last executing test programs: 5m15.741844226s ago: executing program 0 (id=960): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x800000008086) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x8, 0x1, 0x40}}, &(0x7f0000000280)={0x0, 0x18}}, 0x10}], 0x0, 0x0, 0x0}) 5m15.720958466s ago: executing program 0 (id=961): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x200000c, 0x110, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000140)=""/39, 0x27) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) read(r2, 0x0, 0x0) (async) read(r2, 0x0, 0x0) r3 = syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x0, 0x12, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$FICLONE(r5, 0x40049409, r6) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x166) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, 0x0) (async) ioctl$FS_IOC_SETVERSION(r7, 0x40087602, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7/\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90&\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xdf/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8+\xba\xdc\xb9\xd7\xfb\xd3\x16\xec\xbb\xab\xf7^94S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\x00\x00\x00\x00\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00') r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(r8) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000000100)={r3, 0x1, 0x10001}) (async) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000000100)={r3, 0x1, 0x10001}) 5m15.697557876s ago: executing program 0 (id=963): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x5b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) mmap(&(0x7f00007d4000/0xd000)=nil, 0xd000, 0x2000006, 0x13, 0xffffffffffffffff, 0x25fea000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000000c0)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8ae9b000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0) 5m15.650256447s ago: executing program 0 (id=966): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x202983, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r0, 0x2000) 5m15.647533717s ago: executing program 0 (id=969): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c00d71f1bee21b534c91e25f6ee2a252424d076aa733508ef20815bab0b278cbb"]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 5m15.591958028s ago: executing program 0 (id=970): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000280)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000006c0)=0x4) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{}]}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000280)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x18}) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000200), 0x2, 0x0) 5m0.626250477s ago: executing program 32 (id=970): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000280)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000006c0)=0x4) ioctl$KVM_GET_MSRS(r7, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{}]}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r3, 0x4018aee1, &(0x7f0000000280)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x18}) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0010004, 0x0, 0x3}]}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000000200), 0x2, 0x0) 4m5.460055231s ago: executing program 1 (id=2254): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xe3ac2000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m5.258565875s ago: executing program 1 (id=2259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000702000/0x1000)=nil, 0x1000, 0x1, 0x2010, r1, 0xfffff000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x80001) 4m5.150859196s ago: executing program 1 (id=2261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x62) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) close(0x5) close(0x4) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) 4m4.945629099s ago: executing program 1 (id=2264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 4m4.789501382s ago: executing program 1 (id=2268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_subtree(r1, &(0x7f0000000300), 0x0) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x4, 0x3a, '\x00', 0x3a, 'cgroup.freeze\x00', 0x3a, './file0', 0x3a, [0x4f]}, 0x37) 4m4.520107146s ago: executing program 1 (id=2270): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x167441, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1f) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7, 0x5, 0x2a0000, 0x0, 0x4, "1701e5cd2834331b97cb075e1351ce6ba4cf9d"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 3m49.463306506s ago: executing program 33 (id=2270): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x167441, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1f) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7, 0x5, 0x2a0000, 0x0, 0x4, "1701e5cd2834331b97cb075e1351ce6ba4cf9d"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) 2m31.354390863s ago: executing program 3 (id=3612): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x61) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x0, 0x2, 0x1ffc], 0x80a0000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x2, 0x1, &(0x7f0000000240)=""/192, &(0x7f0000000180)=""/79, &(0x7f00000007c0)=""/194, 0x4000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000cc0)={"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"}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf649e8f29e3418ef, 0x1, 0xec3, 0xeffffdff, 0x0, [{0x1, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0x78, 0x4, 0x0, '\x00', 0x1}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x8, 0xfd, 0x3, '\x00', 0xb}, {0x10, 0x0, 0x4, '\x00', 0xfd}, {0x8, 0x81, 0xbc}, {0x0, 0xc8, 0x4, '\x00', 0xf2}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xff, '\x00', 0x1}, {0xfe, 0x20, 0x0, '\x00', 0x2e}, {0x69, 0x50, 0x0, '\x00', 0x3}, {0x4, 0x5, 0x7, '\x00', 0x3}, {0x1, 0x4e, 0x2}, {0x2, 0x2, 0x4, '\x00', 0xff}, {0x0, 0x0, 0x20, '\x00', 0x3}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xf9}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x7, 0x7, '\x00', 0x40}, {0x1, 0x1e}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x87, 0x2e}]}}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"]) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000600)={0x9, 0x0, [{0xf9, 0x5, 0x0, 0x0, @adapter={0x80000000, 0x7, 0x8, 0x800, 0xffffffff}}, {0x7, 0x4, 0x1, 0x0, @sint={0x617ccd3f, 0x5}}, {0xc8, 0x4, 0x1, 0x0, @msi={0x5, 0x198, 0x4, 0x8bb}}, {0x6, 0x2, 0x1, 0x0, @adapter={0x5, 0x0, 0x6, 0x5, 0x81}}, {0x3, 0x5, 0x1, 0x0, @msi={0x5, 0x6c, 0x6, 0xfff}}, {0x100000, 0x4, 0x0, 0x0, @sint={0x5, 0x6}}, {0x200, 0x2, 0x1, 0x0, @adapter={0xa, 0x800, 0xde6a, 0x1, 0xfffffffc}}, {0x7f, 0x5, 0x0, 0x0, @sint={0x6, 0xf2}}, {0xdb, 0x4, 0x0, 0x0, @sint={0x3, 0xe8c1}}]}) 2m30.997907618s ago: executing program 3 (id=3615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xce) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f00001cd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r2, 0x84814000) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) read(r7, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d02"]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) 2m30.88373975s ago: executing program 3 (id=3617): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x32) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x2b, 'net'}, {0x2d, 'freezer'}, {0x2b, 'cpu'}, {0x2b, 'blkio'}, {0x2d, 'io'}, {0x2b, 'hugetlb'}]}, 0x2c) 2m30.87532238s ago: executing program 3 (id=3618): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xa, 0x2}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000080), 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x7) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) ioctl$SNAPSHOT_FREE(r2, 0x3305) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd"], 0x22) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x10003, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000070000040", @ANYRESHEX=r9]) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xa0, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/14, 0xe, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/117, 0x75, 0x1, 0x400000018}}, &(0x7f0000000580)={0x0, 0x28, 0x40}}, 0x40}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 2m30.716037493s ago: executing program 3 (id=3620): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x1) prctl$PR_SET_MM_AUXV(0x49, 0xc, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x3f1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m30.596991874s ago: executing program 3 (id=3621): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xeeef0000, 0xe, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r12, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xdddd0000, 0x5, 0x5, 0x7f}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000005574ea5738bd8f9f479ffcff"]) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r13, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) 2m24.117830503s ago: executing program 4 (id=3724): syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002780), 0x0, 0x0) read(r1, &(0x7f00000027c0)=""/62, 0x3e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000e698000040"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001100)={0x2020}, 0x2020) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020}, 0x2020) read$rfkill(r7, &(0x7f0000000140), 0xfffffffffffffef7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2m23.854335877s ago: executing program 4 (id=3728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xe0000, 0x0, [0x1, 0xfffffffffffff9bb, 0x1, 0x9, 0x1, 0xc0, 0x0, 0x8]}) 2m23.69592068s ago: executing program 4 (id=3729): mmap(&(0x7f0000984000/0x3000)=nil, 0x3000, 0x300000b, 0x3032, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x40600, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0xff, 0x6, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) 2m23.66391844s ago: executing program 4 (id=3730): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x0, 0x10, 0x80}]}) (async) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f00004fd000/0x4000)=nil, 0x4000, 0x100000a, 0x12, r5, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) (async) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffaf) ioctl$KVM_GET_MSR_INDEX_LIST(r5, 0xc004ae02, &(0x7f0000000140)={0x2, [0x0, 0x0]}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r7, 0xae03, 0x42) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) (async) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000000)=0x8000000) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x3) 2m23.301774746s ago: executing program 4 (id=3733): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d81, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000002000c) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x100000e, 0x810, r0, 0xffffe000) 2m23.265523697s ago: executing program 4 (id=3734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2m15.406400837s ago: executing program 34 (id=3621): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc018620c, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0xeeef0000, 0xe, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r12, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xdddd0000, 0x5, 0x5, 0x7f}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="010000005574ea5738bd8f9f479ffcff"]) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r13, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) 2m8.256081247s ago: executing program 35 (id=3734): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1m28.451702736s ago: executing program 2 (id=4665): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) (async) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) write$cgroup_subtree(r2, 0x0, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(r2, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x7, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x2, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7f, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x3c0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0xfffffffffffffffe, 0x4, 0x10000, 0x100, 0x1004, 0x0, 0x8, 0x5, 0x5, 0x9, 0x9, 0x5, 0x2, 0x9, 0x8, 0x7, 0xc1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x96, 0xf0, 0xffffffff00000000, 0x4, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0xffffffff, 0x8, 0x6, 0x6, 0x3, 0x4, 0x20000000006, 0x8, 0x9, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xea, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x5, 0x1, 0x47bc, 0xd, 0x6, 0xbbdc, 0x80000000, 0xfffffffffffffc00, 0x2, 0xb, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0x2, 0x6, 0x0, 0x3403, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x61d, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2b, 0x8, 0x2293332f, 0x4, 0x5, 0x0, 0xd, 0x2, 0x80000001, 0x981, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x9, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x3]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x6, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x6, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0x8], 0x91000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m28.055818522s ago: executing program 2 (id=4672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) close(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) 1m27.192903655s ago: executing program 2 (id=4692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x8101, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x44, 0x0, &(0x7f0000001380)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m26.88791195s ago: executing program 2 (id=4696): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008c04"]) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSBRK(r3, 0x5409, 0xfd) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6, 0x0, 0x0, 0x80000001}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x1, &(0x7f00000001c0)=""/22, &(0x7f0000000440)=""/132, &(0x7f0000000300)=""/76, 0x1}) r7 = openat$kvm(0xffffff9c, &(0x7f00000005c0), 0x303240, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8d], 0xeeee8000, 0x201140}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000500)=0x304000002) read(r1, &(0x7f0000000080)=""/203, 0xcb) close(r0) 1m26.471773526s ago: executing program 2 (id=4704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x1, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x14, 0x6, 0x7f, 0x20c}, {0x1, 0x2, 0x18, 0x5, 0xf, 0xfc, 0x3, 0x2, 0x6, 0x70, 0x4, 0x5, 0xfffffffffffffffd}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x0, 0x1, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0xff, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x3, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x58, 0x3}, {0x0, 0x0, 0x41, '\x00', 0xfc}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r2, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', &(0x7f00000021c0), 0x1900008, &(0x7f0000004240)=ANY=[@ANYBLOB='stats=global,max=00000000000000000023624,stats=global,max=00000000000000000137644,fscontext=system_u,euid<', @ANYRESDEC=r7, @ANYBLOB=',appraise,smackfshat=/proc/cpuinfo\x00,subj_role=binder\x00,seclabel,uid=', @ANYRESDEC=0xee01, @ANYBLOB='@\x00']) 1m26.144054651s ago: executing program 2 (id=4714): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xc2a4a000) 1m11.17434554s ago: executing program 36 (id=4714): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x181800, 0x0) read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xc2a4a000) 42.556699028s ago: executing program 5 (id=5551): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) (async) read(r2, &(0x7f0000000080)=""/93, 0xffffff6c) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000100)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000) (async) 42.375969111s ago: executing program 5 (id=5555): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000204500"}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0xe2e02, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r8, &(0x7f0000005140)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffe, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x10001, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1], [0x2, 0x0, 0x0, 0x0, 0x0, 0x65e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x533f30c6, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, 0x80000000, 0x0, 0xfffffffe, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3]}, 0x45c) (async) r9 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) 42.374618941s ago: executing program 5 (id=5556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000103}]}) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) read$FUSE(r4, &(0x7f0000000e40)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x311002) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000240)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000008c0)={0x5, 0x0, [{0x80000008, 0x0, 0x6, 0x800, 0x2, 0x0, 0x7}, {0x40000000, 0x7, 0x4610e5516fddd407, 0x4, 0x7, 0x1, 0x8}, {0x80000000, 0x9, 0x3, 0x6, 0x2, 0x0, 0x3}, {0xc0000000, 0xffffffff, 0x1, 0x9, 0x8, 0x6, 0x9}, {0x80000001, 0x4, 0x2, 0x80, 0x8, 0x4, 0x3}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x1ff) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x80, 0x0, &(0x7f0000000840)=[@increfs_done, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fda={0x66646185, 0x4, 0x0, 0xb}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/255, 0xff, 0x2, 0x21}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @enter_looper], 0x0, 0x0, 0x0}) 42.250602793s ago: executing program 5 (id=5559): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r5, &(0x7f00000000c0)="93", 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r7, 0x40049409, r6) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r11, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 42.067939506s ago: executing program 5 (id=5560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0x973, 0x7, 0x3, 0x20, 0xc0f, 0x7, 0x1, 0x3, 0x3, 0x9, 0x1de7, 0x2, 0x3, 0x80, 0x3, 0x4], 0x10000, 0x534a37be8cdfc872}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) write$rfkill(r3, &(0x7f00000003c0)={0x7, 0x4, 0x1, 0x1}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) read(r2, &(0x7f00000002c0)=""/113, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x7, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x34}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r5) write$FUSE_BMAP(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000800)={[0x0, 0x1, 0x5, 0x8000000000000001, 0x3, 0x5, 0x80, 0x8000000000000, 0xc5, 0x0, 0xa, 0x3ff, 0x1, 0xfffffffffffffffe, 0x8, 0xfffffffffffffff9], 0x0, 0x1}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x5002, 0x8080000, 0x10, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x4000, 0x0, 0xb}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x80a0000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x40}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) write$tcp_mem(r5, &(0x7f0000000000)={0x4, 0x20, 0x7, 0x20, 0x7}, 0x48) 42.002368747s ago: executing program 5 (id=5561): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) (async) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) (rerun: 32) 26.7742757s ago: executing program 37 (id=5561): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) (async) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[]) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)) (rerun: 32) 18.395315668s ago: executing program 9 (id=5991): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020001c000000000ffff3cffffffffff5b74c5482d02367f064b17fc"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) 18.395007818s ago: executing program 9 (id=5992): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000798000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000) 18.394709328s ago: executing program 9 (id=5993): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) read(r0, &(0x7f0000000240)=""/22, 0x16) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1800001, 0x28011, r3, 0x0) 18.393774058s ago: executing program 9 (id=5994): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x1, 0xfffff034}, {0x6, 0x0, 0x2, 0x7}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x204402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000340)=[{0x30, 0x1, 0x8, 0xfffff030}, {0xcb7, 0x0, 0x1, 0x40}, {0x1, 0x8, 0xe}]}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x100000, 0x0, [0x800, 0x0, 0xffffffffffff660f, 0xd, 0x8, 0xffffffffffffffff, 0x1, 0xe3]}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x4008af25, &(0x7f0000000080)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000180)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="f3ff0000000000000102000000000000e516e203"]) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000079e9010000000000000002000002000000fc1d39db83e8c83edcc65b2905b94655ea6e098a64a4df74268bb5f15b14c5d203453cae09ea"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x35, 0x0, 0x10000, 0x1, 0x4002004c4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18.31276015s ago: executing program 9 (id=5999): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001b40)) (async) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000001b40)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x585, 0x0, 0x2d}]}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x585, 0x0, 0x2d}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KDSKBLED(r4, 0x4b65, 0xfffffffffffffffd) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xd90, 0x0, 0x5}]}) (async) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xd90, 0x0, 0x5}]}) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000018010040"]) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) (async) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGLCKTRMIOS(r14, 0x5435, 0x0) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0x1) (async) ioctl$ASHMEM_SET_SIZE(r13, 0x40087703, 0x1) read(r13, 0x0, 0x0) 18.312565259s ago: executing program 9 (id=6000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x400000400) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000440)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000080)={0xffff1000, 0x4000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x2000}) ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x2) 17.596972611s ago: executing program 6 (id=6029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 17.519912672s ago: executing program 6 (id=6030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000024c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00']) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xb0, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac1"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17.519422021s ago: executing program 6 (id=6031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r1, &(0x7f0000000240)=""/2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000140)) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000910000400eca3619273dd9"]) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000180)=[@decrefs, @clear_death], 0x0, 0x0, 0x0}) 17.451143223s ago: executing program 6 (id=6033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x80287010, 0xffffffffffffffff) (async) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x10000, 0x140, 0x3c0, 0x0}) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f000096b000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r5, 0x383aa000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mmap$binder(&(0x7f00004f9000/0x800000)=nil, 0x800000, 0x1, 0x11, r5, 0xda) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0xdddd1000, 0x58, &(0x7f0000000900)=""/88}, {0x2000, 0x8a, &(0x7f0000000840)=""/138}]}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000200)=0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 17.371719674s ago: executing program 6 (id=6036): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x571, 0x0, 0x100000000}]}) read(r0, &(0x7f0000000040)=""/106, 0x6a) 17.337386995s ago: executing program 6 (id=6037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000014c0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x700) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000, 0x1}}, "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", "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"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f00000000c0)=""/93, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x10003, 0x0, 0x8080000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x9, r1}) 15.434291204s ago: executing program 7 (id=6072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x380000000000000, 0x8001, 0x1, 0x79c, 0x100000001, 0x1, 0xdc, 0x99, 0x7, 0x2, 0x8, 0x8, 0x6, 0x5, 0x6, 0x9], 0x1000, 0x201100}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x40000101, 0x0, 0x2}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe5, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15.331951315s ago: executing program 7 (id=6073): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00'}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r4 = syz_clone(0x12000000, &(0x7f0000003280)="d8c87a2d94c33e6e6e2e0475cf0a2f76ec607a0dd7e267fbca94e4f36b16ce3c46183febc68306d1f39802705cbb0aadf9c69d9009f64c64573e6cfb97", 0x3d, &(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)="5887906485ead4905ba999ed1ece0ef67076997dd1c8a8725b1fd2f338f26f9acdd101f7d6cac2364dba28c1e195ae370318bf71cea94961a1fd719c595f9e6e769b6f4a966de528396a96c993c5ed703f3163965b2a84196db4d8eab171cf29aea7d72bbb4ba5a498046c040a281a98d76c435a73ccd8a2d940be455a31feb4aa37e748f0f5538bf079b84854908495051760741afc456584de43bb34873ea2a484bdd5f32b1152651d82cc89c5eca8f55b17469e685d4416e79af72e394f0b08853d3786aa") syz_clone3(&(0x7f0000003480)={0x60100, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0), {0x23}, &(0x7f0000002200)=""/4096, 0x1000, &(0x7f0000003200)=""/96, &(0x7f0000003440)=[r1, r1, r1, r1, r1, r4, r1, r1, r1, r1], 0xa, {r0}}, 0x58) ioctl$BLKRRPART(r3, 0x125f, 0x0) 15.311702705s ago: executing program 7 (id=6075): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x2406c0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d04, 0x0, 0x5}]}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r8, &(0x7f0000000080)=""/93, 0xffffff6c) (async) read(r8, &(0x7f0000000080)=""/93, 0xffffff6c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 15.203944277s ago: executing program 7 (id=6077): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002240)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002200)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(0x0, &(0x7f0000002280)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1]) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, r4, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6, 0x100010, r4, 0x5ca70000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000d901000005000000ff"]) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) read(r9, &(0x7f0000000100)=""/84, 0x74) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0xc0010112}]}) mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x181021, &(0x7f0000002300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030362c73743c00000000000000000000000000005bb04b5e87657282685c06b5949b4047cdc862e7e576d6ee7f9a7b51ff1c88dbec522fc5a68ac25cfd3f3fa9afdf84", @ANYRESDEC=r3, @ANYBLOB=',smackfsroot=stats=global,\x00']) 15.168723648s ago: executing program 7 (id=6080): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"]) 15.142225808s ago: executing program 7 (id=6082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x4, 0x0, &(0x7f00000002c0)="8a3e4b14"}) 3.189016131s ago: executing program 38 (id=6000): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000340)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000880)={"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"}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(r5, 0xaea2, 0x400000400) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000440)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r11, 0x4010ae67, &(0x7f0000000080)={0xffff1000, 0x4000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x2000}) ioctl$KVM_CREATE_VCPU(r0, 0x7704, 0x2) 2.147356187s ago: executing program 39 (id=6037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005500)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f00000014c0)={0x2020}, 0x2020) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x700) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000, 0x1}}, "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", "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"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000) read(r0, &(0x7f00000000c0)=""/93, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000140)={0x10003, 0x0, 0x8080000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x9, r1}) 1.378385239s ago: executing program 8 (id=6225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) (async) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) (async) 1.28309715s ago: executing program 8 (id=6226): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x7fc27000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x10000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10201, 0x0, &(0x7f00005a7000/0x4000)=nil}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffffffffff9) mmap(&(0x7f0000700000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40045201, &(0x7f0000000000)=ANY=[]) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xa5\xfb,\x99Ux\xd8\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xd8\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x06\x00\x00\x00\x00\x00\x00\x00\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB<\x19\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92#\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x1fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\xf0^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x02h\xd3B\xa3B\xe06)f\xe5\x85\x8e\xfb\x1a\xa5u.\x84E\xc2h,r\xbd\\\xa2\xcd\xbb\xab\x86=(\x9dt\x18W<\x7f\x11\xcd\'\xe4dL\xce\x87\xc8]\xb3\xd4\xe6\xf0&;ju)\xbb\xfd\x14\xc2\xd7\x0e}\x8eV{\xa9>CM\xca\x9c\xce\xa7\x1a\xd7i/\xe7\f q\x03\xea\x90\xaa:\xa8\x0e\xb0\xf1\rQ\xebB\x04n\xaa\x00\xfb\xf4\xb9\xf9u\x9d\r\x177\xea\xec\xa5@\xd7\xc5\xda&m\xd4\xb8\xe0h\xd9\xf4E\x00\x00WnS\xef\xad\xf1\xe9<50\x8cA\x1d\xb8w\b\xe9\x18\xb9oA%\xf6\x1a\xa2\x1b\xdeZ\x18C\x04-Y\xc5u\xb2\xd4\x06-\xce!\xe0\x1e\xa1\x8c0\xb8\xe4e\xc9\x1f') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x488c1, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) 1.195946672s ago: executing program 8 (id=6227): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$TUNGETDEVNETNS(r1, 0xff05, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x2, 0x1, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000380)=ANY=[@ANYBLOB="5201000000000000020800000000000000000000000000008006000011000000ae0d001000000000dd0189d00bf517336f84000000000000000000800000fffc5350ff38d7d0b54f6ac86b371095141597859a8e2c4b779cf28284a180ea67b736e6595ca2f0f8a73b4201e2496c5d5fcc87b2f5900ebe888301731600eedf0499ea2459cd936245351a9a80d9653e6934c0a8d80fdfe003da605f0664802becbbb1330140c518c1e97de4040649fc8d"]) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000240)={0x7, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r12, 0x4018aee2, &(0x7f00000002c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000280)=0x3}) ioctl$KVM_X86_SET_MCE(r11, 0x4040ae9e, &(0x7f00000000c0)={0x2000000000000000, 0x4, 0x1, 0x8, 0xd}) write$cgroup_devices(r8, &(0x7f0000002d80)=ANY=[], 0xffdd) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1, 0x8, 0xf, 0x6, 0x0, 0xfd, 0x0, 0x1, 0x5, 0x3, 0x9, 0xc0, 0x2, '\x00', 0x8, 0xfffffffffffffff2}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 159.876637ms ago: executing program 8 (id=6228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x800, 0x12) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000002240)) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r9 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) 111.777738ms ago: executing program 40 (id=6082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x40047705, 0x2) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x4, 0x0, &(0x7f00000002c0)="8a3e4b14"}) 89.911928ms ago: executing program 8 (id=6230): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) 0s ago: executing program 8 (id=6231): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x7e, 0x5, 0x7ffc0002}, {0x1, 0x4, 0x2}, {0x6, 0x3, 0x0, 0x800}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0xff01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) ioctl$TIOCMIWAIT(r4, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffdfb) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r7, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/83, 0x0}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181003, 0x0) ioctl$PTP_PIN_SETFUNC(r8, 0x40603d07, &(0x7f0000000080)={'\x00', 0xf09, 0x2, 0x8000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x9250) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r9, 0x0) kernel console output (not intermixed with test programs): 76] input: syz0 as /devices/virtual/input/input230 [ 298.043761][T15378] rust_binder: Write failure EFAULT in pid:417 [ 298.207389][T15390] rust_binder: Write failure EINVAL in pid:738 [ 298.301823][T15393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:424 [ 298.320718][T15402] tap0: tun_chr_ioctl cmd 1074812118 [ 298.451636][T15411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.451780][T15411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 298.473121][T15405] rust_binder: Error while translating object. [ 298.480091][T15405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.486797][T15405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:427 [ 298.525836][T15410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 298.539765][ T311] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 298.575316][T15413] SELinux: ebitmap: truncated map [ 298.582260][T15413] SELinux: failed to load policy [ 298.588821][ T311] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 299.134038][T15444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.250448][T15457] binder: Binderfs stats mode cannot be changed during a remount [ 299.312453][T15462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.312606][T15463] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 299.438544][T15474] binder: Unknown parameter 'context' [ 299.560021][T15469] cgroup: fork rejected by pids controller in /syz7 [ 299.594493][T15469] kvm: kvm [15468]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3030 [ 299.615691][T15469] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 299.647049][T15478] input: syz1 as /devices/virtual/input/input233 [ 299.669602][T15478] binder: Unknown parameter '׋{>' [ 299.684309][T15482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 299.861875][ T36] kauditd_printk_skb: 1754 callbacks suppressed [ 299.861893][ T36] audit: type=1400 audit(1750381956.579:67367): avc: denied { read write } for pid=12173 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 299.929402][T15489] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 299.948149][ T36] audit: type=1400 audit(1750381956.579:67368): avc: denied { setattr } for pid=12614 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.972276][ T36] audit: type=1400 audit(1750381956.579:67369): avc: denied { setattr } for pid=12614 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.995754][ T36] audit: type=1400 audit(1750381956.619:67371): avc: denied { read write } for pid=12448 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.032636][ T36] audit: type=1400 audit(1750381956.619:67370): avc: denied { read write } for pid=14099 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.056978][ T36] audit: type=1400 audit(1750381956.619:67372): avc: denied { open } for pid=12448 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.081244][ T36] audit: type=1400 audit(1750381956.619:67373): avc: denied { open } for pid=14099 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.105524][ T36] audit: type=1400 audit(1750381956.619:67374): avc: denied { ioctl } for pid=14099 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.149735][ T36] audit: type=1400 audit(1750381956.619:67375): avc: denied { ioctl } for pid=12448 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.199214][T15497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 300.272127][T15499] rust_binder: Write failure EFAULT in pid:453 [ 300.336210][T15503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.344253][T15503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:771 [ 300.355064][T15504] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.369353][T15505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.375888][T15505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:771 [ 300.504186][T15518] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 300.521068][T15518] rust_binder: Write failure EINVAL in pid:851 [ 300.625982][T15521] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 300.689729][T15523] rust_binder: Write failure EINVAL in pid:780 [ 300.727625][T15525] random: crng reseeded on system resumption [ 300.761804][T15525] binder: Unknown parameter 'fowner' [ 300.860188][T15531] rust_binder: Write failure EINVAL in pid:857 [ 300.963522][T15535] rust_binder: Write failure EFAULT in pid:787 [ 300.979808][T15535] binder: Unknown parameter 'coyBLV"i5ntext' [ 301.006731][T15538] binder: Unknown parameter 'contextm' [ 301.076608][T15540] binder: Bad value for 'max' [ 301.370230][T15559] rust_binder: Write failure EFAULT in pid:460 [ 301.499355][T15561] binder: Unknown parameter 'defcontext01777777777777777777777' [ 301.567006][T15568] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 301.602581][T15568] SELinux: failed to load policy [ 301.674015][T15577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.721508][T15577] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 301.740226][T15577] rust_binder: Write failure EINVAL in pid:470 [ 301.805419][T15585] rust_binder: Write failure EFAULT in pid:804 [ 301.951763][T15597] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 301.990575][T15596] input: syz0 as /devices/virtual/input/input234 [ 302.010217][T15605] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 302.027525][T15605] rust_binder: Write failure EINVAL in pid:888 [ 302.028671][T15604] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.035352][T15606] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.063216][T15604] rust_binder: Write failure EFAULT in pid:477 [ 302.069752][T15606] rust_binder: Write failure EFAULT in pid:477 [ 302.210544][T15618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.358957][T15618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.380977][T15618] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 302.387415][T15618] rust_binder: Error while translating object. [ 302.408840][T15618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.421477][T15618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:482 [ 302.700774][T15631] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.904595][T15645] binder: Unknown parameter '00000000000000000000' [ 302.985694][T15649] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.985845][T15649] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 303.013466][T15647] binder: Unknown parameter 'defcontext01777777777777777777777' [ 303.487793][T15681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.591616][T15685] binder: Bad value for 'stats' [ 303.883901][T15695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.905758][T15699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:510 [ 303.909184][T15695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.973343][T15702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 304.299873][ T12] bridge_slave_1: left allmulticast mode [ 304.307298][ T12] bridge_slave_1: left promiscuous mode [ 304.313654][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.324035][ T12] bridge_slave_0: left allmulticast mode [ 304.330429][ T12] bridge_slave_0: left promiscuous mode [ 304.336575][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.439716][T15713] binder: Unknown parameter 'subj_type' [ 304.485321][ T12] veth1_macvtap: left promiscuous mode [ 304.495190][ T12] veth0_vlan: left promiscuous mode [ 304.561161][T15724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.561739][T15723] rust_binder: Got transaction with invalid offset. [ 304.568202][T15723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 304.574865][T15723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935 [ 304.644023][T15709] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.660263][T15709] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.667339][T15709] bridge_slave_0: entered allmulticast mode [ 304.686169][T15709] bridge_slave_0: entered promiscuous mode [ 304.693459][T15709] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.700930][T15709] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.714622][T15709] bridge_slave_1: entered allmulticast mode [ 304.722491][T15709] bridge_slave_1: entered promiscuous mode [ 304.860507][ T2362] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.867559][ T2362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.875406][ T36] kauditd_printk_skb: 1809 callbacks suppressed [ 304.875420][ T36] audit: type=1400 audit(1750381961.589:69171): avc: denied { setattr } for pid=12614 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.929752][ T2362] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.936813][ T2362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.943186][T15736] binder: Unknown parameter '6 ' [ 304.948791][ T36] audit: type=1400 audit(1750381961.589:69172): avc: denied { setattr } for pid=12614 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.020653][ T36] audit: type=1400 audit(1750381961.629:69173): avc: denied { setattr } for pid=12614 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.030139][T15709] veth0_vlan: entered promiscuous mode [ 305.078784][ T36] audit: type=1400 audit(1750381961.629:69174): avc: denied { sys_module } for pid=15709 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 305.094605][T15709] veth1_macvtap: entered promiscuous mode [ 305.131419][ T36] audit: type=1400 audit(1750381961.639:69175): avc: denied { ioctl } for pid=15732 comm="syz.6.4924" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 305.164176][T15742] SELinux: policydb magic number 0x34343831 does not match expected magic number 0xf97cff8c [ 305.182393][ T36] audit: type=1400 audit(1750381961.639:69176): avc: denied { read write } for pid=14099 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.184211][T15742] SELinux: failed to load policy [ 305.210370][ T36] audit: type=1400 audit(1750381961.639:69177): avc: denied { open } for pid=14099 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.244073][T15709] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.251495][T15709] audit: audit_lost=264 audit_rate_limit=0 audit_backlog_limit=64 [ 305.256876][T12614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 305.273406][T15742] SELinux: policydb magic number 0x4000000 does not match expected magic number 0xf97cff8c [ 305.285476][T15742] SELinux: failed to load policy [ 305.290829][T15742] SELinux: policydb magic number 0x10000 does not match expected magic number 0xf97cff8c [ 305.301420][T15742] SELinux: failed to load policy [ 305.451571][T15752] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 305.451596][T15752] rust_binder: Error while translating object. [ 305.464851][T15752] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 305.477530][T15752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 305.488816][T15752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.619099][T15761] SELinux: failed to load policy [ 305.670150][T15761] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 305.833155][T15774] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:959 [ 305.856306][T15776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:961 [ 305.939586][T15779] binder: Unknown parameter '0xffffffffffffffff' [ 306.055966][ T12] bridge_slave_1: left allmulticast mode [ 306.062122][ T12] bridge_slave_1: left promiscuous mode [ 306.068293][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.076380][ T12] bridge_slave_0: left allmulticast mode [ 306.082103][ T12] bridge_slave_0: left promiscuous mode [ 306.089269][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.089888][T15794] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 306.096359][T15794] rust_binder: Error while translating object. [ 306.105623][T15794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 306.130724][T15794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 306.235561][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.254549][T15784] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.261697][T15784] bridge_slave_0: entered allmulticast mode [ 306.267839][T15784] bridge_slave_0: entered promiscuous mode [ 306.274771][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.281807][T15784] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.288953][T15784] bridge_slave_1: entered allmulticast mode [ 306.295119][T15784] bridge_slave_1: entered promiscuous mode [ 306.340869][ T12] veth1_macvtap: left promiscuous mode [ 306.348305][ T12] veth0_vlan: left promiscuous mode [ 306.354902][T15797] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 306.385461][T15799] SELinux: security_context_str_to_sid () failed with errno=-22 [ 306.406529][T15784] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.413585][T15784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.420863][T15784] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.427866][T15784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.461534][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.469206][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.478405][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.485471][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.497036][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.504109][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.528182][T15784] veth0_vlan: entered promiscuous mode [ 306.538942][T15784] veth1_macvtap: entered promiscuous mode [ 306.620129][T15806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 306.637995][T15809] input: syz0 as /devices/virtual/input/input237 [ 306.671249][T15807] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 306.671264][T15807] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 306.679366][T15807] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 306.724104][T15814] binder: Unknown parameter 'context' [ 306.756704][T15817] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 306.781534][T15821] SELinux: security_context_str_to_sid () failed with errno=-22 [ 306.844337][T15825] rust_binder: Write failure EINVAL in pid:14 [ 306.929685][T15834] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 306.954679][T15834] SELinux: failed to load policy [ 306.963281][T15832] input: syz1 as /devices/virtual/input/input238 [ 307.020532][T15841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979 [ 307.021908][T15841] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.130406][T15852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 307.221361][T15869] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 307.231939][T15871] binder: Binderfs stats mode cannot be changed during a remount [ 307.288318][T15876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:30 [ 307.389612][T15890] rust_binder: Write failure EINVAL in pid:550 [ 307.455394][T15895] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 307.464856][T15895] rust_binder: Read failure Err(EFAULT) in pid:555 [ 307.488979][T15889] kvm: kvm [15887]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 307.629448][T15902] rust_binder: Write failure EINVAL in pid:35 [ 307.691257][T15912] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 307.705526][T15912] rust_binder: Write failure EINVAL in pid:566 [ 307.775211][T15922] rust_binder: inc_ref_done called when no active inc_refs [ 307.782744][T15922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 307.821458][T15923] rust_binder: Write failure EINVAL in pid:568 [ 307.843123][T15919] rust_binder: Write failure EINVAL in pid:568 [ 307.881993][T15936] SELinux: security_context_str_to_sid () failed with errno=-22 [ 308.276934][T15958] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 308.276959][T15958] rust_binder: Error in use_page_slow: EBUSY [ 308.288100][T15958] rust_binder: use_range failure EBUSY [ 308.294920][T15958] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 308.294990][T15960] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 308.300655][T15958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 308.318922][T15958] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 308.331953][T15958] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:48 [ 308.502207][T15971] binder: Unknown parameter 'defcontext01777777777777777777777' [ 308.671639][T15982] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 308.759890][T15990] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 308.760201][T15992] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 308.770507][T15992] rust_binder: Read failure Err(EFAULT) in pid:76 [ 308.772500][T15990] rust_binder: Write failure EINVAL in pid:577 [ 309.090048][T16006] rust_binder: Write failure EINVAL in pid:87 [ 309.265177][T16024] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 309.278701][T16024] rust_binder: Error while translating object. [ 309.302961][T16024] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 309.318864][T16024] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59 [ 309.383252][T16034] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 309.433760][T16036] SELinux: failed to load policy [ 309.689741][T16041] block device autoloading is deprecated and will be removed. [ 309.697352][T16041] syz.8.5024: attempt to access beyond end of device [ 309.697352][T16041] loop0: rw=2048, sector=521328, nr_sectors = 8 limit=0 [ 309.896485][ T36] kauditd_printk_skb: 1323 callbacks suppressed [ 309.896501][ T36] audit: type=1400 audit(1750381966.609:70498): avc: denied { read write } for pid=15784 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.934792][ T36] audit: type=1400 audit(1750381966.609:70499): avc: denied { open } for pid=15784 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.943661][T16057] rust_binder: Write failure EINVAL in pid:69 [ 309.964256][T16057] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 309.972853][ T36] audit: type=1400 audit(1750381966.609:70500): avc: denied { ioctl } for pid=15784 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 310.007232][ T36] audit: type=1400 audit(1750381966.659:70501): avc: denied { read } for pid=16056 comm="syz.8.5028" name="binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.035508][ T36] audit: type=1400 audit(1750381966.659:70502): avc: denied { open } for pid=16056 comm="syz.8.5028" path="/dev/binderfs/binder0" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.048226][T16061] tun0: tun_chr_ioctl cmd 1074025675 [ 310.060530][ T36] audit: type=1400 audit(1750381966.659:70503): avc: denied { read write } for pid=16056 comm="syz.8.5028" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.065318][T16061] tun0: persist enabled [ 310.089077][ T36] audit: type=1400 audit(1750381966.659:70504): avc: denied { open } for pid=16056 comm="syz.8.5028" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 310.098065][T16061] tun0: tun_chr_ioctl cmd 1074025675 [ 310.117139][ T36] audit: type=1400 audit(1750381966.659:70505): avc: denied { read write } for pid=16056 comm="syz.8.5028" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.122485][T16061] tun0: persist enabled [ 310.145692][ T36] audit: type=1400 audit(1750381966.659:70506): avc: denied { read open } for pid=16056 comm="syz.8.5028" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.173303][ T36] audit: type=1400 audit(1750381966.659:70507): avc: denied { ioctl } for pid=16056 comm="syz.8.5028" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.204381][T16061] rust_binder: Error in use_page_slow: ESRCH [ 310.204400][T16061] rust_binder: use_range failure ESRCH [ 310.210430][T16061] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 310.218806][T16061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 310.229292][T16061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:591 [ 310.304858][T16068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.314991][T16064] binder: Unknown parameter 'subj_user' [ 310.315144][T16068] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 310.334712][T16068] rust_binder: Write failure EINVAL in pid:73 [ 310.334746][T16062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:591 [ 310.343045][T16068] rust_binder: Error while translating object. [ 310.352430][T16068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 310.358577][T16068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:73 [ 310.369173][T16069] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.389830][T16073] binder: Unknown parameter 'defcontext01777777777777777777777' [ 310.405688][T16073] rust_binder: Read failure Err(EAGAIN) in pid:78 [ 310.454199][T16081] input: syz0 as /devices/virtual/input/input246 [ 310.460695][T16081] input: failed to attach handler leds to device input246, error: -6 [ 310.597484][T16085] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 310.611528][T16085] SELinux: failed to load policy [ 310.667021][T16091] kvm: kvm [16090]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x400000 [ 310.758341][T16096] binder: Bad value for 'stats' [ 310.821066][T16096] kvm: Disabled LAPIC found during irq injection [ 310.893024][T16108] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 310.924771][T16110] syz.5.5046: attempt to access beyond end of device [ 310.924771][T16110] loop0: rw=2048, sector=521328, nr_sectors = 8 limit=0 [ 310.981058][T16114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:95 [ 311.003365][T16112] rust_binder: Write failure EFAULT in pid:596 [ 311.021938][T16120] rust_binder: Error while translating object. [ 311.028192][T16120] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 311.043343][T16120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:99 [ 311.084324][T16125] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 311.323973][T16141] __vm_enough_memory: pid: 16141, comm: syz.8.5057, bytes: 281474976845824 not enough memory for the allocation [ 311.489474][T16152] random: crng reseeded on system resumption [ 311.560085][T16162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.561508][T16162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.587191][T16165] SELinux: failed to load policy [ 311.677925][T16174] tap0: tun_chr_ioctl cmd 1074025673 [ 311.683404][T16173] tap0: tun_chr_ioctl cmd 1074025677 [ 311.692110][T16173] tap0: linktype set to 776 [ 311.733063][T16177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 311.836550][T16181] rust_binder: Write failure EINVAL in pid:119 [ 311.944834][T16188] binder: Unknown parameter 'context' [ 311.948135][T16189] binder: Unknown parameter 'context' [ 312.117241][T16201] input: syz0 as /devices/virtual/input/input248 [ 312.337532][T16213] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 312.503175][T16223] KVM: debugfs: duplicate directory 16223-6 [ 312.515290][T16223] kvm: kvm [16222]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 312.677497][T16232] rust_binder: Write failure EINVAL in pid:1036 [ 312.678204][T16232] rust_binder: Read failure Err(EAGAIN) in pid:1036 [ 312.785207][T16243] input: syz0 as /devices/virtual/input/input249 [ 312.850035][T16246] rust_binder: Error while translating object. [ 312.850061][T16246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 312.856844][T16246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 312.891539][T16252] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 312.908418][T16252] rust_binder: Write failure EINVAL in pid:133 [ 312.958412][ T1007] bridge_slave_1: left allmulticast mode [ 312.973639][ T1007] bridge_slave_1: left promiscuous mode [ 312.983594][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.991151][ T1007] bridge_slave_0: left allmulticast mode [ 312.996828][ T1007] bridge_slave_0: left promiscuous mode [ 313.002688][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.148150][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.155223][T16247] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.162438][T16247] bridge_slave_0: entered allmulticast mode [ 313.168630][T16247] bridge_slave_0: entered promiscuous mode [ 313.175367][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.182448][T16247] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.189784][T16247] bridge_slave_1: entered allmulticast mode [ 313.195960][T16247] bridge_slave_1: entered promiscuous mode [ 313.202567][ T1007] veth1_macvtap: left promiscuous mode [ 313.208055][ T1007] veth0_vlan: left promiscuous mode [ 313.291236][T16247] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.298536][T16247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.305820][T16247] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.312849][T16247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.343187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.351569][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.361520][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.368559][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.387853][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.394929][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.403754][T16271] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 313.426235][T16273] SELinux: policydb magic number 0x9040a does not match expected magic number 0xf97cff8c [ 313.462273][T16273] SELinux: failed to load policy [ 313.474063][T16247] veth0_vlan: entered promiscuous mode [ 313.488209][T16247] veth1_macvtap: entered promiscuous mode [ 313.495739][T16276] SELinux: security_context_str_to_sid ( [ 313.495739][T16276] ) failed with errno=-22 [ 313.527675][T16275] input: syz1 as /devices/virtual/input/input250 [ 313.536282][T16275] input: failed to attach handler leds to device input250, error: -6 [ 313.651701][T16292] random: crng reseeded on system resumption [ 313.844924][T16301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1057 [ 313.849590][T16301] rust_binder: Read failure Err(EFAULT) in pid:1057 [ 313.898702][T16304] rust_binder: Error while translating object. [ 313.905539][T16304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 313.912954][T16304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1059 [ 314.006473][T16311] binder: Bad value for 'stats' [ 314.114947][ T64] hid-generic C98F:0003:0000.001F: unknown main item tag 0x0 [ 314.122491][ T64] hid-generic C98F:0003:0000.001F: unknown main item tag 0x0 [ 314.132051][ T64] hid-generic C98F:0003:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 314.160444][T16321] fido_id[16321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 314.271724][T16323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.272426][T16323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156 [ 314.285202][T16323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.353102][T16330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1072 [ 314.607077][T16343] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 314.652741][T16345] random: crng reseeded on system resumption [ 314.964947][ T36] kauditd_printk_skb: 1054 callbacks suppressed [ 314.964963][ T36] audit: type=1400 audit(1750381971.679:71562): avc: denied { read write } for pid=15784 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.001301][ T36] audit: type=1400 audit(1750381971.679:71563): avc: denied { open } for pid=15784 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.025987][ T36] audit: type=1400 audit(1750381971.679:71564): avc: denied { ioctl } for pid=15784 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.051879][ T36] audit: type=1400 audit(1750381971.689:71565): avc: denied { read } for pid=16355 comm="syz.8.5128" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.078193][ T36] audit: type=1400 audit(1750381971.689:71566): avc: denied { open } for pid=16355 comm="syz.8.5128" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.101738][ T36] audit: type=1400 audit(1750381971.689:71567): avc: denied { read } for pid=16355 comm="syz.8.5128" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 315.127325][ T36] audit: type=1400 audit(1750381971.689:71568): avc: denied { read open } for pid=16355 comm="syz.8.5128" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 315.151049][ T36] audit: type=1400 audit(1750381971.689:71569): avc: denied { ioctl } for pid=16355 comm="syz.8.5128" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 315.175749][ T36] audit: type=1400 audit(1750381971.689:71570): avc: denied { ioctl } for pid=16355 comm="syz.8.5128" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 315.200429][ T36] audit: type=1400 audit(1750381971.789:71571): avc: denied { read write } for pid=15709 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.247857][T16362] rust_binder: Write failure EFAULT in pid:177 [ 315.362317][T16371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 315.399206][T16377] binder: Unknown parameter '>"5@ij}ˢ )f#`lVџa_iAm4L͆)H$ttUUmXG_'mfH6iцp%1 [ 315.399206][T16377] uZxXWigKG [ 315.399206][T16377] !"΃dKI*zwt@8?)"#O{JC?oj@YLsY00000000000000000004' [ 315.452585][T16373] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 76) [ 315.452607][T16373] rust_binder: Error while translating object. [ 315.463224][T16373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 315.475367][T16373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179 [ 315.592611][T16393] binder: Unknown parameter '' [ 315.668597][T16401] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 315.668621][T16401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 315.677778][T16401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 315.704675][T16399] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 315.900602][T16412] rust_binder: Write failure EINVAL in pid:195 [ 316.071679][T16424] SELinux: policydb version 144829888 does not match my version range 15-33 [ 316.099729][ T12] bridge_slave_1: left allmulticast mode [ 316.105396][ T12] bridge_slave_1: left promiscuous mode [ 316.125768][T16424] SELinux: failed to load policy [ 316.129852][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.140364][ T12] bridge_slave_0: left allmulticast mode [ 316.146011][ T12] bridge_slave_0: left promiscuous mode [ 316.163941][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.359763][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.360827][T16447] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 316.366878][T16428] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.374470][T16447] SELinux: failed to load policy [ 316.381981][T16428] bridge_slave_0: entered allmulticast mode [ 316.392803][T16428] bridge_slave_0: entered promiscuous mode [ 316.399880][ T12] veth1_macvtap: left promiscuous mode [ 316.405376][ T12] veth0_vlan: left promiscuous mode [ 316.437379][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.445541][T16428] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.452807][T16428] bridge_slave_1: entered allmulticast mode [ 316.459225][T16428] bridge_slave_1: entered promiscuous mode [ 316.466740][T16447] tap0: tun_chr_ioctl cmd 1074025677 [ 316.476863][T16447] tap0: linktype set to 774 [ 316.482984][T16447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209 [ 316.519334][T16428] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.535664][T16428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.542948][T16428] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.549983][T16428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.578308][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.587497][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.609668][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.616741][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.632424][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.639539][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.677741][T16461] binder: Unknown parameter 'non' [ 316.699231][T16428] veth0_vlan: entered promiscuous mode [ 316.710858][T16464] input: syz0 as /devices/virtual/input/input253 [ 316.759615][T16428] veth1_macvtap: entered promiscuous mode [ 317.106770][T16489] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 317.123158][T16489] rust_binder: Write failure EINVAL in pid:6 [ 317.362801][T16500] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 317.368878][T16500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 317.380061][T16500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:232 [ 317.440004][T16502] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 317.449338][T16502] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:234 [ 317.477228][T16505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 317.486857][T16504] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 317.546767][T16509] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 317.594167][T16511] binder: Bad value for 'max' [ 317.594167][T16509] binder: Bad value for 'max' [ 317.721892][T16521] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.743493][T16527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 318.753347][T16527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:243 [ 318.799759][T16537] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.817991][T16540] rust_binder: Error while translating object. [ 318.820118][T16540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 318.821975][T16537] rust_binder: Write failure EFAULT in pid:1132 [ 318.833851][T16540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:243 [ 318.868389][T16539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.878838][T16546] SELinux: policydb version 905587468 does not match my version range 15-33 [ 318.896018][T16546] SELinux: failed to load policy [ 318.905308][T16546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.914692][T16546] rust_binder: Write failure EFAULT in pid:1134 [ 318.988535][T16553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1134 [ 319.001393][T16556] rust_binder: Write failure EINVAL in pid:19 [ 319.217007][T16570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26 [ 319.572946][T16588] rust_binder: Write failure EINVAL in pid:36 [ 319.786762][T16597] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 319.846768][T16597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1138 [ 319.971540][ T36] kauditd_printk_skb: 887 callbacks suppressed [ 319.971558][ T36] audit: type=1400 audit(1750381976.689:72459): avc: denied { read } for pid=16613 comm="syz.6.5217" name="binder0" dev="binder" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.980858][T16614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1140 [ 319.999243][ T36] audit: type=1400 audit(1750381976.689:72460): avc: denied { read open } for pid=16613 comm="syz.6.5217" path="/dev/binderfs/binder0" dev="binder" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.077743][ T36] audit: type=1400 audit(1750381976.689:72461): avc: denied { read } for pid=16613 comm="syz.6.5217" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.108333][ T36] audit: type=1400 audit(1750381976.689:72462): avc: denied { open } for pid=16613 comm="syz.6.5217" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.131732][ T36] audit: type=1400 audit(1750381976.689:72463): avc: denied { ioctl } for pid=16613 comm="syz.6.5217" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.159657][ T36] audit: type=1400 audit(1750381976.689:72464): avc: denied { ioctl } for pid=16613 comm="syz.6.5217" path="/dev/binderfs/binder0" dev="binder" ino=150 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.186261][ T36] audit: type=1400 audit(1750381976.739:72465): avc: denied { read } for pid=16613 comm="syz.6.5217" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.209785][ T36] audit: type=1400 audit(1750381976.739:72466): avc: denied { open } for pid=16613 comm="syz.6.5217" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.248456][T16627] rust_binder: Write failure EFAULT in pid:263 [ 320.248922][T16626] random: crng reseeded on system resumption [ 320.267422][ T36] audit: type=1400 audit(1750381976.739:72467): avc: denied { ioctl } for pid=16613 comm="syz.6.5217" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 320.309615][ T36] audit: type=1400 audit(1750381976.739:72468): avc: denied { ioctl } for pid=16613 comm="syz.6.5217" path="/dev/binderfs/binder0" dev="binder" ino=150 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.341670][T16626] Restarting kernel threads ... done. [ 320.510480][T16649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 320.598785][T16664] rust_binder: Write failure EINVAL in pid:54 [ 320.742091][T16675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.774003][T16675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 320.774030][T16675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:279 [ 320.784113][T16686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.881238][T16691] rust_binder: Write failure EINVAL in pid:58 [ 320.886516][T16695] tap1: tun_chr_ioctl cmd 1074025677 [ 320.908851][T16695] tap1: linktype set to 774 [ 320.963226][T16704] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 321.063924][T16713] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 321.063947][T16713] rust_binder: Read failure Err(EFAULT) in pid:61 [ 321.075708][T16711] rust_binder: Failed to allocate buffer. len:64, is_oneway:true [ 321.088001][T16713] rust_binder: Write failure EINVAL in pid:61 [ 321.230010][T16720] binder: Bad value for 'max' [ 321.245599][T16722] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 321.245621][T16722] rust_binder: Read failure Err(EFAULT) in pid:284 [ 321.269400][T16722] rust_binder: Write failure EFAULT in pid:284 [ 321.287361][T16725] cgroup: fork rejected by pids controller in /syz8 [ 321.613383][T16852] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 321.633234][T16852] rust_binder: Write failure EINVAL in pid:75 [ 321.712810][T16857] rust_binder: Write failure EINVAL in pid:302 [ 321.801148][T16859] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.840587][ T1007] bridge_slave_1: left allmulticast mode [ 321.846239][ T1007] bridge_slave_1: left promiscuous mode [ 321.859136][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.872045][ T1007] bridge_slave_0: left allmulticast mode [ 321.895380][ T1007] bridge_slave_0: left promiscuous mode [ 321.902766][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.942071][T16865] rust_binder: Error while translating object. [ 321.942099][T16865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 321.948285][T16865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:77 [ 321.988664][T16869] binder: Bad value for 'stats' [ 322.022951][T16869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:311 [ 322.056341][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.072781][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.079873][T16855] bridge_slave_0: entered allmulticast mode [ 322.086063][T16855] bridge_slave_0: entered promiscuous mode [ 322.092381][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.099436][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.106474][T16855] bridge_slave_1: entered allmulticast mode [ 322.113459][T16855] bridge_slave_1: entered promiscuous mode [ 322.168453][ T1007] veth1_macvtap: left promiscuous mode [ 322.171913][T16877] binder: Unknown parameter 'uGЇQ:' [ 322.188872][ T1007] veth0_vlan: left promiscuous mode [ 322.294350][T16896] rust_binder: Write failure EINVAL in pid:322 [ 322.369143][ T2362] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.382378][ T2362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.396388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.403490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.475789][T16906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87 [ 322.484854][T16855] veth0_vlan: entered promiscuous mode [ 322.505985][T16855] veth1_macvtap: entered promiscuous mode [ 322.622769][T16921] rust_binder: Error in use_page_slow: ESRCH [ 322.622790][T16921] rust_binder: use_range failure ESRCH [ 322.629219][T16921] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 322.635125][T16921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.643104][T16921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:2 [ 322.673876][T16926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 322.852412][T16935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.884193][T16936] rust_binder: Write failure EINVAL in pid:1184 [ 322.946328][T16942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 322.955055][T16942] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 322.965379][T16942] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.987972][T16945] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 323.220222][T17053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 323.220251][T17053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95 [ 323.230110][T17053] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 323.239179][T17053] rust_binder: Read failure Err(EFAULT) in pid:95 [ 323.411064][T17064] rust_binder: Write failure EFAULT in pid:105 [ 323.630349][T17072] rust_binder: Write failure EINVAL in pid:1189 [ 323.643749][ T60] bridge_slave_1: left allmulticast mode [ 323.655732][ T60] bridge_slave_1: left promiscuous mode [ 323.661445][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.668991][ T60] bridge_slave_0: left allmulticast mode [ 323.674706][ T60] bridge_slave_0: left promiscuous mode [ 323.680598][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.701309][T17075] binder: Bad value for 'max' [ 323.809949][T17069] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.816995][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.824330][T17069] bridge_slave_0: entered allmulticast mode [ 323.830491][T17069] bridge_slave_0: entered promiscuous mode [ 323.836760][T17069] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.844243][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.851702][T17069] bridge_slave_1: entered allmulticast mode [ 323.858083][T17069] bridge_slave_1: entered promiscuous mode [ 323.889404][T17084] rust_binder: Write failure EINVAL in pid:1199 [ 323.918215][T17086] rust_binder: Write failure EINVAL in pid:110 [ 323.940191][ T60] veth1_macvtap: left promiscuous mode [ 323.954253][ T60] veth0_vlan: left promiscuous mode [ 324.033702][T17069] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.040780][T17069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.048010][T17069] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.055044][T17069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.076551][T17093] rust_binder: Write failure EINVAL in pid:1204 [ 324.089522][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.104010][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.113213][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.120266][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.130185][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.137214][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.146051][T17095] rust_binder: Write failure EFAULT in pid:112 [ 324.168936][T17069] veth0_vlan: entered promiscuous mode [ 324.218407][T17069] veth1_macvtap: entered promiscuous mode [ 324.310342][T17112] kvm: kvm [17111]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 324.349766][T17116] binder: Bad value for 'max' [ 324.550241][T17134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 324.565957][T17134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.587527][T17134] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 324.630262][T17134] rust_binder: Error while translating object. [ 324.659909][T17134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.666108][T17134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 324.796029][T17139] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 324.950978][T17142] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 325.012337][ T36] kauditd_printk_skb: 1204 callbacks suppressed [ 325.012354][ T36] audit: type=1400 audit(1750381981.729:73616): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.059069][ T36] audit: type=1400 audit(1750381981.729:73617): avc: denied { read write open } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.098818][ T36] audit: type=1400 audit(1750381981.729:73618): avc: denied { ioctl } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 325.117220][T17154] SELinux: security_context_str_to_sid () failed with errno=-22 [ 325.142666][ T36] audit: type=1400 audit(1750381981.769:73619): avc: denied { read write } for pid=17147 comm="syz.8.5327" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.172230][ T36] audit: type=1400 audit(1750381981.769:73620): avc: denied { read open } for pid=17147 comm="syz.8.5327" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.198261][ T36] audit: type=1400 audit(1750381981.769:73621): avc: denied { read write } for pid=17147 comm="syz.8.5327" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.233751][T17156] SELinux: ebitmap: truncated map [ 325.239232][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.251005][T17156] SELinux: failed to load policy [ 325.260752][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.268209][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.285754][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.311537][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.319260][ T36] audit: type=1400 audit(1750381981.769:73622): avc: denied { read write } for pid=17147 comm="syz.8.5327" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.342739][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.350238][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.357698][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.365212][ T36] audit: type=1400 audit(1750381981.769:73623): avc: denied { open } for pid=17147 comm="syz.8.5327" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.396413][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.396465][T17171] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.403899][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.417364][T17175] audit: audit_backlog=65 > audit_backlog_limit=64 [ 325.423862][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.444049][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.452055][T17172] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 325.461756][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.469259][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.476650][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.484313][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.485167][T17177] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 325.491813][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.501407][T17177] rust_binder: Write failure EINVAL in pid:359 [ 325.507688][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.521730][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.531814][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.539528][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.547983][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.555527][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.563091][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.570561][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.577998][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.579395][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.585527][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.585931][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.592051][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.600563][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.606090][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.614003][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.619659][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.627961][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.636061][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.642129][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.648059][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.655872][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.662524][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.671355][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.674922][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.682550][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.688712][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.696575][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.702790][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.711006][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.716532][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.724194][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.730146][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.744258][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.751505][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.754864][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.758461][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.764466][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.771908][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.778819][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.786381][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.796644][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.799581][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.806124][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.813503][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.819873][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.827164][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.833648][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.841192][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.847501][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.854781][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.861250][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.868526][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.875022][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.882480][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.888891][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.896147][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.902592][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.909879][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.916352][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.923629][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.930181][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.937425][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.944018][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.953148][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.958639][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.965330][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.971801][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.979039][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.985645][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 325.992753][T17182] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.999259][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.023095][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.031303][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.039374][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.050367][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.059993][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.067482][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.077245][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.084739][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.092712][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.100489][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.107919][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.116075][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.123543][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.131051][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.138472][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.145897][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.153310][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.160770][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.168157][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.177429][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.185523][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.192990][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.200402][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.207990][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.215384][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.222859][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.230347][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.237914][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.245368][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.252836][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.260301][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.267780][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.275255][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.282755][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.290212][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.297608][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.310162][T17202] rust_binder: Write failure EFAULT in pid:25 [ 326.322284][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.335863][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.343697][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.353302][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.360784][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.368213][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.378396][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.380474][T17204] binder: Bad value for 'context' [ 326.392275][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.399755][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.408426][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.416299][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.423713][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.431167][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.438556][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.445970][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.453400][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.460856][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.468260][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.475711][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.483157][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.490596][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.497971][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.505402][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.512808][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.520198][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.527573][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.534967][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.542365][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.549763][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.557133][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.564528][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.571916][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.579337][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.586717][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.594159][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.601569][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.609049][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.616444][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.631378][T17207] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 326.642484][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.650497][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.657940][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.672934][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.681155][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.688849][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.696247][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.701800][T17208] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 326.704075][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.719165][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.726593][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.737158][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.745454][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.752895][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.764848][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.787100][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.794949][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.802667][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.810208][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.817843][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.825479][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.832976][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.833309][T17214] binder: Unknown parameter 'con}ext' [ 326.840488][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.856158][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.886675][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.896528][ T45] hid-generic 0005:0005:0003.0020: unknown main item tag 0x0 [ 326.907071][ T45] hid-generic 0005:0005:0003.0020: hidraw0: BLUETOOTH HID v0.02 Device [syz0] on syz1 [ 326.935043][T17224] input: syz0 as /devices/virtual/input/input261 [ 326.958470][T17222] fido_id[17222]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 326.960808][T17224] rust_binder: Write failure EINVAL in pid:134 [ 326.983901][T17220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 327.041972][T17231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.053618][T17231] rust_binder: Error in use_page_slow: ESRCH [ 327.060215][T17231] rust_binder: use_range failure ESRCH [ 327.066289][T17231] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 327.071907][T17231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 327.081471][T17231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:372 [ 327.101434][T17240] random: crng reseeded on system resumption [ 327.141290][T17243] rust_binder: Write failure EINVAL in pid:40 [ 327.144191][T17237] SELinux: failed to load policy [ 327.170650][T17244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.170754][T17244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 327.184679][T17244] rust_binder: Error while translating object. [ 327.194457][T17244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.200710][T17244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 327.251435][T17254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.284910][T17256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 327.329093][T17253] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 327.340056][T17261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.340687][T17253] rust_binder: Error in use_page_slow: EBUSY [ 327.360176][T17253] rust_binder: use_range failure EBUSY [ 327.370177][T17262] rust_binder: Write failure EINVAL in pid:143 [ 327.378658][T17253] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 327.385597][T17253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 327.393483][T17253] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 327.428966][T17253] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1256 [ 327.509798][T17279] input: syz1 as /devices/virtual/input/input263 [ 327.698390][T17281] binfmt_misc: register: failed to install interpreter file ./cgroup [ 327.747419][T17283] binder: Unknown parameter 'at%m_u' [ 327.748867][T17285] rust_binder: Write failure EINVAL in pid:159 [ 327.775114][T17287] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.796016][T17289] random: crng reseeded on system resumption [ 327.842045][T17295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 327.858037][T17297] binder: Unknown parameter '00000000000000000000003' [ 327.939822][T17300] tap0: tun_chr_ioctl cmd 1074025677 [ 327.945194][T17300] tap0: linktype set to 776 [ 328.029332][T17304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 328.039965][T17306] rust_binder: Failed to allocate buffer. len:18446744073709551200, is_oneway:false [ 328.049174][T17306] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 328.058544][T17306] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:174 [ 328.133657][T17316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 328.184246][T17318] input: syz0 as /devices/virtual/input/input264 [ 328.232793][T17320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178 [ 328.240497][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.261109][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.268535][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.276183][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.284081][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.291926][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.299497][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.307094][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.315527][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.323418][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.332016][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.339971][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.347987][T17324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 328.356678][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.368947][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.376397][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.387361][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.395038][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.402828][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.415881][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x2 [ 328.426037][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.430433][T17338] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 328.443243][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.446960][T17338] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 328.453421][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.477229][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.484785][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.492349][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.500315][T17339] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 328.500773][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.509485][T17339] rust_binder: Write failure EINVAL in pid:1270 [ 328.516395][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.532497][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.534656][T17341] rust_binder: Error while translating object. [ 328.539950][ T391] hid-generic 0001:0000:0000.0021: unknown main item tag 0x0 [ 328.547531][T17341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 328.553741][T17341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:64 [ 328.564341][ T391] hid-generic 0001:0000:0000.0021: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 328.594131][T17347] rust_binder: Write failure EINVAL in pid:1276 [ 328.595005][T17347] binder: Bad value for 'stats' [ 328.648325][T17348] fido_id[17348]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 328.679676][T17352] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.720372][T17352] rust_binder: Error while translating object. [ 328.726814][T17352] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 328.735159][T17361] SELinux: security_context_str_to_sid () failed with errno=-22 [ 328.738575][T17352] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 328.760382][T17364] rust_binder: Write failure EINVAL in pid:1282 [ 328.769926][T17355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182 [ 328.982385][T17377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1294 [ 329.465901][T17394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.475226][T17394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1302 [ 329.547764][T17405] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 330.020816][ T36] kauditd_printk_skb: 1027 callbacks suppressed [ 330.020834][ T36] audit: type=1400 audit(1750381986.739:74635): avc: denied { remount } for pid=17426 comm="syz.7.5415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 330.124285][ T36] audit: type=1400 audit(1750381986.839:74636): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.160272][ T36] audit: type=1400 audit(1750381986.839:74637): avc: denied { open } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.201631][ T36] audit: type=1400 audit(1750381986.839:74638): avc: denied { ioctl } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 330.232380][ T36] audit: type=1400 audit(1750381986.849:74639): avc: denied { read } for pid=17430 comm="syz.8.5416" name="binder0" dev="binder" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.256476][ T36] audit: type=1400 audit(1750381986.849:74640): avc: denied { open } for pid=17430 comm="syz.8.5416" path="/dev/binderfs/binder0" dev="binder" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.280849][ T36] audit: type=1400 audit(1750381986.849:74641): avc: denied { read } for pid=17430 comm="syz.8.5416" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.303736][ T36] audit: type=1400 audit(1750381986.849:74642): avc: denied { open } for pid=17430 comm="syz.8.5416" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.326990][ T36] audit: type=1400 audit(1750381986.849:74643): avc: denied { ioctl } for pid=17430 comm="syz.8.5416" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 330.351766][ T36] audit: type=1400 audit(1750381986.869:74644): avc: denied { ioctl } for pid=17430 comm="syz.8.5416" path="/dev/binderfs/binder0" dev="binder" ino=247 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.448290][T17440] binder: Unknown parameter 'coztext' [ 330.520536][T17451] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207 [ 330.557869][T17453] rust_binder: Error while translating object. [ 330.559479][T17462] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.568214][T17453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.579735][T17453] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 330.779908][T17478] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 330.789481][T17478] rust_binder: Error while translating object. [ 330.800680][T17478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 330.806971][T17478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:85 [ 330.820697][T17478] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 330.919338][T17487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 330.919369][T17487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1331 [ 330.940802][T17487] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.949507][T17490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.020267][T17496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:220 [ 331.100292][T17502] binder: Unknown parameter 'coyBLV"i5ntext' [ 331.155299][T17501] rust_binder: Error while translating object. [ 331.155333][T17501] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.162205][T17501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1342 [ 331.254692][T17512] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.381984][T17521] rust_binder: Write failure EINVAL in pid:95 [ 331.422069][T17525] SELinux: failed to load policy [ 331.446039][T17525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.447011][T17525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:421 [ 331.484688][T17528] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 331.743155][T17556] tun0: tun_chr_ioctl cmd 1074025676 [ 331.748473][T17556] tun0: owner set to 0 [ 331.759824][T17554] rust_binder: Write failure EINVAL in pid:103 [ 331.781636][T17554] rust_binder: Error in use_page_slow: ESRCH [ 331.781660][T17554] rust_binder: use_range failure ESRCH [ 331.783874][T17558] rust_binder: Error in use_page_slow: ESRCH [ 331.788009][T17554] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 331.799594][T17558] rust_binder: use_range failure ESRCH [ 331.807554][T17558] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 331.812897][T17554] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 331.813543][T17558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 331.821032][T17554] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 331.832952][T17558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:103 [ 331.968940][T17581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.969667][T17581] rust_binder: Error while translating object. [ 331.976230][T17581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.988826][T17581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 332.001030][T17585] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.050676][T17588] kvm: kvm [17586]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 332.120693][T17604] __vm_enough_memory: pid: 17604, comm: syz.6.5470, bytes: 281474976845824 not enough memory for the allocation [ 332.125423][T17608] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.132638][T17608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 332.141879][T17608] rust_binder: Error while translating object. [ 332.151176][T17608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.157529][T17608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 332.163443][T17611] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 332.176479][T17611] rust_binder: Error while translating object. [ 332.195931][T17611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.205626][T17615] input: syz0 as /devices/virtual/input/input270 [ 332.221610][T17611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1380 [ 332.250454][T17620] binder: Unknown parameter 'seclgel' [ 332.263435][T17615] SELinux: failed to load policy [ 332.299572][T17615] rust_binder: Write failure EFAULT in pid:239 [ 332.480694][T17634] rust_binder: Write failure EINVAL in pid:1394 [ 332.594077][T17646] binder: Unknown parameter '' [ 332.650126][T17653] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 332.650151][T17653] rust_binder: Error while translating object. [ 332.668344][T17653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.677644][T17653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1405 [ 332.739793][T17669] SELinux: failed to load policy [ 332.829876][T17679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.860362][T17671] rust_binder: Error while translating object. [ 332.870077][T17671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.876801][T17671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:443 [ 333.005205][T17696] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.016111][T17696] rust_binder: Error while translating object. [ 333.022634][T17696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.028882][T17696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447 [ 333.057511][T17698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:449 [ 333.067947][T17700] SELinux: security_context_str_to_sid (unco) failed with errno=-22 [ 333.179181][T17719] kvm: kvm [17718]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 333.360986][T17733] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 333.379745][T17739] SELinux: failed to load policy [ 333.387054][T17733] rust_binder: Write failure EINVAL in pid:263 [ 333.394985][T17744] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 333.398315][T17739] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 333.413420][T17744] rust_binder: Error while translating object. [ 333.415639][T17739] rust_binder: Error while translating object. [ 333.425397][T17744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.433692][T17739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.438489][T17744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1433 [ 333.446602][T17739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 333.490951][T17750] SELinux: security_context_str_to_sid () failed with errno=-22 [ 333.517433][T17750] binder: Bad value for 'max' [ 333.534110][T17756] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.542595][T17756] rust_binder: Error in use_page_slow: ESRCH [ 333.556621][T17756] rust_binder: use_range failure ESRCH [ 333.568399][T17756] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 333.574000][T17756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 333.577933][T17755] binder: Unknown parameter '0x0000000000000004' [ 333.582086][T17756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:463 [ 333.617813][T17762] rust_binder: Write failure EINVAL in pid:1440 [ 333.676855][T17764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:155 [ 333.698725][T17772] binder: Bad value for 'max' [ 333.763709][T17776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.823235][T17782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.842889][T17790] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 333.874497][T17791] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 333.888115][T17791] rust_binder: Write failure EINVAL in pid:1452 [ 333.929651][T17805] binder: Unknown parameter 'secIabel' [ 334.015418][T17814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 334.017356][T17814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.031136][T17814] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 334.039093][T17814] rust_binder: Read failure Err(EFAULT) in pid:287 [ 334.152740][T17827] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.187538][T17833] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.188356][T17834] binder: Bad value for 'stats' [ 334.273326][T17840] rust_binder: Error in use_page_slow: ESRCH [ 334.273350][T17840] rust_binder: use_range failure ESRCH [ 334.282602][T17840] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 334.286803][T17843] rust_binder: Error in use_page_slow: ESRCH [ 334.288133][T17840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.296598][T17843] rust_binder: use_range failure ESRCH [ 334.302188][T17840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:292 [ 334.311968][T17843] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 334.327076][T17843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.335265][T17843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:477 [ 334.347189][T17845] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.358562][T17845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1466 [ 334.371661][T17847] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.423625][T17852] rust_binder: Error while translating object. [ 334.430187][T17852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 334.436598][T17852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 334.519218][T17867] random: crng reseeded on system resumption [ 334.550908][T17869] input: syz0 as /devices/virtual/input/input275 [ 334.616795][T17874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.632073][T17878] binder: Bad value for 'max' [ 334.686917][T17886] rust_binder: Write failure EINVAL in pid:313 [ 334.706992][T17889] binder: Unknown parameter 'defcontext01777777777777777777777' [ 334.955374][T17897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.957003][T17897] rust_binder: Error in use_page_slow: ESRCH [ 334.963660][T17897] rust_binder: use_range failure ESRCH [ 334.969754][T17897] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 334.975294][T17897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 334.983320][T17897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:318 [ 335.053992][ T36] kauditd_printk_skb: 1545 callbacks suppressed [ 335.054009][ T36] audit: type=1400 audit(1750381991.769:76190): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.094151][ T36] audit: type=1400 audit(1750381991.809:76191): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.181761][ T36] audit: type=1400 audit(1750381991.899:76192): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.206111][ T36] audit: type=1400 audit(1750381991.899:76193): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.229774][ T36] audit: type=1400 audit(1750381991.899:76194): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.266134][ T36] audit: type=1400 audit(1750381991.899:76195): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.294380][ T36] audit: type=1400 audit(1750381991.909:76196): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.318139][ T36] audit: type=1400 audit(1750381992.019:76197): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.385101][ T36] audit: type=1400 audit(1750381992.099:76198): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.414464][ T36] audit: type=1400 audit(1750381992.129:76199): avc: denied { read write } for pid=12173 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 335.533283][T17903] rust_binder: Write failure EINVAL in pid:1474 [ 335.864836][T17926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.934462][T17936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.941335][T17936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 335.950075][T17936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 335.959485][T17936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 336.012948][T17939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.066021][T17943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:507 [ 336.146527][T17948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.223528][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.237044][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.246719][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.253704][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.260708][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.260853][T17954] rust_binder: Error in use_page_slow: ESRCH [ 336.267179][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.280188][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.286667][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.293771][T17952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.301743][T17954] rust_binder: use_range failure ESRCH [ 336.308213][T17954] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 336.313770][T17954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 336.321817][T17954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:513 [ 336.470838][T17958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 336.533147][T17959] binfmt_misc: register: failed to install interpreter file ./cgroup [ 336.555206][T17959] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer. [ 336.884902][T17962] binder: Unknown parameter 'mae0000000E0000A00000000' [ 336.919577][T17964] rust_binder: Write failure EFAULT in pid:193 [ 336.967202][T17966] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 336.973454][T17966] rust_binder: Error while translating object. [ 336.984167][T17966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.990903][T17966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 337.229753][T17976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202 [ 337.397580][T17983] rust_binder: Failed to allocate buffer. len:18446744073709551544, is_oneway:false [ 337.494683][T17990] random: crng reseeded on system resumption [ 337.534631][T17990] rust_binder: Error while translating object. [ 337.534658][T17990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.541337][T17990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 337.596599][T17997] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.606457][T17996] input: syz1 as /devices/virtual/input/input277 [ 337.616553][T17997] rust_binder: Error while translating object. [ 337.626164][T17997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.634561][T17996] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 261) [ 337.636259][T17997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:532 [ 337.644060][T17996] rust_binder: Error while translating object. [ 337.664311][T17996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.670758][T17996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211 [ 337.713423][T17999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.722736][T17999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 337.751062][T18002] rust_binder: Error while translating object. [ 337.773163][T18002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.783266][T18002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:534 [ 337.816060][T18004] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.837408][T18004] rust_binder: Got transaction with invalid offset. [ 337.844558][T18004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 337.851583][T18004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:537 [ 337.990533][T18007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 338.004152][T18007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:215 [ 338.014427][T18007] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 338.023652][T18007] rust_binder: Read failure Err(EFAULT) in pid:215 [ 338.321338][T18029] rust_binder: Error while translating object. [ 338.327901][T18029] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.348117][T18029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 338.369651][T18029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:223 [ 338.412991][T18033] rust_binder: Write failure EFAULT in pid:225 [ 338.426523][T18033] SELinux: security_context_str_to_sid () failed with errno=-22 [ 338.566272][T18041] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 338.566295][T18041] rust_binder: Error while translating object. [ 338.575697][T18041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.582032][T18041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:233 [ 338.602064][T18045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.709804][T18056] binder: Unknown parameter 'nXI' [ 338.736151][T18058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1513 [ 338.757597][T18061] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 338.802969][T18063] binder: Unknown parameter 'euid>00000000000000000000' [ 338.937237][T18070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.938070][T18070] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 338.944608][T18070] rust_binder: Error while translating object. [ 338.953316][T18070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.959578][T18070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 339.576245][T18078] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.596895][T18078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1517 [ 339.657388][T18077] cgroup: fork rejected by pids controller in /syz6 [ 339.805104][T18191] rust_binder: Write failure EFAULT in pid:562 [ 339.944097][T18202] rust_binder: Write failure EFAULT in pid:258 [ 340.058995][ T36] kauditd_printk_skb: 1990 callbacks suppressed [ 340.059013][ T36] audit: type=1400 audit(1750381996.779:78190): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.109007][T18211] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 340.109028][T18211] rust_binder: Error while translating object. [ 340.119276][ T304] bridge_slave_1: left allmulticast mode [ 340.143010][T18211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.143042][T18211] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:571 [ 340.153096][ T36] audit: type=1400 audit(1750381996.809:78191): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.186044][ T304] bridge_slave_1: left promiscuous mode [ 340.195669][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.206352][T18211] input: syz1 as /devices/virtual/input/input278 [ 340.213249][ T304] bridge_slave_0: left allmulticast mode [ 340.219435][ T304] bridge_slave_0: left promiscuous mode [ 340.225049][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.233563][ T36] audit: type=1400 audit(1750381996.809:78192): avc: denied { read write } for pid=15709 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.243090][T18217] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.262096][ T36] audit: type=1400 audit(1750381996.809:78193): avc: denied { open } for pid=15709 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 340.268281][T16428] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.289454][T18214] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.297302][T18219] audit: audit_backlog=65 > audit_backlog_limit=64 [ 340.308013][T16428] audit: audit_lost=291 audit_rate_limit=0 audit_backlog_limit=64 [ 340.309897][T18217] audit: audit_lost=292 audit_rate_limit=0 audit_backlog_limit=64 [ 340.359140][T18217] SELinux: policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c [ 340.369417][T18217] SELinux: failed to load policy [ 340.483162][ T304] veth1_macvtap: left promiscuous mode [ 340.488705][ T304] veth0_vlan: left promiscuous mode [ 340.568333][T18218] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.578775][T18218] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.593058][T18218] bridge_slave_0: entered allmulticast mode [ 340.599507][T18218] bridge_slave_0: entered promiscuous mode [ 340.606585][T18218] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.632695][T18218] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.647502][T18218] bridge_slave_1: entered allmulticast mode [ 340.653888][T18218] bridge_slave_1: entered promiscuous mode [ 340.673916][T18224] rust_binder: Error while translating object. [ 340.673953][T18224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 340.680693][T18224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:575 [ 340.851305][T18218] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.867392][T18218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.874690][T18218] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.881744][T18218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.899990][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.907321][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.925669][T18238] binder: Unknown parameter 'hash' [ 340.972440][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.979514][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.004401][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.011489][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.084591][T18218] veth0_vlan: entered promiscuous mode [ 341.119894][T18218] veth1_macvtap: entered promiscuous mode [ 341.254489][T18245] binder: Unknown parameter '' [ 341.333425][T18250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.349414][T18250] rust_binder: Write failure EINVAL in pid:5 [ 341.560140][T18265] rust_binder: Write failure EINVAL in pid:7 [ 341.639822][T18265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 341.915253][T18283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 341.915940][T18284] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 341.918343][T18283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.934188][T18285] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 341.950528][T18285] rust_binder: Error while translating object. [ 341.965363][T18285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 341.968797][T18284] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 341.971575][T18285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 342.148250][T18296] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 342.189257][T18297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:605 [ 342.228831][T18301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 342.242038][T18301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:297 [ 342.432862][T18310] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 342.461696][T18314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 342.461727][T18314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:612 [ 342.472298][T18310] rust_binder: Write failure EINVAL in pid:17 [ 342.592636][T18317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:301 [ 342.594713][T18324] rust_binder: Error while translating object. [ 342.608054][T18324] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 342.620771][T18324] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 342.839285][T18332] rust_binder: Write failure EINVAL in pid:621 [ 342.851523][T18339] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.880952][T18337] rust_binder: Error in use_page_slow: ESRCH [ 342.880975][T18337] rust_binder: use_range failure ESRCH [ 342.886971][T18337] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 342.892902][T18337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 342.901718][T18337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:26 [ 342.972556][T18344] rust_binder: Write failure EFAULT in pid:32 [ 343.063192][T18351] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 343.077531][T18351] rust_binder: Write failure EINVAL in pid:34 [ 343.277670][T18362] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 343.290158][T18362] rust_binder: Read failure Err(EFAULT) in pid:42 [ 343.347525][T18370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.403299][T18376] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.410490][T18376] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 343.416971][T18376] rust_binder: Error while translating object. [ 343.428127][T18376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.435271][T18376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:53 [ 343.475997][T18378] rust_binder: Write failure EINVAL in pid:633 [ 343.911800][ T64] hid-generic C98F:0003:0000.0022: unknown main item tag 0x0 [ 343.950600][ T64] hid-generic C98F:0003:0000.0022: unknown main item tag 0x0 [ 343.958526][T18414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 343.961479][T18411] binder: Unknown parameter 'tZ)atQ' [ 343.979659][ T64] hid-generic C98F:0003:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz1 [ 344.089071][T18420] fido_id[18420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 344.099412][T18424] binder: Unknown parameter 'fowner<00000000000000000000' [ 344.146402][T18426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64 [ 344.362618][T18440] rust_binder: Error in use_page_slow: ESRCH [ 344.362634][T18440] rust_binder: use_range failure ESRCH [ 344.378550][T18440] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 344.378574][T18440] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 344.416422][T18440] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:649 [ 344.567802][T18458] rust_binder: Write failure EFAULT in pid:654 [ 344.587629][T18449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 344.617413][T18462] binder: Bad value for 'stats' [ 344.705768][T18469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 344.705800][T18469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 344.790688][T18476] rust_binder: Write failure EINVAL in pid:76 [ 344.883606][T18483] input input282: cannot allocate more than FF_MAX_EFFECTS effects [ 345.020414][T18493] rust_binder: Write failure EINVAL in pid:81 [ 345.056767][T18498] binder: Unknown parameter 'fscontext?}' [ 345.079269][ T36] kauditd_printk_skb: 2232 callbacks suppressed [ 345.079285][ T36] audit: type=1400 audit(1750382001.799:80399): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.122494][ T36] audit: type=1400 audit(1750382001.799:80400): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.151513][ T36] audit: type=1400 audit(1750382001.799:80401): avc: denied { open } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.181702][ T36] audit: type=1400 audit(1750382001.799:80402): avc: denied { ioctl } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 345.208366][ T36] audit: type=1400 audit(1750382001.819:80403): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.232073][ T36] audit: type=1400 audit(1750382001.829:80404): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.271545][ T36] audit: type=1400 audit(1750382001.829:80405): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.304887][ T36] audit: type=1400 audit(1750382001.829:80406): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.333773][T18505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 345.335124][ T36] audit: type=1400 audit(1750382001.829:80407): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.378790][ T36] audit: type=1400 audit(1750382001.829:80408): avc: denied { read } for pid=18499 comm="syz.8.5727" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 345.805618][T18532] rust_binder: Write failure EINVAL in pid:93 [ 345.970853][T18541] rust_binder: Error while translating object. [ 345.977030][T18541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 345.983988][T18541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 346.018797][T18543] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 346.250398][T18562] binder: Bad value for 'max' [ 346.300013][T18564] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 346.342673][T18566] input: syz1 as /devices/virtual/input/input286 [ 346.634589][T18578] binder: Unknown parameter 'context' [ 346.641467][T18580] binder: Unknown parameter 'context' [ 346.673467][T18586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.673497][T18586] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.685168][T18582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 346.713600][T18582] rust_binder: Error while translating object. [ 346.737271][T18582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 346.752313][T18582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 346.894218][T18594] rust_binder: Error while translating object. [ 346.915505][T18594] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 346.941325][T18594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130 [ 347.139435][T18610] binder: Binderfs stats mode cannot be changed during a remount [ 347.218065][T18614] SELinux: failed to load policy [ 347.224459][T18614] rust_binder: Write failure EFAULT in pid:135 [ 347.322607][T18622] binfmt_misc: register: failed to install interpreter file ./file0 [ 347.341411][T18622] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.343147][T18622] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 347.360786][T18623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 347.399277][T18625] rust_binder: Error while translating object. [ 347.424792][T18625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 347.431555][T18625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:137 [ 347.442596][T18627] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.471737][T18627] binder: Unknown parameter 'dont_hash' [ 347.549426][T18637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.549687][T18637] rust_binder: Write failure EINVAL in pid:714 [ 347.583175][T18642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 347.598790][T18642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:141 [ 347.625998][T18628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 347.772040][T18653] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 347.795018][T18654] rust_binder: Write failure EFAULT in pid:721 [ 347.799978][T18653] rust_binder: Write failure EINVAL in pid:143 [ 347.897185][T18659] rust_binder: Error while translating object. [ 347.924185][T18659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 347.939052][T18659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 348.089231][T18661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:725 [ 348.209525][T18663] input: syz0 as /devices/virtual/input/input287 [ 348.361399][ T9368] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.375591][ T9368] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.389579][ T9368] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.409570][ T9368] rtc_cmos 00:00: Alarms can be up to one day in the future [ 348.427567][ T9368] rtc rtc0: __rtc_set_alarm: err=-22 [ 348.502319][T18668] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 348.549636][T18670] rust_binder: Write failure EFAULT in pid:732 [ 348.716954][T18676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:408 [ 348.763250][T18677] rust_binder: Error in use_page_slow: ESRCH [ 348.763269][T18677] rust_binder: use_range failure ESRCH [ 348.778905][T18677] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 348.778930][T18677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 348.786913][T18677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:408 [ 348.932855][T18693] random: crng reseeded on system resumption [ 348.972648][T18695] rust_binder: Write failure EINVAL in pid:739 [ 348.979197][T18695] rust_binder: Write failure EINVAL in pid:739 [ 349.318084][T18715] binfmt_misc: register: failed to install interpreter file ./cgroup [ 349.444629][T18721] SELinux: failed to load policy [ 349.669625][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.671413][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.688055][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.688193][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.715324][T18725] rust_binder: Error in use_page_slow: ESRCH [ 349.729199][T18725] rust_binder: use_range failure ESRCH [ 349.729223][T18725] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 349.755917][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.756618][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.765086][T18725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 349.765675][T18729] rust_binder: Write failure EINVAL in pid:427 [ 349.782146][T18725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:760 [ 349.790644][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.829617][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.829641][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.846885][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.854247][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.861090][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.867797][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.876095][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.883581][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.890998][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.897641][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.897650][T18735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.911200][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.917782][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.924452][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.944650][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.951162][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.978082][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.987626][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.004428][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.018993][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.035736][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.044796][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.058926][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.068802][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.079036][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.085521][T18726] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.093551][ T36] kauditd_printk_skb: 1983 callbacks suppressed [ 350.093567][ T36] audit: type=1400 audit(1750382006.809:82392): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.152384][T18740] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 350.168840][ T36] audit: type=1400 audit(1750382006.849:82393): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.202377][T18740] rust_binder: Write failure EINVAL in pid:429 [ 350.212447][ T36] audit: type=1400 audit(1750382006.869:82394): avc: denied { ioctl } for pid=18734 comm="syz.8.5809" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 350.316772][ T36] audit: type=1400 audit(1750382006.869:82395): avc: denied { read } for pid=18734 comm="syz.8.5809" name="binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.378582][ T36] audit: type=1400 audit(1750382006.869:82396): avc: denied { read open } for pid=18734 comm="syz.8.5809" path="/dev/binderfs/binder0" dev="binder" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.406397][T18745] rust_binder: Write failure EFAULT in pid:766 [ 350.440075][ T36] audit: type=1400 audit(1750382006.869:82397): avc: denied { ioctl } for pid=18734 comm="syz.8.5809" path="/dev/binderfs/binder0" dev="binder" ino=71 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 350.501139][ T36] audit: type=1400 audit(1750382006.879:82398): avc: denied { setattr } for pid=16428 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.526105][ T36] audit: type=1400 audit(1750382006.969:82399): avc: denied { read write } for pid=15709 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.569933][ T36] audit: type=1400 audit(1750382006.969:82400): avc: denied { read write open } for pid=15709 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.601147][ T36] audit: type=1400 audit(1750382006.969:82401): avc: denied { ioctl } for pid=15709 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.699606][ T1007] bridge_slave_1: left allmulticast mode [ 350.705341][ T1007] bridge_slave_1: left promiscuous mode [ 350.715510][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.730724][ T1007] bridge_slave_0: left allmulticast mode [ 350.746344][ T1007] bridge_slave_0: left promiscuous mode [ 350.752159][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.858432][T18746] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.865509][T18746] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.872682][T18746] bridge_slave_0: entered allmulticast mode [ 350.878916][T18746] bridge_slave_0: entered promiscuous mode [ 350.885461][T18746] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.892509][T18746] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.899951][T18746] bridge_slave_1: entered allmulticast mode [ 350.906279][T18746] bridge_slave_1: entered promiscuous mode [ 350.935469][T18857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:435 [ 350.956837][ T1007] veth1_macvtap: left promiscuous mode [ 350.980327][ T1007] veth0_vlan: left promiscuous mode [ 351.040932][T18864] binder: Bad value for 'stats' [ 351.062505][T18864] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 351.073782][T18864] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:438 [ 351.187217][T18746] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.203391][T18746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.210674][T18746] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.217692][T18746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.237267][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.244512][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.256540][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.263617][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.284786][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.291854][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.318399][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.325480][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.332781][T18873] bridge_slave_0: entered allmulticast mode [ 351.339436][T18873] bridge_slave_0: entered promiscuous mode [ 351.348059][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.355515][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.362653][T18873] bridge_slave_1: entered allmulticast mode [ 351.369262][T18873] bridge_slave_1: entered promiscuous mode [ 351.416058][T18746] veth0_vlan: entered promiscuous mode [ 351.466787][T18746] veth1_macvtap: entered promiscuous mode [ 351.544712][T18882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.544761][T18882] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.559058][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.572532][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.597029][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.604115][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.653344][T18873] veth0_vlan: entered promiscuous mode [ 351.661995][T18888] kvm: user requested TSC rate below hardware speed [ 351.778877][T18894] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.779396][T18895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.786567][T18894] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 351.786579][T18895] rust_binder: Error in use_page_slow: ESRCH [ 351.786591][T18895] rust_binder: use_range failure ESRCH [ 351.793233][T18894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 351.801566][T18895] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 351.807516][T18894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:449 [ 351.812670][T18895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 351.839084][T18895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:449 [ 351.969453][ T1007] bridge_slave_1: left allmulticast mode [ 351.984190][ T1007] bridge_slave_1: left promiscuous mode [ 351.990926][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.998528][ T1007] bridge_slave_0: left allmulticast mode [ 352.004471][ T1007] bridge_slave_0: left promiscuous mode [ 352.010479][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.050816][T18905] input: syz0 as /devices/virtual/input/input288 [ 352.056444][T18904] input: syz1 as /devices/virtual/input/input289 [ 352.068123][T18904] rust_binder: Failed to allocate buffer. len:4294967216, is_oneway:false [ 352.068145][T18904] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 352.077943][T18904] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:176 [ 352.095251][T18873] veth1_macvtap: entered promiscuous mode [ 352.144977][T18910] binder: Bad value for 'stats' [ 352.167381][T18912] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.168136][T18912] rust_binder: Error while translating object. [ 352.175498][T18912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.183293][T18912] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:456 [ 352.234282][T18918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:458 [ 352.269669][ T1007] veth1_macvtap: left promiscuous mode [ 352.290352][ T1007] veth0_vlan: left promiscuous mode [ 352.354485][T18928] rust_binder: validate_parent_fixup: new_min_offset=57, sg_entry.length=12 [ 352.354549][T18928] rust_binder: Error while translating object. [ 352.365435][T18928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.372667][T18928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 352.424537][T18935] SELinux: security_context_str_to_sid () failed with errno=-22 [ 352.467889][T18939] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:463 [ 352.491300][T18948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.544059][T18952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.557462][T18948] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 352.571742][T18948] rust_binder: Error while translating object. [ 352.571792][T18948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.580344][T18948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 352.583542][T18952] rust_binder: Error while translating object. [ 352.599020][T18952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.605229][T18952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 352.629425][T18948] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 28) [ 352.638623][T18948] rust_binder: Error while translating object. [ 352.649387][T18948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 352.655606][T18948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466 [ 352.851218][T18964] rust_binder: inc_ref_done called when no active inc_refs [ 352.904495][T18967] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 352.907100][T18966] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 353.479084][T18982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205 [ 353.530214][T18986] rust_binder: Write failure EFAULT in pid:18 [ 353.562167][T18995] SELinux: security_context_str_to_sid () failed with errno=-22 [ 353.592880][T19002] rust_binder: Error while translating object. [ 353.592915][T19002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.599884][T19002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:215 [ 353.632977][T19011] rust_binder: Error while translating object. [ 353.647180][T19011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 353.653861][T19011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:219 [ 353.680972][T19016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221 [ 353.736038][T19027] binder: Unknown parameter 'Max' [ 353.765934][T19030] binder: Bad value for 'stats' [ 353.777047][T19032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.780159][T19030] binder: Bad value for 'stats' [ 353.831809][T19040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 353.928245][T19043] input: syz1 as /devices/virtual/input/input292 [ 353.942319][T19044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 353.960379][T19043] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3071 [ 353.988426][T19043] rust_binder: Write failure EINVAL in pid:482 [ 354.001278][T19046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:232 [ 354.016540][T19047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.025900][T19047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.033257][T19047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.035734][T19051] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.064290][T19051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:484 [ 354.067863][T19054] input: syz0 as /devices/virtual/input/input293 [ 354.095389][T19054] binder: Unknown parameter 'non' [ 354.310645][T19067] tun0: tun_chr_ioctl cmd 2148553947 [ 354.506677][T19076] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.508810][T19076] rust_binder: Write failure EINVAL in pid:488 [ 354.547849][T19082] rust_binder: Write failure EFAULT in pid:490 [ 354.566266][T19085] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 354.624527][T19088] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.693311][T19094] rust_binder: Write failure EFAULT in pid:498 [ 354.704697][T19094] rust_binder: Write failure EINVAL in pid:498 [ 354.712385][T19094] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 354.757405][T19094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 354.776774][T19094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:498 [ 354.783107][T19104] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 354.793492][T19102] input: syz1 as /devices/virtual/input/input296 [ 354.804980][T19104] rust_binder: Write failure EINVAL in pid:240 [ 354.808034][T19105] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 354.823436][T19105] rust_binder: Write failure EINVAL in pid:240 [ 354.922802][T19109] rust_binder: Failed copying remainder into alloc: EFAULT [ 354.931945][T19109] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 354.940511][T19109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 354.950978][T19109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:60 [ 355.060072][T19121] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 355.077219][T19124] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 355.080166][T19121] rust_binder: Error while translating object. [ 355.098102][ T45] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 355.100713][T19121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.111730][ T36] kauditd_printk_skb: 1109 callbacks suppressed [ 355.111746][ T36] audit: type=1400 audit(1750382011.819:83511): avc: denied { ioctl } for pid=19120 comm="syz.7.5899" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.115953][ T45] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 355.127443][T19121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 355.153282][ T45] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 355.161973][ T36] audit: type=1400 audit(1750382011.879:83512): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.170515][ T45] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 355.180358][ T36] audit: type=1400 audit(1750382011.889:83513): avc: denied { open } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.216587][ T45] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 355.241517][ T45] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 355.256165][ T36] audit: type=1400 audit(1750382011.889:83514): avc: denied { ioctl } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.318135][ T36] audit: type=1400 audit(1750382011.929:83515): avc: denied { read } for pid=19125 comm="syz.8.5901" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.321403][T19136] rust_binder: Write failure EFAULT in pid:507 [ 355.341745][ T36] audit: type=1400 audit(1750382011.929:83516): avc: denied { open } for pid=19125 comm="syz.8.5901" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.357329][T19138] binder: Binderfs stats mode cannot be changed during a remount [ 355.375138][ T36] audit: type=1400 audit(1750382011.929:83517): avc: denied { ioctl } for pid=19125 comm="syz.8.5901" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 355.380057][T19139] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.413963][ T36] audit: type=1400 audit(1750382011.949:83518): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.445349][ T36] audit: type=1400 audit(1750382011.949:83519): avc: denied { open } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.446652][T19138] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 355.470269][ T36] audit: type=1400 audit(1750382011.949:83520): avc: denied { ioctl } for pid=17069 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.478786][T19138] rust_binder: Write failure EINVAL in pid:68 [ 355.505503][T19136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 355.604607][T19148] binder: Bad value for 'max' [ 355.693487][T19156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.738056][T19159] binder: Binderfs stats mode cannot be changed during a remount [ 355.783175][T19162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.784047][T19162] rust_binder: Error in use_page_slow: ESRCH [ 355.790671][T19162] rust_binder: use_range failure ESRCH [ 355.796682][T19162] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 355.802247][T19162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 355.810363][T19162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:512 [ 356.184068][T19179] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.250704][T19188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.257424][T19188] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.342904][T19200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.349751][T19200] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.508191][T19209] kvm: kvm [19208]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 356.642486][T19214] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.645160][T19215] binder: Unknown parameter 'processor : 0 [ 356.645160][T19215] vendor_id : GenuineIntel [ 356.645160][T19215] cpu family : 6 [ 356.645160][T19215] model : 79 [ 356.645160][T19215] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 356.645160][T19215] stepping : 0 [ 356.645160][T19215] microcode : 0xffffffff [ 356.645160][T19215] cpu MHz : 2200.150 [ 356.645160][T19215] cache size : 56320 KB [ 356.645160][T19215] physical id : 0 [ 356.645160][T19215] siblings : 2 [ 356.645160][T19215] core id : 0 [ 356.645160][T19215] cpu cores : 1 [ 356.645160][T19215] apicid : 0 [ 356.645160][T19215] initial apicid : 0 [ 356.645160][T19215] fpu : yes [ 356.645160][T19215] fpu_exception : yes [ 356.645160][T19215] cpuid level : 13 [ 356.645160][T19215] wp : yes [ 356.645160][T19215] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle/dev/ppp' [ 356.865992][T19224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.884194][T19225] rust_binder: Write failure EINVAL in pid:537 [ 356.985507][T19240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.012573][T19243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.186016][T19254] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 357.193171][T19254] rust_binder: Read failure Err(EFAULT) in pid:56 [ 357.206246][T19251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.225518][T19251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.237503][T19251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556 [ 357.292708][T19258] binder: Unknown parameter 'nXIK[Gp#F1`[ )RǬI?u t\' [ 357.297156][T19263] rust_binder: Read failure Err(EAGAIN) in pid:558 [ 357.330310][T19268] SELinux: Context \MZr})QN'd: is not valid (left unmapped). [ 357.371357][T19271] rust_binder: Write failure EINVAL in pid:61 [ 357.393642][T19273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 357.404506][T19273] rust_binder: Error while translating object. [ 357.413943][T19273] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.420207][T19273] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109 [ 357.447683][T19277] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 357.517267][T19285] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.517429][T19284] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 357.565962][T19287] rust_binder: Read failure Err(EAGAIN) in pid:271 [ 357.605627][T19295] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.612704][T19295] rust_binder: Error while translating object. [ 357.619266][T19295] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.625506][T19295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 357.671525][T19297] binder: Unknown parameter 'coyBLV"i5ntext' [ 357.690625][T19298] binder: Unknown parameter 'coyBLV"i5ntext' [ 357.735740][T19305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.789676][T19314] binder: Bad value for 'max' [ 357.802403][T19317] input: syz0 as /devices/virtual/input/input300 [ 357.908877][T19328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 357.980784][T19344] binder: Unknown parameter 'dont_hash' [ 357.986721][T19345] rust_binder: Write failure EFAULT in pid:282 [ 358.008998][T19354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.018200][T19355] rust_binder: Error in use_page_slow: ESRCH [ 358.022117][T19354] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 358.025009][T19355] rust_binder: use_range failure ESRCH [ 358.030732][T19354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 358.038922][T19355] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 358.045953][T19354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:292 [ 358.061716][T19355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 358.070903][T19355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:292 [ 358.251062][T19363] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 358.319884][T19367] rust_binder: Write failure EFAULT in pid:128 [ 358.360222][T19372] SELinux: security_context_str_to_sid () failed with errno=-22 [ 358.383590][T19372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 360.118849][ T36] kauditd_printk_skb: 10076 callbacks suppressed [ 360.118867][ T36] audit: type=1400 audit(1750382016.839:92311): avc: denied { setattr } for pid=18218 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 360.131521][T18746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.148661][T18218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.178308][T18746] audit: audit_lost=740 audit_rate_limit=0 audit_backlog_limit=64 [ 360.178719][T18218] audit: audit_lost=741 audit_rate_limit=0 audit_backlog_limit=64 [ 360.186744][T18746] audit: backlog limit exceeded [ 360.194192][ T36] audit: type=1400 audit(1750382016.839:92312): avc: denied { setattr } for pid=18746 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 360.222045][T18218] audit: backlog limit exceeded [ 360.227676][T18218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 360.234282][T18218] audit: audit_lost=742 audit_rate_limit=0 audit_backlog_limit=64 [ 365.128782][ T36] kauditd_printk_skb: 75405 callbacks suppressed [ 365.128799][ T36] audit: type=1400 audit(1750382021.829:141563): avc: denied { setattr } for pid=18218 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 365.128867][T18873] audit: audit_backlog=66 > audit_backlog_limit=64 [ 365.135166][ T36] audit: type=1400 audit(1750382021.829:141564): avc: denied { setattr } for pid=18218 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 365.158562][T18218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.168770][T18746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.191687][T19788] audit: audit_backlog=65 > audit_backlog_limit=64 [ 365.194934][T18746] audit: audit_lost=9681 audit_rate_limit=0 audit_backlog_limit=64 [ 365.201389][T18873] audit: audit_lost=9682 audit_rate_limit=0 audit_backlog_limit=64 [ 365.208484][ T36] audit: type=1400 audit(1750382021.829:141565): avc: denied { read write } for pid=17069 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.215864][T19788] audit: audit_lost=9683 audit_rate_limit=0 audit_backlog_limit=64 [ 370.138818][ T36] kauditd_printk_skb: 77441 callbacks suppressed [ 370.138835][ T36] audit: type=1400 audit(1750382026.849:195567): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 370.145686][T18218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.168643][T18873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.175256][T18746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 370.198489][T18873] audit: audit_lost=17745 audit_rate_limit=0 audit_backlog_limit=64 [ 370.204904][T18746] audit: audit_lost=17746 audit_rate_limit=0 audit_backlog_limit=64 [ 370.206546][T18873] audit: backlog limit exceeded [ 370.215059][T18746] audit: backlog limit exceeded [ 370.219317][ T36] audit: type=1400 audit(1750382026.839:195466): avc: denied { setattr } for pid=18218 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 370.224943][T18746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 374.160643][ T2362] bridge_slave_1: left allmulticast mode [ 374.166319][ T2362] bridge_slave_1: left promiscuous mode [ 374.178842][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.189277][ T2362] bridge_slave_0: left allmulticast mode [ 374.194933][ T2362] bridge_slave_0: left promiscuous mode [ 374.218833][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.420698][ T2362] veth1_macvtap: left promiscuous mode [ 374.426237][ T2362] veth0_vlan: left promiscuous mode [ 375.148860][ T36] kauditd_printk_skb: 91610 callbacks suppressed [ 375.148876][ T36] audit: type=1400 audit(1750382031.869:249827): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 375.156141][T18873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 375.179219][ T36] audit: type=1400 audit(1750382031.869:249828): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 375.185129][T18873] audit: audit_lost=30648 audit_rate_limit=0 audit_backlog_limit=64 [ 375.208592][ T36] audit: type=1400 audit(1750382031.869:249829): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 375.216519][T18873] audit: backlog limit exceeded [ 375.240038][ T36] audit: type=1400 audit(1750382031.869:249830): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 375.245644][T18873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 375.268371][ T36] audit: type=1400 audit(1750382031.869:249831): avc: denied { setattr } for pid=18873 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 375.274765][T18873] audit: audit_lost=30649 audit_rate_limit=0 audit_backlog_limit=64 [ 375.319306][ T2362] bridge_slave_1: left allmulticast mode [ 375.324969][ T2362] bridge_slave_1: left promiscuous mode [ 375.331129][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.339456][ T2362] bridge_slave_0: left allmulticast mode [ 375.345102][ T2362] bridge_slave_0: left promiscuous mode [ 375.350860][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.590687][ T2362] veth1_macvtap: left promiscuous mode [ 375.596217][ T2362] veth0_vlan: left promiscuous mode [ 377.272897][ T2362] bridge_slave_1: left allmulticast mode [ 377.278542][ T2362] bridge_slave_1: left promiscuous mode [ 377.284179][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.291666][ T2362] bridge_slave_0: left allmulticast mode [ 377.297298][ T2362] bridge_slave_0: left promiscuous mode [ 377.303106][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.519472][ T2362] veth1_macvtap: left promiscuous mode [ 377.524970][ T2362] veth0_vlan: left promiscuous mode [ 378.189303][ T2362] bridge_slave_1: left allmulticast mode [ 378.194945][ T2362] bridge_slave_1: left promiscuous mode [ 378.200583][ T2362] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.207972][ T2362] bridge_slave_0: left allmulticast mode [ 378.213709][ T2362] bridge_slave_0: left promiscuous mode [ 378.219328][ T2362] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.379478][ T2362] veth1_macvtap: left promiscuous mode [ 378.384969][ T2362] veth0_vlan: left promiscuous mode