last executing test programs: 12m43.215552079s ago: executing program 32 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x5000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"}) 12m36.971461013s ago: executing program 33 (id=278): ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x2, 0x5, 0xfffa}, 'syz1\x00', 0x3e}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000140)) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$VHOST_VDPA_SET_GROUP_ASID(r1, 0x4008af7c, &(0x7f0000000180)={0x3, 0x173}) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0x1ff, 0x8, 0x6, 0x2}, 0x2b, [0xd, 0xfffffffa, 0x8, 0x8, 0x1, 0x1e, 0x401, 0x368ca097, 0x9, 0x8, 0x9, 0x2, 0x6, 0x2, 0x41, 0xfffffffe, 0xc, 0x1, 0xfffffffd, 0xffffff00, 0x21, 0x2, 0x8000000, 0x7da, 0x9, 0x6, 0x7f, 0x8, 0xf, 0x5, 0x4, 0x7f, 0x0, 0x664, 0x3b09, 0x3ff, 0x7fff, 0x7, 0x1fd3eb83, 0x3, 0x6, 0x1, 0x2, 0x1, 0x6, 0x6, 0x5, 0x5, 0x1, 0x2, 0x5, 0x1, 0x7, 0x7, 0xf, 0xc9, 0x6b6, 0x6, 0x0, 0x0, 0x0, 0xb, 0xfffffff8, 0xd], [0x6, 0x0, 0x9, 0x7, 0x3a6, 0x38c0, 0xc, 0x8, 0x4, 0x7ff, 0x0, 0x7ff, 0x7, 0x890, 0x6, 0x2, 0x0, 0x5, 0x9, 0x7, 0xffff8001, 0x6b21, 0x5, 0x7, 0x15, 0x8, 0xffffff2c, 0x6, 0x3, 0x8, 0x5, 0x4, 0xfffffc00, 0x2, 0x80000001, 0x7, 0x5, 0x1, 0x8, 0x2, 0xf8, 0x2, 0x3, 0xfffffffe, 0x5, 0x7ff, 0x7f, 0x0, 0xffffffff, 0x800, 0x7f, 0x1, 0x0, 0x401, 0x200, 0xff, 0x8, 0x401, 0x2, 0x1, 0x6, 0xc, 0x3, 0x764], [0x8, 0x316, 0x60000000, 0xa8a, 0x1, 0x1, 0x7, 0x5, 0x0, 0x8, 0xff, 0x401, 0xb, 0x4dc7, 0x4, 0x0, 0x0, 0x1, 0x3f4c0, 0x1, 0x5, 0x5, 0x37, 0x51a5, 0x8, 0x4, 0x0, 0x10000, 0x6, 0x8, 0x9, 0xffffffff, 0x7ff, 0x2, 0x0, 0x400, 0xbbb, 0x2a0, 0x4, 0x8, 0xe, 0x4, 0xff, 0x3, 0x9, 0xfff, 0x0, 0xc73, 0x8b, 0x7, 0x8, 0x7f, 0x8, 0x9, 0xffffffff, 0x200, 0x0, 0xe76f, 0xfffffff8, 0x8cb, 0x800, 0xd35, 0x8, 0x200], [0x8, 0xffff0001, 0x0, 0x5f, 0x6, 0x2, 0x2, 0x400, 0x695, 0x80, 0x6, 0xd1c, 0x9, 0x6, 0x1, 0x200, 0x7, 0x8, 0xaea, 0x10, 0x7, 0x918e, 0x6, 0x0, 0xfffffffd, 0x7fffffff, 0x1, 0x80, 0xffffffff, 0x3, 0x4, 0xffff, 0x2d1, 0x80, 0xd, 0x7, 0xc, 0x3, 0x1, 0x130, 0x8001, 0x3, 0x10, 0xfffffeff, 0xc, 0x9, 0xffff, 0x1, 0x5, 0x8, 0x69, 0xdb, 0x3, 0x0, 0x80000000, 0x9, 0xc44, 0xb06, 0x6, 0x54b, 0x3b, 0xf9be, 0x8, 0xf5]}, 0x45c) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000680)=r1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000006c0)={0x1, 0x5}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000700)={{r2}, 0x8000000000000000, 0xd4, 0x400}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000740)) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000780)={0x3, 0x3ff, {0x57, 0x9, 0x4, {0x9, 0xfffd}, {0x49, 0x3}, @rumble={0x5, 0x9}}, {0x57, 0x5, 0x3, {0x6f6b, 0x800}, {0x8, 0xcd3}, @rumble={0x70f2, 0x80}}}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r0, 0x41485000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x600, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x255) write$cgroup_subtree(r3, &(0x7f0000000840)={[{0x2d, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2d, 'rlimit'}, {0x2b, 'memory'}, {0x2b, 'perf_event'}]}, 0x4d) read(r0, &(0x7f00000008c0)=""/20, 0x14) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000900)) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000940)=""/157) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000a00)) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000a40)={'team0\x00'}) 12m20.611843529s ago: executing program 34 (id=490): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000019000048000000000000000800000000000000192c8666a8"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x200], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11m8.859964889s ago: executing program 35 (id=1626): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1803, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f0000000740)={0x1, 0x0, @pic={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f0000000740)={0x1, 0x0, @pic={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) (async) read$FUSE(r5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0603d06, 0xfffffffffffffffe) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000002c0)={[{0x1, 0x8001, 0x3, 0x9, 0x1, 0x10, 0xbb, 0x7, 0x5, 0x40, 0x4, 0xb5, 0x8}, {0x10001, 0x68, 0x3, 0xe, 0xd, 0x8, 0x5b, 0x61, 0x4, 0x0, 0xb8, 0xa6, 0x9}, {0x1, 0x4, 0x10, 0x8, 0x8, 0x40, 0x8, 0x1, 0x5, 0x0, 0x8, 0xf9, 0xff}], 0x8}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x202042, 0x0) 7m16.662106824s ago: executing program 36 (id=4534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 6m46.31684s ago: executing program 7 (id=5219): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_WKALM_SET(r0, 0x40187014, &(0x7f0000000000)={0x3, 0xfd, {0x1, 0x0, 0x0, 0x3, 0x6, 0x60, 0x1, 0x4, 0x1}}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r4}, r5, 0x12, @inherit={0x50, &(0x7f0000000340)={0x0, 0x1, 0x9, 0x4, {0x0, 0x113, 0x2, 0xc, 0x1ff}, [0xfffffffffffffff7]}}, @devid}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) 6m46.166909613s ago: executing program 7 (id=5222): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) 6m46.026872795s ago: executing program 7 (id=5227): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x410800, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x5}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) syz_clone(0x80, &(0x7f0000000440)="b079eeef80a48ee85a91dfea6e403c3a379a9fe7eb0a88ab8110c9935e4eb0c178597cb24bc04a4a6b2cde3964fc8697d05a3f0f4e55b43b73d764b023dd271c12f0a63ea791ef77ec91988952c6f93ddf57a8919f92d953848ce9920429877f735c8f0dc204fccc530954f66a79413aaaee98a40fa0a573f2dbdccd4c0b21ce7941a11205934c36d93e8cf1cc584170d47973e91458c4b480f05199180ae0bfdd9dcd607ecd3c7aa38687d61b74c5b3c2d7e03a00"/199, 0xc7, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000300)="cbb0fb7920f4fa3012e61e024d22243dda435b256d2006fcaee1c60dab26084332e5dc22e5e929468912e6b82a51eedfb8086fc39bce783882595ef78b41c698652f37e057f6c6e45a6c542692ac") ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 6m45.852268528s ago: executing program 7 (id=5228): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0xfffffffffffffffe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40882, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)) 6m45.70540152s ago: executing program 7 (id=5230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff9a, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x3}, @increfs_done={0x40106308, 0x2}, @exit_looper, @release, @dead_binder_done], 0x50, 0x0, &(0x7f0000000400)="b14c42900a5004aaaa0000010088a51496572b9cb250dbd515b6a716a234a3c912fe9c7493e5ef3b50cff5434ead048099ecdd9a45644f8af7bbf8b5df0000000000000000"}) 6m45.560222532s ago: executing program 7 (id=5232): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x1c0882, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455c9, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="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") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) read$FUSE(r4, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r7, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000540)=0x10001) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r8, 0x0, 0xfffffffffffffdde) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, 0x0) 6m31.158937419s ago: executing program 4 (id=5412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x88002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0xfe7f}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xdb) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000002580)) syz_clone(0x1200200, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 6m30.978399891s ago: executing program 4 (id=5415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(r3, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[]) 6m30.778404874s ago: executing program 4 (id=5417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009b}]}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) close_range(r4, r4, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x2) read(r6, &(0x7f0000000040)=""/8, 0x8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$ppp(r7, &(0x7f0000000080)="5a9960b55b927f1ae21bcd6f3390c04dbf0e1ed98cf5ab7c6545e223c400fbf8938cbaf03ed58f3aec08da1b59115e8bffd695c8370517b62b3515cbb33a33289b86bf119ff7f7f64e859d962db27c1a4ba35c801c7b6b22e60ddfbe38b3f86f6a27ab53d98c39c11a00f975c6fc7d181fe5c2a822bd7ce6489fb1bd252d5fec1baedc8e772590d4c45fad99196d5c22f379f72b6d34380f8e5efa1fbb369e057872e7a5b28b3c04d2aa4a03219c6aabd360cf726695020ecbfff8433456c2140e0abcc75e68bfe5569ab99c03da794b016f784088", 0xd5) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20) ioctl$BLKRRPART(r8, 0x125f, 0x0) 6m30.388016s ago: executing program 4 (id=5418): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) (fail_nth: 2) 6m30.380728061s ago: executing program 37 (id=5232): openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x1c0882, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x800455c9, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)="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") openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) read$FUSE(r4, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r7, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000540)=0x10001) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001200), 0x802, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r8, 0x0, 0xfffffffffffffdde) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, 0x0) 6m29.919324197s ago: executing program 4 (id=5422): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)) 6m29.860020388s ago: executing program 4 (id=5423): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xe1a}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'nr0\x00', @local}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r1, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 6m14.708007926s ago: executing program 38 (id=5423): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xe1a}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'nr0\x00', @local}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xf) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r1, 0x70800000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 4m59.506031708s ago: executing program 9 (id=6717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000580)={0xa, 0x0, [{0x3, 0x3, 0x1, 0x0, @irqchip={0x400, 0x5}}, {0x7, 0x3, 0x0, 0x0, @adapter={0x4, 0x3396, 0x6, 0x5, 0x9}}, {0x1, 0x1, 0x0, 0x0, @adapter={0xfffffffffffff0c4, 0xfffffffffffffffc, 0x2, 0x7fffffff, 0xea}}, {0x0, 0x5, 0x0, 0x0, @msi={0x2dea, 0x80, 0x5}}, {0x7, 0x3, 0x0, 0x0, @msi={0x6, 0x7, 0xffffffff, 0x3}}, {0xfffffff8, 0x4, 0x0, 0x0, @adapter={0x6, 0x1, 0x7, 0x5, 0x3}}, {0x9, 0x3, 0x0, 0x0, @sint={0x80000000, 0x4}}, {0x6, 0x2, 0x1, 0x0, @msi={0x9c3, 0x2, 0x101, 0xf}}, {0x1, 0x5, 0x1, 0x0, @sint={0x4, 0x5}}, {0xc5, 0x3, 0x1, 0x0, @irqchip={0x0, 0x9}}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x214181) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x7fffffff}}]}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) 4m59.206390483s ago: executing program 9 (id=6720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0xfbfffffffffffffc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x7, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @empty, @random="bb0f14d2c11a", @multicast, @broadcast, @broadcast]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, r1, 'id0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000002c0)}) 4m59.033586735s ago: executing program 9 (id=6724): syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4m58.822743838s ago: executing program 9 (id=6726): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x6, 0x0) 4m58.651908861s ago: executing program 9 (id=6728): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async, rerun: 64) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r3, 0x4018aee3, &(0x7f0000000080)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000000)={0xfb, 0x2, 0x1}}) (rerun: 64) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000007, 0x10, r0, 0xfffff000) (async) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) 4m58.383574746s ago: executing program 9 (id=6729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0xffffc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000003d00)=ANY=[@ANYBLOB="010000000f000000d00400"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000005c0)={0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002400)={0x44, 0x0, &(0x7f0000002380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) 4m43.336907442s ago: executing program 39 (id=6729): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0xffffc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000003d00)=ANY=[@ANYBLOB="010000000f000000d00400"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000005c0)={0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002400)={0x44, 0x0, &(0x7f0000002380)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000240)="eae7db1c"}) 3m48.085958865s ago: executing program 0 (id=7687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3m47.658694321s ago: executing program 0 (id=7692): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x1000, 0xfffffffb, 0xfff, 0x49, 0x0, [{0x8, 0x6, 0xe, '\x00', 0x6}, {0x0, 0xa, 0x5, '\x00', 0x4}, {0x1, 0x7, 0x1}, {0xc7, 0x3, 0x5}, {0x0, 0x5, 0x13}, {0x9, 0x9, 0x7f, '\x00', 0x10}, {0x6, 0xfe, 0x8, '\x00', 0x38}, {0x6, 0xfe, 0x4, '\x00', 0x5}, {0x3, 0x4, 0xfa, '\x00', 0x6}, {0x60, 0x4, 0x6, '\x00', 0x5}, {0x5, 0x7, 0x8}, {0x5, 0xb7, 0x7, '\x00', 0x74}, {0x6, 0xf, 0x0, '\x00', 0xd2}, {0x9, 0xce, 0x7, '\x00', 0x5}, {0x5c, 0x1f, 0x9, '\x00', 0x7f}, {0x8, 0x40, 0x4}, {0x7f, 0xc, 0xf3, '\x00', 0xfe}, {0x0, 0x1, 0x3, '\x00', 0xff}, {0xb7, 0x6, 0x7f, '\x00', 0x4}, {0x1, 0x9, 0x3, '\x00', 0xd}, {0x1, 0x5, 0x1, '\x00', 0x4}, {0x7, 0x4f, 0xf9, '\x00', 0x40}, {0x4, 0x8, 0xe0, '\x00', 0x40}, {0x54, 0x6, 0x98, '\x00', 0xb}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000078b1d78ba666c9a8000083fa2cef000000000000953eb673a206542f8726420f6171a3f12b"]) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r8, 0xae9a) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000500)={0x0, r10}) (async) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000500)={0x0, r10}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 3m46.994214161s ago: executing program 0 (id=7701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000000)) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0x0, 0x1, 0xbd2}) 3m46.915664922s ago: executing program 0 (id=7704): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_PIT2(r4, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa000, 0x9) (async) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000f8ff009801000084afc27e0000000000000000000000000000aaa8f33b1db970b4aaa2703e732db7839416141582278a5ddf099e68ee2fcc94be8f2d2c3eeb73282b69bb6619fd0c8a683fff952526a4a58a06b0fb460bee0923365ab5b9d6bdf4ff01a02847"]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r1, 0x0) (async) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x9e, 0x0, 0x4}]}) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x401, 0x4, 0x74a, 0xfffa}, 'syz1\x00', 0x40}) (async) read(r0, &(0x7f0000000040)=""/106, 0x6a) 3m46.492838978s ago: executing program 0 (id=7712): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x10000, 0x10408, 0x0, 0x101, 0x0, 0x4, 0x0, 0x0, 0x2, 0x20004000}}, 0x50) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=0x0, @ANYRES16=r3], 0xffffffffffffff80) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 3m46.252571801s ago: executing program 0 (id=7716): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000000c1, 0x3a, '\x00', 0x3a, ']\xff\xff\xff\x7f^{', 0x3a, './file0'}, 0x2f) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000180)={"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"}) write$vga_arbiter(r1, &(0x7f0000000080)=@unlock_all, 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x17, 0x17, 0x0, 0x88, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x17, 0x17, 0x0, 0x88, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) 3m29.693107838s ago: executing program 40 (id=7716): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000000c1, 0x3a, '\x00', 0x3a, ']\xff\xff\xff\x7f^{', 0x3a, './file0'}, 0x2f) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000180)={"1d564548e22e33bf39d846a38e60c254a359c90b65ca6944d651b3eed40a520ad0446eb4080030e5cc154b0935cbc3ab013ea359afc0d1c90d01d830bb1f715588e3649ca9bee7dda3cee9227c1dbb1520b46fc84ab3d7f0498fc8907bc2c3d127bab755410c53fd90563e20d94dbf1f32bcda1713568594dc88cc2f309173465bab6f4de363f7ac1c3c992f083f2db3f36f8ec64cc80c7a93ca5e7ffee15095c259f32799b1a7fcfde2c33d305d2dfc11142b8acc617ed24a6d82b36cd647ae648c9bdb7cea7b80263940aeb0a6f9c5da1b4e5c9a9a559b4043be31722ee79a8e91558fc102c8a369d28026fc4a1b578cab5c2add817e29cda5a39549813fec24ffcc4df05256c0237870d73de27e8d9b3b5f9081355af1ddb959420b26c7e4585c1a51655cb69c12181df6e91ee572c18be9fe50a2b36d4a4cdd41fa11e6160f4eaf8c5f3a68d89cc70dfe44f96d240cf0f5c556d0640ec50827d2c9bbdbe8e3fb3c09d086da7a6f02cbb2b66a9f097164ece7736e275c73b0908724fb955674a4ebd5a1482bf8b79ffd99a72b27d732eb14c492bac08dc050c50a0ad67534c2c849b2cbf00b8b6c5feb6696e6e84d315c74fd31df3d2c52f4f6ffd1648d1323fbd8e9416e9dbf296db3de9f4ef1c3639717b754067fb7846c7a319394a6eb7a2982dc733f7289d5e25d510a2eab75b4e49b4637b158bef466e55ffd6c31e6dfeac829f24da35edd7b25c39aeb00621b0c3ef052d2bd8b8d698a23a5f6869dba65e25ae2804802ad2a3d52dba7b9785dd77f9e3d16c0890061cb5437280a127751698ebb78dc72b8d343689ca6c9475dd5d58b954271acbfe6901d584fda8a7b5139d7f389909ee60babb6328c0f7e41ac06a1d339cbb0cc22f0a0bd0875704de018f5e8a453f471beb9c553e8a6969418fd9b95721139f990cfb9b91881afba9688be827998635baa734127c6ec96e931909466a2e1541a35ef66285ab71007e9b1b50a85ddcd829115cf4c9184c0d0fe13eb3fc7027947f69de47013944c6ed2e5fa1b4cb39cf41e9b8270c048995a09efcfa480b9065433625c335bc36dcfa80b35f8deae55a1b7a315bc2a6942fb0a75948b711feecc5f2e929ae29a65efb7e8bbdbce53e4c5ce173ac99fbc61b808c27cf5371c88456c5caf80c342480ab36741a005b9295c8188c79f537f97bed37b470f3aa1aa175c698ce9dc93ee462a23c5deec0294242fbecd00d6dc75c6dbe1ba0c4d7b6d57404eb6dcf97168da5cfe6cfe89d6dec9e918dabfa27b36fb37de69979b119e404effb4d739ffb5e544a55dd5fe4aad00068e14b3263d8da0af5bde8fe7885d6c837c3dfc03aecf91253a611b401d5057e6e7a5d1c8632974f4d1252432e1507d13193acae2e7f864bbd4b4346bbfba19458f450f98eac638839777b4dbda74edba28a558e6f50a"}) write$vga_arbiter(r1, &(0x7f0000000080)=@unlock_all, 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x17, 0x17, 0x0, 0x88, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x17, 0x17, 0x0, 0x88, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) 3m11.97424279s ago: executing program 2 (id=8094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000480)) (async) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) (rerun: 32) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES16=r2, @ANYRESHEX=r4, @ANYRESHEX=r3]) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x3, 0x3, 0x28, '\x00', 0x4}) (async) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x9cc6d000) ioctl$ASHMEM_SET_NAME(r7, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G') (async, rerun: 64) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) (async, rerun: 64) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) 3m11.717525944s ago: executing program 2 (id=8097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x4008af10, &(0x7f0000001200)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x30, r5, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xfffffffffffffffd, 0x2bf9, 0x1, 0x2, 0x0, 0x400, 0x5, 0x0, 0x20200000000000, 0x2, 0x0, 0x2, 0x6, 0x0, 0x4], 0x2000, 0x2c0242}) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000002000000f0ffffff0000000000000080f0030000018000000e000000000001000000000000000000"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) ioctl$RNDGETENTCNT(r7, 0x80045200, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001640)={0x8, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3m11.2946053s ago: executing program 2 (id=8104): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 3m11.246380481s ago: executing program 2 (id=8107): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="73650410080000000000"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x806, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) 3m11.028428024s ago: executing program 2 (id=8111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0xffff0000, 0xeeee8000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x8080000, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x100000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0xf}, {0x6000, 0x0, 0x0, 0x82}, {0x6000}, {0x1, 0xfffe}, 0x10d, 0x0, 0xf000, 0x90, 0x0, 0x100, 0x900, [0x0, 0x0, 0x0, 0x4]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3e, 0xfeb, 0x8cc, 0x5, 0xe, "3d980d311bf76259765fafda57afca538770fd"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m10.735628468s ago: executing program 2 (id=8117): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000040c0)={0xa, {0x6, 0x1, 0xf2}}, 0xa) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) (async) read(r1, &(0x7f0000000040)=""/106, 0x6a) (async) close(r0) 2m55.704311213s ago: executing program 41 (id=8117): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000040c0)={0xa, {0x6, 0x1, 0xf2}}, 0xa) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x45809000) (async) read(r1, &(0x7f0000000040)=""/106, 0x6a) (async) close(r0) 56.959263227s ago: executing program 3 (id=10114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f00000000c0)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x45809000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$TCSETS(r5, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) read(r4, &(0x7f0000000040)=""/106, 0x6a) 55.844524744s ago: executing program 3 (id=10130): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="fdcffeada4102f649242a7284327ffff63e8224c094ffd7cc914f643cd"]) 55.690399906s ago: executing program 3 (id=10133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000200)=0x1) close(0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 55.34126659s ago: executing program 3 (id=10141): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x88580, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl(r0, 0x63, &(0x7f00000002c0)="c8f836bc52388c85887bbf59d02f00eea0c683ebfef4aa683b45da16e450cacda197da29bcf4f91920380c5a2472eb225041c66a00bf71e2db5488617afad4ba17b8a024a0e801ce47c4d68379b5a3a7d0c075f5d48036bcf53e19669cb5cd645358d33f2bf1f9d9c19fb36bd87f84b4808a78c38fc6ef41f98f6ad70369dbbeeb5e7ae4a6af1155731b3c8fefd7671346ff60b93e131a57ab6d1705bd56d59ccd457d20dd0e9a353d77") (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180), 0x802, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xd, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x39, 0x0, &(0x7f0000000000)="1fbe4b0911bb3ba42b0aa0bfb077b39b925a4eae921d4f851e088e4c25a2241af0c4565bf87b88a30e69efe3ac874201e8b071dd9da18ba957"}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) (async) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0xffaf) (async) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000380)={0xcf, 0x0, 0x5, 0x2}) 55.323628131s ago: executing program 3 (id=10142): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001580)={"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"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f0000000000)) 55.042289805s ago: executing program 3 (id=10147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x700}]}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002500)={0x0, 0x9}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002900)={0x0, 0x4800000, @start={r4, 0x0, "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", "27b5b96349b1af08abe75c7b88182b21d041f330da9ce67be621e0a9febb5029f6937c2b5eee0bdb6521003962e60eab27efc950f2b4c0f53d8462a6a21297a11ee520fdcc6c7d1c371844a26d3459c16075ea040b98ccf3659238d6e90ac3b8ba10726bdffecaaa288da44771d237a607840c1070841ad14ebc7b0efcbd3778d9294c27198321b04d8f8e01ec3cb7052c09845afdbc99a6a335b2ff7f33e59e3e3efec84e46e8cfb1125afbc0bd6f544ebb7a409c5c06971f35d4dad377a1472c070dde26e049b473188aa9bb14d93300454cb6ce708e2499a7b5c812b030a68d3f7c01fca199249bd60d80bf08637c9559996ca4c930c516d2cadc38d95cdf2a3975c56d16b2095f2994b98d3274d766f2f5b8e01b55b15dc26c85bafa4d1c56139d2e57e24a937f1f500228e1483a0a743ea2c9619e2dbab76f9b00844c7e970c204c3870c2b6c5ec64d1c1bfa7016c3c328f1f790b520cd35be95d9700489e7d01e0a7c0a89f8900f95ce52961816c13b2976d0955d64aa1b5507a16491d7dc4da82ecce81f2a526fc98b9346c7414d37917f3cf00f2985cf866e17f941071b28fd3828f5ad005624ba6e680cb97df57837b68dc1d5f43d19b7a29293243f1915707e9ac7ee86a0adf7ef050f5e89116f957662529d0584f87c549555ec87e2d32ffef266f883350de8195dc4a6cce9d11ba500e37299d85585256d688ac10484131155f203aa22c3b66e30ca5d5a5e39bc09b405a1ec53eca16eb29fa4e4c91830bf4d94595493459fcb6c84942c3cf3db854143d53e758487aa5d21150d97064a1f5142ef324a95fc669f060b4ba8cb31043ae4da6902a13e6e05a10ceb7269f7b40cf81b739684ee30289b8d18992addc7d8d3b8ec069aaf81836535715e93f118579e5bbf84bdb173688c2700d4615cc37adc3be7707cc9fab51d58a5a34d1468370eb370bddff669a3a41f5865cb69a6c4e83c0623d3935b0aa3885a752c3627a338646ece8190d4c60cf3ac7fda1c78c047dcda4e518db3c28c8cf11de3e13db88d67660e7517401015b8ad1038830bc89cd12bee6505db47a7b88abcd655f0139dde93cf781180fc52bd6688a88dd8e1bf7407077070fde8453d2ddb3c2c1a1e5f5ce364fe8862ac45dfa949948527c83fede3cfefc6cace76ed78140d13959ee38d82af4d80883094fa6a972dd096a26d944c5ef8698a0c5d08bed30512126f6b7accf25e4a019543276c1acdf80979680de79a5ee08de4fa60fe427c105bec721baae116cd2da60705ecc538b087223a69f7267e6dc9c82075a7c2d934d3dfa6388aadcd88e5e535342c68cc3f0bf8fc2f80a66c75cfe9b82e072873c5d5a14ee0cc05c991f5f122ba5995ae9306ccf0ad1e8a2389324957e4dfea1808e960df623f3a07dd10fa89cdda28bf531e2db7a6ed3584d32f39611cc3c"}, [0x5, 0x81, 0x1000, 0x3, 0x62b, 0x2, 0x5, 0x6, 0x0, 0x2, 0xbf00, 0x8, 0x40, 0x364, 0x80, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x9, 0x5, 0x7, 0xe00, 0xffffffff, 0x4, 0xf, 0x7fffffff, 0x1, 0x9, 0x2, 0x4, 0x3, 0xffffffffffffff80, 0x5, 0x1ff, 0x7fffffffffffffff, 0x9, 0xe1, 0x6299, 0x100000001, 0x6, 0x104c, 0x4, 0x9, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0xfff, 0xc, 0x4, 0x8b8f, 0x8000000000000001, 0x80800, 0x4, 0x80000001, 0x0, 0x3, 0x6, 0x2, 0x8, 0x7]}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0xfffffffffffffffa, 0x3, 0x0, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x104800, &(0x7f00000023c0)=ANY=[@ANYBLOB='max=00000000000000000004000,stats=global,stats=global,max=00000000000000000000002,stats=global,ma0000200000000000000000,max=00000000000000000000010,stats=global,euid=)\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',subj_role=binder\x00,fsname=binder\x00,fowner<', @ANYRESDEC=r5, @ANYBLOB=',euid=', @ANYRESDEC=r5, @ANYBLOB=',fscontext=staff_u,\x00']) 40.046030839s ago: executing program 42 (id=10147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x0, 0x0, 0x700}]}) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002500)={0x0, 0x9}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002900)={0x0, 0x4800000, @start={r4, 0x0, "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", "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"}, [0x5, 0x81, 0x1000, 0x3, 0x62b, 0x2, 0x5, 0x6, 0x0, 0x2, 0xbf00, 0x8, 0x40, 0x364, 0x80, 0xffffffffffffffff, 0x9, 0x8000000000000000, 0x9, 0x5, 0x7, 0xe00, 0xffffffff, 0x4, 0xf, 0x7fffffff, 0x1, 0x9, 0x2, 0x4, 0x3, 0xffffffffffffff80, 0x5, 0x1ff, 0x7fffffffffffffff, 0x9, 0xe1, 0x6299, 0x100000001, 0x6, 0x104c, 0x4, 0x9, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0x6, 0x8, 0xffffffffffffffff, 0xfff, 0xc, 0x4, 0x8b8f, 0x8000000000000001, 0x80800, 0x4, 0x80000001, 0x0, 0x3, 0x6, 0x2, 0x8, 0x7]}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) (async) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0xfffffffffffffffa, 0x3, 0x0, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x104800, &(0x7f00000023c0)=ANY=[@ANYBLOB='max=00000000000000000004000,stats=global,stats=global,max=00000000000000000000002,stats=global,ma0000200000000000000000,max=00000000000000000000010,stats=global,euid=)\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB=',subj_role=binder\x00,fsname=binder\x00,fowner<', @ANYRESDEC=r5, @ANYBLOB=',euid=', @ANYRESDEC=r5, @ANYBLOB=',fscontext=staff_u,\x00']) 2.361089907s ago: executing program 6 (id=10843): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0xf4, 0xa, 0x7, '\x00', 0x8000000000000001}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.025313002s ago: executing program 6 (id=10848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"68f48fa61498694d26f34b0f0257df9e", 0x0, 0x0, {0xd2a, 0x8}, {0x7, 0x3}, 0x9, [0x2, 0x7fffffffffffffff, 0x281, 0xe7a9, 0x72c, 0x4, 0x200, 0x5, 0x3d3d, 0x6, 0x8, 0x8000000000000000, 0xca, 0x8, 0xfffffffffffffff7, 0x100000000]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000600)={{r1}, r2, 0x8, @unused=[0x868, 0x4, 0xc, 0x6], @name="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"}) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r4, &(0x7f00000000c0)=r3, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x193080, 0x43) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000600)={0x1, 0x0, 0x13, 0x5, 0x5b, &(0x7f0000000200)}) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880), 0x0, &(0x7f0000000900), {0x2e}, &(0x7f0000000940)=""/146, 0x92, &(0x7f0000000a00)=""/255, &(0x7f0000000b00)=[r5, r5, r5, r5, r5], 0x5, {r6}}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r8 = syz_clone3(&(0x7f0000001840)={0x0, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x8}, &(0x7f00000016c0)=""/224, 0xe0, &(0x7f00000017c0)=""/56, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) read$FUSE(0xffffffffffffffff, &(0x7f00000018c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r10], 0x1}, 0x58) syz_clone3(&(0x7f0000003b40)={0x40000, &(0x7f0000003900), &(0x7f0000003940)=0x0, &(0x7f0000003980), {0x30}, &(0x7f00000039c0)=""/138, 0x8a, &(0x7f0000003a80)=""/122, &(0x7f0000003b00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r12) write$FUSE_BMAP(r12, 0x0, 0x0) syz_clone3(&(0x7f0000003c00)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x33}, &(0x7f0000000380)=""/131, 0x83, &(0x7f0000000440)=""/150, &(0x7f0000003bc0)=[r3, r5, 0x0, r7, r8, r9, r10, r11], 0x8, {r12}}, 0x58) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.575618488s ago: executing program 6 (id=10853): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$rnullb(0xffffffffffffff9c, 0x0, 0x164e80, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xff, 0x8, 0x10, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x80, '\x00', 0x2, 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.174162124s ago: executing program 8 (id=10859): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) (async) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000100)={'\x00', 0xa, 0x1, 0x9}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x10000, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x9, 0x2, 0x3}) 1.173540574s ago: executing program 6 (id=10860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xa4b, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close(r0) (async) close(r0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) close(r0) (async) close(r0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080)=r2, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r7 = getpid() r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x100000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3f}, &(0x7f0000000140)=""/87, 0x57, &(0x7f0000000280)=""/20, &(0x7f0000000300)=[r2, r5, r6, r7], 0x4, {r8}}, 0x58) (async) syz_clone3(&(0x7f0000000380)={0x100000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3f}, &(0x7f0000000140)=""/87, 0x57, &(0x7f0000000280)=""/20, &(0x7f0000000300)=[r2, r5, r6, r7], 0x4, {r8}}, 0x58) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000073, 0x0, 0x390}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1.165497974s ago: executing program 8 (id=10861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x51b281, 0xbc) read$FUSE(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0xda, 0x4, &(0x7f0000000100)}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x51b281, 0xbc) (async) read$FUSE(r1, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) (async) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0xda, 0x4, &(0x7f0000000100)}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) 1.014344496s ago: executing program 8 (id=10863): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002080)={0x10, 0x0, r1}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000020c0), 0x420440, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000002500)={0x1, 0x1, 0x2, 0xb, 0x19c, &(0x7f0000002100)}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x100010, r0, 0xfcb18000) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000002940)={0x1, 0x0, 0x4, 0x4, 0x65, &(0x7f0000002540)}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002980), 0x40001, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000029c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002a00)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000004a40)={0x2020}, 0x2020) write$UHID_CREATE(r4, &(0x7f0000006ac0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000006a80)=""/56, 0x38, 0x695, 0x6, 0x0, 0x7ff, 0x35f}}, 0x120) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000006c00)=r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000006c40), 0x900, 0x0) ioctl$TIOCNXCL(r5, 0x540d) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000006f00)={0x54, 0x0, &(0x7f0000006e40)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000006d80)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000006c80)=""/234, 0xea, 0x1, 0x14}}, &(0x7f0000006e00)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x2}], 0x4, 0x0, &(0x7f0000006ec0)="6c3abfa1"}) write$cgroup_type(r4, &(0x7f0000006f40), 0x9) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000006f80)={0xed, 0x0, 0x5}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x0, 0x11, r3, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000007000), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000007040), 0x2, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000007080)=0x1) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r6, 0x100000a, 0x4010, r3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000070c0), 0x604001, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000007100)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r8, 0x142dd000) 1.013884506s ago: executing program 6 (id=10864): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000000c0)={0xdddd1000, 0xeeee6000, 0x3, 0x4, 0x81}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x5423, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000740)={0x2, 0x12c, @pic={0x0, 0x2, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000000)=0x2) (async) read$FUSE(r5, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_clone3(&(0x7f00000013c0)={0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001200), {0x35}, &(0x7f0000001240)=""/1, 0x1, &(0x7f0000001280)=""/162, &(0x7f0000000100)=[r8], 0x1, {r0}}, 0x58) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4000, 0x0) 913.423308ms ago: executing program 5 (id=10865): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r1, 0x5501) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x31) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0x96, 0x5, 0x2, 0x80}, 0x4f, [0x7ff, 0xe6, 0x8, 0x3, 0x2, 0x10001, 0x4, 0xcb27, 0x5, 0x7, 0x3, 0x6, 0x1, 0x4, 0x5, 0x9a, 0x9, 0x8000, 0x40, 0xf0, 0x7, 0x1ec8558d, 0x7fff, 0x1000, 0x101, 0x6, 0x5, 0xf, 0x8001, 0x0, 0x9, 0x8, 0x400, 0x8, 0x5, 0xed, 0x1, 0xab3, 0x7, 0x8, 0xfffffffc, 0x9, 0x0, 0x10000, 0x52, 0x8, 0x94, 0x5, 0x7, 0x0, 0x1, 0x43a, 0x10001, 0x6, 0x148c, 0x10001, 0x1, 0x4, 0x2, 0x80000005, 0x8, 0xfffffffd, 0xb0b1, 0x1], [0x4, 0x101, 0x7, 0x3, 0xc, 0x1, 0xfa, 0x6, 0x2, 0x8, 0x5, 0x5, 0x8, 0x81, 0x7, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6, 0x1ff, 0x7fffffff, 0x224e74fb, 0x7, 0x51, 0x2, 0x4, 0x6, 0x3, 0x4, 0x800, 0xfe3, 0x8, 0x31, 0x40, 0x0, 0x2, 0x3, 0x4, 0x9, 0x0, 0x7e679d15, 0x7c5b, 0x9, 0xffffff01, 0xa, 0x8, 0x4, 0x4, 0x5, 0x80, 0xff, 0x1, 0x8, 0xd, 0x7, 0x4, 0x0, 0x8, 0xdd8, 0x7, 0x1000, 0xf3], [0x4, 0x5, 0x21749cb9, 0x8, 0x2, 0x6, 0x9, 0x8, 0x2173, 0x4, 0x7, 0x0, 0x80000000, 0x5, 0x5, 0x610, 0x10, 0x80000001, 0x3, 0x7fffffff, 0x1, 0x8000, 0x6, 0xa5d, 0x8001, 0x8, 0x2, 0x7ff, 0x9, 0xf, 0x7f, 0x9, 0x3, 0xa, 0x90000000, 0x7, 0xfffffffd, 0x2, 0x8, 0x7fff, 0x4, 0xb, 0x0, 0x1a7, 0x60000000, 0x441d, 0x6, 0x6, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x8, 0x8, 0x0, 0x13, 0x1, 0x6, 0x3fe, 0xf9, 0xbc6b, 0xe, 0x5], [0x3, 0x10001, 0xc45, 0x1a, 0xbe2, 0x8001, 0x4, 0xffffffff, 0x7, 0x9, 0x7, 0xd874, 0x7, 0x1, 0x8, 0x1, 0x35c7, 0x6e, 0x80, 0x5, 0x3, 0x7fffffff, 0x9, 0x4, 0x5, 0x6, 0x2, 0x10001, 0x9, 0x29, 0x6, 0x1d7, 0x0, 0x1, 0x401, 0x3, 0x6, 0xffffc00d, 0x80, 0x0, 0x1ff, 0x5460, 0x7ff, 0x10, 0x13c3, 0x0, 0x7, 0x72f, 0x1, 0x56, 0x7, 0x1094, 0x4, 0x2, 0x2, 0x6, 0xda, 0x10000, 0x1, 0x100, 0x7ff800, 0x6, 0x6, 0x5]}, 0x45c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 853.695498ms ago: executing program 8 (id=10866): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x298}]}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) 670.413791ms ago: executing program 8 (id=10867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) read$FUSE(r1, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2102, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)=@x86={0x81, 0x6, 0x2d, 0x0, 0x40, 0x9, 0xe, 0xff, 0xf, 0x7, 0x6, 0xea, 0x0, 0x5, 0xf, 0xd, 0x7, 0xb6, 0x6, '\x00', 0x7f, 0x2}) write$rfkill(r1, &(0x7f0000000040)={0x5, 0x9, 0x3}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x8, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 669.926421ms ago: executing program 5 (id=10868): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187013, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2018860, &(0x7f0000000140)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0x8}}], [{@measure}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) 669.504051ms ago: executing program 6 (id=10869): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x28, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}, @release, @acquire={0x40046305, 0x1}, @register_looper, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a43ea40c3624c71b5e32ed937ba22fba69b54c33212008edddb2934108a099068934d2bc30696c313eed1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f0000000100)}) 616.217852ms ago: executing program 5 (id=10870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x0, [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f], [0x0, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x1, 0xffff, 0x3, 0x2}, 0x1d, [0x5, 0x9, 0x6, 0x6, 0xff, 0x5, 0xfffffe00, 0x10000, 0x101, 0x9, 0xf31, 0x8, 0x6, 0x4, 0x5, 0x96, 0x4, 0x400, 0x1, 0xfffffffd, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x7, 0x6d6e, 0x33, 0x1, 0xfffffe7d, 0x7, 0xffff, 0xffff0000, 0x3ff, 0xc7, 0xfffffff5, 0x4, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x95ea, 0x8, 0x984, 0x5f, 0x6, 0x7ff, 0x6, 0xf79, 0x6, 0xb, 0x8, 0x7fffffff, 0xfffffffa, 0x7ff, 0x7, 0xd, 0x401, 0x5, 0x2, 0x0, 0x3ff, 0x800], [0x3, 0x6, 0x59a, 0x24, 0x3, 0x0, 0x1, 0x7, 0xd7, 0x6, 0x9ad, 0x4, 0x9, 0xfff, 0x0, 0x8, 0x2, 0x1, 0x3, 0x7fffffff, 0xfffffff7, 0x7f, 0x7, 0x4, 0x8001, 0x4, 0x8, 0x2, 0x9, 0xfffffff8, 0x401, 0xfffffff9, 0x3, 0x2, 0x6, 0xe, 0xfe88, 0x5, 0x7fffffff, 0xfff, 0x1, 0x2, 0x6, 0x5, 0x5, 0xfffffff9, 0x1, 0x0, 0xfffffffb, 0x1000, 0x972e, 0x3ba4, 0x6d, 0x9, 0x8001, 0x6, 0x7, 0x4, 0x6, 0x800, 0x9, 0x4, 0x6, 0x6], [0x186, 0x8001, 0x10001, 0x4, 0x8, 0x10, 0x80000001, 0x9, 0x8b, 0x7, 0x1, 0x425, 0x3acb, 0x1000, 0x600, 0x80, 0xfffffff9, 0x5, 0x0, 0x55, 0x4, 0xfffffff9, 0xd, 0x3, 0x79, 0x6, 0xbfbef4b, 0xc0, 0xb, 0x81, 0x3, 0x3, 0x9, 0x4, 0x41988d7b, 0x1, 0xfffffffb, 0x2, 0x89, 0x1, 0x9, 0x7ff, 0x0, 0x7, 0x3, 0xfffffff7, 0x6, 0x8, 0x1, 0xff, 0x0, 0xe, 0x3, 0x800, 0x9, 0x4, 0x9858, 0x7fffffff, 0x6, 0x4, 0x1000, 0x40, 0x12, 0xc], [0x8001, 0x2, 0xb3d, 0x4, 0x3ff, 0x3, 0x928a, 0xa9, 0xf8, 0x6, 0x1, 0x7, 0x10000, 0x80000000, 0xffffffff, 0x1, 0xfffffff8, 0x6, 0x6, 0x2, 0x101, 0x64, 0x2, 0x80000001, 0xfff, 0x8, 0x9, 0xc, 0x3, 0x2, 0xd, 0xf59, 0x4, 0x101, 0x0, 0x8, 0x7b87, 0xffffffff, 0x5, 0xad68, 0x5, 0x7fffffff, 0x8, 0x0, 0x88000000, 0x366, 0x6, 0x7ff, 0x47, 0xfffffffb, 0xfffffffb, 0x641e, 0x9, 0x6, 0xffffd837, 0x1, 0x3, 0x2, 0xffffffff, 0x7ff, 0x9, 0x10001, 0x5, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) read(r0, &(0x7f0000000040)=""/106, 0x1001) 575.958322ms ago: executing program 1 (id=10871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x38840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 506.397093ms ago: executing program 8 (id=10872): syz_clone(0x22101011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000)=0xba17) write$cgroup_devices(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e030f00fd48"], 0xffdd) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"}) 362.862075ms ago: executing program 1 (id=10873): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x8, 0x7ffc0001}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='$,@.-,$!\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x800455ca, 0x2e) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000540)={0x0, 0x2, 0x37c, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000940)={r2, 0x9, 0x5}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 335.175846ms ago: executing program 5 (id=10874): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x9, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8d04"]) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000008002d62187189832beeadb757b99aee85615f6954021bf0ad0cb4221b8dbd686d020f45ccf5ce35cf8ba71e7974ffa3fe5d0f017f932190c322f7c5785547dcdf0521892d0dd5a6e948133d9d064e96407758096a"]) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x0, 0x0) 246.479497ms ago: executing program 1 (id=10875): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{}, {0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6}, {0xd000, 0x80a0000}, {0x2000}, {0xffff1000}, {}, {}, 0xddfdffdb, 0x0, 0x0, 0x78, 0x0, 0x8500}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 152.367068ms ago: executing program 5 (id=10876): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x20003, 0x10020f5b, 0x0, [{}, {}, {}, {0x0, 0x35}, {0x20}, {}, {}, {0x1, 0x6}, {0x0, 0x1}, {0xf, 0x1, 0x2}, {0x0, 0x0, 0xfe}, {}, {0xfe}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x3, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}]}}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x20e10000) ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000040)=0x7) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) 101.681969ms ago: executing program 1 (id=10877): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 'id0\x00'}) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) 30.54692ms ago: executing program 1 (id=10878): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x3, 0x0) 29.88248ms ago: executing program 1 (id=10879): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000180000000091040000000000000200000000000000"]) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x4b003000) prctl$PR_SET_DUMPABLE(0x4, 0x3) read(r0, 0x0, 0x0) 0s ago: executing program 5 (id=10880): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d303030303030303030303030303018b6cee14f66ed0c1857bf25aa853030303030303031312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031312c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): .260412][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.274073][ T64] hid-generic 0800:0000:000F.0033: probe with driver hid-generic failed with error -22 [ 717.278488][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.297071][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.307406][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.318056][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.327174][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.337311][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.344794][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.352570][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.360022][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.367545][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.375531][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.383005][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.390385][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.401350][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.409719][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.425690][ T45] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 717.435991][ T45] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 717.442874][T30552] kvm: kvm [30551]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 717.472829][T30550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1502 [ 717.639510][T30553] fido_id[30553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 717.747972][T30559] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 717.759341][T30559] rust_binder: Write failure EINVAL in pid:1720 [ 718.222372][T30591] kvm: kvm [30590]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3172 [ 718.275344][T30596] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.309652][T30599] rust_binder: Write failure EFAULT in pid:1506 [ 718.476726][T30615] SELinux: security_context_str_to_sid () failed with errno=-22 [ 718.566799][T30618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 718.593924][T30621] binder: Unknown parameter 'f' [ 718.895156][T30630] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 718.901510][T30630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278 [ 719.063438][T30636] input: syz0 as /devices/virtual/input/input608 [ 719.111708][T30636] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 719.297099][T30639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1509 [ 719.429891][T30642] SELinux: policydb string length 1836477192 does not match expected length 8 [ 719.448829][T30642] SELinux: failed to load policy [ 719.783860][T30661] rust_binder: Write failure EINVAL in pid:539 [ 719.958562][ T45] hid-generic 0000:0000:0000.0034: unknown main item tag 0x4 [ 719.973912][ T45] hid-generic 0000:0000:0000.0034: unknown main item tag 0x2 [ 719.982733][ T45] hid-generic 0000:0000:0000.0034: unknown main item tag 0x3 [ 719.992860][ T45] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 720.105991][T30677] fido_id[30677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 720.151059][T30679] SELinux: security_context_str_to_sid (syte0x0000000000000006) failed with errno=-22 [ 720.199053][T30681] binder: Binderfs stats mode cannot be changed during a remount [ 720.748312][T30702] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 721.022661][T30716] input input609: cannot allocate more than FF_MAX_EFFECTS effects [ 721.128299][T30719] rust_binder: Write failure EINVAL in pid:1767 [ 721.234656][T30726] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 721.352854][T30733] binder: Bad value for 'stats' [ 721.523135][ T36] kauditd_printk_skb: 967 callbacks suppressed [ 721.523153][ T36] audit: type=1400 audit(1750310364.130:161026): avc: denied { ioctl } for pid=30734 comm="syz.8.9606" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 721.590571][ T36] audit: type=1400 audit(1750310364.130:161027): avc: denied { read write } for pid=29606 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.651511][ T36] audit: type=1400 audit(1750310364.130:161028): avc: denied { read write open } for pid=29606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.697248][ T36] audit: type=1400 audit(1750310364.130:161029): avc: denied { ioctl } for pid=29606 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 721.767946][T30749] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 721.776452][ T36] audit: type=1400 audit(1750310364.160:161030): avc: denied { read } for pid=30745 comm="syz.1.9609" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 721.819390][ T36] audit: type=1400 audit(1750310364.160:161031): avc: denied { read open } for pid=30745 comm="syz.1.9609" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 721.904673][ T36] audit: type=1400 audit(1750310364.160:161032): avc: denied { ioctl } for pid=30745 comm="syz.1.9609" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 721.966981][ T36] audit: type=1400 audit(1750310364.180:161033): avc: denied { mounton } for pid=30734 comm="syz.8.9606" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 722.000641][ T36] audit: type=1400 audit(1750310364.260:161034): avc: denied { read } for pid=30743 comm="syz.3.9608" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 722.051940][T30764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316 [ 722.054632][ T36] audit: type=1400 audit(1750310364.260:161035): avc: denied { read open } for pid=30743 comm="syz.3.9608" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 722.290658][T30766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.290694][T30766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1532 [ 722.324330][T30768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1777 [ 722.362619][T30770] rust_binder: Error while translating object. [ 722.404207][T30773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:320 [ 722.453877][T30770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 722.463984][T30770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:578 [ 722.759397][T30789] SELinux: security_context_str_to_sid () failed with errno=-22 [ 723.385421][T17670] bridge_slave_1: left allmulticast mode [ 723.393089][T17670] bridge_slave_1: left promiscuous mode [ 723.398833][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.408001][T17670] bridge_slave_0: left allmulticast mode [ 723.421267][T17670] bridge_slave_0: left promiscuous mode [ 723.434928][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.603483][T17670] veth1_macvtap: left promiscuous mode [ 723.610272][T17670] veth0_vlan: left promiscuous mode [ 723.776959][T30820] rust_binder: Write failure EINVAL in pid:337 [ 723.788737][T30801] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.802123][T30801] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.809212][T30801] bridge_slave_0: entered allmulticast mode [ 723.818634][T30801] bridge_slave_0: entered promiscuous mode [ 723.826542][T30824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 723.842371][T30801] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.855865][T30801] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.864256][T30801] bridge_slave_1: entered allmulticast mode [ 723.868680][T30828] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 723.872272][T30801] bridge_slave_1: entered promiscuous mode [ 724.024577][T30801] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.031637][T30801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.038863][T30801] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.045889][T30801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.061804][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.069260][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.120428][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.127540][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.138017][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.145116][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.221607][T30801] veth0_vlan: entered promiscuous mode [ 724.245834][T30801] veth1_macvtap: entered promiscuous mode [ 724.505426][T30853] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 724.531591][T30853] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 724.681706][T30868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 724.733856][T30875] binder: Unknown parameter 'dont_hash' [ 724.771748][T30873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 724.793418][T30878] binder: Unknown parameter 'coytext' [ 724.985927][T30888] input: syz0 as /devices/virtual/input/input615 [ 725.118502][T30898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 725.375140][T30908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 725.385561][T30908] rust_binder: Read failure Err(EFAULT) in pid:374 [ 725.420715][T30920] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 725.982109][ T304] bridge_slave_1: left allmulticast mode [ 725.987843][ T304] bridge_slave_1: left promiscuous mode [ 725.998803][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.007662][ T304] bridge_slave_0: left allmulticast mode [ 726.013832][ T304] bridge_slave_0: left promiscuous mode [ 726.019500][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.084692][T30944] rust_binder: Write failure EFAULT in pid:633 [ 726.144139][T30949] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 726.194300][T30954] input: syz0 as /devices/virtual/input/input616 [ 726.256108][ T304] veth1_macvtap: left promiscuous mode [ 726.269551][ T304] veth0_vlan: left promiscuous mode [ 726.506161][T30960] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 726.508012][T30940] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.561501][T30940] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.568606][T30940] bridge_slave_0: entered allmulticast mode [ 726.578580][T30940] bridge_slave_0: entered promiscuous mode [ 726.586613][T30940] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.586977][ T36] kauditd_printk_skb: 853 callbacks suppressed [ 726.586991][ T36] audit: type=1400 audit(1750310369.190:161889): avc: denied { read write } for pid=24725 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 726.599692][T30940] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.601271][ T36] audit: type=1400 audit(1750310369.200:161890): avc: denied { read write } for pid=30967 comm="syz.1.9675" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.625998][T30940] bridge_slave_1: entered allmulticast mode [ 726.635650][T30968] binder: Bad value for 'stats' [ 726.671881][T30940] bridge_slave_1: entered promiscuous mode [ 726.701487][ T36] audit: type=1400 audit(1750310369.200:161891): avc: denied { read write open } for pid=30967 comm="syz.1.9675" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.726881][ T36] audit: type=1400 audit(1750310369.240:161892): avc: denied { ioctl } for pid=30967 comm="syz.1.9675" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.753647][ T36] audit: type=1400 audit(1750310369.240:161893): avc: denied { ioctl } for pid=30967 comm="syz.1.9675" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.779577][ T36] audit: type=1400 audit(1750310369.240:161894): avc: denied { ioctl } for pid=30967 comm="syz.1.9675" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 726.805729][ T36] audit: type=1400 audit(1750310369.240:161895): avc: denied { mounton } for pid=30967 comm="syz.1.9675" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.831633][ T36] audit: type=1400 audit(1750310369.260:161896): avc: denied { read write open } for pid=24725 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 726.891492][ T36] audit: type=1400 audit(1750310369.260:161897): avc: denied { ioctl } for pid=24725 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 726.954717][ T36] audit: type=1400 audit(1750310369.300:161898): avc: denied { read } for pid=30970 comm="syz.8.9676" name="binder1" dev="binder" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 726.959307][T30976] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 727.081749][T30940] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.096679][T30940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.104048][T30940] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.111091][T30940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.154368][T30978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 727.154408][T30978] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 727.172950][T30978] rust_binder: Read failure Err(EFAULT) in pid:43 [ 727.183564][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.197411][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.261485][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.268575][ T1757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.288294][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.295381][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.392074][T30940] veth0_vlan: entered promiscuous mode [ 727.451956][T30940] veth1_macvtap: entered promiscuous mode [ 727.565178][T30989] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 727.565223][T30989] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 727.573891][T30989] rust_binder: Read failure Err(EFAULT) in pid:653 [ 727.831046][T31009] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 727.872295][T31011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1554 [ 727.969527][T31013] binder: Unknown parameter 'fowner' [ 727.976000][T31015] random: crng reseeded on system resumption [ 727.999001][T31017] binder: Bad value for 'defcontext' [ 728.041986][T31015] rust_binder: Write failure EINVAL in pid:10 [ 728.042463][T31013] rust_binder: Write failure EINVAL in pid:1556 [ 728.149608][T31029] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 728.223088][T31027] input: syz1 as /devices/virtual/input/input618 [ 728.296600][T31027] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 728.332142][T31033] input: syz1 as /devices/virtual/input/input619 [ 728.390976][T31033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 728.864830][T31053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 728.951643][T31056] kvm: kvm [31055]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 729.370308][T31077] rust_binder: Error while translating object. [ 729.370355][T31077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 729.397021][T31077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1566 [ 729.411270][T31083] input: syz1 as /devices/virtual/input/input621 [ 729.537205][T31083] binder: Unknown parameter 'qeclabel' [ 729.637748][T31087] rust_binder: Error while translating object. [ 729.637795][T31087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 729.658761][T31087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:688 [ 730.012147][T31110] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 730.089845][T31113] SELinux: security_context_str_to_sid () failed with errno=-22 [ 730.217101][T31124] SELinux: failed to load policy [ 730.304360][T31127] input: syz1 as /devices/virtual/input/input622 [ 730.313783][T31129] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 730.608298][T31140] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 730.608331][T31140] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1591 [ 730.885301][T31155] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 730.933887][T31155] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 730.945528][T31155] kvm: requested 28495 ns i8254 timer period limited to 200000 ns [ 731.277040][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 731.374810][T31175] input: syz0 as /devices/virtual/input/input623 [ 731.394493][T31175] binder: Bad value for 'stats' [ 731.529727][T31183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:705 [ 731.540289][T31183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:705 [ 731.659658][ T36] kauditd_printk_skb: 1260 callbacks suppressed [ 731.659677][ T36] audit: type=1400 audit(1750310374.260:163159): avc: denied { read write } for pid=30801 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.711491][ T36] audit: type=1400 audit(1750310374.260:163160): avc: denied { read write open } for pid=30801 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.781588][ T36] audit: type=1400 audit(1750310374.260:163161): avc: denied { ioctl } for pid=30801 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 731.858322][ T36] audit: type=1326 audit(1750310374.300:163162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 731.925009][ T36] audit: type=1326 audit(1750310374.300:163163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 731.981098][ T36] audit: type=1326 audit(1750310374.300:163164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 732.009584][ T36] audit: type=1326 audit(1750310374.300:163165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 732.034949][ T36] audit: type=1326 audit(1750310374.300:163166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 732.059085][ T36] audit: type=1326 audit(1750310374.300:163167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 732.083779][ T36] audit: type=1326 audit(1750310374.300:163168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31187 comm="syz.3.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa009f8e929 code=0x7ffc0000 [ 732.152701][T31210] SELinux: security_context_str_to_sid () failed with errno=-22 [ 732.342678][T31214] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 732.364038][T31215] rust_binder: Write failure EINVAL in pid:1611 [ 732.364112][T31214] rust_binder: Write failure EINVAL in pid:1611 [ 732.718867][T31230] binder: Bad value for 'max' [ 732.929748][T31239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 732.949237][T31239] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 733.036582][T31245] SELinux: security_context_str_to_sid () failed with errno=-22 [ 733.341622][ T790] Bluetooth: hci0: command 0x1003 tx timeout [ 733.347822][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 733.517984][T31266] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 733.543916][T31266] SELinux: failed to load policy [ 733.664045][T31277] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 733.719202][T31278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1635 [ 733.811519][T31282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67 [ 733.976556][T31291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 733.985955][T31291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:736 [ 734.082356][T31298] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 734.155981][T31295] input: syz0 as /devices/virtual/input/input624 [ 734.232485][T31304] rust_binder: Write failure EFAULT in pid:107 [ 734.933143][T31334] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 735.343314][T31347] binder: Unknown parameter '' [ 735.369319][T31352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 735.414093][T31355] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 735.842231][ T1757] bridge_slave_1: left allmulticast mode [ 735.855977][ T1757] bridge_slave_1: left promiscuous mode [ 735.861921][ T1757] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.890082][ T1757] bridge_slave_0: left allmulticast mode [ 735.917733][ T1757] bridge_slave_0: left promiscuous mode [ 735.942641][ T548] hid-generic C98F:0003:0000.0035: item fetching failed at offset 0/2 [ 735.942631][ T1757] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.982345][ T548] hid-generic C98F:0003:0000.0035: probe with driver hid-generic failed with error -22 [ 736.054838][T31387] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 736.054864][T31387] rust_binder: Error while translating object. [ 736.072894][T31387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 736.079256][T31387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 736.090786][ T1757] veth1_macvtap: left promiscuous mode [ 736.113189][ T1757] veth0_vlan: left promiscuous mode [ 736.171873][T31385] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.179002][T31385] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.186231][T31385] bridge_slave_0: entered allmulticast mode [ 736.192771][T31385] bridge_slave_0: entered promiscuous mode [ 736.203020][T31385] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.210066][T31385] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.217206][T31385] bridge_slave_1: entered allmulticast mode [ 736.223357][T31385] bridge_slave_1: entered promiscuous mode [ 736.282186][T31385] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.289326][T31385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.296601][T31385] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.303640][T31385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.428803][T31393] kvm: apic: phys broadcast and lowest prio [ 736.434920][T31393] kvm: Disabled LAPIC found during irq injection [ 736.445483][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.452699][T31395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 736.472611][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.511110][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.518196][T17670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.538301][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.545390][T17670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.663598][ T36] kauditd_printk_skb: 1151 callbacks suppressed [ 736.663617][ T36] audit: type=1400 audit(1750310379.270:164320): avc: denied { read } for pid=31400 comm="syz.3.9815" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.739741][T31385] veth0_vlan: entered promiscuous mode [ 736.740994][T31404] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false [ 736.757770][ T36] audit: type=1400 audit(1750310379.270:164321): avc: denied { read open } for pid=31400 comm="syz.3.9815" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.849845][ T36] audit: type=1400 audit(1750310379.270:164322): avc: denied { read write } for pid=31398 comm="syz.8.9816" name="binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.876871][T31385] veth1_macvtap: entered promiscuous mode [ 736.882647][ T36] audit: type=1400 audit(1750310379.270:164323): avc: denied { read write open } for pid=31398 comm="syz.8.9816" path="/dev/binderfs/binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.891740][T31407] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 736.929305][ T36] audit: type=1400 audit(1750310379.270:164324): avc: denied { map } for pid=31398 comm="syz.8.9816" path="/dev/binderfs/binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.962800][ T36] audit: type=1400 audit(1750310379.270:164325): avc: denied { read } for pid=31398 comm="syz.8.9816" path="/dev/binderfs/binder0" dev="binder" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 736.963811][T31407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 736.988656][ T36] audit: type=1400 audit(1750310379.270:164326): avc: denied { read } for pid=31398 comm="syz.8.9816" name="binder1" dev="binder" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 737.025535][T31385] audit: audit_backlog=65 > audit_backlog_limit=64 [ 737.037694][ T36] audit: type=1400 audit(1750310379.270:164327): avc: denied { read open } for pid=31398 comm="syz.8.9816" path="/dev/binderfs/binder1" dev="binder" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 737.143070][T31425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 737.143105][T31425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 737.435682][T31434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:780 [ 737.514733][T31439] SELinux: failed to load policy [ 737.621696][T31446] SELinux: security_context_str_to_sid () failed with errno=-22 [ 738.185830][T31475] binder: Unknown parameter 'em_' [ 738.283571][T31478] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 738.298298][T31478] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3191357590 (3191357590 ns) > initial count (1009585796 ns). Using initial count to start timer. [ 738.302258][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x4 [ 738.325926][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x2 [ 738.329499][T31478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27 [ 738.341238][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.358091][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.365746][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.373463][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.382343][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.383166][T31483] binder: Unknown parameter 'se¤Í' [ 738.390135][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.404559][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.412301][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.420189][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.427954][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.435820][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.443561][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.451278][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.459072][ T7758] hid-generic 0000:3000000:0000.0036: unknown main item tag 0x0 [ 738.468591][ T7758] hid-generic 0000:3000000:0000.0036: hidraw0: HID v0.00 Device [sy] on syz0 [ 738.633123][T31485] fido_id[31485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 738.784004][T31494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 738.784042][T31494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:797 [ 738.912120][T31499] binder: Bad value for 'max' [ 739.273336][T31521] binder: Bad value for 'max' [ 739.432363][T31528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 739.432396][T31528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:38 [ 739.627887][T31535] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 739.844646][T31543] rust_binder: Error while translating object. [ 739.871482][T31543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 739.889757][T31543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:812 [ 740.248811][T31551] rust_binder: Write failure EINVAL in pid:42 [ 740.676064][T31570] binder: Bad value for 'max' [ 741.140139][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 741.213308][T31599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 741.241369][T31600] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 741.691504][ T36] kauditd_printk_skb: 821 callbacks suppressed [ 741.691524][ T36] audit: type=1400 audit(1750310384.290:165109): avc: denied { read write } for pid=31385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.752560][ T36] audit: type=1400 audit(1750310384.290:165110): avc: denied { read write open } for pid=31385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.762524][T31632] SELinux: security_context_str_to_sid (sytem_uÝGй ‰q\Á5u_ æ’Ós) failed with errno=-22 [ 741.793444][ T36] audit: type=1400 audit(1750310384.290:165111): avc: denied { ioctl } for pid=31385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 741.829449][ T36] audit: type=1400 audit(1750310384.310:165112): avc: denied { mounton } for pid=31627 comm="syz.1.9890" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 741.872066][ T36] audit: type=1400 audit(1750310384.310:165113): avc: denied { mount } for pid=31627 comm="syz.1.9890" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 741.923574][ T36] audit: type=1400 audit(1750310384.350:165114): avc: denied { read } for pid=31625 comm="syz.3.9889" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 741.953146][ T36] audit: type=1400 audit(1750310384.360:165115): avc: denied { read open } for pid=31625 comm="syz.3.9889" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 741.978469][ T36] audit: type=1400 audit(1750310384.360:165116): avc: denied { read write } for pid=31629 comm="syz.5.9891" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 742.004918][ T36] audit: type=1400 audit(1750310384.360:165117): avc: denied { read write open } for pid=31629 comm="syz.5.9891" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 742.031994][ T36] audit: type=1400 audit(1750310384.360:165118): avc: denied { read write } for pid=31630 comm="syz.1.9892" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 742.374371][T31668] SELinux: policydb string does not match my string SE Linux [ 742.382378][T31668] SELinux: failed to load policy [ 742.576164][T31684] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 742.576190][T31684] rust_binder: Read failure Err(EFAULT) in pid:873 [ 742.678234][T31691] rust_binder: Write failure EINVAL in pid:875 [ 742.678558][T31692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 743.181465][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 743.194124][ T790] Bluetooth: hci0: command 0x1003 tx timeout [ 743.268078][T31704] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 743.741542][T31717] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 743.790331][T31717] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 744.187729][T31738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:893 [ 744.242144][T31744] binder: Bad value for 'max' [ 744.932190][T31771] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 745.480881][T31787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 745.591506][T31790] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 745.712567][T31796] rust_binder: Write failure EINVAL in pid:98 [ 746.061502][T31811] binder: Bad value for 'stats' [ 746.124779][T31819] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 746.175176][T31818] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 746.414533][T31831] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 746.602248][T31839] input: syz1 as /devices/virtual/input/input629 [ 746.616330][T31843] SELinux: security_context_str_to_sid (syteÿ) failed with errno=-22 [ 746.705642][ T36] kauditd_printk_skb: 926 callbacks suppressed [ 746.705662][ T36] audit: type=1400 audit(1750310389.310:166045): avc: denied { read append } for pid=31844 comm="syz.1.9961" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 746.794883][ T36] audit: type=1400 audit(1750310389.310:166046): avc: denied { read append open } for pid=31844 comm="syz.1.9961" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 746.860264][ T36] audit: type=1400 audit(1750310389.310:166047): avc: denied { ioctl } for pid=31844 comm="syz.1.9961" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 746.912316][ T36] audit: type=1400 audit(1750310389.350:166048): avc: denied { read write } for pid=31849 comm="syz.3.9963" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 746.960236][ T36] audit: type=1400 audit(1750310389.350:166049): avc: denied { read open } for pid=31849 comm="syz.3.9963" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 747.001803][T31856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 747.001836][T31856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 747.011664][ T36] audit: type=1400 audit(1750310389.350:166050): avc: denied { map } for pid=31849 comm="syz.3.9963" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 747.079287][ T36] audit: type=1400 audit(1750310389.350:166051): avc: denied { read } for pid=31849 comm="syz.3.9963" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 747.129313][ T36] audit: type=1400 audit(1750310389.350:166052): avc: denied { read } for pid=31849 comm="syz.3.9963" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 747.202077][ T36] audit: type=1400 audit(1750310389.350:166053): avc: denied { read open } for pid=31849 comm="syz.3.9963" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 747.249665][ T36] audit: type=1400 audit(1750310389.350:166054): avc: denied { ioctl } for pid=31849 comm="syz.3.9963" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 747.386656][T31870] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 747.697298][T31880] input: syz1 as /devices/virtual/input/input631 [ 747.734357][T31880] rust_binder: Read failure Err(EAGAIN) in pid:928 [ 747.982515][T31891] rust_binder: Write failure EINVAL in pid:933 [ 748.210277][T31900] binder: Bad value for 'max' [ 748.262086][T31904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:940 [ 748.570992][T31922] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 748.580336][T31919] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 748.603547][T31919] input: syz1 as /devices/virtual/input/input632 [ 749.089652][T31945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.162321][T31949] input: syz0 as /devices/virtual/input/input633 [ 749.654656][T31972] binder: Unknown parameter 'maø' [ 749.823890][T31978] input: syz1 as /devices/virtual/input/input634 [ 749.862895][T31978] input: syz0 as /devices/virtual/input/input635 [ 749.948115][T31978] binder: Unknown parameter '' [ 750.277056][T32004] binder: Bad value for 'defcontext' [ 750.419054][T32008] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 750.571680][T32013] kvm: kvm [32011]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x7 [ 750.680282][T32020] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 750.852990][T32024] binder: Unknown parameter '©e›}?E›~•6%Âþ eWäþŠ«*Á8ÕpNWØLö<' [ 750.876970][T32027] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 751.717883][ T36] kauditd_printk_skb: 802 callbacks suppressed [ 751.717904][ T36] audit: type=1400 audit(1750310394.320:166857): avc: denied { read } for pid=32075 comm="syz.3.10046" name="binder1" dev="binder" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 751.750789][T32076] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 751.750814][T32076] rust_binder: Error while translating object. [ 751.772205][T32076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 751.782368][T32076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:289 [ 751.783921][ T36] audit: type=1400 audit(1750310394.320:166858): avc: denied { read write } for pid=24725 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.862693][ T36] audit: type=1400 audit(1750310394.320:166859): avc: denied { read write open } for pid=24725 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.893527][ T36] audit: type=1400 audit(1750310394.320:166860): avc: denied { ioctl } for pid=24725 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 751.921636][ T36] audit: type=1400 audit(1750310394.360:166861): avc: denied { read open } for pid=32075 comm="syz.3.10046" path="/dev/binderfs/binder1" dev="binder" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 751.958981][ T36] audit: type=1400 audit(1750310394.360:166862): avc: denied { ioctl } for pid=32075 comm="syz.3.10046" path="/dev/binderfs/binder0" dev="binder" ino=212 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 751.985269][ T36] audit: type=1400 audit(1750310394.360:166863): avc: denied { call } for pid=32075 comm="syz.3.10046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 752.004568][ T36] audit: type=1400 audit(1750310394.360:166864): avc: denied { transfer } for pid=32075 comm="syz.3.10046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 752.026322][ T36] audit: type=1400 audit(1750310394.360:166865): avc: denied { read } for pid=32075 comm="syz.3.10046" path="/dev/binderfs/binder1" dev="binder" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 752.051508][ T36] audit: type=1400 audit(1750310394.410:166866): avc: denied { ioctl } for pid=32075 comm="syz.3.10046" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 752.171915][T32088] rust_binder: Write failure EINVAL in pid:1017 [ 752.191310][T32090] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 752.241499][T32090] SELinux: failed to load policy [ 752.265335][T32090] SELinux: policydb version -1038758650 does not match my version range 15-33 [ 752.292150][T32090] SELinux: failed to load policy [ 752.523828][T32105] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 752.595282][T32111] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 752.688903][T32122] binder: Bad value for 'defcontext' [ 752.806655][T32122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 752.881337][T32124] SELinux: failed to load policy [ 752.945956][T32139] rust_binder: Failed to allocate buffer. len:18446744073709551016, is_oneway:false [ 752.945975][T32139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 752.959275][T32139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:304 [ 753.565618][T32167] input: syz0 as /devices/virtual/input/input640 [ 754.493924][T32208] can0: slcan on ptm1. [ 754.575597][T32207] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 754.722889][T32205] can0 (unregistered): slcan off ptm1. [ 754.951568][ T304] bridge_slave_1: left allmulticast mode [ 754.957275][ T304] bridge_slave_1: left promiscuous mode [ 754.977382][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.002677][T32233] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 755.004476][ T304] bridge_slave_0: left allmulticast mode [ 755.029310][ T304] bridge_slave_0: left promiscuous mode [ 755.035764][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.173651][ T304] veth1_macvtap: left promiscuous mode [ 755.179178][ T304] veth0_vlan: left promiscuous mode [ 755.500046][T32213] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.538011][T32213] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.550715][T32213] bridge_slave_0: entered allmulticast mode [ 755.568489][T32213] bridge_slave_0: entered promiscuous mode [ 755.576293][T32248] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 755.580614][T32213] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.591150][T32213] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.598271][T32213] bridge_slave_1: entered allmulticast mode [ 755.605679][T32213] bridge_slave_1: entered promiscuous mode [ 755.768784][T32262] input: syz0 as /devices/virtual/input/input641 [ 755.795418][T32262] input: failed to attach handler leds to device input641, error: -6 [ 756.053151][T32273] binder: Unknown parameter 'cont8¸'ÇgŠw§Št' [ 756.065623][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.072756][T17670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.095061][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.102242][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.149271][T32273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332 [ 756.154613][T32278] binder: Bad value for 'stats' [ 756.324304][T32285] input: syz0 as /devices/virtual/input/input642 [ 756.340090][T32213] veth0_vlan: entered promiscuous mode [ 756.346107][T32281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:183 [ 756.390135][T32285] rust_binder: Write failure EFAULT in pid:335 [ 756.462729][T32213] veth1_macvtap: entered promiscuous mode [ 756.724297][ T36] kauditd_printk_skb: 1252 callbacks suppressed [ 756.724316][ T36] audit: type=1400 audit(1750310399.330:168119): avc: denied { read } for pid=32291 comm="syz.5.10109" name="binder0" dev="binder" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 756.772444][T32300] kvm: user requested TSC rate below hardware speed [ 756.788060][T32298] kvm: user requested TSC rate below hardware speed [ 756.796260][T32297] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 756.800054][ T36] audit: type=1400 audit(1750310399.330:168120): avc: denied { read open } for pid=32291 comm="syz.5.10109" path="/dev/binderfs/binder0" dev="binder" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 756.849466][ T36] audit: type=1400 audit(1750310399.330:168121): avc: denied { ioctl } for pid=32291 comm="syz.5.10109" path="/dev/binderfs/binder0" dev="binder" ino=240 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 756.877072][ T36] audit: type=1400 audit(1750310399.330:168122): avc: denied { set_context_mgr } for pid=32291 comm="syz.5.10109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 756.897610][ T36] audit: type=1400 audit(1750310399.330:168123): avc: denied { ioctl } for pid=32291 comm="syz.5.10109" path="/dev/binderfs/binder0" dev="binder" ino=240 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 756.924342][ T36] audit: type=1400 audit(1750310399.370:168124): avc: denied { read write } for pid=32296 comm="syz.8.10089" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 756.949722][ T36] audit: type=1400 audit(1750310399.370:168125): avc: denied { read write open } for pid=32296 comm="syz.8.10089" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 756.977150][ T36] audit: type=1400 audit(1750310399.370:168126): avc: denied { read } for pid=32296 comm="syz.8.10089" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 757.001266][ T36] audit: type=1400 audit(1750310399.370:168127): avc: denied { read open } for pid=32296 comm="syz.8.10089" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 757.026157][ T36] audit: type=1400 audit(1750310399.390:168128): avc: denied { ioctl } for pid=32296 comm="syz.8.10089" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 757.053356][T32303] binder: Unknown parameter 'dont_hash' [ 757.123467][T32307] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 757.132827][T32312] input: syz1 as /devices/virtual/input/input643 [ 757.903989][T32345] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 757.904012][T32345] rust_binder: Read failure Err(EFAULT) in pid:200 [ 757.915309][T32345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 757.931946][T32345] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 758.102530][T32349] rust_binder: Write failure EINVAL in pid:202 [ 758.303056][T32358] binder: Unknown parameter 'ýÏþ­¤/d’B§(C'ÿÿcè"L Oý|ÉöCÍ' [ 758.316567][T32356] KVM: debugfs: duplicate directory 32356-6 [ 759.185713][T32414] input: syz1 as /devices/virtual/input/input644 [ 759.237382][T32414] rust_binder: Error while translating object. [ 759.237412][T32414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 759.260103][T32414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 759.376065][T32420] SELinux: security_context_str_to_sid (Ù“ƒ[4HAožÀ‚^!2±™7’ŸÏ.êŠ9kÂÙ¬Ú!™wãë½OÀÔ”¦0´Œ•$¸°ÇÎG·›™‰¼E¨ðÝkÛ(u# ä sè0]õH‡¡­ªùÞ7é¸3Š$2ÙûR“Û3¢°&(1‘‹LsAcó€$í 6Hn•ªËL:÷ä~{AÞÈYe‘üB°†bŽ¸ÕÕdÔ’UZ]êÕch×Ôí8¬šï#ëÒòý¥Y¯±(1?zÔ9“=ø¾ÛÆλ) failed with errno=-22 [ 759.874831][T32443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 760.163669][T17670] Bluetooth: hci0: Frame reassembly failed (-90) [ 760.194017][T32452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 760.581752][T32466] rust_binder: Error in use_page_slow: ESRCH [ 760.581778][T32466] rust_binder: use_range failure ESRCH [ 760.587786][T32466] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 760.605832][T32468] rust_binder: Error in use_page_slow: ESRCH [ 760.621450][T32466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 760.638539][T32464] rust_binder: Write failure EINVAL in pid:1103 [ 760.661459][T32468] rust_binder: use_range failure ESRCH [ 760.667787][T32468] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 760.677874][T32466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1103 [ 760.700804][T32468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 760.721745][T32468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1103 [ 760.928513][T32475] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 761.245497][T32486] rust_binder: Read failure Err(EAGAIN) in pid:55 [ 761.674180][T32506] binder: Unknown parameter 'nXI' [ 761.731660][ T36] kauditd_printk_skb: 2677 callbacks suppressed [ 761.731680][ T36] audit: type=1400 audit(1750310404.340:170806): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.741738][T32510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 761.782451][T32509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 761.788937][T32509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1125 [ 761.791458][ T36] audit: type=1400 audit(1750310404.340:170807): avc: denied { read } for pid=32508 comm="syz.1.10176" name="binder1" dev="binder" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 761.832247][ T36] audit: type=1400 audit(1750310404.340:170808): avc: denied { read open } for pid=32508 comm="syz.1.10176" path="/dev/binderfs/binder1" dev="binder" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 761.854620][T30801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.863832][T30801] audit: audit_lost=1554 audit_rate_limit=0 audit_backlog_limit=64 [ 761.867153][T32213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.873517][T30801] audit: backlog limit exceeded [ 761.879807][ T36] audit: type=1400 audit(1750310404.340:170809): avc: denied { ioctl } for pid=32508 comm="syz.1.10176" path="/dev/binderfs/binder1" dev="binder" ino=131 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 761.886212][T30801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 761.909933][T32213] audit: audit_lost=1555 audit_rate_limit=0 audit_backlog_limit=64 [ 762.186663][T32521] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 762.186690][T32521] rust_binder: Error while translating object. [ 762.211535][T32521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 762.221497][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 762.228978][T32521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:72 [ 762.230984][ T790] Bluetooth: hci0: command 0x1003 tx timeout [ 762.372448][T32527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:241 [ 762.526132][T32535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 762.536043][T32535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1137 [ 762.564293][T32537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 762.877256][T32542] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 763.261508][T32555] input: syz0 as /devices/virtual/input/input646 [ 763.339023][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.340066][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.379780][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.416065][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.436139][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.444154][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.451231][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.459717][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.467952][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.488346][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.495911][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.503662][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.513714][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.524564][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.541813][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.560352][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.582068][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.603849][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.620808][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.634697][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.648626][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.656222][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.666357][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.676677][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.685043][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.692633][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.699473][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.707520][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.714813][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.722621][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.747484][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 763.768163][T32560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 764.049419][T32586] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 764.161693][T32592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 764.161730][T32592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1153 [ 764.217018][T32591] input: syz0 as /devices/virtual/input/input648 [ 764.283904][T32596] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 764.346592][T32599] binder: Bad value for 'stats' [ 764.355016][ T10] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz1 [ 764.632592][T32606] fido_id[32606]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 765.065209][T32636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 765.293637][T32645] SELinux: failed to load policy [ 765.624435][T32655] input: syz1 as /devices/virtual/input/input649 [ 766.045249][T32668] SELinux: security_context_str_to_sid () failed with errno=-22 [ 766.184190][T17670] Bluetooth: hci0: Frame reassembly failed (-84) [ 766.243908][T32675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1186 [ 766.282008][T32675] binder: Bad value for 'stats' [ 766.608285][T32677] input: syz1 as /devices/virtual/input/input650 [ 766.698519][T32681] rust_binder: Error while translating object. [ 766.698563][T32681] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 766.721360][T32681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:284 [ 766.741836][ T36] kauditd_printk_skb: 3430 callbacks suppressed [ 766.741857][ T36] audit: type=1400 audit(1750310409.350:174186): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.787117][T32683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1190 [ 766.806253][ T36] audit: type=1400 audit(1750310409.350:174187): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.821547][T30801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.848966][T32686] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.852373][T32687] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.855605][T32686] audit: audit_lost=1574 audit_rate_limit=0 audit_backlog_limit=64 [ 766.863548][T30801] audit: audit_lost=1575 audit_rate_limit=0 audit_backlog_limit=64 [ 766.870113][ T36] audit: type=1400 audit(1750310409.350:174188): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 766.880269][T32688] audit: audit_backlog=65 > audit_backlog_limit=64 [ 766.902487][T32686] audit: backlog limit exceeded [ 767.011723][T32687] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 767.011741][T32687] rust_binder: Read failure Err(EFAULT) in pid:1192 [ 767.011902][T32688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 767.055937][T32688] rust_binder: Read failure Err(EFAULT) in pid:1192 [ 767.908122][T32713] binder: Bad value for 'defcontext' [ 768.221460][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 768.227542][ T790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 768.304205][T32719] random: crng reseeded on system resumption [ 768.438450][T32719] input: syz0 as /devices/virtual/input/input652 [ 769.642526][ T300] can0: slcan on ptm0. [ 769.752213][ T305] input: syz1 as /devices/virtual/input/input655 [ 769.781461][T32765] can0 (unregistered): slcan off ptm0. [ 769.818391][ T305] SELinux: security_context_str_to_sid () failed with errno=-22 [ 769.974800][ T313] binder: Unknown parameter 'sevlabel' [ 770.040990][ T316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:336 [ 770.963475][ T351] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.046553][ T351] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 771.752884][ T36] kauditd_printk_skb: 3660 callbacks suppressed [ 771.752905][ T36] audit: type=1400 audit(1750310414.360:177790): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 771.856344][ T36] audit: type=1400 audit(1750310414.360:177791): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 771.859516][T30801] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.896332][ T36] audit: type=1400 audit(1750310414.360:177792): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 771.897548][ T386] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.922868][ T36] audit: type=1400 audit(1750310414.360:177793): avc: denied { setattr } for pid=30801 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 771.932032][T32213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.956560][T30801] audit: audit_lost=1596 audit_rate_limit=0 audit_backlog_limit=64 [ 771.956620][T31385] audit: audit_backlog=65 > audit_backlog_limit=64 [ 771.964651][ T386] audit: audit_lost=1597 audit_rate_limit=0 audit_backlog_limit=64 [ 772.003371][ T390] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.012661][ T390] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 772.077672][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 772.163045][ T399] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.306813][ T408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1219 [ 772.722314][ T304] bridge_slave_1: left allmulticast mode [ 772.741453][ T304] bridge_slave_1: left promiscuous mode [ 772.747239][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.755186][ T304] bridge_slave_0: left allmulticast mode [ 772.760915][ T304] bridge_slave_0: left promiscuous mode [ 772.767324][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.927574][ T527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 772.985689][ T304] veth1_macvtap: left promiscuous mode [ 772.991357][ T304] veth0_vlan: left promiscuous mode [ 773.075689][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.091513][ T521] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.106542][ T521] bridge_slave_0: entered allmulticast mode [ 773.121771][ T521] bridge_slave_0: entered promiscuous mode [ 773.130107][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.138515][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.146515][ T521] bridge_slave_1: entered allmulticast mode [ 773.164162][ T521] bridge_slave_1: entered promiscuous mode [ 773.332401][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.339574][ T521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.346896][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.353962][ T521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.438900][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.453849][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.481255][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.488450][T17670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.511819][T17670] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.518889][T17670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.662082][ T521] veth0_vlan: entered promiscuous mode [ 773.720013][ T521] veth1_macvtap: entered promiscuous mode [ 773.842418][ T552] binder: Unknown parameter '€' [ 773.900478][ T554] rust_binder: Write failure EINVAL in pid:398 [ 773.945316][ T559] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 773.974532][ T559] SELinux: unknown common r [ 774.000255][ T559] SELinux: failed to load policy [ 774.141500][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 774.147721][ T790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 774.542311][T17670] bridge_slave_1: left allmulticast mode [ 774.548013][T17670] bridge_slave_1: left promiscuous mode [ 774.558180][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.565834][T17670] bridge_slave_0: left allmulticast mode [ 774.572986][T17670] bridge_slave_0: left promiscuous mode [ 774.578587][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.712522][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.722164][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.729446][ T575] bridge_slave_0: entered allmulticast mode [ 774.737579][ T575] bridge_slave_0: entered promiscuous mode [ 774.745243][T17670] veth1_macvtap: left promiscuous mode [ 774.754292][T17670] veth0_vlan: left promiscuous mode [ 774.797638][ T589] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 774.891895][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.898962][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.914337][ T575] bridge_slave_1: entered allmulticast mode [ 774.920524][ T575] bridge_slave_1: entered promiscuous mode [ 775.143318][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.150519][ T587] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.158998][ T587] bridge_slave_0: entered allmulticast mode [ 775.175307][ T587] bridge_slave_0: entered promiscuous mode [ 775.183077][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.190864][ T587] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.198138][ T587] bridge_slave_1: entered allmulticast mode [ 775.204613][ T587] bridge_slave_1: entered promiscuous mode [ 775.260331][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.267441][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.274767][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.281831][ T575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.515502][ T620] SELinux: security_context_str_to_sid (syrte¾d) failed with errno=-22 [ 775.569429][ T622] random: crng reseeded on system resumption [ 775.603577][T17670] bridge_slave_1: left allmulticast mode [ 775.609327][T17670] bridge_slave_1: left promiscuous mode [ 775.621660][T17670] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.639537][T17670] bridge_slave_0: left allmulticast mode [ 775.645245][T17670] bridge_slave_0: left promiscuous mode [ 775.650929][T17670] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.756898][ T1757] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.764325][ T1757] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.916310][T17670] veth1_macvtap: left promiscuous mode [ 775.921918][T17670] veth0_vlan: left promiscuous mode [ 775.980801][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.987885][ T1757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.002085][ T1757] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.009170][ T1757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.082388][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.089458][ T1757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.133122][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.140213][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.229679][ T575] veth0_vlan: entered promiscuous mode [ 776.330246][ T575] veth1_macvtap: entered promiscuous mode [ 776.366891][ T587] veth0_vlan: entered promiscuous mode [ 776.466697][ T587] veth1_macvtap: entered promiscuous mode [ 776.581764][ T657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 776.671663][ T657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 776.773393][ T36] kauditd_printk_skb: 2720 callbacks suppressed [ 776.773411][ T36] audit: type=1400 audit(1750310419.380:180385): avc: denied { read } for pid=668 comm="syz.1.10336" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.887362][ T36] audit: type=1400 audit(1750310419.390:180386): avc: denied { read } for pid=671 comm="syz.5.10338" name="binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.950705][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 776.953473][ T36] audit: type=1400 audit(1750310419.390:180387): avc: denied { read open } for pid=671 comm="syz.5.10338" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 776.982722][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 776.984372][ T36] audit: type=1400 audit(1750310419.390:180388): avc: denied { ioctl } for pid=671 comm="syz.5.10338" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.012508][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.042955][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.054974][ T36] audit: type=1400 audit(1750310419.390:180389): avc: denied { set_context_mgr } for pid=671 comm="syz.5.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 777.058634][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.075067][ T36] audit: type=1400 audit(1750310419.390:180390): avc: denied { map } for pid=671 comm="syz.5.10338" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.085149][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.112338][ T687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 777.115982][ T36] audit: type=1400 audit(1750310419.390:180391): avc: denied { read } for pid=671 comm="syz.5.10338" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.120857][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.149291][ T36] audit: type=1400 audit(1750310419.390:180392): avc: denied { execmem } for pid=671 comm="syz.5.10338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 777.192660][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.196467][ T36] audit: type=1400 audit(1750310419.420:180393): avc: denied { ioctl } for pid=671 comm="syz.5.10338" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.222146][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.253218][ T36] audit: type=1400 audit(1750310419.420:180394): avc: denied { read open } for pid=668 comm="syz.1.10336" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 777.259505][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.287878][ T692] binder: Unknown parameter 'ع\¯ØÌ' [ 777.293180][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.306224][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.316437][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.325898][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.338648][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.382655][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.391519][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.400780][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.419042][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.452610][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.466203][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.475232][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.498307][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.512739][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.522397][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.530987][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.553525][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.562992][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.581757][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.594089][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.603267][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.626374][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.652420][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.672529][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.682284][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.697598][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.711483][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.723509][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.745102][ T683] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 777.969931][ T719] input: syz1 as /devices/virtual/input/input663 [ 778.285408][ T1757] Bluetooth: hci0: Frame reassembly failed (-84) [ 778.312822][ T731] rust_binder: Got transaction with invalid offset. [ 778.312868][ T731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 778.319517][ T731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 778.347057][ T739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 778.576052][ T748] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 780.301487][ T790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 780.301684][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 781.914846][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 781.914863][ T36] audit: type=1400 audit(1750310424.520:180875): avc: denied { read } for pid=763 comm="syz.1.10369" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 781.951374][ T766] SELinux: security_context_str_to_sid () failed with errno=-22 [ 781.964103][ T36] audit: type=1400 audit(1750310424.520:180876): avc: denied { read open } for pid=763 comm="syz.1.10369" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 782.017767][T32213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 782.017962][ T770] audit: audit_backlog=65 > audit_backlog_limit=64 [ 782.035000][T32213] audit: audit_lost=1641 audit_rate_limit=0 audit_backlog_limit=64 [ 782.036213][ T772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 782.042977][ T36] audit: type=1400 audit(1750310424.550:180877): avc: denied { ioctl } for pid=763 comm="syz.1.10369" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 782.067122][ T772] audit: audit_lost=1642 audit_rate_limit=0 audit_backlog_limit=64 [ 782.075817][T32213] audit: backlog limit exceeded [ 782.083994][ T770] audit: audit_lost=1643 audit_rate_limit=0 audit_backlog_limit=64 [ 782.109146][ T777] binder: Unknown parameter 'stat' [ 782.134102][ T777] binder: Bad value for 'max' [ 782.284487][ T784] rust_binder: Error while translating object. [ 782.284516][ T784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 782.290728][ T784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:91 [ 782.388520][ T794] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 782.472598][ T796] SELinux: policydb string length 14080 does not match expected length 8 [ 782.517191][ T796] SELinux: failed to load policy [ 782.928169][ T823] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 782.974310][ T824] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 783.342271][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.370692][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.391464][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.407508][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.421695][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.435336][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.451488][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.459434][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.468276][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.476841][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.484692][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.495894][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.509503][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.524043][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.539372][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.557604][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.558378][ T849] rust_binder: Write failure EFAULT in pid:51 [ 783.572206][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.604189][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.612102][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.620006][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.647268][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.655626][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.663542][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.671597][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.679510][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.687405][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.707028][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.714921][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.724524][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.740392][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.748250][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.757516][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.779565][ T856] input: syz0 as /devices/virtual/input/input665 [ 783.786765][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.796482][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.804839][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.812681][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.820439][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.834744][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.837455][ T858] binder: Bad value for 'stats' [ 783.843357][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.856331][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.886793][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.901495][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.909554][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.927560][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.946482][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.961665][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.978246][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 783.986136][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.001505][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.009316][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.029871][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.051489][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.061757][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.079824][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.090999][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.108473][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.116325][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.135952][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.151480][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.161441][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.169206][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.177072][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.201481][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.209274][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.231454][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x3 [ 784.239260][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.267156][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.267865][ T877] SELinux: security_context_str_to_sid () failed with errno=-22 [ 784.277104][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.297961][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.305822][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.313755][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.322537][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.330437][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.339162][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.346931][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.354756][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.363369][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.371352][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.379262][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.387161][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.397701][ T885] SELinux: policydb magic number 0x65636172 does not match expected magic number 0xf97cff8c [ 784.400311][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.417043][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.421495][ T885] SELinux: failed to load policy [ 784.424860][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.441609][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.450112][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.457915][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.466007][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.495000][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.502849][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.512108][ T891] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 784.521553][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.532356][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.540324][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.549085][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.557963][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.566196][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.574806][ T890] input: syz1 as /devices/virtual/input/input666 [ 784.581471][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.589390][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.597216][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.605698][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.614195][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.622002][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.629800][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.637666][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.645587][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.664535][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.672496][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.680263][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.688266][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.696049][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.704170][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.711957][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.719682][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.727540][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.735567][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.744807][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.752578][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.760316][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.768126][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.775947][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.783770][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.791632][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.802847][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.810608][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.818428][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.826273][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.834985][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.846076][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.854540][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.863923][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.871947][ T899] binder: Unknown parameter '' [ 784.872784][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.887385][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.909224][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.917662][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.925544][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.933373][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.941220][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.949311][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.957119][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.964994][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.972785][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.980542][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 784.996991][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.004781][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.012631][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.020386][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.028208][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.036052][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.043819][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.051581][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.059295][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.067082][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.074864][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.082615][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.090356][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.098150][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.106237][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.114034][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.121775][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.129486][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.137228][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.145229][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.152958][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.160682][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.168427][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.176302][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: unknown main item tag 0x0 [ 785.185455][ T7758] hid-generic 0008:0000:FFFFFBFF.0038: hidraw0: HID v9.86 Device [syz0] on syz1 [ 785.314531][ T908] rust_binder: Error in use_page_slow: ESRCH [ 785.314558][ T908] rust_binder: use_range failure ESRCH [ 785.327126][ T908] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 785.342385][ T908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 785.362028][ T908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 785.539400][ T924] rust_binder: Error while translating object. [ 785.563259][ T7758] hid-generic C98F:0003:0000.0039: unknown main item tag 0x0 [ 785.596582][ T924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 785.596618][ T924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:85 [ 785.616166][ T7758] hid-generic C98F:0003:0000.0039: unknown main item tag 0x0 [ 785.706216][ T7758] hid-generic C98F:0003:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz1 [ 785.740517][ T935] binder: Unknown parameter 'dont_hash' [ 785.759957][ T927] fido_id[927]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 786.017397][ T936] fido_id[936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 786.231243][ T954] random: crng reseeded on system resumption [ 786.679018][ T977] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 786.920988][ T989] random: crng reseeded on system resumption [ 786.937405][ T36] kauditd_printk_skb: 750 callbacks suppressed [ 786.937423][ T36] audit: type=1400 audit(1750310429.540:181623): avc: denied { read write } for pid=32213 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 786.989599][ T36] audit: type=1400 audit(1750310429.540:181624): avc: denied { read } for pid=990 comm="syz.5.10441" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 787.019174][ T36] audit: type=1400 audit(1750310429.540:181625): avc: denied { read open } for pid=990 comm="syz.5.10441" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 787.098032][ T36] audit: type=1400 audit(1750310429.570:181626): avc: denied { ioctl } for pid=988 comm="syz.6.10439" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 787.166915][ T36] audit: type=1400 audit(1750310429.580:181627): avc: denied { read write open } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.231440][ T36] audit: type=1400 audit(1750310429.580:181628): avc: denied { ioctl } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.316967][ T36] audit: type=1400 audit(1750310429.610:181629): avc: denied { ioctl } for pid=988 comm="syz.6.10439" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 787.364348][ T36] audit: type=1400 audit(1750310429.610:181630): avc: denied { read } for pid=988 comm="syz.6.10439" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 787.431449][ T36] audit: type=1400 audit(1750310429.610:181631): avc: denied { read open } for pid=988 comm="syz.6.10439" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 787.464571][ T1019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 787.695181][ T1038] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 787.831994][ T1040] rust_binder: Error while translating object. [ 787.832039][ T1040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 787.871785][ T1040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:296 [ 788.744681][ T1109] SELinux: security_context_str_to_sid () failed with errno=-22 [ 788.785381][ T1109] SELinux: security_context_str_to_sid () failed with errno=-22 [ 788.810813][ T1108] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 788.893311][ T1113] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 789.820960][ T1150] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 789.925745][ T1154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 789.967463][ T1155] binder: Unknown parameter 'conte' [ 790.011140][ T1154] binder: Unknown parameter 'conte' [ 790.449222][ T1183] input: syz0 as /devices/virtual/input/input671 [ 790.532134][ T1183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 791.174406][ T1215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 791.259632][ T1224] binder: Unknown parameter 'ÿ' [ 791.398180][ T1225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 791.615458][ T1245] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 791.642789][ T1245] input: syz0 as /devices/virtual/input/input673 [ 791.971448][ T36] kauditd_printk_skb: 1010 callbacks suppressed [ 791.971467][ T36] audit: type=1400 audit(1750310434.560:182550): avc: denied { read } for pid=1260 comm="syz.6.10524" name="binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 792.002357][ T36] audit: type=1400 audit(1750310434.560:182551): avc: denied { read open } for pid=1260 comm="syz.6.10524" path="/dev/binderfs/binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 792.031574][ T36] audit: type=1400 audit(1750310434.560:182552): avc: denied { map } for pid=1260 comm="syz.6.10524" path="/dev/binderfs/binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 792.069866][ T1270] binder: Unknown parameter '' [ 792.091375][ T36] audit: type=1400 audit(1750310434.560:182553): avc: denied { read } for pid=1260 comm="syz.6.10524" path="/dev/binderfs/binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 792.116959][ T36] audit: type=1400 audit(1750310434.560:182554): avc: denied { ioctl } for pid=1260 comm="syz.6.10524" path="/dev/binderfs/binder1" dev="binder" ino=177 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 792.145784][ T36] audit: type=1400 audit(1750310434.570:182555): avc: denied { read write } for pid=575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.180284][ T36] audit: type=1400 audit(1750310434.570:182556): avc: denied { read write open } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.226233][ T1275] binder: Unknown parameter 'dont_hash' [ 792.291667][ T36] audit: type=1400 audit(1750310434.570:182557): avc: denied { ioctl } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.340459][ T1282] binder: Unknown parameter '' [ 792.378331][ T36] audit: type=1400 audit(1750310434.590:182558): avc: denied { read append } for pid=1265 comm="syz.1.10525" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 792.446911][ T1289] audit: audit_backlog=65 > audit_backlog_limit=64 [ 792.462427][ T1290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 792.487183][ T1288] SELinux: policydb version 1046 does not match my version range 15-33 [ 792.511481][ T1288] SELinux: failed to load policy [ 792.530279][ T1295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 792.795612][ T1306] rust_binder: Failed to allocate buffer. len:16, is_oneway:true [ 792.892304][ T1316] rust_binder: Error while translating object. [ 792.908373][ T1316] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 792.914944][ T1316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:175 [ 792.928452][ T1317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:368 [ 792.963567][ T1316] rust_binder: Write failure EINVAL in pid:175 [ 793.017123][ T1319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:370 [ 793.222826][ T1328] SELinux: failed to load policy [ 793.325068][ T1332] binder: Bad value for 'stats' [ 793.478779][ T1345] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 793.524336][ T1349] random: crng reseeded on system resumption [ 793.553806][ T1349] Restarting kernel threads ... done. [ 793.594204][ T1349] Restarting kernel threads ... done. [ 793.771343][ T1357] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 793.849319][ T1363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 793.849340][ T1363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 794.047288][ T1369] input: syz0 as /devices/virtual/input/input674 [ 794.155485][ T1372] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 794.224328][ T1372] binder: Bad value for 'defcontext' [ 794.303054][ T1383] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 794.439403][ T1394] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 794.619399][ T1402] input: syz1 as /devices/virtual/input/input676 [ 794.637063][ T1403] SELinux: security_context_str_to_sid (€) failed with errno=-22 [ 794.761987][ T1410] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 795.142669][ T1431] binder: Unknown parameter '/dev/snd/timer' [ 795.253259][ T1438] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 795.282957][ T1438] binder: Unknown parameter 'se™label' [ 795.950988][ T1477] input: syz1 as /devices/virtual/input/input677 [ 796.669309][ T1514] rust_binder: Write failure EINVAL in pid:430 [ 796.885481][ T1524] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 796.885521][ T1524] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 796.984056][ T36] kauditd_printk_skb: 1278 callbacks suppressed [ 796.984075][ T36] audit: type=1400 audit(1750310439.590:183835): avc: denied { read } for pid=1530 comm="syz.6.10613" name="binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.090272][ T36] audit: type=1400 audit(1750310439.590:183836): avc: denied { read open } for pid=1530 comm="syz.6.10613" path="/dev/binderfs/binder1" dev="binder" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.121577][ T36] audit: type=1400 audit(1750310439.590:183837): avc: denied { ioctl } for pid=1530 comm="syz.6.10613" path="/dev/binderfs/binder1" dev="binder" ino=177 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.148228][ T36] audit: type=1400 audit(1750310439.600:183838): avc: denied { read } for pid=1531 comm="syz.8.10614" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 797.174925][ T36] audit: type=1400 audit(1750310439.600:183839): avc: denied { read open } for pid=1531 comm="syz.8.10614" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 797.200973][ T36] audit: type=1400 audit(1750310439.600:183840): avc: denied { ioctl } for pid=1531 comm="syz.8.10614" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 797.229545][ T36] audit: type=1400 audit(1750310439.620:183841): avc: denied { read write } for pid=575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.253946][ T36] audit: type=1400 audit(1750310439.620:183842): avc: denied { read write open } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.279591][ T36] audit: type=1400 audit(1750310439.630:183843): avc: denied { ioctl } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.306230][ T36] audit: type=1400 audit(1750310439.660:183844): avc: denied { read write } for pid=1531 comm="syz.8.10614" name="binder1" dev="binder" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 797.396450][ T1757] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 797.405192][ T1757] Bluetooth: hci0: Frame reassembly failed (-84) [ 797.431773][ T1544] rust_binder: Write failure EFAULT in pid:254 [ 797.433256][ T1544] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 797.489665][ T1548] SELinux: security_context_str_to_sid () failed with errno=-22 [ 797.628787][ T1556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 797.709873][ T1565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:231 [ 797.871132][ T1572] kvm: kvm [1571]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000001 [ 798.364063][ T1596] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 798.375769][ T1597] rust_binder: Error while translating object. [ 798.378280][ T1597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 798.391467][ T1597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:244 [ 798.443397][ T1599] binder: Unknown parameter 'conteXt' [ 798.625257][ T1609] kvm: user requested TSC rate below hardware speed [ 799.421487][ T790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 799.421658][ T52] Bluetooth: hci0: command 0x1003 tx timeout [ 799.554691][ T1630] binder: Unknown parameter 'dont_hash' [ 799.563331][ T1627] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 799.564922][ T1630] binder: Unknown parameter 'dont_hash' [ 799.722807][ T1634] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 799.738960][ T1637] rust_binder: Error while translating object. [ 799.738990][ T1637] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 799.752837][ T1637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:480 [ 799.771879][ T1633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 799.840227][ T1645] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 799.989504][ T1654] input: syz0 as /devices/virtual/input/input681 [ 800.053320][ T1654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 800.127291][ T1656] binder: Bad value for 'max' [ 800.483278][ T1684] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 800.539619][ T1687] SELinux: security_context_str_to_sid () failed with errno=-22 [ 800.695374][ T1693] binder: Bad value for 'stats' [ 800.730500][ T1695] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 800.880157][ T1705] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 800.963433][ T1708] input: syz1 as /devices/virtual/input/input682 [ 801.089604][ T1715] input: syz0 as /devices/virtual/input/input683 [ 801.458221][ T1721] input: syz0 as /devices/virtual/input/input684 [ 801.548617][ T1732] SELinux: security_context_str_to_sid () failed with errno=-22 [ 801.713274][ T1738] input: syz1 as /devices/virtual/input/input686 [ 801.860799][ T1744] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 801.914995][ T1747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:502 [ 801.941513][ T1747] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 801.950642][ T1747] rust_binder: Read failure Err(EFAULT) in pid:502 [ 801.999210][ T36] kauditd_printk_skb: 1296 callbacks suppressed [ 801.999226][ T36] audit: type=1400 audit(1750310444.600:185141): avc: denied { read write } for pid=32213 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.093654][ T36] audit: type=1400 audit(1750310444.650:185142): avc: denied { read write open } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.154747][ T36] audit: type=1400 audit(1750310444.650:185143): avc: denied { ioctl } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.201334][ T36] audit: type=1400 audit(1750310444.680:185144): avc: denied { read } for pid=1754 comm="syz.8.10683" name="binder1" dev="binder" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 802.224069][ T1753] SELinux: failed to load policy [ 802.232775][ T1753] rust_binder: Error in use_page_slow: ESRCH [ 802.232797][ T1753] rust_binder: use_range failure ESRCH [ 802.238816][ T1753] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 802.254654][ T36] audit: type=1400 audit(1750310444.680:185145): avc: denied { read open } for pid=1754 comm="syz.8.10683" path="/dev/binderfs/binder1" dev="binder" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 802.259870][ T1753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 802.265812][ T36] audit: type=1400 audit(1750310444.680:185146): avc: denied { ioctl } for pid=1754 comm="syz.8.10683" path="/dev/binderfs/binder1" dev="binder" ino=359 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 802.315786][ T1753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:275 [ 802.325561][ T36] audit: type=1400 audit(1750310444.690:185147): avc: denied { relabelfrom } for pid=1752 comm="syz.6.10682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 802.356205][ T36] audit: type=1400 audit(1750310444.690:185148): avc: denied { relabelto } for pid=1752 comm="syz.6.10682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 802.377290][ T36] audit: type=1400 audit(1750310444.690:185149): avc: denied { read } for pid=1752 comm="syz.6.10682" name="binder0" dev="binder" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 802.434455][ T36] audit: type=1400 audit(1750310444.690:185150): avc: denied { read open } for pid=1752 comm="syz.6.10682" path="/dev/binderfs/binder0" dev="binder" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 803.023961][ T1794] binder: Unknown parameter 'noninderfs/binder0' [ 803.410916][ T1805] SELinux: policydb version -845211227 does not match my version range 15-33 [ 803.420786][ T1805] SELinux: failed to load policy [ 803.555157][ T1811] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 803.877071][ T1832] rust_binder: Write failure EFAULT in pid:535 [ 804.247685][ T1852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 804.397855][ T1867] input: syz0 as /devices/virtual/input/input688 [ 804.444683][ T1872] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 804.653141][ T1882] binder: Bad value for 'stats' [ 804.731198][ T1884] rust_binder: Write failure EINVAL in pid:304 [ 804.803380][ T1893] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 804.975951][ T1899] binder: Unknown parameter 'BòcÃhú·pY-‰qÀÒæ^ tÙ²Þj?ûg³Ñæ’Î' [ 805.120022][ T1910] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 805.120093][ T1909] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 805.178392][ T1916] binder: Unknown parameter ':«Ÿ£·ë©V' [ 805.351814][ T1922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555 [ 805.457309][ T1926] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer. [ 805.506201][ T1926] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 805.881801][ T1954] SELinux: security_context_str_to_sid () failed with errno=-22 [ 805.958380][ T1952] binder: Unknown parameter 'v);2„¨„' [ 806.116980][ T1977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360 [ 806.210948][ T1980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 806.248362][ T1983] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 806.422790][ T1995] binder: Bad value for 'stats' [ 806.427460][ T1998] binder: Bad value for 'stats' [ 806.485326][ T1997] SELinux: failed to load policy [ 806.790071][ T2012] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 806.792678][ T2013] rust_binder: Write failure EINVAL in pid:338 [ 806.811881][ T2013] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 806.845944][ T2013] rust_binder: Write failure EINVAL in pid:338 [ 806.988423][ T2018] rust_binder: Write failure EINVAL in pid:577 [ 807.002934][ T36] kauditd_printk_skb: 1120 callbacks suppressed [ 807.002955][ T36] audit: type=1400 audit(1750310449.610:186271): avc: denied { ioctl } for pid=2001 comm="syz.6.10763" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.095658][ T36] audit: type=1400 audit(1750310449.610:186272): avc: denied { read } for pid=2019 comm="syz.5.10769" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.120539][ T36] audit: type=1400 audit(1750310449.610:186273): avc: denied { read open } for pid=2019 comm="syz.5.10769" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.147192][ T36] audit: type=1400 audit(1750310449.620:186274): avc: denied { execmem } for pid=2019 comm="syz.5.10769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 807.172685][ T36] audit: type=1400 audit(1750310449.650:186275): avc: denied { ioctl } for pid=2001 comm="syz.6.10763" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.208434][ T36] audit: type=1400 audit(1750310449.650:186276): avc: denied { ioctl } for pid=2001 comm="syz.6.10763" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.234073][ T36] audit: type=1400 audit(1750310449.670:186277): avc: denied { ioctl } for pid=2001 comm="syz.6.10763" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.259043][ T36] audit: type=1400 audit(1750310449.680:186278): avc: denied { ioctl } for pid=2001 comm="syz.6.10763" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 807.284609][ T36] audit: type=1400 audit(1750310449.710:186279): avc: denied { read write } for pid=2021 comm="syz.1.10770" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 807.308172][ T36] audit: type=1400 audit(1750310449.710:186280): avc: denied { read open } for pid=2021 comm="syz.1.10770" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 807.872864][ T2037] binder: Unknown parameter 'ÿÿÿÿ' [ 807.944245][ T2039] binder: Unknown parameter '' [ 808.029813][ T2041] input: syz0 as /devices/virtual/input/input690 [ 808.087920][ T2046] binder: Unknown parameter 'seclabelæ' [ 808.205907][ T2050] input: syz1 as /devices/virtual/input/input691 [ 808.473949][ T2059] rust_binder: Error while translating object. [ 808.473980][ T2059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 808.480784][ T2059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:358 [ 808.791866][ T2077] binder: Bad value for 'stats' [ 808.951873][ T2078] ptm ptm7: ldisc open failed (-12), clearing slot 7 [ 808.999791][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 809.083609][ T2091] input: syz0 as /devices/virtual/input/input692 [ 809.500719][ T2109] rust_binder: Write failure EINVAL in pid:602 [ 809.522509][ T2118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 809.529725][ T2118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:380 [ 809.595459][ T2120] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 809.630932][ T2121] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 809.751528][ T2125] input: syz1 as /devices/virtual/input/input696 [ 810.010630][ T2147] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 810.048692][ T2147] rust_binder: Write failure EINVAL in pid:611 [ 810.049835][ T2149] input: syz0 as /devices/virtual/input/input697 [ 810.109436][ T2145] kvm: Disabled LAPIC found during irq injection [ 810.147792][ T2154] binder: Bad value for 'stats' [ 810.432586][ T2175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 810.973989][ T2207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:430 [ 811.152316][ T2212] binder: Bad value for 'stats' [ 811.217022][ T2218] input: syz0 as /devices/virtual/input/input698 [ 811.400125][ T2221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:435 [ 812.020928][ T36] kauditd_printk_skb: 944 callbacks suppressed [ 812.020947][ T36] audit: type=1400 audit(1750310454.620:187225): avc: denied { read write } for pid=32213 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.141446][ T36] audit: type=1400 audit(1750310454.680:187226): avc: denied { read write open } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.219689][ T36] audit: type=1400 audit(1750310454.680:187227): avc: denied { ioctl } for pid=32213 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.298372][ T36] audit: type=1400 audit(1750310454.680:187228): avc: denied { read write } for pid=575 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.327174][ T2266] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 812.341461][ T36] audit: type=1400 audit(1750310454.680:187229): avc: denied { read write open } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.391428][ T36] audit: type=1400 audit(1750310454.700:187230): avc: denied { ioctl } for pid=575 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 812.451446][ T36] audit: type=1400 audit(1750310454.700:187231): avc: denied { read write } for pid=2256 comm="syz.1.10846" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 812.522496][ T2271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 812.531455][ T36] audit: type=1400 audit(1750310454.700:187232): avc: denied { read write open } for pid=2256 comm="syz.1.10846" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 812.545964][ T2271] audit: audit_lost=1677 audit_rate_limit=0 audit_backlog_limit=64 [ 812.605790][ T2275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 812.605827][ T2275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:647 [ 812.842917][ T2289] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 812.997078][ T2303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 813.258549][ T2321] input: syz0 as /devices/virtual/input/input699 [ 813.305952][ T2312] SELinux: policydb version -748553516 does not match my version range 15-33 [ 813.318618][ T2321] rust_binder: Error while translating object. [ 813.318664][ T2321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 813.323714][ T2312] SELinux: failed to load policy [ 813.341452][ T2321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:422 [ 813.708366][ T2338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:462 [ 813.996849][ T2351] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 814.072671][ T2357] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5: [ 814.072671][ T2357] attempt to add with overflow [ 814.089736][ T2357] ------------[ cut here ]------------ [ 814.095239][ T2357] kernel BUG at rust/helpers/bug.c:7! [ 814.101070][ T2357] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 814.108129][ T2357] CPU: 1 UID: 0 PID: 2357 Comm: syz.1.10879 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd [ 814.121891][ T2357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 814.131973][ T2357] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 814.137391][ T2357] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b4 6a 38 dc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 fe ae 71 50 90 90 90 90 90 90 90 90 90 [ 814.157002][ T2357] RSP: 0018:ffffc9000566f3f0 EFLAGS: 00010246 [ 814.163059][ T2357] RAX: 000000000000008c RBX: 1ffff92000acde80 RCX: 9dfd64544e5d8700 [ 814.171208][ T2357] RDX: ffffc90008245000 RSI: 00000000000079be RDI: 00000000000079bf [ 814.179282][ T2357] RBP: ffffc9000566f3f0 R08: ffffc9000566f0e7 R09: 1ffff92000acde1c [ 814.187337][ T2357] R10: dffffc0000000000 R11: fffff52000acde1d R12: 0000000000000000 [ 814.195347][ T2357] R13: dffffc0000000000 R14: ffffc9000566f420 R15: ffffc9000566f450 [ 814.203344][ T2357] FS: 00007ff29db736c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 814.212286][ T2357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.218890][ T2357] CR2: 00007ff29db72f98 CR3: 0000000131d8a000 CR4: 00000000003526b0 [ 814.226888][ T2357] DR0: 00000000000000f6 DR1: 0000000000000008 DR2: 000000000000039a [ 814.234886][ T2357] DR3: 0000000000000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.242995][ T2357] Call Trace: [ 814.246279][ T2357] [ 814.249210][ T2357] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 814.256937][ T2357] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 814.264922][ T2357] ? kernel_text_address+0xa9/0xe0 [ 814.270031][ T2357] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 814.283760][ T2357] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 814.289956][ T2357] ? arch_stack_walk+0x10b/0x170 [ 814.294937][ T2357] _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90 [ 814.302254][ T2357] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10 [ 814.310801][ T2357] _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0 [ 814.320914][ T2357] ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10 [ 814.331636][ T2357] _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0 [ 814.343902][ T2357] ? mas_wr_store_type+0x8eb/0x1ad0 [ 814.349119][ T2357] ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10 [ 814.361951][ T2357] ? mas_preallocate+0x56e/0xc60 [ 814.366919][ T2357] ? __cfi_mas_preallocate+0x10/0x10 [ 814.372226][ T2357] ? kasan_save_alloc_info+0x40/0x50 [ 814.377523][ T2357] ? __asan_memset+0x39/0x50 [ 814.382130][ T2357] mmap_region+0x1371/0x1bd0 [ 814.386727][ T2357] ? __cfi_mmap_region+0x10/0x10 [ 814.391670][ T2357] ? __kasan_check_read+0x15/0x20 [ 814.396707][ T2357] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 814.402971][ T2357] ? file_mmap_ok+0x147/0x1a0 [ 814.407679][ T2357] do_mmap+0xb6d/0x13c0 [ 814.411857][ T2357] ? __cfi_do_mmap+0x10/0x10 [ 814.416470][ T2357] ? down_write_killable+0xe9/0x2d0 [ 814.421678][ T2357] ? __cfi_down_write_killable+0x10/0x10 [ 814.427322][ T2357] vm_mmap_pgoff+0x38f/0x4e0 [ 814.431919][ T2357] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 814.437065][ T2357] ? __fget_files+0x2c5/0x340 [ 814.441748][ T2357] ksys_mmap_pgoff+0x166/0x1e0 [ 814.446522][ T2357] __x64_sys_mmap+0x121/0x140 [ 814.451245][ T2357] x64_sys_call+0x13bf/0x2ee0 [ 814.455944][ T2357] do_syscall_64+0x58/0xf0 [ 814.460365][ T2357] ? clear_bhb_loop+0x35/0x90 [ 814.465052][ T2357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 814.470947][ T2357] RIP: 0033:0x7ff29cd8e929 [ 814.475453][ T2357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.495247][ T2357] RSP: 002b:00007ff29db73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 814.503666][ T2357] RAX: ffffffffffffffda RBX: 00007ff29cfb5fa0 RCX: 00007ff29cd8e929 [ 814.511649][ T2357] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 814.519703][ T2357] RBP: 00007ff29ce10b39 R08: 0000000000000003 R09: 000000004b003000 [ 814.527757][ T2357] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 814.535728][ T2357] R13: 0000000000000000 R14: 00007ff29cfb5fa0 R15: 00007ffd93fc1238 [ 814.543704][ T2357] [ 814.546718][ T2357] Modules linked in: [ 814.551195][ T2357] ---[ end trace 0000000000000000 ]--- [ 814.558321][ T2359] binder: Bad value for 'max' [ 814.563066][ T2357] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 814.568444][ T2357] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 b4 6a 38 dc 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 fe ae 71 50 90 90 90 90 90 90 90 90 90 [ 814.596864][ T2357] RSP: 0018:ffffc9000566f3f0 EFLAGS: 00010246 [ 814.608726][ T2357] RAX: 000000000000008c RBX: 1ffff92000acde80 RCX: 9dfd64544e5d8700 [ 814.622677][ T2357] RDX: ffffc90008245000 RSI: 00000000000079be RDI: 00000000000079bf [ 814.640867][ T2357] RBP: ffffc9000566f3f0 R08: ffffc9000566f0e7 R09: 1ffff92000acde1c [ 814.648979][ T2357] R10: dffffc0000000000 R11: fffff52000acde1d R12: 0000000000000000 [ 814.660936][ T2357] R13: dffffc0000000000 R14: ffffc9000566f420 R15: ffffc9000566f450 [ 814.679236][ T2357] FS: 00007ff29db736c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 814.690455][ T2357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 814.697111][ T2357] CR2: 00007ffd7c6baf98 CR3: 0000000131d8a000 CR4: 00000000003526b0 [ 814.705994][ T2357] DR0: 00000000000000f6 DR1: 0000000000000008 DR2: 000000000000039a [ 814.714196][ T2357] DR3: 0000000000000001 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 814.722452][ T2357] Kernel panic - not syncing: Fatal exception [ 814.728782][ T2357] Kernel Offset: disabled [ 814.733117][ T2357] Rebooting in 86400 seconds..