last executing test programs: 6.827774634s ago: executing program 1 (id=14): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x103183, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) 6.719672495s ago: executing program 1 (id=17): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000400)={0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x9], 0x2000}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x3000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}) (async) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000000)={{0x5, 0xfffffffc}, {0x7}, 0xfffffffd, 0x7}) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x231, 0x0, 0xfffffffffffffffc}]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r11, 0x4068aea3, &(0x7f0000000680)) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f0000000180)=0x7) ioctl$KVM_INTERRUPT(r12, 0x4004ae86, &(0x7f0000000040)=0x5) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) 6.634702346s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x3}, @increfs, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 6.571752608s ago: executing program 1 (id=21): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x4010e501, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r12, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xeeee8000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 6.187415594s ago: executing program 1 (id=31): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x1, 0x0, 0x9}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) (async) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004cc, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xe, 0x7, 0x0, 0x9, 0x3, 0x7f, 0x9, 0x62, 0x81, 0x7, 0xc, 0x0, 0x3ff, 0x7, 0x7, 0x2, 0xcd, 0x1, '\x00', 0xe, 0x84}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r6, &(0x7f00000004c0)=""/92, 0x1001) (async) close(r6) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000001, 0x5, 0xfffffffffffffffe, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000)={0x1}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 6.172174654s ago: executing program 1 (id=32): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x16) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x4, 0xffff0000, 0x1, 0x8, 0xfb, "b64cf913e67c2b927bede85e0dcbcb83adcfd7", 0x9, 0x80}) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x15) read(0xffffffffffffffff, &(0x7f0000000240)=""/195, 0xc3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$uinput_user_dev(r4, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xaf6f, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1.115703392s ago: executing program 2 (id=94): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r1, 0x400454de, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010600000000000000010000000000009003000000000000635b49e64b2d08637ff8c6d52c6420dc35c48b95b971480180000000000000758b0a9afb5d3fa85715446e2206b714371775a04965a3d610d7b5bcbe8aa400357fe928eda47b719a0b299e5f95812f4c8218f68fa124808003fd7353196c5b239179cbf77e5dbe0a05fee9a1ef123beba652dbfd1c3565d15a9010d2fed8ddcee2b466d9eac9d6a6de9b2bf6e37d6991a012c5e066"]) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2}) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x400454de, 0xffffffffffffffff) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010600000000000000010000000000009003000000000000635b49e64b2d08637ff8c6d52c6420dc35c48b95b971480180000000000000758b0a9afb5d3fa85715446e2206b714371775a04965a3d610d7b5bcbe8aa400357fe928eda47b719a0b299e5f95812f4c8218f68fa124808003fd7353196c5b239179cbf77e5dbe0a05fee9a1ef123beba652dbfd1c3565d15a9010d2fed8ddcee2b466d9eac9d6a6de9b2bf6e37d6991a012c5e066"]) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0xfffffffffffffce6}}, 0x10}], 0x0, 0x0, 0x0}) (async) 916.123975ms ago: executing program 2 (id=100): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e00), 0x203, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0xf, 0x2, 0x200003f}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000100)) (async) write(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0xc02, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x840000000000a132, r3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r5, &(0x7f00000000c0), 0x7) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x165a42, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r7, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0xd1383000) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000007, 0x13, r6, 0x0) (async) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r6, 0x0) 743.289578ms ago: executing program 0 (id=102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) 742.531718ms ago: executing program 2 (id=103): r0 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380)=r0, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x193080, 0x43) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r3, r3, r3, r3, r3], 0x5, {r4}}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0x9, 0x5, 0xb, 0x6, 0x0}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x20040000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x22}, &(0x7f00000000c0)=""/113, 0x71, &(0x7f0000000140)=""/167, &(0x7f0000000280)=[0xffffffffffffffff, r0, r3, r5], 0x4, {r6}}, 0x58) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r7, 0x2000) 742.063718ms ago: executing program 0 (id=104): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r3, &(0x7f0000000300), 0x48) (async) write$tcp_mem(r3, &(0x7f0000000300), 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000980)={0x2710, 0x340, 0x1c0, &(0x7f0000000580)=[0x10000, 0x1, 0x5, 0x9, 0xe, 0x7f, 0xffffffffffffffff, 0x8000, 0x5, 0x6e, 0x1, 0x0, 0x7, 0x7, 0x7, 0x4, 0x8001, 0x3ff, 0xb58f, 0x6, 0x10000, 0x1, 0x100000001, 0x3, 0xac, 0x0, 0x1, 0x7, 0x7, 0x5, 0x7386bf13, 0x6, 0xc, 0x2, 0x0, 0xbd90, 0xa81, 0x1, 0x100, 0x7ff, 0x1ff, 0x5, 0x5, 0x2000000, 0x3ff, 0x3ff, 0x2, 0x0, 0xe4d, 0xeb, 0x8, 0x4, 0x0, 0x2, 0x5, 0x8000, 0xfd, 0x5, 0xfffffffffffff782, 0x6, 0x8, 0x3ff, 0x5, 0x2, 0x9, 0x9, 0x7, 0x1ff, 0xffffffff, 0x7ff, 0x9, 0x6a, 0x1, 0x6, 0x3, 0x3, 0x0, 0x40, 0xffffffffffffff17, 0x7, 0xc7ad, 0x2, 0x5, 0x0, 0x7, 0x4, 0x0, 0x7, 0x5, 0x2, 0x23c5, 0x7, 0x40, 0x4, 0x7, 0xffffffffffffffff, 0x7, 0xa, 0xfd, 0x80000001, 0x8, 0x6, 0x8, 0x7, 0x25b, 0x76a0, 0xd, 0x2, 0x9, 0xffffffff80000000, 0x3, 0x2, 0x0, 0x5, 0x3, 0x7, 0x8001, 0xffff, 0x10, 0x3, 0x1a, 0x6, 0x6, 0x2d3e, 0x8, 0x7fffffff, 0x8, 0xd8]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x40305839, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_PROPBIT(r5, 0x5501, 0x0) ioctl$UI_SET_RELBIT(r5, 0x8000552c, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x4, 0x10000, 0x100, 0x9004, 0x0, 0x8, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x1, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x6, 0x8, 0x7, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x9, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x8061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="766574b60d0ac1"], 0x12) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) (async) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) close(r0) (async) close(r0) 667.530239ms ago: executing program 0 (id=105): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f00000001c0)={0xa0001, 0x0, [0x8, 0x8, 0x6, 0x4, 0x5, 0x7ff, 0xffffffffffff0000, 0x8]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x2, 0x1ff, 0x8000000, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x7, 0x0, 0x4, '\x00', 0x4c4}) close_range(r0, 0xffffffffffffffff, 0x2) 595.48266ms ago: executing program 3 (id=106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x2, 0xffff1000, 0x1000, &(0x7f0000156000/0x1000)=nil}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x808402, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x6832, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0x5, 0xdb}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000700)={"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"}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780), 0x40200, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000000)=@x86={0xa, 0x4, 0x9, 0x0, 0x0, 0xf, 0x7, 0x4, 0x81, 0x3, 0x4, 0x7, 0x0, 0x0, 0x26, 0x35, 0x6, 0x8, 0x9, '\x00', 0x2, 0x4}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x200) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB='non']) 435.744253ms ago: executing program 2 (id=107): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x67, 0x4, 0x4}, 0x48, [0x7, 0x9, 0x0, 0xffffffff, 0x4, 0xa, 0x8, 0x4, 0x1, 0xc7, 0x9, 0x4, 0x5, 0x9, 0x8001, 0x1000, 0x0, 0x1, 0x4, 0x6, 0x9, 0x3, 0x8, 0x10001, 0x2, 0x2, 0x0, 0x9, 0x3, 0x0, 0xfffffffa, 0x3, 0x325, 0x5, 0x9, 0x2, 0x7fffffff, 0x8, 0xff, 0x3, 0x7fff, 0x6, 0xf, 0xde4, 0x9, 0x5, 0x1a20, 0x97, 0x5, 0xfff, 0x82, 0x80000000, 0xfc, 0x7, 0x3, 0xd, 0xa, 0x8, 0x9, 0x1, 0x1ff, 0x6, 0x7, 0x6], [0x2, 0x4, 0x3, 0x9, 0xfff, 0x0, 0xfffff47b, 0x7, 0xb, 0xff, 0x0, 0xffffffff, 0x4, 0x40, 0x9, 0x306, 0x26f5, 0x4, 0x6, 0x7, 0x3ff, 0x8, 0x5, 0x2, 0x7, 0x5de2, 0x8, 0x5, 0x6, 0xe86, 0x7, 0x9, 0x6, 0x8, 0x0, 0x7f, 0xc819, 0x1e, 0x6197b17b, 0xfffffff6, 0x0, 0x0, 0xd7f5, 0x8000, 0xae, 0x4, 0xb2, 0x7ff, 0x80, 0x5a, 0x6, 0x2, 0x9, 0x3cc4, 0x6, 0xb02, 0xd, 0xffffffff, 0x6, 0x1, 0x401, 0xe, 0x7, 0xf1], [0x2, 0x3, 0x0, 0x6, 0x3, 0x4, 0x3, 0x9, 0x1, 0x4, 0x2, 0x0, 0x3, 0x9, 0x7, 0xd, 0x60835457, 0x0, 0xf, 0x7, 0x7, 0x3, 0x3, 0xaf, 0xbd8, 0xf2, 0x4, 0x7a106171, 0xa, 0x9, 0xe00ef2aa, 0x7, 0x43, 0x44b0, 0x5, 0x5, 0x8, 0x2, 0x9, 0x7e, 0x0, 0x7, 0x0, 0x1000000, 0x3, 0x4, 0x2, 0x8, 0x3, 0x4, 0x7, 0x8, 0xfb8, 0x800, 0x81a, 0xffffffff, 0x4, 0xfffffff7, 0x6, 0x3, 0x8a0, 0x47b, 0x7, 0x9], [0x7, 0x0, 0x1000, 0xca, 0x6, 0x7f, 0x5, 0x6e38, 0x2, 0xffff8001, 0x5, 0xc, 0xa, 0x5, 0x400, 0xc0000000, 0x8, 0x4b35, 0x4, 0x0, 0x100, 0x80, 0x1, 0x2, 0xffffffff, 0x5, 0x7fff, 0x8, 0x10, 0x80000000, 0x200, 0xea1c, 0x7, 0x10001, 0x7, 0x8, 0x6, 0x80, 0x400, 0x7ff, 0x2, 0x0, 0x3, 0x9, 0x80, 0x4, 0x6, 0x0, 0x7f68, 0x80000001, 0x1, 0xc, 0x7fffffff, 0xf, 0x7fff, 0x5, 0xfffffffa, 0x9, 0x411, 0x200, 0x10, 0x6, 0x9, 0x9]}, 0x45c) read(r0, &(0x7f00000004c0)=""/112, 0x70) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000580)='system_u:object_r:public_content_t:s0\x00', 0x26) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) ioctl$UI_DEV_CREATE(r0, 0x5501) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0), 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000026c0), 0x2, 0x0) syz_clone3(&(0x7f00000028c0)={0x9a00000, &(0x7f0000002700), &(0x7f0000002740)=0x0, &(0x7f0000002780), {0x4}, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=""/77, &(0x7f0000002880)=[r3, r3, r3], 0x3, {r2}}, 0x58) write$cgroup_devices(r2, &(0x7f0000002940)={'b', ' *:* ', 'w\x00'}, 0x8) read(r0, &(0x7f0000002980)=""/3, 0x3) write$cgroup_pid(r2, &(0x7f00000029c0)=r5, 0x12) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000002a00)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}]}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000002a40)={0x8}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000002a80)={{0x1, 0x1, 0x2}, 'syz0\x00', 0x34}) r6 = openat$cgroup_ro(r2, &(0x7f0000002b00)='memory.stat\x00', 0x0, 0x0) read(r2, &(0x7f0000002b40)=""/140, 0x8c) ioctl$UI_DEV_CREATE(r6, 0x5501) read(r4, &(0x7f0000002c00)=""/71, 0x47) openat$uinput(0xffffffffffffff9c, &(0x7f0000002c80), 0x802, 0x0) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002cc0)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000002d00)='system_u:object_r:var_log_t:s0\x00', 0x1f) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x44) read(0xffffffffffffffff, &(0x7f0000002d40)=""/4096, 0x1000) 434.336633ms ago: executing program 3 (id=108): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) close(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000003680)={0x2020}, 0x2020) ioctl$BLKRRPART(r6, 0x125f, 0x0) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000080)={[{@stats}], [{@uid_lt={'uid<', r0}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x17'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@appraise}, {@seclabel}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfsroot={'smackfsroot', 0x3d, '}:'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@measure}, {@obj_role={'obj_role', 0x3d, '%'}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 428.164573ms ago: executing program 0 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x4000001, 0x0, 0x0, 0x0, 0x4000}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000e68304"]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010055, 0x0, 0x4}]}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x442000, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x800000000) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3e, 0xfeb, 0x8cc, 0x5, 0xe, "3d980d311bf76259765fafda57afca538770fd"}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0xc262d699ecfa40f1, 0x12, 0xffffffffffffffff, 0x38b4a000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 379.936463ms ago: executing program 3 (id=110): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') (async, rerun: 64) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/uinput\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000a001000000000000fdffffffbfffffff"]) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x1008000) (async, rerun: 64) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000240), 0x121e82, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000001c0)={0x0, 0x3120}) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000fcc000/0x1000)=nil}) close(0x4) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1c5, 0x0, 0x2}]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @flat=@handle={0x73682a85, 0x1001}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000040)=[@acquire_done={0x40106309, 0x10000002}, @enter_looper], 0x0, 0x0, 0x0}) 327.436404ms ago: executing program 2 (id=111): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0x1a}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="060000000000000001000080090000000100000005000000090040e7000000008000000000000000000000000000000001"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0x45000, &(0x7f00000000c0)={[{@stats}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r9, 0x6e3d9000) 325.196735ms ago: executing program 3 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x7fffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 309.373525ms ago: executing program 3 (id=113): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r2, 0x0) 307.709035ms ago: executing program 0 (id=114): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000000, 0x3ff, 0x80000001, 0x4, 0x6, 0x7fff, 0x2, 0x0, 0x0, 0x6, 0x401, 0xc, 0xf, 0x6, 0x7, 0x401], 0x2, 0x9417dcc69ad41acb}) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x6, 0x9, 0xb03, 0x2, 0x8, 0x1eef3522, 0x3, 0x4, 0x5, 0x8000000000000000, 0x9, 0x6, 0x1, 0x9], 0x1000, 0xc0800}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000022c0), 0x80, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000002300)=0x1) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000002340)={[{0x1, 0x7f, 0x5e, 0x7, 0x6, 0x8, 0x8, 0x7, 0x3, 0x10, 0x2}, {0xffff, 0x6, 0xc, 0x0, 0x6, 0xfc, 0x4, 0xf4, 0xfe, 0x5, 0x68, 0xff, 0xe8a3}, {0x0, 0x41a, 0x5, 0x6, 0xf5, 0x5, 0x5e, 0x3, 0x3, 0x1, 0x6, 0x8f, 0xed96}], 0x1b}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/power/pm_test', 0x4000, 0x80) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000002400)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000002480)=0x4000100) ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000024c0)={'\x00', 0x0, 0x0, 0x401}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000002540)) openat$cgroup_type(r0, &(0x7f0000002580), 0x2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000025c0)={[0x0, 0x6, 0x7ff, 0x9, 0x100, 0x40, 0xfffffffffffffffa, 0x5, 0xfff, 0xff, 0x200, 0xff, 0x5, 0x7, 0xfffffffffffffffe, 0x7ff], 0x6000, 0x43000}) write$FUSE_IOCTL(r4, &(0x7f0000002680)={0x20, 0x0, r2, {0x3, 0x4, 0x1, 0x1f1}}, 0x20) read$FUSE(r4, &(0x7f00000026c0)={0x2020}, 0x2020) write$FUSE_DIRENT(r4, &(0x7f0000004700)={0x60, 0x0, r2, [{0x1, 0xfdcb, 0x1d, 0x5, '/selinux/avc/cache_threshold\x00'}, {0x4, 0x3ff, 0x0, 0x5}]}, 0x60) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) write$UHID_CREATE2(r0, &(0x7f0000006800)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x9b, 0x4, 0x8, 0x7, 0xd976, 0x5, "16d85d4dc83a4f06a9058ed7b09f340ebd9c9100506bda3feda51efe0d5336a64260d0f8c2c57283cb9e6c2d93e019a810cad9caafce2428d9a8e1bacc96565fb80c4855bb14fcf33755f6b460be22a319b15574b6c725c0b28202dc1cbc9093fc7bf6d8c584f92245695a25ee34578891ab04cb9c0b6ff5d0ff0b7f5c4992e13921b8d28fbe8c92031843419dbd8d51bc868492ad9f2cde356ae5"}}, 0x1b3) write$cgroup_subtree(r4, &(0x7f00000069c0)={[{0x2d, 'blkio'}, {0x2b, 'devices'}, {0x0, 'devices'}, {0x2d, 'net_cls'}, {0x2d, 'rlimit'}]}, 0x2a) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000006a00)={0x7fff, r1, 'id0\x00'}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x7) write$ppp(r6, &(0x7f0000006a80)="be5402a66d928aaa6d07d53271ef916e96cdc32ce97bdb5c55b8b939392a256fce649f69c3ed0872c75c77bbf181b86c63fc74ce9a6d68c112d5aaa28bf76d487759381f4354ae57cd1469cfda3d9285fa9709b048ada77c053009ce6306e1772fbd1de5061230b83088f49cd47469806c83ffe198266fcacc8989033dd55f955f", 0x81) read(r0, &(0x7f0000006b40)=""/230, 0xe6) 195.635837ms ago: executing program 0 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000001441a4853eb0c63c00001300000000000000"]) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1f1242, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000000000000000000004"]) r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x9) write$binfmt_register(r11, &(0x7f0000000640)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xffff, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0', 0x3a, [0x4f]}, 0x31) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r12, 0x40045568, 0x6) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x4) write$uinput_user_dev(r12, &(0x7f00000001c0)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xdc99], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r13, &(0x7f00000014c0)={0x2020}, 0x2020) 188.225376ms ago: executing program 3 (id=116): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/kheaders.tar.xz', 0x80000, 0x10) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000540)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x1fe, 0x5, 0x4000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r9, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x83f, 0x0, 0x9}]}) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 0s ago: executing program 2 (id=117): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0x9}]}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 0s ago: executing program 0 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000081, 0x0, 0x4}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x38, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x1}, @dead_binder_done, @dead_binder_done, @exit_looper], 0xcf, 0x0, &(0x7f00000002c0)="5702383d4116a4f157ad647a615ce363939ae9ff40fb1525479c899d958481b0dc38c4c33f5c684dc2566142a44a15fdfb094707669e7d66cddd866c1667346926d296562acf99e6e2506a5d421822f8b7a41bd142e85df6082cc869c6fcfe222f03f2c00eca6ea15c02b879adfe0c59cededd77733bfdc0a29f279a7240c9452c5fef9c22bb513b1a311e79fbce8d9097dce75ac39173c3f45d76ae7f6cd1354a961b152037dcc099cf817557d9391fc6c87416b04fef7ca5c7c56122b70f405e4186a45203e8db8e2ba8a659ef1c"}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x503a44, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x2}, @exit_looper, @exit_looper, @clear_death, @enter_looper, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x2}, @enter_looper, @release={0x40046306, 0x2}, @release={0x40046306, 0x2}], 0x93, 0x0, &(0x7f0000000440)="8ebc9a13d84b7fbca174bdd8e328864f6d62006c042baef97b4c02e972111423d81207f1b829d42add3a2ed9836356fe26ba33a0f14fd66941e254aa8f4752c3ae57b797ff52f82054de1f2fa57f65693f3fbde6b49a739219e5d9f65d9c5d4c242d5498c1d7d2118881eb16e71aaaf2c36dda6da0c68b7d9e095e2883bf6ae39a30f99336d1d40c2406615cb94878078ed33b"}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) write$cgroup_type(r8, &(0x7f0000000280), 0xfffffeed) write(r5, &(0x7f0000001600)="d93f71a95fe1", 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x1c, 0x0, &(0x7f0000000000)=[@exit_looper, @decrefs, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts. [ 25.686041][ T36] audit: type=1400 audit(1750380742.000:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.686912][ T281] cgroup: Unknown subsys name 'net' [ 25.708707][ T36] audit: type=1400 audit(1750380742.000:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.736153][ T36] audit: type=1400 audit(1750380742.030:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.736297][ T281] cgroup: Unknown subsys name 'devices' [ 25.961018][ T281] cgroup: Unknown subsys name 'hugetlb' [ 25.966618][ T281] cgroup: Unknown subsys name 'rlimit' [ 26.057648][ T36] audit: type=1400 audit(1750380742.370:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.081105][ T36] audit: type=1400 audit(1750380742.370:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.106498][ T36] audit: type=1400 audit(1750380742.370:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.115113][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.138684][ T36] audit: type=1400 audit(1750380742.450:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.164161][ T36] audit: type=1400 audit(1750380742.460:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.199381][ T36] audit: type=1400 audit(1750380742.520:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.225290][ T36] audit: type=1400 audit(1750380742.520:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.225320][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.045565][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.052778][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.059914][ T290] bridge_slave_0: entered allmulticast mode [ 27.066419][ T290] bridge_slave_0: entered promiscuous mode [ 27.072959][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.080093][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.087228][ T290] bridge_slave_1: entered allmulticast mode [ 27.093459][ T290] bridge_slave_1: entered promiscuous mode [ 27.108417][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.115499][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.122627][ T288] bridge_slave_0: entered allmulticast mode [ 27.128780][ T288] bridge_slave_0: entered promiscuous mode [ 27.142489][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.149560][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.156616][ T288] bridge_slave_1: entered allmulticast mode [ 27.163088][ T288] bridge_slave_1: entered promiscuous mode [ 27.176185][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183279][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.190363][ T289] bridge_slave_0: entered allmulticast mode [ 27.196703][ T289] bridge_slave_0: entered promiscuous mode [ 27.210223][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.217650][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.225016][ T289] bridge_slave_1: entered allmulticast mode [ 27.231313][ T289] bridge_slave_1: entered promiscuous mode [ 27.240175][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.247212][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.254317][ T291] bridge_slave_0: entered allmulticast mode [ 27.260458][ T291] bridge_slave_0: entered promiscuous mode [ 27.276264][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.283369][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.290591][ T291] bridge_slave_1: entered allmulticast mode [ 27.296848][ T291] bridge_slave_1: entered promiscuous mode [ 27.437736][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.444834][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.452124][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.459158][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.472129][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.479307][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.486593][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.493648][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.516695][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.523791][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.531166][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.538188][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.565069][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.572153][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.579451][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.586476][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.599751][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.606946][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.614491][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.622510][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.629794][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.636938][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.666605][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.673683][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.695741][ T288] veth0_vlan: entered promiscuous mode [ 27.704805][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.712020][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.742548][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.749647][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.758520][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.765589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.777470][ T290] veth0_vlan: entered promiscuous mode [ 27.786243][ T288] veth1_macvtap: entered promiscuous mode [ 27.794016][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.801085][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.830997][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.838067][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.861518][ T289] veth0_vlan: entered promiscuous mode [ 27.868249][ T290] veth1_macvtap: entered promiscuous mode [ 27.876537][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.882582][ T291] veth0_vlan: entered promiscuous mode [ 27.922012][ T291] veth1_macvtap: entered promiscuous mode [ 27.949410][ T289] veth1_macvtap: entered promiscuous mode [ 27.956745][ T309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.059169][ T309] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 28.068590][ T321] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 28.084739][ T321] rust_binder: Write failure EINVAL in pid:2 [ 28.121002][ T328] rust_binder: Write failure EFAULT in pid:4 [ 28.216387][ T337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 28.281397][ T339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 28.326453][ T348] rust_binder: Write failure EFAULT in pid:14 [ 28.364454][ T350] random: crng reseeded on system resumption [ 28.599540][ T375] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 28.608226][ T375] rust_binder: Write failure EINVAL in pid:19 [ 28.661209][ T377] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 28.667414][ T377] rust_binder: Error while translating object. [ 28.679630][ T377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.704407][ T377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 28.909555][ T401] ======================================================= [ 28.909555][ T401] WARNING: The mand mount option has been deprecated and [ 28.909555][ T401] and is ignored by this kernel. Remove the mand [ 28.909555][ T401] option from the mount to silence this warning. [ 28.909555][ T401] ======================================================= [ 29.059305][ T411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 29.279202][ T432] binder: Unknown parameter 'fscontext?}' [ 29.311989][ T432] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 29.321302][ T432] binder: Unknown parameter 'fscontext?}' [ 29.330483][ T434] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 29.421090][ T441] rust_binder: Write failure EINVAL in pid:34 [ 30.629467][ T475] input: syz0 as /devices/virtual/input/input6 [ 30.691865][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 30.691883][ T36] audit: type=1400 audit(1750380747.010:150): avc: denied { execute } for pid=474 comm="syz.3.53" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.802034][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.809535][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.816962][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.828508][ T479] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 30.837454][ T481] random: crng reseeded on system resumption [ 30.838083][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.851231][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.868865][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.878923][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.886348][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.903273][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.913039][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.926413][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.938739][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.946243][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.961019][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.968893][ T481] rust_binder: Read failure Err(EAGAIN) in pid:41 [ 30.968950][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.983166][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.990786][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 30.998262][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.006020][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.013698][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.021275][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.028920][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.036417][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.044368][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.052126][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.059737][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.067158][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.074796][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.082385][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.090068][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.097517][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.105313][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.113021][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.120719][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.128757][ T418] Bluetooth: hci0: command 0x1003 tx timeout [ 31.130660][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.134879][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 31.145037][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.184917][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.210338][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.217845][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.242636][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.262862][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.274676][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.283983][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.291611][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.299242][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.316245][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.324542][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.332269][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.341977][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.359002][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.368583][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.385274][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.395180][ T500] SELinux: policydb version -845211227 does not match my version range 15-33 [ 31.395285][ T36] audit: type=1400 audit(1750380747.710:151): avc: denied { load_policy } for pid=498 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 31.406161][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.431846][ T500] SELinux: failed to load policy [ 31.443747][ T499] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1024 [ 31.453264][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.460779][ T499] rust_binder: Write failure EINVAL in pid:25 [ 31.469996][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.483691][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.491213][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.508031][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.521619][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.530405][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.540482][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.548065][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.556489][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.564630][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.572241][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.579861][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.587355][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.605806][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.614423][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.622169][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.629908][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.630050][ T514] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 31.637389][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.658867][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.666412][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.672285][ T514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 31.673822][ T514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:59 [ 31.683321][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683352][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683374][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683397][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683419][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683441][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683463][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683485][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683507][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683528][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683572][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683594][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683616][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683639][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683669][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683691][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683713][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.683735][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.827389][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.834998][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.842677][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.850670][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.858507][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.876287][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.884130][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.894641][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.902102][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.917521][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.925364][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.933066][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.940554][ T516] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 31.954232][ T516] rust_binder: Write failure EINVAL in pid:31 [ 31.958925][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.972470][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.979927][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 31.987338][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.001782][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.010203][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.018203][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.026039][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.033747][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.041503][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.054156][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.062042][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.071758][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.079795][ T522] random: crng reseeded on system resumption [ 32.080163][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.094119][ T525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.094369][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.109038][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.117100][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.132132][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.139949][ T524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.139978][ T524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 32.140054][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.171680][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.180041][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.187601][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.195292][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.208404][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.216051][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.238838][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.246264][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.263998][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.278718][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.295607][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.303187][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.323894][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.331652][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.339339][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.346773][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.354276][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.361763][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.370909][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.378329][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.385821][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.393295][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.400916][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.409396][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.417058][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.424594][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.433829][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.441326][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.448879][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.456291][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.463939][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.471697][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.486916][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.494560][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.518713][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.527068][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.544274][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.551783][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.559666][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.567413][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.574922][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.582750][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.590197][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.597733][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.605242][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.612773][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.620438][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.627993][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.635531][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.648683][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.656306][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.666134][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.674422][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.682047][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.689789][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.690141][ T36] audit: type=1400 audit(1750380749.010:152): avc: denied { read write } for pid=538 comm="syz.2.72" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.720824][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.728243][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.743915][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.751647][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.758740][ T36] audit: type=1400 audit(1750380749.010:153): avc: denied { open } for pid=538 comm="syz.2.72" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.782135][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.789694][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.797164][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.805253][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.820991][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.828515][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.836187][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.843877][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.851466][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.859096][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.874774][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.882734][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.890770][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.898250][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.905939][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.913541][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.921156][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.928625][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.936194][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.953414][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.961598][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.971739][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.979441][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.986881][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 32.997732][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.005467][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.015845][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.024492][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.032914][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.042360][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.049940][ T9] hid-generic 01FF:0004:0400.0001: unknown main item tag 0x0 [ 33.068873][ T9] hid-generic 01FF:0004:0400.0001: hidraw0: HID v0.05 Device [syz0] on syz1 [ 33.235657][ T45] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 33.274514][ T45] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 33.294759][ T567] binder: Unknown parameter '01777777777777777777777' [ 33.301676][ T36] audit: type=1400 audit(1750380749.610:154): avc: denied { map } for pid=566 comm="syz.3.80" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 33.327451][ T558] fido_id[558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 33.403447][ T571] input: syz0 as /devices/virtual/input/input8 [ 33.507822][ T575] binder: Unknown parameter '18446744073709551615' [ 33.648606][ T589] binder: Bad value for 'stats' [ 33.923099][ T595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.923185][ T595] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.925904][ T597] binder: Unknown parameter 'contextmem' [ 33.929723][ T36] audit: type=1400 audit(1750380750.240:155): avc: denied { append } for pid=596 comm="syz.2.90" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.955001][ T597] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 33.969854][ T599] binder: Binderfs stats mode cannot be changed during a remount [ 34.020188][ T36] audit: type=1326 audit(1750380750.240:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fef8e929 code=0x7ffc0000 [ 34.053033][ T601] binder: Bad value for 'max' [ 34.066194][ T36] audit: type=1326 audit(1750380750.240:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb5fef8e929 code=0x7ffc0000 [ 34.101052][ T606] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 34.101076][ T606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 34.109897][ T36] audit: type=1326 audit(1750380750.260:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5fef8e929 code=0x7ffc0000 [ 34.147501][ T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:89 [ 34.148282][ T606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.159725][ T611] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 34.166373][ T611] rust_binder: Error while translating object. [ 34.180813][ T611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.193663][ T36] audit: type=1326 audit(1750380750.260:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=596 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5fef8e929 code=0x7ffc0000 [ 34.198729][ T611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 34.326500][ T624] random: crng reseeded on system resumption [ 34.469100][ T632] kvm: kvm [631]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 34.491020][ T636] input: syz1 as /devices/virtual/input/input9 [ 34.775370][ T648] input: syz0 as /devices/virtual/input/input11 [ 34.776816][ T650] binder: Unknown parameter 'uid<00000000000000000000' [ 34.801509][ T648] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 34.904293][ T663] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 34.904392][ T663] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 35.495088][ T688] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 35.511825][ T688] SELinux: failed to load policy [ 35.589755][ T691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 35.684645][ T693] SELinux: security_context_str_to_sid () failed with errno=-22 [ 35.760157][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 35.760172][ T36] audit: type=1400 audit(1750380752.080:198): avc: denied { block_suspend } for pid=694 comm="syz.0.124" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.760491][ T696] rust_kernel: panicked at drivers/android/binder/node.rs:877:13: [ 35.760491][ T696] attempt to subtract with overflow [ 35.769726][ T36] audit: type=1400 audit(1750380752.080:199): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 35.809081][ T696] ------------[ cut here ]------------ [ 35.828098][ T696] kernel BUG at rust/helpers/bug.c:7! [ 35.828226][ T36] audit: type=1400 audit(1750380752.080:200): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 35.854929][ T36] audit: type=1400 audit(1750380752.080:201): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.859007][ T696] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 35.883153][ T696] CPU: 0 UID: 0 PID: 696 Comm: syz.0.124 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 35.893702][ T36] audit: type=1400 audit(1750380752.080:202): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.896457][ T696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.927078][ T696] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 35.932413][ T696] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 46 c6 3e 51 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 0c 02 77 dd 90 90 90 90 90 90 90 90 90 [ 35.948705][ T36] audit: type=1400 audit(1750380752.080:203): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.952472][ T696] RSP: 0018:ffffc9000d295a90 EFLAGS: 00010246 [ 35.978936][ T696] RAX: 0000000000000061 RBX: 1ffff92001a52b54 RCX: d6f80e32d7d00c00 [ 35.986918][ T696] RDX: ffffc90002e47000 RSI: 0000000000027e77 RDI: 0000000000027e78 [ 35.994887][ T696] RBP: ffffc9000d295a90 R08: ffffc9000d295787 R09: 1ffff92001a52af0 [ 36.002857][ T696] R10: dffffc0000000000 R11: fffff52001a52af1 R12: 0000000000000000 [ 36.010840][ T696] R13: dffffc0000000000 R14: ffffc9000d295ac0 R15: ffffc9000d295af0 [ 36.018812][ T696] FS: 00007f35ba14c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.027739][ T696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.034341][ T696] CR2: 000000110c333c75 CR3: 000000011afe8000 CR4: 00000000003526b0 [ 36.042336][ T696] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006 [ 36.050314][ T696] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.058297][ T696] Call Trace: [ 36.061597][ T696] [ 36.064529][ T696] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 36.071994][ T696] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 36.079985][ T696] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 36.093567][ T696] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 36.100883][ T696] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 36.108807][ T696] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0 [ 36.118705][ T696] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10 [ 36.129289][ T696] _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x17e5/0x1860 [ 36.139038][ T696] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 36.149117][ T696] ? __kasan_check_write+0x18/0x20 [ 36.154233][ T696] ? _raw_spin_lock+0x8c/0x120 [ 36.159002][ T696] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.164200][ T696] ? __kasan_check_write+0x18/0x20 [ 36.169393][ T696] _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x278d/0x9d20 [ 36.178964][ T696] ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10 [ 36.188896][ T696] ? unwind_next_frame+0x3c2/0x750 [ 36.194121][ T696] ? __se_sys_ioctl+0x132/0x1b0 [ 36.198999][ T696] ? __se_sys_ioctl+0x132/0x1b0 [ 36.203874][ T696] ? __kernel_text_address+0x11/0x40 [ 36.209182][ T696] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 36.215345][ T696] ? arch_stack_walk+0x12a/0x170 [ 36.220374][ T696] ? __se_sys_ioctl+0x132/0x1b0 [ 36.225228][ T696] ? stack_depot_save_flags+0x38/0x800 [ 36.230720][ T696] ? stack_depot_save+0x12/0x20 [ 36.235582][ T696] ? save_stack+0x11c/0x1f0 [ 36.240136][ T696] ? __kasan_check_read+0x15/0x20 [ 36.245185][ T696] ? read_word_at_a_time+0x12/0x20 [ 36.250394][ T696] ? sized_strscpy+0x9f/0x2a0 [ 36.255284][ T696] ? __kasan_check_write+0x18/0x20 [ 36.260423][ T696] ? __update_page_owner_handle+0x318/0x370 [ 36.266332][ T696] ? percpu_counter_add_batch+0xfc/0x1b0 [ 36.271975][ T696] ? __kasan_check_write+0x18/0x20 [ 36.277084][ T696] ? _raw_read_unlock+0x16/0x40 [ 36.281938][ T696] ? ext4_es_lookup_extent+0x550/0x910 [ 36.287400][ T696] ? ext4_map_blocks+0x525/0x18e0 [ 36.292427][ T696] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 36.297889][ T696] ? update_curr_dl_se+0x10c/0xb20 [ 36.303009][ T696] ? is_bpf_text_address+0x17b/0x1a0 [ 36.308300][ T696] ? kernel_text_address+0xa9/0xe0 [ 36.313405][ T696] ? __kernel_text_address+0x11/0x40 [ 36.318691][ T696] ? unwind_get_return_address+0x51/0x90 [ 36.324319][ T696] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 36.330472][ T696] ? arch_stack_walk+0x10b/0x170 [ 36.335411][ T696] ? stack_depot_save_flags+0x38/0x800 [ 36.340887][ T696] ? kasan_save_alloc_info+0x40/0x50 [ 36.346177][ T696] ? kasan_save_track+0x4f/0x80 [ 36.351026][ T696] ? kasan_save_track+0x3e/0x80 [ 36.355876][ T696] ? kasan_save_alloc_info+0x40/0x50 [ 36.361165][ T696] ? __kasan_kmalloc+0x96/0xb0 [ 36.365928][ T696] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 36.372518][ T696] ? krealloc_noprof+0x8d/0x130 [ 36.377488][ T696] ? rust_helper_krealloc+0x33/0xd0 [ 36.382726][ T696] ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100 [ 36.392303][ T696] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440 [ 36.402806][ T696] ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a9/0x2c20 [ 36.412098][ T696] ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 36.420777][ T696] ? __se_sys_ioctl+0x132/0x1b0 [ 36.425641][ T696] ? __x64_sys_ioctl+0x7f/0xa0 [ 36.430409][ T696] ? do_syscall_64+0x58/0xf0 [ 36.435017][ T696] ? __kasan_kmalloc+0x96/0xb0 [ 36.439795][ T696] ? kasan_save_alloc_info+0x40/0x50 [ 36.445207][ T696] ? __kasan_kmalloc+0x96/0xb0 [ 36.449979][ T696] ? __kmalloc_node_track_caller_noprof+0x1ad/0x440 [ 36.456569][ T696] ? __kasan_check_write+0x18/0x20 [ 36.461738][ T696] ? _raw_spin_lock+0x8c/0x120 [ 36.466513][ T696] ? __cfi__raw_spin_lock+0x10/0x10 [ 36.471977][ T696] ? __asan_memset+0x39/0x50 [ 36.476599][ T696] ? _raw_spin_unlock+0x45/0x60 [ 36.481481][ T696] ? rust_helper_spin_unlock+0x19/0x30 [ 36.486947][ T696] ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440 [ 36.497445][ T696] ? __cfi_resched_curr+0x10/0x10 [ 36.502471][ T696] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 36.507948][ T696] ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 36.519262][ T696] ? xfd_validate_state+0x68/0x150 [ 36.524412][ T696] ? save_fpregs_to_fpstate+0x196/0x230 [ 36.530073][ T696] ? __kasan_check_write+0x18/0x20 [ 36.535188][ T696] ? __switch_to+0xc7b/0x1310 [ 36.539876][ T696] ? pick_next_task_fair+0x870/0x900 [ 36.545250][ T696] ? _raw_spin_unlock+0x45/0x60 [ 36.550104][ T696] ? finish_task_switch+0x13a/0x780 [ 36.555300][ T696] _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x411/0x2c20 [ 36.564411][ T696] ? __schedule+0x1463/0x1f10 [ 36.569111][ T696] ? avc_has_extended_perms+0x7c7/0xdd0 [ 36.574655][ T696] ? __asan_memcpy+0x5a/0x80 [ 36.579253][ T696] ? avc_has_extended_perms+0x921/0xdd0 [ 36.584826][ T696] ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10 [ 36.594395][ T696] ? do_vfs_ioctl+0xeda/0x1e30 [ 36.599166][ T696] ? preempt_schedule_common+0x2d/0x60 [ 36.604718][ T696] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 36.610358][ T696] ? __cfi_preempt_schedule+0x10/0x10 [ 36.615738][ T696] ? preempt_schedule_thunk+0x1a/0x40 [ 36.621113][ T696] ? try_to_wake_up+0xe17/0x1aa0 [ 36.626053][ T696] ? ioctl_has_perm+0x384/0x4d0 [ 36.630912][ T696] ? has_cap_mac_admin+0xd0/0xd0 [ 36.635853][ T696] ? futex_wake+0x63a/0x900 [ 36.640357][ T696] ? __cfi_futex_wake+0x10/0x10 [ 36.645318][ T696] ? kernfs_fop_write_iter+0x3d9/0x4d0 [ 36.650797][ T696] ? selinux_file_ioctl+0x6e0/0x1360 [ 36.656109][ T696] ? vfs_write+0x8ba/0xe80 [ 36.660699][ T696] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 36.666248][ T696] ? do_futex+0x356/0x500 [ 36.670623][ T696] ? __cfi_do_futex+0x10/0x10 [ 36.675312][ T696] ? mutex_unlock+0x8b/0x240 [ 36.679925][ T696] ? __fget_files+0x2c5/0x340 [ 36.684631][ T696] _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100 [ 36.693159][ T696] ? __se_sys_ioctl+0x114/0x1b0 [ 36.698044][ T696] ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10 [ 36.707154][ T696] __se_sys_ioctl+0x132/0x1b0 [ 36.711851][ T696] __x64_sys_ioctl+0x7f/0xa0 [ 36.716443][ T696] x64_sys_call+0x1878/0x2ee0 [ 36.721121][ T696] do_syscall_64+0x58/0xf0 [ 36.725540][ T696] ? clear_bhb_loop+0x35/0x90 [ 36.730225][ T696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.736215][ T696] RIP: 0033:0x7f35b938e929 [ 36.740643][ T696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.760537][ T696] RSP: 002b:00007f35ba14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.768969][ T696] RAX: ffffffffffffffda RBX: 00007f35b95b6080 RCX: 00007f35b938e929 [ 36.776957][ T696] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000004 [ 36.784949][ T696] RBP: 00007f35b9410b39 R08: 0000000000000000 R09: 0000000000000000 [ 36.793027][ T696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.801014][ T696] R13: 0000000000000000 R14: 00007f35b95b6080 R15: 00007ffd3ead61a8 [ 36.809882][ T696] [ 36.812915][ T696] Modules linked in: [ 36.817037][ T696] ---[ end trace 0000000000000000 ]--- [ 36.824465][ T36] audit: type=1400 audit(1750380752.080:204): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.865740][ T36] audit: type=1400 audit(1750380752.080:205): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.888381][ T36] audit: type=1400 audit(1750380752.180:206): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[3149]" dev="pipefs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 36.930475][ T696] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 36.935780][ T696] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 46 c6 3e 51 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 0c 02 77 dd 90 90 90 90 90 90 90 90 90 [ 36.955644][ T696] RSP: 0018:ffffc9000d295a90 EFLAGS: 00010246 [ 36.962053][ T696] RAX: 0000000000000061 RBX: 1ffff92001a52b54 RCX: d6f80e32d7d00c00 [ 36.970149][ T696] RDX: ffffc90002e47000 RSI: 0000000000027e77 RDI: 0000000000027e78 [ 36.978132][ T696] RBP: ffffc9000d295a90 R08: ffffc9000d295787 R09: 1ffff92001a52af0 [ 36.986171][ T696] R10: dffffc0000000000 R11: fffff52001a52af1 R12: 0000000000000000 [ 36.995299][ T696] R13: dffffc0000000000 R14: ffffc9000d295ac0 R15: ffffc9000d295af0 [ 37.003463][ T696] FS: 00007f35ba14c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.012604][ T696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.019265][ T696] CR2: 000055ca500bdb98 CR3: 000000011afe8000 CR4: 00000000003526b0 [ 37.027244][ T696] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006 [ 37.035306][ T696] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.043363][ T696] Kernel panic - not syncing: Fatal exception [ 37.049715][ T696] Kernel Offset: disabled [ 37.054021][ T696] Rebooting in 86400 seconds..