881] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 77.083831][ T3881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:957 [ 77.093860][ T3881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:957 [ 77.239840][ T3892] serio: Serial port ttynull [ 77.267699][ T36] audit: type=1326 audit(1750380177.910:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.299514][ T36] audit: type=1326 audit(1750380177.910:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.303101][ T3898] rust_binder: Error while translating object. [ 77.329096][ T36] audit: type=1326 audit(1750380177.910:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.341310][ T3898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 77.361572][ T3898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:962 [ 77.364780][ T36] audit: type=1326 audit(1750380177.910:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.409903][ T36] audit: type=1326 audit(1750380177.910:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.433453][ T36] audit: type=1326 audit(1750380177.940:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.460801][ T36] audit: type=1326 audit(1750380177.940:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.484888][ T36] audit: type=1326 audit(1750380177.940:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3897 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74ed18e929 code=0x7ffc0000 [ 77.591458][ T3906] rust_binder: Write failure EFAULT in pid:966 [ 77.621076][ T10] hid-generic 0000:0000:FFFFFFFE.000C: item fetching failed at offset 0/1 [ 77.637008][ T10] hid-generic 0000:0000:FFFFFFFE.000C: probe with driver hid-generic failed with error -22 [ 77.742241][ T3913] random: crng reseeded on system resumption [ 77.767047][ T3912] rust_binder: Error while translating object. [ 77.767078][ T3912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 77.776653][ T3912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:794 [ 77.875057][ T3924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 77.997626][ T3928] binder: Unknown parameter 'nXI' [ 78.211358][ T3941] rust_binder: Write failure EFAULT in pid:798 [ 78.264258][ T3944] rust_binder: Got transaction with invalid offset. [ 78.280785][ T3944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.288572][ T3944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:875 [ 78.302687][ T3945] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 78.341033][ T3945] rust_binder: Error while translating object. [ 78.372178][ T3945] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 78.385055][ T3945] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:798 [ 79.372246][ T3973] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 79.411301][ T3973] rust_binder: Write failure EINVAL in pid:814 [ 79.419780][ T3979] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.472874][ T3986] binder: Unknown parameter 'fsuuid' [ 79.493638][ T3988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 79.529727][ T3991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 79.560619][ T3992] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 79.584826][ T3991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362 [ 79.637799][ T3991] rust_binder: Error in use_page_slow: ESRCH [ 79.637820][ T3991] rust_binder: use_range failure ESRCH [ 79.663802][ T3991] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 79.669327][ T3991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 79.691366][ T3991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:362 [ 79.911349][ T4003] binder: Bad value for 'max' [ 80.202236][ T4018] rust_binder: Error while translating object. [ 80.202284][ T4018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.208503][ T4018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384 [ 80.241707][ T4022] SELinux: security_context_str_to_sid () failed with errno=-22 [ 80.380454][ T4024] rust_binder: Write failure EINVAL in pid:894 [ 80.477983][ T4029] rust_binder: Write failure EINVAL in pid:899 [ 80.529260][ T4035] rust_binder: Read failure Err(EAGAIN) in pid:388 [ 80.543254][ T4033] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 80.560229][ T4038] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 80.560257][ T4038] rust_binder: Error while translating object. [ 80.594890][ T4038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 80.604734][ T4038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:901 [ 80.708715][ T4055] binder: Bad value for 'stats' [ 80.781172][ T4065] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 80.788546][ T4065] rust_binder: Write failure EINVAL in pid:402 [ 81.062190][ T4081] binder: Unknown parameter '00000000000000000000000' [ 81.152346][ T4085] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.152465][ T4085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:919 [ 81.244884][ T4093] rust_binder: Write failure EFAULT in pid:921 [ 81.416362][ T4102] rust_binder: Error while translating object. [ 81.422669][ T4102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 81.428860][ T4102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 81.812628][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 81.812647][ T36] audit: type=1400 audit(1750380182.460:473): avc: denied { append } for pid=4118 comm="syz.0.1136" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.898515][ T4121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.898583][ T4121] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 81.944210][ T4124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840 [ 81.982158][ T4131] rust_binder: Write failure EINVAL in pid:446 [ 82.040520][ T4135] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 82.045354][ T4133] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.048486][ T4135] rust_binder: Error while translating object. [ 82.064264][ T4135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.070509][ T4135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:842 [ 82.100508][ T4139] binder: Bad value for 'max' [ 82.277504][ T4147] binder: Unknown parameter 'nXI' [ 82.346825][ T4155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.346903][ T4155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.374742][ T4157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.388369][ T4158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.444049][ T4165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.471608][ T4167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 82.529064][ T4173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.553193][ T4173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 82.605477][ T4176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 82.615091][ T4176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 82.633891][ T4180] rust_binder: Write failure EFAULT in pid:852 [ 82.952471][ T4191] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 82.975861][ T4191] rust_binder: Write failure EINVAL in pid:476 [ 82.976681][ T4191] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 82.990573][ T4191] rust_binder: Write failure EINVAL in pid:476 [ 83.045072][ T4194] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 83.102533][ T4194] binder: Unknown parameter 'uC}ah8' [ 83.193545][ T4206] binder: Unknown parameter 'smackfstransmute' [ 83.220638][ T4206] kvm: kvm [4205]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 83.391511][ T4215] rust_binder: Write failure EFAULT in pid:939 [ 83.477749][ T4219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:868 [ 83.488383][ T4219] input: syz0 as /devices/virtual/input/input67 [ 83.546972][ T4221] binder: Bad value for 'defcontext' [ 83.552744][ T4221] binder: Bad value for 'defcontext' [ 83.602284][ T4227] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 84.156875][ T36] audit: type=1400 audit(1750380184.800:474): avc: denied { map } for pid=4246 comm="syz.3.1182" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.228725][ T36] audit: type=1326 audit(1750380184.870:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.0.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f833438e929 code=0x0 [ 84.268402][ T4260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.312025][ T36] audit: type=1400 audit(1750380184.960:476): avc: denied { append } for pid=4266 comm="syz.3.1187" name="binder0" dev="binder" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.317856][ T4271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.341542][ T4267] rust_binder: Write failure EINVAL in pid:954 [ 84.352742][ T4271] rust_binder: Error in use_page_slow: ESRCH [ 84.353141][ T36] audit: type=1400 audit(1750380185.000:477): avc: denied { setcheckreqprot } for pid=4270 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.359038][ T4271] rust_binder: use_range failure ESRCH [ 84.385867][ T4271] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 84.391465][ T4271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.399755][ T4271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:903 [ 84.409422][ T4265] rust_binder: Error in use_page_slow: ESRCH [ 84.418730][ T4265] rust_binder: use_range failure ESRCH [ 84.424895][ T4265] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 84.440594][ T4265] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 84.448865][ T4265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:490 [ 84.450113][ T4273] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 84.582389][ T4282] binder: Bad value for 'stats' [ 84.593148][ T4287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.595881][ T4283] binder: Bad value for 'stats' [ 84.654867][ T4292] rust_binder: Write failure EINVAL in pid:912 [ 84.695191][ T4292] rust_binder: Write failure EINVAL in pid:912 [ 84.748269][ T36] audit: type=1400 audit(1750380185.390:478): avc: denied { read } for pid=4300 comm="syz.0.1199" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.791611][ T36] audit: type=1400 audit(1750380185.430:479): avc: denied { open } for pid=4300 comm="syz.0.1199" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.816283][ T36] audit: type=1400 audit(1750380185.430:480): avc: denied { ioctl } for pid=4300 comm="syz.0.1199" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 84.847742][ T4306] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.906927][ T4310] rust_binder: Error while translating object. [ 84.906973][ T4310] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 84.913923][ T4310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:497 [ 84.948591][ T4314] input: syz0 as /devices/virtual/input/input71 [ 84.980408][ T4309] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 84.998215][ T4318] rust_binder: Write failure EFAULT in pid:967 [ 85.014834][ T4319] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.024933][ T4319] rust_binder: Read failure Err(EFAULT) in pid:500 [ 85.095156][ T4326] rust_binder: Write failure EFAULT in pid:971 [ 85.190624][ T4330] binder: Unknown parameter 'fsntext_u' [ 85.296660][ T4335] rust_binder: Write failure EFAULT in pid:935 [ 85.313397][ T4338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:938 [ 85.404455][ T36] audit: type=1400 audit(1750380186.050:481): avc: denied { associate } for pid=4341 comm="syz.3.1214" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.488106][ T4346] rust_binder: Error while translating object. [ 85.488154][ T4346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 85.494818][ T4346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:942 [ 85.611961][ T4359] rust_binder: Write failure EFAULT in pid:945 [ 85.628864][ T4359] input: syz1 as /devices/virtual/input/input74 [ 85.942129][ T4378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 85.952398][ T4378] rust_binder: Error while translating object. [ 85.958975][ T4378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 85.967090][ T2376] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.968110][ T4378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984 [ 86.005520][ T4382] tun0: tun_chr_ioctl cmd 1074025675 [ 86.022289][ T4382] tun0: persist disabled [ 86.147468][ T4393] random: crng reseeded on system resumption [ 86.342905][ T4395] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.343708][ T4395] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 86.350374][ T4395] rust_binder: Error while translating object. [ 86.365478][ T4395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 86.376236][ T4395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:995 [ 86.387425][ T4396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 86.610672][ T4408] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.042463][ T36] audit: type=1400 audit(1750380187.690:482): avc: denied { execute } for pid=4428 comm="syz.0.1239" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 87.102820][ T4427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 87.103172][ T4427] rust_binder: Error in use_page_slow: ESRCH [ 87.141030][ T4427] rust_binder: use_range failure ESRCH [ 87.151027][ T4427] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 87.168613][ T4427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 87.178515][ T36] audit: type=1400 audit(1750380187.830:483): avc: denied { view } for pid=4435 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 87.185261][ T4427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1027 [ 87.221769][ T4439] input: syz0 as /devices/virtual/input/input76 [ 87.251133][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.269477][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.281233][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.301462][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.318220][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.340974][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.349081][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.370992][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.379109][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.400980][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.409109][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.427041][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.435341][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.451180][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.470974][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.479084][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.500943][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.509051][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.517290][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.530948][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.539046][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.551136][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.559371][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.581248][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.589378][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.600946][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.609122][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.620972][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.630297][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.646386][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.668539][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.688502][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 87.701632][ T4441] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 88.020869][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.020892][ T845] Bluetooth: hci0: command 0x1003 tx timeout [ 88.052137][ T4462] rust_binder: Error while translating object. [ 88.052194][ T4462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 88.060362][ T4462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:984 [ 88.071177][ T36] audit: type=1400 audit(1750380188.710:484): avc: denied { setattr } for pid=4464 comm="syz.1.1251" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 88.418776][ T4484] binder: Unknown parameter 'dont_hash' [ 88.803820][ T4502] tap0: tun_chr_ioctl cmd 2148553947 [ 88.911512][ T4506] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.002882][ T4506] kvm: Disabled LAPIC found during irq injection [ 89.021209][ T4506] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 89.103254][ T4505] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.152495][ T36] audit: type=1326 audit(1750380189.800:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.1267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833438e929 code=0x0 [ 89.233738][ T4514] binder: Unknown parameter 'defcontext01777777777777777777777' [ 89.375564][ T36] audit: type=1400 audit(1750380190.020:486): avc: denied { map } for pid=4518 comm="syz.3.1271" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 89.771716][ T36] audit: type=1400 audit(1750380190.420:487): avc: denied { map } for pid=4524 comm="syz.3.1274" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 89.865282][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.878487][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.900365][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.916802][ T305] rtc_cmos 00:00: Alarms can be up to one day in the future [ 89.932835][ T305] rtc rtc0: __rtc_set_alarm: err=-22 [ 89.979895][ T36] audit: type=1400 audit(1750380190.620:488): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.027324][ T4535] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 90.027348][ T4535] rust_binder: Error while translating object. [ 90.051025][ T4535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 90.057396][ T4535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1076 [ 90.078703][ T4540] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.134468][ T4544] rust_binder: Write failure EINVAL in pid:1082 [ 90.278172][ T4549] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 90.351476][ T4558] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 90.898087][ T4586] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1034 [ 91.022104][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.064477][ T4591] rust_binder: Write failure EINVAL in pid:1106 [ 91.064599][ T4591] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 91.090905][ T4591] rust_binder: Error while translating object. [ 91.111618][ T4594] rust_binder: Write failure EFAULT in pid:1039 [ 91.117898][ T4591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 91.132289][ T4591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1106 [ 91.202042][ T4599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1108 [ 91.260882][ T36] audit: type=1326 audit(1750380191.900:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.0.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f833438e929 code=0x0 [ 91.323672][ T4607] rust_binder: Write failure EFAULT in pid:1112 [ 91.362490][ T4611] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 91.533531][ T4614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1117 [ 92.531136][ T4631] rust_binder: Error while translating object. [ 92.540499][ T4631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 92.548309][ T4631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1058 [ 92.580338][ T4634] rust_binder: Read failure Err(EAGAIN) in pid:1126 [ 92.665281][ T4639] rust_binder: Write failure EFAULT in pid:1061 [ 92.753011][ T36] audit: type=1400 audit(1750380193.390:490): avc: denied { mounton } for pid=4643 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 92.826575][ T13] bridge_slave_1: left allmulticast mode [ 92.832314][ T13] bridge_slave_1: left promiscuous mode [ 92.838065][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.847344][ T13] bridge_slave_0: left allmulticast mode [ 92.853191][ T13] bridge_slave_0: left promiscuous mode [ 92.858824][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.911798][ T4648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.914854][ T4648] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 265) [ 92.921697][ T4648] rust_binder: Error while translating object. [ 92.934357][ T4648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 92.946033][ T4648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1065 [ 92.976133][ T13] veth1_macvtap: left promiscuous mode [ 92.992306][ T13] veth0_vlan: left promiscuous mode [ 93.060938][ T845] Bluetooth: hci0: command 0x1003 tx timeout [ 93.067156][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.111810][ T4659] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 93.114446][ T4659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.124738][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.145167][ T4643] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.152438][ T4643] bridge_slave_0: entered allmulticast mode [ 93.158799][ T4643] bridge_slave_0: entered promiscuous mode [ 93.165449][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.172583][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.180906][ T4643] bridge_slave_1: entered allmulticast mode [ 93.187305][ T4643] bridge_slave_1: entered promiscuous mode [ 93.245502][ T4664] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 93.313986][ T36] audit: type=1400 audit(1750380193.960:491): avc: denied { create } for pid=4643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.320066][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.341636][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.348933][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.356030][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.360899][ T36] audit: type=1400 audit(1750380193.960:492): avc: denied { write } for pid=4643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.384000][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.384344][ T4666] random: crng reseeded on system resumption [ 93.397290][ T36] audit: type=1400 audit(1750380193.960:493): avc: denied { read } for pid=4643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.419082][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.448828][ T2376] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.455946][ T2376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.471689][ T2376] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.478796][ T2376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.488019][ T36] audit: type=1400 audit(1750380194.130:494): avc: denied { ioctl } for pid=4669 comm="syz.0.1321" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.535325][ T4643] veth0_vlan: entered promiscuous mode [ 93.548898][ T4643] veth1_macvtap: entered promiscuous mode [ 93.588605][ T36] audit: type=1400 audit(1750380194.230:495): avc: denied { mounton } for pid=4643 comm="syz-executor" path="/root/syzkaller.64CRBb/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 93.613223][ T36] audit: type=1400 audit(1750380194.230:496): avc: denied { mount } for pid=4643 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.645460][ T36] audit: type=1400 audit(1750380194.230:497): avc: denied { mount } for pid=4643 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 93.668839][ T36] audit: type=1400 audit(1750380194.230:498): avc: denied { mounton } for pid=4643 comm="syz-executor" path="/root/syzkaller.64CRBb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 93.697746][ T36] audit: type=1400 audit(1750380194.230:499): avc: denied { mounton } for pid=4643 comm="syz-executor" path="/root/syzkaller.64CRBb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=84704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 93.729680][ T2376] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.897194][ T4677] kvm: user requested TSC rate below hardware speed [ 93.937960][ T4677] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 93.946417][ T4677] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 94.080751][ T4679] input: syz0 as /devices/virtual/input/input79 [ 94.088589][ T4679] input: failed to attach handler leds to device input79, error: -6 [ 94.124228][ T4681] kvm_intel: kvm [4680]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 94.296460][ T4683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 94.296494][ T4683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1149 [ 94.321546][ T4684] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.736687][ T4719] random: crng reseeded on system resumption [ 94.852779][ T4726] binder: Bad value for 'max' [ 94.920097][ T4731] rust_binder: Write failure EINVAL in pid:1191 [ 95.107737][ T4735] kvm: user requested TSC rate below hardware speed [ 95.282073][ T4742] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 95.555218][ T4746] cgroup: fork rejected by pids controller in /syz3 [ 95.763866][ T2376] bridge_slave_1: left allmulticast mode [ 95.779739][ T2376] bridge_slave_1: left promiscuous mode [ 95.781415][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.789907][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.791751][ T845] Bluetooth: hci0: command 0x1003 tx timeout [ 95.816010][ T2376] bridge_slave_0: left allmulticast mode [ 95.821771][ T2376] bridge_slave_0: left promiscuous mode [ 95.829878][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.935543][ T4754] kvm: user requested TSC rate below hardware speed [ 96.033600][ T2376] veth1_macvtap: left promiscuous mode [ 96.039172][ T2376] veth0_vlan: left promiscuous mode [ 96.061038][ T4754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 96.189711][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.196931][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.206152][ T4755] bridge_slave_0: entered allmulticast mode [ 96.213518][ T4755] bridge_slave_0: entered promiscuous mode [ 96.220076][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.227391][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.250602][ T4755] bridge_slave_1: entered allmulticast mode [ 96.257214][ T4755] bridge_slave_1: entered promiscuous mode [ 96.320137][ T4765] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 96.406444][ T4755] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.413561][ T4755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.420903][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.427945][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.460588][ T4769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1085 [ 96.460632][ T4769] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 96.476167][ T4769] rust_binder: Read failure Err(EFAULT) in pid:1085 [ 96.510216][ T4755] veth0_vlan: entered promiscuous mode [ 96.554026][ T4755] veth1_macvtap: entered promiscuous mode [ 96.722363][ T4787] kvm: user requested TSC rate below hardware speed [ 96.780697][ T4787] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 96.827842][ T4798] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 97.001475][ T4812] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 97.045969][ T4817] rust_binder: Write failure EFAULT in pid:13 [ 97.119166][ T4829] __vm_enough_memory: pid: 4829, comm: syz.4.1368, bytes: 281474976845824 not enough memory for the allocation [ 97.208492][ T4837] rust_binder: Error in use_page_slow: ESRCH [ 97.208527][ T4837] rust_binder: use_range failure ESRCH [ 97.219591][ T4837] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 97.225596][ T4837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 97.234010][ T4837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:17 [ 97.370027][ T4851] kvm: user requested TSC rate below hardware speed [ 97.461919][ T4851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 97.633764][ T4876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 97.642375][ T4876] rust_binder: Read failure Err(EFAULT) in pid:37 [ 97.811129][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 97.811149][ T36] audit: type=1326 audit(1750380198.450:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4882 comm="syz.3.1384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdde138e929 code=0x0 [ 98.212974][ T4888] SELinux: security_context_str_to_sid () failed with errno=-22 [ 98.237979][ T36] audit: type=1326 audit(1750380198.880:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4889 comm="syz.4.1386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51178e929 code=0x0 [ 98.674913][ T4893] kvm: kvm [4892]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 98.689980][ T4893] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.720695][ T36] audit: type=1400 audit(1750380199.360:508): avc: denied { load_policy } for pid=4895 comm="syz.3.1388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.741135][ T4896] SELinux: policydb version 363307795 does not match my version range 15-33 [ 98.749946][ T4896] SELinux: failed to load policy [ 98.792439][ T36] audit: type=1326 audit(1750380199.440:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.3.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdde138e929 code=0x0 [ 99.275127][ T36] audit: type=1326 audit(1750380199.920:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.1397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833438e929 code=0x0 [ 99.373755][ T4930] binder: Unknown parameter 'mWax' [ 99.402761][ T36] audit: type=1400 audit(1750380200.050:511): avc: granted { setsecparam } for pid=4929 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 99.502954][ T4937] rust_binder: Write failure EFAULT in pid:65 [ 99.599892][ T4940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 99.607959][ T4940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:68 [ 99.618616][ T4940] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 99.628306][ T4940] rust_binder: Read failure Err(EFAULT) in pid:68 [ 99.802960][ T4954] binder: Bad value for 'max' [ 99.866295][ T4957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59 [ 99.964474][ T4964] input: syz1 as /devices/virtual/input/input82 [ 100.021990][ T4968] binder: Unknown parameter 'vscontext?' [ 100.052371][ T4972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 100.075884][ T4974] rust_binder: Write failure EFAULT in pid:69 [ 100.121072][ T4981] binder: Binderfs stats mode cannot be changed during a remount [ 100.188286][ T4987] binder: Unknown parameter 'coyBLV"i5ntext' [ 100.338099][ T5000] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 100.338125][ T5000] rust_binder: Read failure Err(EFAULT) in pid:102 [ 100.398521][ T5002] SELinux: security_context_str_to_sid () failed with errno=-22 [ 100.513598][ T5008] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 100.549420][ T5006] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:75 [ 100.553488][ T36] audit: type=1326 audit(1750380201.200:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5011 comm="syz.0.1425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833438e929 code=0x0 [ 101.062820][ T5031] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.072593][ T5031] SELinux: failed to load policy [ 101.078821][ T36] audit: type=1326 audit(1750380201.720:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.4.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51178e929 code=0x0 [ 101.129807][ T36] audit: type=1326 audit(1750380201.770:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.4.1430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc51178e929 code=0x0 [ 101.496651][ T5045] binder: Unknown parameter 'processor : 0 [ 101.496651][ T5045] vendor_id : GenuineIntel [ 101.496651][ T5045] cpu family : 6 [ 101.496651][ T5045] model : 79 [ 101.496651][ T5045] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 101.496651][ T5045] stepping : 0 [ 101.496651][ T5045] microcode : 0xffffffff [ 101.496651][ T5045] cpu MHz : 2199.998 [ 101.496651][ T5045] cache size : 56320 KB [ 101.496651][ T5045] physical id : 0 [ 101.496651][ T5045] siblings : 2 [ 101.496651][ T5045] core id : 0 [ 101.496651][ T5045] cpu cores : 1 [ 101.496651][ T5045] apicid : 0 [ 101.496651][ T5045] initial apicid : 0 [ 101.496651][ T5045] fpu : yes [ 101.496651][ T5045] fpu_exception : yes [ 101.496651][ T5045] cpuid level : 13 [ 101.496651][ T5045] wp : yes [ 101.496651][ T5045] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 101.496651][ T5045] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 101.593848][ T5048] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 101.804053][ T36] audit: type=1400 audit(1750380202.450:515): avc: denied { mac_admin } for pid=5056 comm="syz.0.1438" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.804060][ T5057] SELinux: Context o}xd is not valid (left unmapped). [ 101.836234][ T5059] rust_binder: Error in use_page_slow: ESRCH [ 101.836259][ T5059] rust_binder: use_range failure ESRCH [ 101.870723][ T5059] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 101.870753][ T5059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 101.878868][ T5059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:84 [ 102.024321][ T5061] binder: Unknown parameter 'L' [ 102.039629][ T5061] binder: Unknown parameter 'L' [ 102.073973][ T5061] binder: Unknown parameter 'L' [ 102.088173][ T5061] binder: Unknown parameter 'L' [ 102.105167][ T5061] binder: Unknown parameter 'L' [ 102.117034][ T5061] binder: Unknown parameter 'L' [ 102.132673][ T5061] binder: Unknown parameter 'L' [ 102.142578][ T5061] binder: Unknown parameter 'L' [ 102.148899][ T5061] binder: Unknown parameter 'L' [ 102.155137][ T5061] binder: Unknown parameter 'L' [ 102.164300][ T5061] binder: Unknown parameter 'L' [ 102.165579][ T5064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.170612][ T5061] binder: Unknown parameter 'L' [ 102.204161][ T5061] binder: Unknown parameter 'L' [ 102.216048][ T5061] binder: Unknown parameter 'L' [ 102.222564][ T5061] binder: Unknown parameter 'L' [ 102.228849][ T5061] binder: Unknown parameter 'L' [ 102.235885][ T5061] binder: Unknown parameter 'L' [ 102.253843][ T5061] binder: Unknown parameter 'L' [ 102.260285][ T5061] binder: Unknown parameter 'L' [ 102.271194][ T5061] binder: Unknown parameter 'L' [ 102.277221][ T5061] binder: Unknown parameter 'L' [ 102.289686][ T5061] binder: Unknown parameter 'L' [ 102.297518][ T5061] binder: Unknown parameter 'L' [ 102.319395][ T5061] binder: Unknown parameter 'L' [ 102.326407][ T5061] binder: Unknown parameter 'L' [ 102.333141][ T5061] binder: Unknown parameter 'L' [ 102.339139][ T5061] binder: Unknown parameter 'L' [ 102.346588][ T5061] binder: Unknown parameter 'L' [ 102.353821][ T5061] binder: Unknown parameter 'L' [ 102.359561][ T5071] kvm: user requested TSC rate below hardware speed [ 102.360126][ T5061] binder: Unknown parameter 'L' [ 102.373590][ T5061] binder: Unknown parameter 'L' [ 102.379757][ T5061] binder: Unknown parameter 'L' [ 102.387406][ T5061] binder: Unknown parameter 'L' [ 102.673738][ T5080] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 102.812562][ T5090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.822756][ T36] kauditd_printk_skb: 999 callbacks suppressed [ 102.822793][ T36] audit: type=1400 audit(1750380203.470:1515): avc: denied { setattr } for pid=2369 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.926833][ T36] audit: type=1400 audit(1750380203.470:1516): avc: denied { setattr } for pid=2369 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.938944][ T2369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.969169][ T4755] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.972185][ T2369] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 102.984991][ T2369] audit: backlog limit exceeded [ 102.990765][ T2369] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.997568][ T2369] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 103.010858][ T4755] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 103.010866][ T36] audit: type=1400 audit(1750380203.470:1517): avc: denied { setattr } for pid=2369 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.162200][ T5102] rust_binder: Write failure EFAULT in pid:106 [ 103.165283][ T5102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 103.230718][ T5105] kvm: user requested TSC rate below hardware speed [ 103.517204][ T5109] binder: Unknown parameter 'non' [ 103.624333][ T5112] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.625559][ T5112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 103.644569][ T5112] rust_binder: Error in use_page_slow: ESRCH [ 103.657998][ T5114] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.664643][ T5115] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 103.676618][ T5115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 103.690343][ T2376] bridge_slave_1: left allmulticast mode [ 103.712859][ T2376] bridge_slave_1: left promiscuous mode [ 103.720681][ T5112] rust_binder: use_range failure ESRCH [ 103.720707][ T5112] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 103.730965][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.732809][ T5112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 103.739298][ T5115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:112 [ 103.748078][ T5112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112 [ 103.764843][ T2376] bridge_slave_0: left allmulticast mode [ 103.773954][ T2376] bridge_slave_0: left promiscuous mode [ 103.784338][ T5118] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 103.785382][ T5116] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 103.791004][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.892957][ T5122] rust_binder: Write failure EFAULT in pid:117 [ 103.916026][ T2376] veth1_macvtap: left promiscuous mode [ 103.932922][ T2376] veth0_vlan: left promiscuous mode [ 104.084117][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.091632][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.098723][ T5117] bridge_slave_0: entered allmulticast mode [ 104.106419][ T5117] bridge_slave_0: entered promiscuous mode [ 104.123181][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.133080][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.140216][ T5117] bridge_slave_1: entered allmulticast mode [ 104.148083][ T5117] bridge_slave_1: entered promiscuous mode [ 104.168177][ T5129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:134 [ 104.293199][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.309446][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.316742][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.323778][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.358857][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.366391][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.388369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.395638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.406135][ T2376] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.413199][ T2376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.557888][ T5139] kvm: user requested TSC rate below hardware speed [ 104.584453][ T5117] veth0_vlan: entered promiscuous mode [ 104.638777][ T5139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 104.659665][ T5117] veth1_macvtap: entered promiscuous mode [ 104.953003][ T5153] rust_binder: Write failure EINVAL in pid:2 [ 104.953465][ T5153] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 104.990878][ T5153] rust_binder: Write failure EINVAL in pid:2 [ 105.012966][ T5158] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.026176][ T5158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 105.096962][ T5162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 105.226579][ T5172] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 105.266566][ T5172] rust_binder: Write failure EINVAL in pid:153 [ 105.348172][ T5176] SELinux: security_context_str_to_sid () failed with errno=-22 [ 105.411533][ T5180] rust_binder: Write failure EFAULT in pid:1220 [ 105.738701][ T5198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 105.766978][ T5198] rust_binder: Read failure Err(EFAULT) in pid:19 [ 106.114513][ T5211] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 106.121134][ T5211] rust_binder: Error while translating object. [ 106.130074][ T5211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 106.136512][ T5211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 106.433431][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.444990][ T5226] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.455704][ T5226] rust_binder: Write failure EFAULT in pid:1227 [ 106.481043][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.516407][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.524959][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.532597][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.540064][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.547559][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.555014][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.563117][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.570615][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.590887][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.601692][ T45] hid-generic 009C:0008:0003.000D: unknown main item tag 0x0 [ 106.613085][ T45] hid-generic 009C:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 106.712056][ T5231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.760728][ T5233] random: crng reseeded on system resumption [ 106.908952][ T5225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 107.205390][ T5264] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 107.224406][ T5264] rust_binder: Error while translating object. [ 107.245291][ T5264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.289467][ T5264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 107.293136][ T5252] binder: Bad value for 'stats' [ 107.434810][ T5271] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.462523][ T5271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 107.554536][ T5270] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 107.557232][ T5273] input: syz0 as /devices/virtual/input/input85 [ 107.599232][ T5270] SELinux: failed to load policy [ 107.627776][ T5273] block device autoloading is deprecated and will be removed. [ 107.661006][ T5274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 107.673384][ T5273] syz.4.1501: attempt to access beyond end of device [ 107.673384][ T5273] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.842068][ T36] kauditd_printk_skb: 1237 callbacks suppressed [ 107.842086][ T36] audit: type=1400 audit(1750380208.490:2753): avc: denied { read } for pid=5280 comm="syz.4.1502" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.889391][ T36] audit: type=1400 audit(1750380208.520:2754): avc: denied { read open } for pid=5280 comm="syz.4.1502" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.914693][ T36] audit: type=1400 audit(1750380208.520:2755): avc: denied { ioctl } for pid=5280 comm="syz.4.1502" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 108.035447][ T36] audit: type=1400 audit(1750380208.680:2756): avc: denied { read write } for pid=4643 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.094793][ T36] audit: type=1400 audit(1750380208.710:2757): avc: denied { read write open } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.119977][ T36] audit: type=1400 audit(1750380208.710:2758): avc: denied { ioctl } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.166439][ T36] audit: type=1400 audit(1750380208.730:2759): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.241292][ T36] audit: type=1400 audit(1750380208.740:2760): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.302562][ T36] audit: type=1400 audit(1750380208.740:2761): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 108.335122][ T36] audit: type=1400 audit(1750380208.800:2762): avc: denied { read } for pid=5286 comm="syz.0.1504" name="binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 108.342011][ T5294] can0: slcan on ttyS3. [ 108.613611][ T5244] can0 (unregistered): slcan off ttyS3. [ 108.804213][ T5303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:150 [ 109.312666][ T5335] rust_binder: Error while translating object. [ 109.339243][ T5335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.347207][ T5335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1244 [ 109.352630][ T5339] kvm: user requested TSC rate below hardware speed [ 109.448126][ T5339] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 109.652249][ T5352] binder: Unknown parameter 'processor : 0 [ 109.652249][ T5352] vendor_id : GenuineIntel [ 109.652249][ T5352] cpu family : 6 [ 109.652249][ T5352] model : 79 [ 109.652249][ T5352] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 109.652249][ T5352] stepping : 0 [ 109.652249][ T5352] microcode : 0xffffffff [ 109.652249][ T5352] cpu MHz : 2199.998 [ 109.652249][ T5352] cache size : 56320 KB [ 109.652249][ T5352] physical id : 0 [ 109.652249][ T5352] siblings : 2 [ 109.652249][ T5352] core id : 0 [ 109.652249][ T5352] cpu cores : 1 [ 109.652249][ T5352] apicid : 0 [ 109.652249][ T5352] initial apicid : 0 [ 109.652249][ T5352] fpu : yes [ 109.652249][ T5352] fpu_exception : yes [ 109.652249][ T5352] cpuid level : 13 [ 109.652249][ T5352] wp : yes [ 109.652249][ T5352] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 109.652249][ T5352] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 110.269810][ T5383] kvm: user requested TSC rate below hardware speed [ 110.506018][ T5383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 110.778868][ T5405] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 110.966846][ T5417] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.990129][ T5417] rust_binder: Error in use_page_slow: ESRCH [ 111.011923][ T5417] rust_binder: use_range failure ESRCH [ 111.024228][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.030001][ T5417] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 111.037236][ T5417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 111.045592][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.045756][ T5417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:180 [ 111.064301][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.089000][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.118458][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.133220][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.149889][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.166849][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.177858][ T5430] binder: Unknown parameter 'nXI' [ 111.184260][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.201423][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.209983][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.218621][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.227140][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.233775][ T5434] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 111.237337][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.276759][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.290200][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.298553][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.306058][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.313678][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.321298][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.328692][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.340870][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.348480][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.356777][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.364513][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.388730][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.403334][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.410771][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.425202][ T5455] rust_binder: Error while translating object. [ 111.425230][ T5455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.431680][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.450860][ T5455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1271 [ 111.452559][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.485450][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.499294][ T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 111.518523][ T305] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.738975][ T5475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 111.848439][ T5488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.859115][ T5490] rust_binder: Error while translating object. [ 111.864986][ T5491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281 [ 111.867451][ T5490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.883033][ T5490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 111.911455][ T5491] rust_binder: Error while translating object. [ 111.935921][ T5491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 111.942262][ T5491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281 [ 112.166255][ T5505] fido_id[5505]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.225963][ T5511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.251016][ T5507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 112.251052][ T5507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1283 [ 112.304061][ T5507] rust_binder: Write failure EINVAL in pid:1283 [ 112.561083][ T5521] kvm: user requested TSC rate below hardware speed [ 112.619731][ T5521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.648511][ T5524] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.650334][ T5524] rust_binder: Error in use_page_slow: ESRCH [ 112.670879][ T5524] rust_binder: use_range failure ESRCH [ 112.682381][ T5524] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 112.690924][ T5524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 112.711286][ T5524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:206 [ 112.856520][ T36] kauditd_printk_skb: 1159 callbacks suppressed [ 112.856540][ T36] audit: type=1400 audit(1750380213.500:3922): avc: denied { load_policy } for pid=5531 comm="syz.5.1566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 112.902276][ T5534] SELinux: failed to load policy [ 112.922358][ T36] audit: type=1400 audit(1750380213.520:3923): avc: denied { read write } for pid=4643 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 112.968636][ T5534] binder: Unknown parameter 'nXI' [ 113.012085][ T36] audit: type=1400 audit(1750380213.520:3924): avc: denied { read write open } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.078953][ T36] audit: type=1400 audit(1750380213.520:3925): avc: denied { ioctl } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.140423][ T36] audit: type=1400 audit(1750380213.560:3926): avc: denied { ioctl } for pid=5531 comm="syz.5.1566" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 113.209107][ T5549] SELinux: policydb string length -27721720 does not match expected length 8 [ 113.229883][ T36] audit: type=1400 audit(1750380213.560:3927): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.260891][ T5549] SELinux: failed to load policy [ 113.286312][ T5551] SELinux: failed to load policy [ 113.299617][ T36] audit: type=1400 audit(1750380213.560:3928): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.383148][ T36] audit: type=1400 audit(1750380213.610:3930): avc: denied { mounton } for pid=5531 comm="syz.5.1566" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.451389][ T36] audit: type=1400 audit(1750380213.560:3929): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.540972][ T36] audit: type=1400 audit(1750380213.640:3931): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.622876][ T5560] input: syz0 as /devices/virtual/input/input89 [ 113.641922][ T5560] rust_binder: Write failure EFAULT in pid:1299 [ 113.782084][ T5562] kvm: user requested TSC rate below hardware speed [ 113.806226][ T5565] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 113.806248][ T5565] rust_binder: Read failure Err(EFAULT) in pid:246 [ 113.873845][ T5562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 113.952783][ T5570] input: syz0 as /devices/virtual/input/input90 [ 113.976300][ T5572] rust_binder: Write failure EINVAL in pid:1301 [ 113.991978][ T5572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1301 [ 114.106847][ T5570] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 114.422288][ T5586] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 114.457482][ T5586] rust_binder: Write failure EINVAL in pid:108 [ 114.728974][ T5592] kvm: kvm [5591]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 114.762189][ T5597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.778959][ T5597] rust_binder: Error in use_page_slow: ESRCH [ 114.810878][ T5597] rust_binder: use_range failure ESRCH [ 114.835209][ T5601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1309 [ 114.839909][ T5597] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 114.876672][ T5598] rust_binder: Write failure EINVAL in pid:1309 [ 114.892039][ T5598] binder: Unknown parameter 'maxs' [ 114.904047][ T5597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 114.904084][ T5597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:225 [ 114.914508][ T5601] binder: Unknown parameter 'maxs' [ 114.974224][ T5606] kvm: user requested TSC rate below hardware speed [ 115.058019][ T5606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 115.534278][ T5622] SELinux: security_context_str_to_sid () failed with errno=-22 [ 115.678202][ T5629] rust_binder: Error while translating object. [ 115.678251][ T5629] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 115.712099][ T5632] binder: Bad value for 'defcontext' [ 115.722650][ T5629] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1319 [ 115.907925][ T5637] binder: Unknown parameter 'non' [ 116.075141][ T5642] rust_binder: Write failure EFAULT in pid:1323 [ 116.204557][ T5643] kvm: user requested TSC rate below hardware speed [ 116.281180][ T5643] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer. [ 116.501281][ T5645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1325 [ 116.621909][ T5657] binder: Unknown parameter '' [ 116.859078][ T5663] binder: Unknown parameter 'f}' [ 116.997296][ T5668] rust_binder: Error while translating object. [ 116.997344][ T5668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 117.020886][ T5668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1328 [ 117.243705][ T5679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.309061][ T5677] rust_binder: Write failure EINVAL in pid:247 [ 117.310495][ T5684] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 117.342832][ T5684] rust_binder: Write failure EINVAL in pid:1332 [ 117.629365][ T5702] random: crng reseeded on system resumption [ 117.732013][ T5703] rust_binder: Write failure EFAULT in pid:130 [ 117.865485][ T36] kauditd_printk_skb: 843 callbacks suppressed [ 117.865506][ T36] audit: type=1400 audit(1750380218.500:4775): avc: denied { read } for pid=5713 comm="syz.3.1624" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.940944][ T36] audit: type=1400 audit(1750380218.550:4776): avc: denied { read open } for pid=5713 comm="syz.3.1624" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.971480][ T5720] rust_binder: Write failure EFAULT in pid:1339 [ 117.972780][ T36] audit: type=1400 audit(1750380218.550:4777): avc: denied { ioctl } for pid=5713 comm="syz.3.1624" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.023679][ T36] audit: type=1400 audit(1750380218.550:4778): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.090898][ T36] audit: type=1400 audit(1750380218.550:4779): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.150852][ T36] audit: type=1400 audit(1750380218.550:4780): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.250154][ T36] audit: type=1400 audit(1750380218.590:4781): avc: denied { read } for pid=5719 comm="syz.0.1626" name="binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.283517][ T5734] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 118.304041][ T36] audit: type=1400 audit(1750380218.590:4782): avc: denied { read open } for pid=5719 comm="syz.0.1626" path="/dev/binderfs/binder0" dev="binder" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.327152][ T5736] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.347274][ T5736] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 118.433530][ T5739] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.532388][ T5743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 118.538898][ T5743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 119.328202][ T5782] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 119.351852][ T5785] random: crng reseeded on system resumption [ 119.369077][ T5782] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 119.422170][ T5787] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 119.490843][ T5785] Restarting kernel threads ... done. [ 119.507228][ T5787] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 119.690779][ T5796] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 119.711030][ T5796] pim6reg0: linktype set to 769 [ 119.823588][ T5804] binder: Unknown parameter 'nXI' [ 119.840051][ T5807] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 119.941005][ T5809] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 120.005165][ T5811] binder: Bad value for 'max' [ 120.072878][ T5811] binder: Bad value for 'max' [ 120.212820][ T5821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 120.221719][ T5824] rust_binder: Error while translating object. [ 120.249766][ T5829] input: syz1 as /devices/virtual/input/input92 [ 120.303378][ T5829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 120.303414][ T5829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1362 [ 120.327001][ T5824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 120.414611][ T5824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:284 [ 120.710927][ T5849] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 121.101193][ T5866] serio: Serial port ttynull [ 121.434954][ T5877] input: syz0 as /devices/virtual/input/input93 [ 121.684038][ T5886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 121.690744][ T5886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295 [ 121.991921][ T5894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 122.361599][ T5910] input: syz1 as /devices/virtual/input/input94 [ 122.603591][ T5927] binder: Unknown parameter 'stat' [ 122.893512][ T36] kauditd_printk_skb: 784 callbacks suppressed [ 122.893530][ T36] audit: type=1400 audit(1750380223.540:5566): avc: denied { read write } for pid=4643 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 122.973298][ T36] audit: type=1400 audit(1750380223.570:5567): avc: denied { read write open } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.043867][ T36] audit: type=1400 audit(1750380223.570:5568): avc: denied { ioctl } for pid=4643 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.140857][ T36] audit: type=1400 audit(1750380223.600:5569): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.174926][ T5938] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.190852][ T5938] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 123.199515][ T5938] audit: backlog limit exceeded [ 123.210908][ T36] audit: type=1400 audit(1750380223.600:5570): avc: denied { read write open } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.270883][ T36] audit: type=1400 audit(1750380223.600:5571): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=523 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 123.294887][ T5117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 123.549154][ T5948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 123.549191][ T5948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:311 [ 123.559129][ T5948] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 123.570779][ T5945] rust_binder: Write failure EFAULT in pid:1398 [ 123.573862][ T5948] rust_binder: Read failure Err(EFAULT) in pid:311 [ 123.669664][ T5952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.031814][ T5969] input: syz1 as /devices/virtual/input/input95 [ 124.125284][ T5969] SELinux: security_context_str_to_sid () failed with errno=-22 [ 124.490730][ T5993] SELinux: security_context_str_to_sid () failed with errno=-22 [ 124.507437][ T5995] SELinux: security_context_str_to_sid () failed with errno=-22 [ 124.684561][ T5997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.684606][ T5997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1408 [ 124.792519][ T6007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.804240][ T6008] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.934666][ T6016] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.304546][ T6038] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.521423][ T6047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.576747][ T6047] rust_binder: Error while translating object. [ 125.585408][ T6047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 125.595003][ T6047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1421 [ 125.620937][ T6054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.797570][ T6063] binder: Unknown parameter 'defcontext01777777777777777777777' [ 125.924355][ T6068] rust_binder: Write failure EFAULT in pid:1428 [ 126.218767][ T6083] __vm_enough_memory: pid: 6083, comm: syz.0.1737, bytes: 281474976845824 not enough memory for the allocation [ 126.471459][ T6093] can0: slcan on ptm0. [ 126.526575][ T6089] SELinux: security_context_str_to_sid () failed with errno=-22 [ 126.550514][ T6099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1439 [ 126.561516][ T6092] can0 (unregistered): slcan off ptm0. [ 126.883813][ T6120] kvm: kvm [6119]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 127.042475][ T6131] input: syz1 as /devices/virtual/input/input96 [ 127.155476][ T6137] random: crng reseeded on system resumption [ 127.497730][ T6164] binder: Unknown parameter '' [ 127.781796][ T6172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 127.855915][ T6179] binder: Unknown parameter '0xffffffffffffffff' [ 127.905569][ T36] kauditd_printk_skb: 939 callbacks suppressed [ 127.905588][ T36] audit: type=1400 audit(1750380228.550:6509): avc: denied { read } for pid=6178 comm="syz.0.1767" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 127.917561][ T6179] kvm: kvm [6178]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa100 [ 128.010908][ T36] audit: type=1400 audit(1750380228.550:6510): avc: denied { read open } for pid=6178 comm="syz.0.1767" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.079579][ T6193] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 128.080881][ T36] audit: type=1400 audit(1750380228.550:6511): avc: denied { ioctl } for pid=6178 comm="syz.0.1767" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.159954][ T36] audit: type=1400 audit(1750380228.610:6512): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.229903][ T36] audit: type=1400 audit(1750380228.610:6513): avc: denied { read write open } for pid=4755 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.257338][ T6196] binder: Bad value for 'max' [ 128.321501][ T36] audit: type=1400 audit(1750380228.610:6514): avc: denied { ioctl } for pid=4755 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.353919][ T36] audit: type=1400 audit(1750380228.610:6515): avc: denied { read write } for pid=6180 comm="syz.4.1769" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.396917][ T36] audit: type=1400 audit(1750380228.610:6516): avc: denied { read open } for pid=6180 comm="syz.4.1769" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 128.425750][ T36] audit: type=1400 audit(1750380228.620:6517): avc: denied { ioctl } for pid=6185 comm="syz.5.1768" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 128.453057][ T36] audit: type=1400 audit(1750380228.630:6518): avc: denied { read } for pid=6180 comm="syz.4.1769" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 129.607597][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.620874][ T6335] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 131.579269][ T6469] tap0: tun_chr_ioctl cmd 1074025678 [ 131.584623][ T6469] tap0: group set to 0 [ 131.620889][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 131.620915][ T845] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.911720][ T36] kauditd_printk_skb: 531 callbacks suppressed [ 132.911741][ T36] audit: type=1400 audit(1750380233.560:7050): avc: denied { read } for pid=6541 comm="syz.0.1894" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 132.943806][ T36] audit: type=1400 audit(1750380233.560:7051): avc: denied { read } for pid=6541 comm="syz.0.1894" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 132.968859][ T36] audit: type=1400 audit(1750380233.560:7052): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 132.999767][ T36] audit: type=1400 audit(1750380233.590:7053): avc: denied { mounton } for pid=6543 comm="syz.0.1896" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 133.023741][ T36] audit: type=1400 audit(1750380233.610:7054): avc: denied { mounton } for pid=6543 comm="syz.0.1896" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 133.064551][ T36] audit: type=1400 audit(1750380233.640:7055): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.089443][ T36] audit: type=1400 audit(1750380233.700:7056): avc: denied { read } for pid=6547 comm="syz.0.1897" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 133.157200][ T36] audit: type=1400 audit(1750380233.710:7057): avc: denied { read } for pid=6547 comm="syz.0.1897" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 133.181663][ T36] audit: type=1400 audit(1750380233.710:7058): avc: denied { execmem } for pid=6547 comm="syz.0.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 133.224801][ T36] audit: type=1400 audit(1750380233.710:7059): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.363955][ T6585] binfmt_misc: register: failed to install interpreter file ./file0 [ 134.098954][ T6687] kernel profiling enabled (shift: 8) [ 134.158590][ T6694] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 134.192757][ T6694] binfmt_misc: register: failed to install interpreter file ./file0 [ 136.593251][ T6997] tun0: tun_chr_ioctl cmd 1074025675 [ 136.598661][ T6997] tun0: persist enabled [ 136.604452][ T6997] tun0: tun_chr_ioctl cmd 1074025675 [ 136.609820][ T6997] tun0: persist enabled [ 137.243588][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.936556][ T36] kauditd_printk_skb: 763 callbacks suppressed [ 137.936575][ T36] audit: type=1400 audit(1750380238.580:7823): avc: denied { read write } for pid=5117 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 137.986882][ T36] audit: type=1400 audit(1750380238.580:7824): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.012102][ T36] audit: type=1400 audit(1750380238.620:7825): avc: denied { read write } for pid=7130 comm="syz.3.2107" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 138.037726][ T36] audit: type=1400 audit(1750380238.630:7826): avc: denied { read } for pid=7130 comm="syz.3.2107" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.077123][ T36] audit: type=1400 audit(1750380238.630:7827): avc: denied { read write } for pid=288 comm="syz-executor" name="loop0" dev="devtmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.114011][ T36] audit: type=1400 audit(1750380238.660:7828): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.139916][ T36] audit: type=1400 audit(1750380238.710:7829): avc: denied { read } for pid=7136 comm="syz.0.2108" name="binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.169989][ T36] audit: type=1400 audit(1750380238.720:7830): avc: denied { read write } for pid=4755 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.195040][ T36] audit: type=1400 audit(1750380238.750:7831): avc: denied { read write } for pid=5117 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 138.232570][ T36] audit: type=1400 audit(1750380238.750:7832): avc: denied { read } for pid=7136 comm="syz.0.2108" name="binder1" dev="binder" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 138.699042][ T7195] syz.5.2131: attempt to access beyond end of device [ 138.699042][ T7195] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 139.076916][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 139.300844][ T845] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.300908][ T7239] Bluetooth: hci0: command 0x1003 tx timeout [ 141.140868][ T52] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 141.141046][ T845] Bluetooth: hci1: command 0x1003 tx timeout [ 141.540980][ T7423] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 141.550902][ T7423] pim6reg0: linktype set to 280 [ 142.155092][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.173328][ T7457] Bluetooth: hci0: Frame reassembly failed (-90) [ 142.945735][ T36] kauditd_printk_skb: 3692 callbacks suppressed [ 142.945754][ T36] audit: type=1400 audit(1750380243.590:11525): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 143.003124][ T36] audit: type=1400 audit(1750380243.590:11526): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 143.021617][ T4643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.032074][ T4755] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.034478][ T7504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.039503][ T4755] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 143.046027][ T7504] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 143.058983][ T4755] audit: backlog limit exceeded [ 143.062304][ T4643] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 143.066227][ T36] audit: type=1400 audit(1750380243.590:11527): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 144.180875][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.180996][ T845] Bluetooth: hci0: command 0x1003 tx timeout [ 144.931601][ T7620] serio: Serial port ttynull [ 146.620682][ T288] cgroup: fork rejected by pids controller in /syz0 [ 146.730204][ T304] bridge_slave_1: left allmulticast mode [ 146.743022][ T304] bridge_slave_1: left promiscuous mode [ 146.756820][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.773964][ T304] bridge_slave_0: left allmulticast mode [ 146.789867][ T304] bridge_slave_0: left promiscuous mode [ 146.799039][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.947963][ T304] veth1_macvtap: left promiscuous mode [ 146.953674][ T304] veth0_vlan: left promiscuous mode [ 147.951198][ T36] kauditd_printk_skb: 6154 callbacks suppressed [ 147.951218][ T36] audit: type=1400 audit(1750380248.600:17566): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 147.981943][ T36] audit: type=1400 audit(1750380248.600:17567): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 147.999836][ T4643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.006340][ T36] audit: type=1400 audit(1750380248.600:17568): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 148.018643][ T4643] audit: audit_lost=48 audit_rate_limit=0 audit_backlog_limit=64 [ 148.035997][ T36] audit: type=1400 audit(1750380248.600:17569): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 148.042769][ T4643] audit: backlog limit exceeded [ 148.066818][ T36] audit: type=1400 audit(1750380248.600:17570): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 148.073913][ T4643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.095036][ T36] audit: type=1400 audit(1750380248.600:17571): avc: denied { setattr } for pid=4643 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 149.296922][ T304] bridge_slave_1: left allmulticast mode [ 149.310910][ T304] bridge_slave_1: left promiscuous mode [ 149.316579][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.333623][ T304] bridge_slave_0: left allmulticast mode [ 149.339300][ T304] bridge_slave_0: left promiscuous mode [ 149.357406][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.515516][ T304] veth1_macvtap: left promiscuous mode [ 149.534259][ T304] veth0_vlan: left promiscuous mode [ 150.053429][ T304] bridge_slave_1: left allmulticast mode [ 150.059120][ T304] bridge_slave_1: left promiscuous mode [ 150.064827][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.072567][ T304] bridge_slave_0: left allmulticast mode [ 150.078217][ T304] bridge_slave_0: left promiscuous mode [ 150.084098][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.222445][ T304] veth1_macvtap: left promiscuous mode [ 150.228081][ T304] veth0_vlan: left promiscuous mode [ 150.492191][ T304] bridge_slave_1: left allmulticast mode [ 150.497846][ T304] bridge_slave_1: left promiscuous mode [ 150.503513][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.510982][ T304] bridge_slave_0: left allmulticast mode [ 150.516647][ T304] bridge_slave_0: left promiscuous mode [ 150.522315][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.652335][ T304] veth1_macvtap: left promiscuous mode [ 150.657827][ T304] veth0_vlan: left promiscuous mode