last executing test programs: 1m46.883211985s ago: executing program 2 (id=1826): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0xa49) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000140)={0xa4, 0x0, 0x1}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000580)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 1m46.51888378s ago: executing program 2 (id=1830): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x2}) 1m46.362836743s ago: executing program 2 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r2, 0xfffff000) 1m46.199109185s ago: executing program 2 (id=1837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x44000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x1}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x2ff, 0x0, 0x3}]}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0xffffc000) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r6, 0x0) 1m46.071215797s ago: executing program 2 (id=1840): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x8c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="55dd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000240)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x4d36143e77a539bf, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/113, 0x71, 0x0, 0x25}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/164, 0xa4, 0x1, 0x1d}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0xec, 0x0, &(0x7f00000002c0)="71e21bde86476636e9bc24fe181f2c015d29ab5ff596cfcc04a31651ace8deb1cf04d7cbf8eb57dacbe1c36a9ce2ad7d4bd73f89573d685ea1553239ed8c65601b67ef7b048595065fcf27121d8793b37a8970b0a452d14b4d3fab98297f3db1155b8c34557df8d4758bf24a0e80151726e58d1da95932baf533edbc0bcbc7847a37eb9e9ccbcc6fc1b0481cae5c9601cb96143d44648a8f1a9e3250e437e84e3565cea7cc84211a5fe229ebaf1d4275581e56152d37964078e2120698b2de9cd93e666a8fbfe813feb2b076d90074f8241dc34c1e67bcb65422603f93e85ac87a09381446f43bc82610235d"}) 1m45.977418529s ago: executing program 2 (id=1844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1080, 0x200000000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000cd000000000000000900000000000000"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x29f}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_KVMCLOCK_CTRL(r9, 0xaead) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000002c0)=[@acquire_done, @dead_binder_done, @dead_binder_done], 0x4, 0x0, &(0x7f0000000180)="20f65a13"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, 0x0) 1m30.906218279s ago: executing program 32 (id=1844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) (async) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1080, 0x200000000000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000cd000000000000000900000000000000"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x29f}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000002404"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_KVMCLOCK_CTRL(r9, 0xaead) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x10001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000002c0)=[@acquire_done, @dead_binder_done, @dead_binder_done], 0x4, 0x0, &(0x7f0000000180)="20f65a13"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, 0x0) 1m27.415087223s ago: executing program 0 (id=2147): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="e1c194c07314197567609163a955a737cfdca424e4fc4ea388b431c78b32749341c73f7b7c51446e6bbf7f1de6a8ca5eb7372e3b24ef390ae15b6574683711fa3caff8f4fb3d0ca15b91526634d34eb3"}) (async) 1m27.414465052s ago: executing program 0 (id=2148): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r1, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000000000000000000d000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0x80, {0x8080000, 0x3000}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca52d6a648ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d4c4053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f44437918005356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "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"}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000000)={{0x80a0000, 0x1, 0x9, 0x4, 0x7, 0x2, 0x4, 0x69, 0x4, 0x6, 0x6, 0xc7}, {0x2, 0x1000, 0x1e, 0xb, 0xa, 0x5, 0x1, 0x9, 0x0, 0x5, 0xfe, 0x5}, {0x5000, 0xffff1000, 0x4, 0x7f, 0x2, 0x1, 0x6, 0x3, 0x1, 0xf, 0x3, 0x8}, {0xeeef0000, 0xeeeed000, 0xc, 0x81, 0xa, 0x6, 0x40, 0x1, 0x3, 0x8, 0x5, 0x6}, {0x1000, 0xffff1000, 0xa, 0xd, 0x0, 0x5, 0x1, 0x7, 0x8, 0x5e, 0xb7, 0x6}, {0x0, 0x5000, 0x9, 0x4, 0x9, 0x3, 0x7, 0xe, 0x5, 0x2, 0x2, 0x5}, {0x10000, 0x0, 0xf, 0xa6, 0xd1, 0x2, 0x4, 0xdc, 0x3, 0x8, 0xd2, 0xff}, {0x5000, 0x10000, 0xc, 0xd, 0x5b, 0x3, 0x8, 0x8, 0x33, 0x7, 0x7f, 0x2}, {0x8000000, 0x80}, {0x1, 0xa00}, 0x40000033, 0x0, 0xf000, 0x20, 0xe, 0x8401, 0xd000, [0xfc, 0x8, 0x8, 0x40]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x7) 1m27.373616213s ago: executing program 0 (id=2151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 1m27.250550335s ago: executing program 0 (id=2158): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='\x80l\x03\x00\xc5\x10\xaa\xc1D\xc8U\x9e>\xcd\xdd\xa2g\xec\x11\xe5\xc7:') prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) write$UHID_CREATE(r2, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/213, 0xd5, 0x1ff, 0x4, 0x400, 0x5, 0x2}}, 0x120) 1m27.242924385s ago: executing program 0 (id=2161): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) read$FUSE(r1, &(0x7f000001aa80)={0x2020}, 0x2021) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x60380, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10800, 0x0) write$cgroup_int(r4, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, 0x0) 1m27.232862785s ago: executing program 0 (id=2162): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0xfffffffffffffe9c) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:tmpfs_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x3, 0x20, './file0\x00'}, 0x49) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x806da4, &(0x7f0000000180)=ANY=[@ANYBLOB='max=0000001000000000000', @ANYRESHEX=r3]) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, 0x0, 0xfffffffffffffe9c) (async) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:tmpfs_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x3, 0x20, './file0\x00'}, 0x49) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123900, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x806da4, &(0x7f0000000180)=ANY=[@ANYBLOB='max=0000001000000000000', @ANYRESHEX=r3]) (async) 1m12.139086216s ago: executing program 33 (id=2162): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, 0x0, 0xfffffffffffffe9c) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:tmpfs_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x3, 0x20, './file0\x00'}, 0x49) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123900, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x806da4, &(0x7f0000000180)=ANY=[@ANYBLOB='max=0000001000000000000', @ANYRESHEX=r3]) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r1, 0x0, 0xfffffffffffffe9c) (async) write$selinux_create(r0, &(0x7f0000000040)=@objname={'system_u:object_r:tmpfs_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x3, 0x20, './file0\x00'}, 0x49) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x123900, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x806da4, &(0x7f0000000180)=ANY=[@ANYBLOB='max=0000001000000000000', @ANYRESHEX=r3]) (async) 1m0.869648548s ago: executing program 5 (id=2632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) close(r0) 1m0.833954459s ago: executing program 5 (id=2634): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df7"}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x2, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000000}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) 1m0.699798871s ago: executing program 5 (id=2638): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22c0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f00000000c0)) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000100)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000180)) ioctl$FIBMAP(r1, 0x1, &(0x7f00000001c0)=0x5) r2 = openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000240)={'c', ' *:* ', 'm\x00'}, 0x8) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000280)) ioctl$FIBMAP(r2, 0x1, &(0x7f00000002c0)=0x401) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000300)) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$BLKFINISHZONE(r1, 0x40101288, &(0x7f0000000380)={0xb800000000000000, 0x6}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000400)={0x7, &(0x7f00000003c0)=[{0x5, 0x2, 0x4, 0x52}, {0x7, 0x7f, 0x0, 0x400}, {0xffff, 0x9, 0xa6, 0x2}, {0x9, 0x0, 0x8, 0x2}, {0x0, 0x5, 0xfa, 0x2}, {0xf73f, 0x40, 0xa, 0x1}, {0x3, 0x8, 0x9, 0x62}]}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000500)={0x1, 0x4, 0x1000, 0x40, &(0x7f0000000440)="9c4ffb53f825f73b834b8e871389b20ea6579d7e224dce4f357e747b1274c78496641b678b884f0ea3fec5f4d8a9569ab51a7a35a4010cd5b349c06c966bef0c", 0x6c, 0x0, &(0x7f0000000480)="cdd90ab99b76e202a55c53a05a97d85a33f9eb2b4698617329cee917977c0b9d38ce6abd091119f7c1916b40e4c3894d986ef5064a44e231b5d8c794a74f182afda28e86b6f3afec338517c69d99aca70fb34bd5d87ecc9bdd71d3ec73373938a59bd05ab2d0fad8df476500"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom0\x00', 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000005c0)={{0x0, 0x7fffffffffffffff, 0x1, 0xf, 0x2, 0x9, 0x4, 0xbff6, 0x0, 0x401, 0xf, 0x0, 0x100000001, 0x0, 0x5}, 0x18, [0x0, 0x0, 0x0]}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000680)) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000700)={'\x00', 0x7, 0x3}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x2) ioctl$TCSBRK(r4, 0x5409, 0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$TIOCGPTLCK(r4, 0x80045439, &(0x7f0000000800)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000880)=0x2) 1m0.681986342s ago: executing program 5 (id=2639): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145080, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="e924f7ffffffffffffff"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000980)={0x10004, 0x240, 0x240, &(0x7f0000000580)=[0x3ff, 0x7, 0x4, 0x81, 0x3, 0x4, 0x8, 0x4, 0x6, 0xfff, 0x4, 0x8000, 0xff, 0x7198bbc6, 0xf, 0x2, 0x2, 0xb54, 0x4, 0x1, 0xa310, 0x5, 0x9, 0x4dc8, 0x7fc0000000000, 0x1, 0x1, 0x9c, 0x4895, 0x2, 0x9, 0x3, 0x0, 0x400, 0x9, 0x5, 0x401, 0x40, 0x64f8, 0x10, 0x0, 0x43, 0x6, 0x9, 0x2, 0x1, 0x0, 0x1, 0x686, 0x553, 0xbab9, 0x7, 0x4, 0x81, 0x5, 0x8001, 0x8, 0x5, 0x3, 0x1, 0x8000, 0x9, 0x9, 0x6, 0x8b2, 0x6842, 0xa000000000000000, 0x4, 0x8, 0x5, 0x2, 0x7, 0x6, 0xe, 0x9, 0x4b36, 0x1, 0x9, 0xd, 0x7ff, 0x10, 0x100000000, 0x7, 0x0, 0x6, 0x1000, 0x2000000000000, 0x10, 0x38, 0x4, 0x1000, 0x9a82, 0x8, 0x2de, 0x80, 0x924, 0xc6, 0x10, 0x6, 0x6, 0xb5, 0x9, 0x9, 0x6, 0x100000000, 0x80, 0x100, 0x9, 0x6, 0x16940000000, 0x1ee, 0x68d6b462, 0xc0, 0x0, 0x6, 0x7fffffffffffffff, 0x9, 0x7, 0x8, 0x2b7, 0xd, 0xe, 0x69, 0x2, 0x5ef3, 0x3, 0x3, 0x7ff]}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x240, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f100, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3dd, 0x8, 0x3]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f00000002c0)) write$ppp(r7, &(0x7f00000003c0)='\x00!', 0x100000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.net/syz0\x00', 0x1ff) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1}) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000100)={0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x1ff) 1m0.407136146s ago: executing program 5 (id=2646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) close(0x3) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) 1m0.343147977s ago: executing program 5 (id=2647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000500)={0x0, r5}) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) 47.157957538s ago: executing program 3 (id=2854): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) read(r1, &(0x7f0000000000)=""/188, 0xbc) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046210, 0xffffffffffffffff) 47.07928306s ago: executing program 3 (id=2855): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r0, &(0x7f0000000080)="9035d1a1facb75526d", 0x9) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r1, r2, 0x2) 47.07876362s ago: executing program 3 (id=2856): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2480, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'nicvf0\x00', 0x8000}) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) close_range(r1, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000180)=0x8cfd) close(r5) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r7, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0xc2a4a000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x40003, 0x0, [0x40000000003, 0xc, 0x6, 0x4009, 0x0, 0x0, 0x0, 0x100000000]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 46.882938713s ago: executing program 3 (id=2858): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x181003, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x40087707, 0x2) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000080)={'\x00', 0xf09, 0x2, 0x8000}) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x1, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4602, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$TIOCSPGRP(r7, 0x5410, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3314) ioctl$BLKRRPART(r6, 0x125f, 0x0) 46.559188588s ago: executing program 3 (id=2863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 46.557770697s ago: executing program 3 (id=2864): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKRRPART(r3, 0x125f, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) 45.334978396s ago: executing program 34 (id=2647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000500)={0x0, r5}) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) 31.475836288s ago: executing program 35 (id=2864): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) ioctl$BLKRRPART(r3, 0x125f, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) 3.042835673s ago: executing program 4 (id=3622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2bc67b5dc0ef3785}) read(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8c, 0x0, 0x800000000000000}]}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000180)=[@enter_looper, @decrefs={0x40046307, 0x3}, @exit_looper, @request_death, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x2, 0x1, 0xf}, @fda={0x66646185, 0x5, 0x2, 0x2e}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000040)={0x0, 0x20, 0x40}}, 0x400}], 0x56, 0x0, &(0x7f00000002c0)="6716ad32eae27ebf7047b8f663d96915ffd746fe08e7efdc39a9967c3c39cce5fc916e03535b5922275e93ab9c4a13fdb62600246ffdd36980398cce359092b6bf1b116cf249b7db50277811f17f3f248193893dbb47"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r9, 0xaf01, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000700)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x8400ae8e, &(0x7f0000000140)=@x86={0xff, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd8}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 2.696687509s ago: executing program 4 (id=3625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000480)='cgroup.freeze\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2000, &(0x7f000000b000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000002201000000000c00feffffffff2301a95107e8455d9a20c00b6dd341b3fffffb"]) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0) ioctl$int_in(r13, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r14, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) write$uinput_user_dev(r12, &(0x7f0000000600)={'syz1\x00', {}, 0x0, [], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) read(r12, 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 2.204069336s ago: executing program 4 (id=3631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="f3ff0000000000000102000000000000e516e203"]) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd"], 0x22) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0xfffe, 0x1, 0x4002004c4, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3], 0xeeee8000, 0x109c04}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="f3ff0000000000000102000000000000e516e203"]) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc9, 0x0, 0xc}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd"], 0x22) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x174}]}) (async) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0xfffe, 0x1, 0x4002004c4, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x3], 0xeeee8000, 0x109c04}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) 1.94760865s ago: executing program 6 (id=3634): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000019000048000000000000000800000000000000192c8666a8"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x200], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000b3000041000000000000000003"]) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x800e, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 1.891020231s ago: executing program 4 (id=3635): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x8000000, 0x104000}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) (async) read$FUSE(r6, 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r10, &(0x7f0000000080)=""/1, 0x1) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=""/59, &(0x7f00000001c0)=""/198, &(0x7f00000002c0)=""/230, 0xffff1000}) 1.825444012s ago: executing program 4 (id=3637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000240)='syz1\x00', 0x1ff) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)="3083ab7c", 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x2, 0x2000, &(0x7f000006d000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000002c0)={0x5000, 0x19000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x8000000000000001, 0x10000, 0xc, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x4, 0x401, 0x8000, 0x8, 0x3, 0x9, 0xfffffffffffffffe, 0x3ffffffff, 0xffff], 0x10000, 0x90085}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000001c0)=0x8) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) ioctl$PPPIOCSFLAGS1(r10, 0x40047459, &(0x7f0000000000)=0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x2, 0x0) 1.003946714s ago: executing program 6 (id=3658): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)=@attr_other={0x0, 0x1, 0xfffffffffffffeff, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 907.062966ms ago: executing program 7 (id=3661): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'freezer'}, {0x6, 'cpu'}, {0x2b, 'freezer'}, {0x2b, 'pids'}, {0x6, 'freezer'}, {0x2d, 'memory'}]}, 0x2e) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000840)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQeDM\x19\x1a@\xbd\xfc\"\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xfa\xa6c\x03\x13\xf5o\xa2\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x02\x00\x00\x00\x00\x00\x00\x00\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xce\xd3\xe2\t\xd5yr=\xd4M\xe2\xc5\xda<\xa5\xd5\x17\x10\xf7(\xde1\xe8\xdc%\xc0\xbe\x7f7\xdb\x85[\xac\x8d\x8d\xe2l\xbdGK\xbd') 892.904166ms ago: executing program 7 (id=3662): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x101022, 0x1d1) read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 845.277647ms ago: executing program 7 (id=3664): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r2, r3, 0x0) close(r1) 835.185177ms ago: executing program 7 (id=3665): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x7) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000f2000040"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 807.633947ms ago: executing program 6 (id=3666): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async, rerun: 32) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {}, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) (rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000102, 0x0, 0x1}]}) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xfde7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc658, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8161, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x7ff, 0xcf12, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x1, 0x40, 0x0, 0xffff0d42, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x5, 0x0, 0x2, 0x4e, 0x0, 0x0, 0xd84c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xb77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0417, 0x0, 0x3dd55859, 0x0, 0x0, 0x4b8, 0x0, 0x800, 0x0, 0x46, 0x0, 0x288, 0xd54b, 0x0, 0x0, 0x20, 0x9, 0x20000000, 0x7], [0x6, 0x0, 0x0, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x4, 0x3, 0x7, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x99, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0xc, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x32ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffefff01, 0x0, 0x1000], [0x5, 0x0, 0xd7, 0x0, 0x1, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x800, 0x8, 0x0, 0x8, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6168, 0x0, 0x9, 0x1a, 0x921, 0x0, 0x0, 0x0, 0x3ff, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57e, 0x37a9, 0x0, 0x3, 0x3]}, 0x45c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 806.524677ms ago: executing program 7 (id=3667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0xb, 0x13, r5, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@arm64={0x7, 0x9, 0x10, '\x00', 0x8}) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x10000, 0xfffffff7}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000000], 0x80a0000, 0x42240}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r7, 0x4008ae73, &(0x7f0000000000)={0x800, 0x5}) (async) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000640)={[0xa, 0x7, 0x8000, 0x7, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41847}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f00000001c0)=0x5) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 719.894449ms ago: executing program 4 (id=3668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$selinux_attr(r1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000001200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000180), &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000240), 0x10, &(0x7f0000002580)=ANY=[@ANYBLOB="73746174733d676c01000000010000003d30303030303030303030303030303030303030303030312c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030302c646566636f6e746578743d73797361646d5f752c61707072616973652c61707072616973652c7065726d69745f646972656374696f2c666f776e65723c6df0b9704d32d7c3f97757a41bd3f4b238dba884d102ba9c627ebac9181830f0594e465dd3dedf063c745917131e56ccc078c4c1284ab34f02acb291d7bda1a26bb33098cf85ed94990dd52202149c128cda72233fb906c08e98adceaa1491a1cffdd9ec63b1ad6193bce79cabf3c5a8d1357845b7f85d1cfc079fedce49dbf34ff6a26ad2cacd188f3a679fba32760e922c549ed4d58028417638d5c20c55c385776a122f51111b4c5a227ab8ae223d263395db4a1b5ee9686ca571b5fa74a60e2280e380208cdcadc50b6f76dfbbfafa0d190b7f84483e3e594e63e225ba56acaa5e343ed37fe70418bc295c15c6e2c8007bbc10d4b9b990d4a1a706283b3b58c73731256092a3097cb60ba071891e8b4f24045e36396a2715a4a5f24422771ef29cfc72b1924fe80e4d9c7d99a323669c4dc6f12fd63c95ab0973da0c605f2d78379faea8067ae3334977c7003f529a0820685c82830b7e173f4e0e8544bf62cd2d193fade60547", @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200200, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) read(r9, &(0x7f0000000240)=""/22, 0x16) write$cgroup_subtree(r9, &(0x7f00000002c0), 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x2) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) close(0x3) write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000027c0)={@fda={0x66646185, 0x9, 0x2, 0x15}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000024c0)=""/116, 0x74, 0x2, 0x2f}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 625.88276ms ago: executing program 6 (id=3672): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x40047438, 0xf0ff1f00000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 581.601101ms ago: executing program 6 (id=3673): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000480)="532e87ac770767f7429748", 0xb) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "1acd2077949cf1f27e1e764566e4cffaa168dcad09bfe7c84a06d9db78a4e8f0504116608cffa736ae4427d04f27d39e5de80f8935f281bc483252d1c4e0dff576831d8505d3cf34ddc4f4760b53ec5182b54b352dea1b5975eea9b6bffd5b66524559c7c3e9981d7a0ff5ffe6814c923871db66426d98286aec1debc56864a4b29ee5cb46989af08546d6d1a5d9da45db7d8abea1d392d0c668cc040da5d129ddbbe6a95a7d9e51a13328ea3fbd9ac81f03914ed9d1d2b72c234093a351f7294556996ca5459d796cb4127a9aed8e0cca398d1b5af6eae257d02db91a61d49a5677ee9c8caf1855edd2c25b9b3a9a5174d2193108e5e87d781780d9506a890687c80c429f3a46028ed71364c4b8d3b2380b38d2cf7e447dee058f556dcae2627e49dfd316d169d382f2b6775233157f57c7be54b105e2493e140ad97ecf9c12df8f0db9a973d0ef9197ebbdebc5e822ee06852a408560c7f19c65ab8527edc9ec1d6378f2c748f7e84d1d6e98de8abab3e0e42a866e1ec5d00822b124a98d77e9c8dbb3ac6648afe409b21e1cf2f5458a0588cd11af6887f552f6c16a801abf2594eb9a80e704b8053573f661dd29706e71060b630272037144b33d684f66128950510d4138785418f726eb7c7f84c7dda646b3647d673122f95ef89c863c3d4adec4477664cfe911683f19862cc918451f70a6a359dbc66b3599c0af91858ebe13c253a6e9a96758955fdfd1be103777812339e3786484a25b18994ba69b4275f26a64afb9be5219061d94d7c472236f1a20a9217d70abab15182c5f04c6080d535e34045d6497c1c8a2ea53fc022eb159d0d1be59a21f277ce441f3c5cb03ef0e7e1ac63177dfe567e2cb9055228f32c9ca6d38d99093fdc129951380cedafcca40712a2da5cc0af8d872d8f848ea5ff95210a52d2390e236da76fffce86cc8a78a8ea0e1e4464ceac9021556d29d7470ca19849b417aa6aee032f3bd437cb5c839c9f5fb20ec1367449abfb5e19f8365b7947bda60e34136e2eb53e0243766c2718d4bfe6eec77f8ca04d177cc17bad59d651a08349651de6d4dbf5856a6d42cc8cb2441ab7dfa9420d87d4a5aa5914f619b2478a0d68a98280231c8e7558d11eec87e80f2d039b5d6b287d9b3667b020dc45b999b162247bf38f5ac5fc99b5eb6ac5939d35d7d6e71b366f9553ada2784671aecdbdcaf42a2f254dc0289f7be9c6f0c045b30f63ae1a8fac778030f27e04e980bae66e474bc4f9572b8a0d8119ce13ea2ad1285b3397bc929ff26a2ba1ef2760c77e3e114d15742740b27796cb2fc84761db427cdf3c63be71fd6734ed2cb1300a8d5e2b1964f2a0320bfbad8e9bce0cd9329c8c41d79107d77f65c99f3c03813c1f0f5351869434c2ccb685f1863fac38a44ecf354ffde4926ae3cee90833db386633e6dba3585ec36f1aca6701d4d1fc13ac1c5d4cf2ae8c8c418da372bce96451dc2add28828e45ce3f6e35da3d49dcdb8ceb084a581b68fc5fcd4c45246e6b215ca98ae7239c317fe45404984292a83ac7e62614665bec4a5e80b055a0635003e93172e2045ec88144d9d7a2b50c45333720e2273b165147a0b1af77fe87089fe8c0fd32c4e950aedf6798c9007575dc86c02089414089527baf9bbbe5eaf4d58289de0987f8f310d7900ef2350daa438ac83ff255344a2bc814a3e7055269544310b0fe78b07eb0ee5f16899fc8bdf8e3cc47d27a44c93528885452195706091eaf15930f9df5874c19d0a1deedde0cbe9cda7f0618c378bc4ba6fbe911d546c7bc76954fcc6b5ef56c77d306421f9d24e0770cf8b578aaa6276bff4b98e9968e9a1f8c78c6d647d8c52a42d27ee8359840747913e0983e049ad77d87e35800eeeb19cd786a5edf6886e610f51b4d2290d959c7fe906dad2d3e2a5648c5ec0d48becaf209fbb6599d1b0d6299cb2b2fad3b3efac6ba0911a63ae399fa3f19adecc9b10533c99bba28bf9e37600db41c2b463c25b0602fb86ef043ee72aa26e7f102c3afe4073d1318671a514f8320dcbc699514792d5c90c34fe6809102cb6537a4e76530256cd997a1dba4a75b1578c7f12b409af040afa35c54001a4abf1c402f91413995ced6b64256684c34283e644246d235af905fa2edf8f802a65c1c1e0ba24ea656cb3b1f876b6f335aed27c3a6e8da53b1b9c283d299390310df6dc84e5569ad3ac1744824b329fc24cb8612c061b09440464c1168012dc40e8df788f9c708bde6bd4eb3f6111729b08796d0243b07a21ac542ae418f19ec3d7171197c8ca216b20f786784400f2834d98819a5fbbd909677f7d7309dca5c0e2cf74a8a53c1791c78488fec0520d3c71a9698e5040920acc5eb7764f4c295cb2f00b5a62d5fc1e1d0040c639886712ad4fece171739fbc0519b93c8bccac49f871a0e2f5ba97331be916aaae29b8cd646028629cc227b916d1d8b4729da3baffb0e39b533e039eb9f10073c156485902745ec60b8d281b2f84a8651fe4c533119bab8424bcecb28c067ffb1e03e05bcf9d6d44dfe0782e072934fc36e70b1acbf30387495618ac2729811aa6c2901b109b33a0010cfbe666fe9fcac86cc81023dda253863714e89c78265e219d00ba20b3c846368dd21816f699a6af20a290f075f4346b98ad40d69caaf2614856c0bdaa661907975679f5cb5afd3738ba811db58123922647476de50ccf17360393433b547bf0377b2115a7cd357699d043bd80981a2a28c638f7c2e725d85f9edd2fdcfea1f7e2bf02f9f0d4236c9d14c6d382dad99192125b219eea6a13b5685efcf34454d2a12537c5354dc5e34ecda968422cc472f0fec174b95cd298e89e7efbc164465dae45059a40e104b1a980ebc781848b0109ce9cec600b190a34dcf741dd6145d56c4ec27c983a7d6328130c122217bbbb33e2cffba1a352b6805dbd715772153b53051db7215f475ba8673b0dd59e2db414a658d3d262c5304d300b930921c7c0a9910eed96a705eea2c8657be193836a20f23fcbc8ef105ca25551626caf63c511d3c9dcffd9d485f27a63b6992e4b6fa26b02903a4da52fd7fa06397fe2883f9b6a4cac2ffb8ce1f476ec72bccaf0ec7b16e6f601e72f46e835d9bc2a82dccaa449728d22a7ff17772276f54073c66b184de0fa7f681823dcb7603a20aa94b76a9b7adb9f11f447b8764b2d719bea91ea32edbb4d340d18f18b3f53d1d07d0405facb202c30ac1ec145516e071cc71c59cc6205db061a8c19bb2d3ab463f6fea1c6d3b5a69d96e5b67ed569e1c04cff6c9f69ab9343e9a71bf6776d3b84b47de2ecf9a0d45515ef5a3b5c6d55f2c6543ef2bf0eb795219da3026ab06c9ba9bbdc30d5dc7c3782a9f58141a63f8d4683ad5c1d156c92c508cefd9702e9267263e34ff96800c425f768bd204466f4f9badabdfaf35e1a8096150e8afeea3a30586b89d1002f041612f8e81de4dcd268bf538307c4d28d1d2ae1af979f3b02017ebe942cdc8fa7964fe978254eb15fed7478e4200e381409486d37e0205c597b5ec19243ab547da051dee03f18e079af60dcb2095fe86f292a4b4bba8682ed8b220c0b48958882aaa7e93448bfecebfba6ca3ef28e0752080cbc9f752d6da814a9dc5bc552d9fe73b8a1df8eb0158df58810fce8719f11b04c4e157ac8ae3692f825a4569ff859273775c45eb999fff7a47ca461b2fda6edfe8ed8371ed29c4f7499448cfff0bc47ca1d8fc9eb35f79db389781c36e89541b686edc21f088463b2d26fd9b650eaf5ed1cda0f00040000000000009b0c527ba655252f77b77c2f4cc0f7741c52a57629fe511c5f9c17ee44fec35da363f5356343037b2705a393115062719e6bd87bbff2472a7833be6d2270fe5ff4cc9f0439a53adb91fe1520ff4841c120e80c99fcc2d0ee794fa8c91dc9c4227ef9f9ac784ce41abefa69b84acb285e385b74501ea137be765172d90738f201497cb7c992dcc2f17341c9b6a0ef3dcb14350669802e3295b5a133142df7bc5645bbf222d2da033ee4cc4f225f248ad88782945869c29943eb6498c87c2b125fb2d4067118c2b417308a1703fd9f48c48ee2a9c5af44df473e3b99b8a941fc4967060b4960864bc97e4f2bf53e7a5c2ec3d47e7bf8345b56a4df5f84d0523c1b6cf9399110e393474b3ece22c4923f531ff12242d5e2b293846a7ed06e3e7f062cb173431a2b680188fb46d2cb74d4a0d9dae59e2be485aabbb54c26406e6e77de3031e049bd8a49139fa62151716a665fb9f1966cf6c57f4185f7cffbbc43341f3b69a3ae0a4dcfd9b37f0035a69ac552830f0ca56069c8f69162280bced2ec30c6789f32cd38d7f97953f0989b65cf90f01206b20b0111a3d22f3d2f85104b03283f4fd7b80e53f20f1c91d5bf3b67aac25c4300b3191c1f5d7bb0fe112deac0f6acbea3b57c20c5d8f0bad48873a7e7347ead5a4d0b73041c86bdcd3b91d6cbe0ebb5824fb90cb4e74f439505074f236679c4ea4015fbdf0c44b4063b62cdced485cbca0eae2404da7158a974b7dc14c5207107d5424de14a35739f68f3f151c6de20d0ad19d06521baf26ab2cb7ff7e8f83d60a9f554367f99fa5c44910b886e1c9c2418a7a4b33f19fff9af4724c7c8251ffc24cc4464b8804b6704bc0572b23498ec92263d37bdb54490f3316087c5b192a20027ad6cf1a2c3fef8043e2847b8734fa8dc91ce992474796e3f71580841379279f8b10ab8e6766196fb5a9b2ff44cabece6930fb9f32e867047313410c13b11a8a788a29ad93a5b9ae1b960a46fd48fe5cdd7168815c67b267065453547cb60db74f37238b2f7f3c78abc249ffe118a1d3e7eb5cdd326ad0a07a50bd24a6be4b5e56fade7fb7c3b515b4d0b16884c9eee7ef9c82f2ea4d89113e950622cee8e63519a899da3ee83bcd369b01b373934bbed73d8f94e3312e72d82d3fb8b8e65b0f5580cffda633467fc3285023159c3ac7273a46275d874b87254df07ea15d0806f4b8312c4e95235cab31e015a3603906c188233db45dea658dcf694f5097a9e26aba8b58e248210fa5e12fa08cbbe0a01afa9b2c36d38d298dd180ee6e358d45397471bc064e2e8e51da189e98bf41cc30b50b0d937e8cbfc5b138dc66143716b27190689efebcaa5676c9eb370465f77803b219b0ee1f65f343d70b01435f9adc46979b121944e13a02cbdd47a9898b26d6cc5294a9358971bad37a6b01d8b2ee251e50b02acbd560bcd4a212124f308d87eca79d13c77b90510675989ffb70a9d5643df2db6067bd4e0fd21d0a40b84177279587777f763bb9e2fc99186402ff1905eb61b6ea3bef862beb10ede1fbca93f5b426f683bb72099ffc61c99d8a7527fe9167b13d786402864d2b4237fa47426f46b6d5e0911de793f73610b46de4e62b8a67aaed298a9a2d5b5c5b7936f8bcc62a8f9d64d8ff1470a386974b35f382f42ad1fb2c9de214b35aa0afcff7806d7601ab9142a0dade5c7a9e6b0c16027c4d0fc413ba5d16f0d4826b3f469afa6e5ce4a19e21d2a2c2c1e3055706d0ce371dee59a06e534887cf5e300bd118b7c5e8eee2a8fd4bf6ca96df566f49049bd25533c8ae08eb2334ba183529c041f3d9b45139173f3ee8b1b8f8633c9cb7caa735805d56b1e3119a97f3ce86ecd8f21256c0a5a54266cc00927c881ac18fef64f25704b3f01b4885a9c4053aec5bfe5be638563267548cacbad2a95c3c48e6a913bd87ec0c489c236214b650a17d27081ae8def0d27c0d6a25553601875192d11c9e3ef2a3273c1f9b079"}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c23003f) write$cgroup_devices(r6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="80fd"], 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0xfffffffffffffff8, 0x100000, 0x0, 0x202004c8, 0x8000003, 0x7, 0x1, 0xfffffffffffffffe, 0x2000000000], 0x1000, 0x4000}) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) 580.560521ms ago: executing program 7 (id=3674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000cd00000900000000feffffffffffffff43be0f44ad1a26"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x150001, 0x0, [0x6, 0x5, 0x1, 0x3715701a, 0x8, 0x299c0e99, 0x1ff, 0x92]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008, 0x12, r6, 0x2b09d000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x2}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 345.419864ms ago: executing program 6 (id=3677): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x394, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5f"}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000002a, 0x0, 0x4}]}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000540)=[@dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x26, 0x700000000000000, 0x0}) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x22002, 0x0) write$UHID_INPUT2(r8, 0x0, 0xff0f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000dc0)=[@free_buffer={0x40086303, r6}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) 290.776215ms ago: executing program 1 (id=3680): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0xa0044, &(0x7f0000000080)=ANY=[]) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000010000000000024d564b000000007f0000000000fc00"]) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000150001c0"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 133.837278ms ago: executing program 1 (id=3681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xff}, {0x0, 0x9, 0x80, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0xb}, {}, {0x0, 0x0, 0x4, '\x00', 0x2}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x8f, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x2, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x0, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x5}, {0x3}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x0, 0xd}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x3, '\x00', 0x7}]}}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x40045402) mount$binderfs(0x0, &(0x7f0000000300)='./binderfs\x00', 0x0, 0x84000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 62.522999ms ago: executing program 1 (id=3682): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000000)=0x1) 1.5834ms ago: executing program 1 (id=3683): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x1ff}}, 0x18) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x1ff}}, 0x18) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0}) (async) 547.68µs ago: executing program 1 (id=3684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000740)={0xf}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc8, 0x0, &(0x7f0000000300)=[@increfs_done, @exit_looper, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x2, 0x0, 0xb}, @flat=@weak_binder={0x77622a85, 0x180, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/114, 0x72, 0x2, 0x14}, @fda={0x66646185, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)={0x0, 0x18, 0x40}}}, @request_death], 0x27, 0x0, &(0x7f0000000180)="11dd5a4941bf0139a9da5e8aa05f2738b331c4e5e04da7cbedd93cd1f5b9c4fccb81a46f1fe6a9"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000a80)={0x0, "44efab0901f6a5c9e2a3c29302061ef9"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001a80)={{r0}, r2, 0x4, @unused=[0x8, 0x7, 0x101], @devid=r3}) 0s ago: executing program 1 (id=3685): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40040, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)) (async) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x1c) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000300)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)) close(0x3) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x58d800, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000003c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x410103, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[]) (async) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)=')}%!:\xb9+\x00') (async) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000280)) (async) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x4402, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): 67295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x7ffc0000 [ 168.983729][ T36] audit: type=1326 audit(1750406548.400:11322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x7ffc0000 [ 169.049728][ T36] audit: type=1326 audit(1750406548.520:11323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afcb8e929 code=0x7ffc0000 [ 169.079986][ T7829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.080010][ T7829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.103816][ T36] audit: type=1326 audit(1750406548.520:11324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1afcb8e929 code=0x7ffc0000 [ 169.143419][ T36] audit: type=1326 audit(1750406548.520:11325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afcb8e929 code=0x7ffc0000 [ 169.172186][ T36] audit: type=1326 audit(1750406548.520:11326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1afcb8e929 code=0x7ffc0000 [ 169.201701][ T36] audit: type=1326 audit(1750406548.520:11327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.2321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afcb8e929 code=0x7ffc0000 [ 169.242962][ T7845] rust_binder: Read failure Err(EAGAIN) in pid:214 [ 169.262953][ T7847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 169.273180][ T7847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:216 [ 169.287465][ T7849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:605 [ 169.368448][ T7859] binder: Binderfs stats mode cannot be changed during a remount [ 169.410657][ T7861] binder: Binderfs stats mode cannot be changed during a remount [ 169.444209][ T5909] hid-generic 0800:0000:0000.000F: hidraw0: HID v1ffff.fd Device [syz1] on syz1 [ 169.457425][ T7864] rust_binder: Read failure Err(EAGAIN) in pid:607 [ 169.537284][ T7868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 169.590154][ T7872] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 169.710202][ T7875] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.735757][ T7875] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 169.768007][ T7884] rust_binder: Write failure EINVAL in pid:618 [ 169.786042][ T7884] rust_binder: Error while translating object. [ 169.795990][ T7884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 169.802214][ T7884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:618 [ 169.984208][ T7886] kvm: user requested TSC rate below hardware speed [ 170.357401][ T7899] SELinux: failed to load policy [ 170.555171][ T7914] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 231) [ 170.555196][ T7914] rust_binder: Error while translating object. [ 170.565948][ T7914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 170.572122][ T7914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:621 [ 170.706061][ T7929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.731627][ T7929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.031838][ T7956] rust_binder: Read failure Err(EAGAIN) in pid:650 [ 171.032334][ T7956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:650 [ 171.093182][ T7961] rust_binder: Write failure EFAULT in pid:239 [ 171.151648][ T7973] rust_binder: Error while translating object. [ 171.163327][ T7973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 171.169942][ T7973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:659 [ 171.277905][ T7985] rust_binder: Write failure EINVAL in pid:661 [ 171.333249][ T7987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663 [ 171.349728][ T7987] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 171.375654][ T7987] rust_binder: Read failure Err(EFAULT) in pid:663 [ 171.617279][ T8011] rust_binder: Error while translating object. [ 171.634114][ T8011] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 171.655402][ T8011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:257 [ 171.955546][ T8021] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 171.964834][ T8021] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 171.972591][ T8021] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 172.226277][ T2098] bridge_slave_1: left allmulticast mode [ 172.232000][ T2098] bridge_slave_1: left promiscuous mode [ 172.232956][ T8029] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 172.237866][ T2098] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.238898][ T8029] rust_binder: Read failure Err(EFAULT) in pid:271 [ 172.254342][ T2098] bridge_slave_0: left allmulticast mode [ 172.279099][ T2098] bridge_slave_0: left promiscuous mode [ 172.286244][ T8032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.286273][ T8032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 172.295916][ T2098] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.376617][ T8047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 172.376927][ T8046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:277 [ 172.464808][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.481115][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.494739][ T8024] bridge_slave_0: entered allmulticast mode [ 172.501293][ T8024] bridge_slave_0: entered promiscuous mode [ 172.508257][ T2098] veth1_macvtap: left promiscuous mode [ 172.513747][ T2098] veth0_vlan: left promiscuous mode [ 172.560044][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.567119][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.574167][ T8024] bridge_slave_1: entered allmulticast mode [ 172.580734][ T8024] bridge_slave_1: entered promiscuous mode [ 172.649319][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.656370][ T8024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.663623][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.670660][ T8024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.692737][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.700049][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.709509][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.716554][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.725130][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.732185][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.755562][ T8024] veth0_vlan: entered promiscuous mode [ 172.770093][ T8024] veth1_macvtap: entered promiscuous mode [ 172.793247][ T8069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 172.793273][ T8069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:283 [ 173.110749][ T8097] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 173.131906][ T8097] SELinux: failed to load policy [ 173.138020][ T8097] rust_binder: Error while translating object. [ 173.138054][ T8097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.150175][ T8097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:674 [ 173.173043][ T8099] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 173.182229][ T8099] rust_binder: Error while translating object. [ 173.192767][ T8099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.198973][ T8099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:676 [ 173.386076][ T8121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 173.396563][ T8121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:295 [ 173.444824][ T8124] rust_binder: Error while translating object. [ 173.454034][ T8124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 173.460291][ T8124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:11 [ 173.601332][ T8139] rust_binder: Write failure EFAULT in pid:298 [ 173.625743][ T8141] random: crng reseeded on system resumption [ 173.671973][ T8141] Restarting kernel threads ... done. [ 173.698091][ T8141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.790152][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 173.790167][ T36] audit: type=1326 audit(1750406553.260:11349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8148 comm="syz.5.2418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f735e58e929 code=0x0 [ 174.267698][ T8160] binder: Unknown parameter 'nXI' [ 174.329836][ T8162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.329866][ T8162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:638 [ 174.339354][ T8162] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.348597][ T8162] rust_binder: Read failure Err(EFAULT) in pid:638 [ 174.538262][ T8171] rust_binder: Write failure EFAULT in pid:693 [ 174.616966][ T8174] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.623165][ T8174] rust_binder: Read failure Err(EFAULT) in pid:696 [ 174.648401][ T8176] binder: Bad value for 'defcontext' [ 174.750324][ T8178] SELinux: ebitmap: truncated map [ 174.760541][ T8178] SELinux: failed to load policy [ 174.767540][ T8178] rust_binder: Write failure EINVAL in pid:647 [ 174.821677][ T8196] rust_binder: Write failure EINVAL in pid:25 [ 174.844129][ T8196] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 174.854498][ T8196] rust_binder: Read failure Err(EFAULT) in pid:25 [ 174.863666][ T8196] rust_binder: Write failure EINVAL in pid:25 [ 174.870399][ T8197] rust_binder: Write failure EINVAL in pid:25 [ 174.895814][ T8199] binder: Bad value for 'stats' [ 174.930869][ T8214] rust_binder: Write failure EFAULT in pid:706 [ 174.944545][ T36] audit: type=1400 audit(1750406554.410:11350): avc: denied { setattr } for pid=8210 comm="syz.3.2438" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.996047][ T8220] rust_binder: Write failure EFAULT in pid:28 [ 175.016363][ T8218] rtc_cmos 00:00: Alarms can be up to one day in the future [ 175.036228][ T8222] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 175.160776][ T8241] rust_binder: Error while translating object. [ 175.160808][ T8241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 175.179476][ T8241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:715 [ 175.186121][ T8256] rust_binder: Write failure EINVAL in pid:318 [ 175.209587][ T8260] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.380125][ T8269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 175.395546][ T8269] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 175.410927][ T8269] rust_binder: Read failure Err(EFAULT) in pid:37 [ 175.412810][ T8279] rust_binder: Write failure EFAULT in pid:720 [ 175.431787][ T8278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.479911][ T8278] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.599567][ T8287] binder: Unknown parameter 'non' [ 175.663652][ T8298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.663680][ T8298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:731 [ 175.767769][ T8314] rust_binder: Got transaction with invalid offset. [ 175.776983][ T8314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.783581][ T8314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:741 [ 175.818596][ T8316] binder: Unknown parameter '0x0000000000000004' [ 175.842615][ T8321] kvm: user requested TSC rate below hardware speed [ 175.862483][ T8323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.916458][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 175.926958][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 175.934383][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 175.954778][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 175.969155][ T8339] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 175.980655][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 175.980961][ T8342] rust_binder: Write failure EFAULT in pid:337 [ 175.990503][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.010265][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.017756][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.025150][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.032606][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.040141][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.048209][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.055596][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.063020][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.070557][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.077992][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.085380][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.092361][ T8348] rust_binder: Write failure EINVAL in pid:53 [ 176.092878][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.106577][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.121609][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.129175][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.140428][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.148543][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.156537][ T8358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 176.157384][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.171444][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.178846][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.186297][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.193680][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.201090][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.210619][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.216755][ T8361] binder: Bad value for 'context' [ 176.218072][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.230430][ T8208] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 176.238610][ T8208] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.326682][ T8366] binder: Bad value for 'max' [ 176.327246][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.340589][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.348024][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.355413][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.362963][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.370379][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.377790][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.385181][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.392610][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.400040][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.407885][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.415298][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.422731][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.430148][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.433020][ T8370] rust_binder: Error while translating object. [ 176.437723][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.437970][ T8370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.444294][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.451628][ T8370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 176.460708][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.484849][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.493851][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.502765][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.510270][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.512581][ T8373] binder: Bad value for 'max' [ 176.517794][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.531353][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.538811][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.546376][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.551091][ T8375] rust_binder: Write failure EINVAL in pid:756 [ 176.553893][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.554554][ T8377] rust_binder: Write failure EINVAL in pid:756 [ 176.560717][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.581276][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.596256][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.603665][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.611095][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.618852][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.629175][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.636700][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.644129][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.651579][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.659014][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.669709][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.677171][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.684642][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.693296][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.700916][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.700939][ T8381] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 176.708352][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.733256][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.756511][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.763915][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.782862][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.790326][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.797794][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.806276][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.813707][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.821153][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.830571][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.838018][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.845440][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.855216][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.862695][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.871127][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.878589][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.887188][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.894601][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.902028][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.909455][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.917389][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.924812][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.932392][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.941111][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.950232][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.958433][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.965994][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.973490][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 176.981149][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.005703][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.013233][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.021002][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.030734][ T8391] SELinux: security_context_str_to_sid () failed with errno=-22 [ 177.040111][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.040697][ T8388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:346 [ 177.048361][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.066693][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.074556][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.082788][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.091305][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.099087][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.109214][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.116924][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.125558][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.142576][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.150656][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.158359][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.171976][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.179541][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.187298][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.194712][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.202147][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.209885][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.217498][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.225228][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.234398][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.236802][ T36] audit: type=1326 audit(1750406556.710:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8422 comm="syz.1.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 177.241816][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.272191][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.279772][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.294265][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.301956][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.309799][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.317972][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.325410][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.328147][ T36] audit: type=1400 audit(1750406556.790:11352): avc: denied { map } for pid=8424 comm="syz.5.2498" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.332816][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.362880][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.370293][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.377706][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.385102][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.392498][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.399899][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.407321][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.414733][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.422177][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.429733][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.437151][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.444533][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.451937][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.459357][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.466756][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.474120][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.481513][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.488911][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.496329][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.503725][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.511117][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.518519][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.525910][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.533287][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.540682][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.548192][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.555557][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.563176][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.570583][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.577979][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.585355][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.592740][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.600139][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.607544][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.614922][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.622323][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.629730][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.637137][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.644516][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.651911][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.659323][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.666782][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.674158][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.681571][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.688974][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.696388][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.703764][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.711164][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.718629][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.726083][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.733472][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.740882][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.748298][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.755702][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.763096][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.770961][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.778376][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.787110][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.794679][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.802617][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.810084][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.817492][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.824877][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.832348][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.839770][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.847191][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.854588][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.862003][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.870121][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.877571][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.884960][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.892377][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.899782][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.907196][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.914626][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.922019][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.929438][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.936853][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.944225][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.951983][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.959400][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.966836][ T5909] hid-generic 0040:0004:0298.0011: unknown main item tag 0x0 [ 177.974669][ T5909] hid-generic 0040:0004:0298.0011: hidraw0: HID v800000.00 Device [syz0] on syz1 [ 178.007281][ T8432] fido_id[8432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 178.032008][ T36] audit: type=1400 audit(1750406557.500:11353): avc: denied { map } for pid=8433 comm="syz.3.2501" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 178.071725][ T8438] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.073197][ T8438] rust_binder: Error while translating object. [ 178.080044][ T8438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 178.086379][ T8438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:352 [ 178.092070][ T8441] rust_binder: Write failure EINVAL in pid:705 [ 178.159012][ T8443] rust_binder: Read failure Err(EAGAIN) in pid:354 [ 178.246354][ T8457] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.253049][ T8455] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.431312][ T36] audit: type=1400 audit(1750406557.900:11354): avc: denied { read write } for pid=6997 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.462057][ T36] audit: type=1400 audit(1750406557.900:11355): avc: denied { open } for pid=6997 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.486432][ T8474] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4246953826 (271805044864 ns) > initial count (211356076288 ns). Using initial count to start timer. [ 178.486794][ T36] audit: type=1400 audit(1750406557.900:11356): avc: denied { ioctl } for pid=6997 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.545832][ T36] audit: type=1400 audit(1750406557.910:11357): avc: denied { mounton } for pid=8471 comm="syz.4.2513" path="/116/binderfs2" dev="tmpfs" ino=616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 178.568840][ T36] audit: type=1400 audit(1750406557.910:11358): avc: denied { mount } for pid=8471 comm="syz.4.2513" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.601269][ T8479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:782 [ 178.603773][ T8480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.612953][ T8480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:782 [ 178.727419][ T8492] random: crng reseeded on system resumption [ 178.756409][ T8494] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.764171][ T8496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.767072][ T8492] rust_binder: Error in use_page_slow: ESRCH [ 178.771340][ T8496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.781108][ T8492] rust_binder: use_range failure ESRCH [ 178.784571][ T8496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105 [ 178.792610][ T8492] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 178.800778][ T8496] rust_binder: Write failure EINVAL in pid:105 [ 178.813940][ T8492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.816627][ T8496] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.826605][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 178.826624][ T36] audit: type=1400 audit(1750406558.280:11381): avc: denied { read } for pid=8497 comm="syz.1.2523" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.830902][ T8492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:721 [ 178.842017][ T36] audit: type=1400 audit(1750406558.280:11382): avc: denied { open } for pid=8497 comm="syz.1.2523" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 178.901091][ T36] audit: type=1400 audit(1750406558.310:11383): avc: denied { execute } for pid=8497 comm="syz.1.2523" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 178.902844][ T8508] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.927766][ T36] audit: type=1400 audit(1750406558.370:11384): avc: denied { transfer } for pid=8493 comm="syz.4.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 178.953804][ T8507] rust_binder: Error in use_page_slow: ESRCH [ 178.953803][ T8508] rust_binder: Error in use_page_slow: ESRCH [ 178.953820][ T8507] rust_binder: use_range failure ESRCH [ 178.953839][ T8507] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 178.959967][ T8508] rust_binder: use_range failure ESRCH [ 178.965878][ T8507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.971580][ T8508] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 178.979230][ T8507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:107 [ 178.984778][ T8508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 179.011047][ T8508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:107 [ 179.019304][ T36] audit: type=1400 audit(1750406558.490:11385): avc: denied { write } for pid=8510 comm="syz.4.2525" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 179.074970][ T8515] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.074988][ T8515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 179.188392][ T36] audit: type=1400 audit(1750406558.660:11386): avc: denied { read } for pid=8518 comm="syz.5.2530" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.225969][ T8525] binder: Unknown parameter 'nXI' [ 179.227019][ T8526] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.231357][ T8527] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.237897][ T36] audit: type=1400 audit(1750406558.660:11387): avc: denied { open } for pid=8518 comm="syz.5.2530" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.269424][ T36] audit: type=1400 audit(1750406558.670:11388): avc: denied { ioctl } for pid=8518 comm="syz.5.2530" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.294176][ T36] audit: type=1400 audit(1750406558.670:11389): avc: denied { map } for pid=8518 comm="syz.5.2530" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.335184][ T8521] input: syz1 as /devices/virtual/input/input135 [ 179.356398][ T36] audit: type=1400 audit(1750406558.800:11390): avc: denied { write } for pid=8529 comm="syz.4.2533" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.388325][ T8545] binder: Unknown parameter '/dev/kvm' [ 179.489190][ T8545] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 179.514301][ T8545] SELinux: failed to load policy [ 179.567597][ T8562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 179.567626][ T8562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:733 [ 179.613590][ T8567] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 179.624532][ T8568] rust_binder: Error while translating object. [ 179.634080][ T8567] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:736 [ 179.640379][ T8568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 179.650513][ T8565] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 179.660269][ T8568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:736 [ 179.668398][ T8565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 179.685231][ T8565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:126 [ 179.695351][ T8565] SELinux: security_context_str_to_sid () failed with errno=-22 [ 179.712810][ T8572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 179.712835][ T8572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:739 [ 179.763254][ T8579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:804 [ 179.780044][ T8583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.811901][ T8588] kvm: user requested TSC rate below hardware speed [ 179.852829][ T8593] rust_binder: Write failure EINVAL in pid:745 [ 179.913488][ T8604] rust_binder: Read failure Err(EAGAIN) in pid:745 [ 179.919965][ T9] hid (null): report_id 3538659118 is invalid [ 179.948722][ T9] hid-generic 0005:0009:000B.0012: report_id 3538659118 is invalid [ 179.957054][ T9] hid-generic 0005:0009:000B.0012: item 0 4 1 8 parsing failed [ 179.964835][ T9] hid-generic 0005:0009:000B.0012: probe with driver hid-generic failed with error -22 [ 179.983463][ T8607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer. [ 180.035814][ T8601] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 180.076662][ T8610] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 180.127071][ T8612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.127310][ T8612] rust_binder: Error in use_page_slow: ESRCH [ 180.133858][ T8612] rust_binder: use_range failure ESRCH [ 180.140518][ T8612] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 180.150041][ T8612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.158096][ T8612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:407 [ 180.185310][ T8622] binder: Bad value for 'context' [ 180.271987][ T8627] rust_binder: Error in use_page_slow: ESRCH [ 180.272008][ T8627] rust_binder: use_range failure ESRCH [ 180.284978][ T8627] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 180.291027][ T8627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.298703][ T8630] binder: Bad value for 'max' [ 180.299046][ T8627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:755 [ 180.322983][ T8630] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 180.325296][ T8632] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.344843][ T8632] rust_binder: Error in use_page_slow: ESRCH [ 180.351331][ T8632] rust_binder: use_range failure ESRCH [ 180.357495][ T8632] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 180.362992][ T8632] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 180.371052][ T8632] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:409 [ 180.406943][ T8637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.510021][ T8650] rust_binder: Error while translating object. [ 180.516530][ T8650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 180.522760][ T8650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:137 [ 180.645560][ T8646] rust_binder: Read failure Err(EFAULT) in pid:422 [ 180.659205][ T8667] rust_binder: Error while translating object. [ 180.666488][ T8667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.672697][ T8667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146 [ 180.682417][ T8668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.713469][ T8674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.720136][ T8674] rust_binder: Write failure EINVAL in pid:426 [ 180.736184][ T8674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:426 [ 180.752286][ T8683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 180.758904][ T8685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.766784][ T8683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:772 [ 180.778151][ T8685] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.789281][ T8687] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.810607][ T8694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 180.817149][ T8694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:160 [ 180.940977][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.950274][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.956775][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.963210][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.969668][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.976119][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.982522][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.988966][ T8703] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.110110][ T8723] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.222436][ T8732] kvm: user requested TSC rate below hardware speed [ 181.256470][ T8737] syz.3.2592 (8737) used obsolete PPPIOCDETACH ioctl [ 181.263580][ T8737] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 181.271190][ T8737] SELinux: failed to load policy [ 181.325279][ T8739] rust_binder: Error in use_page_slow: ESRCH [ 181.325299][ T8739] rust_binder: use_range failure ESRCH [ 181.331402][ T8739] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 181.336941][ T8739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 181.344994][ T8739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:799 [ 181.356740][ T8744] binder: Unknown parameter 'measure' [ 181.446519][ T8755] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 181.506045][ T8764] KVM: debugfs: duplicate directory 8764-4 [ 181.643283][ T8773] rust_binder: Write failure EFAULT in pid:843 [ 181.679022][ T8776] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.688226][ T8775] cgroup: fork rejected by pids controller in /syz4 [ 182.019599][ T8895] input: syz0 as /devices/virtual/input/input139 [ 182.091512][ T8899] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 182.091519][ T8898] rust_binder: Error while translating object. [ 182.091549][ T8898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 182.099662][ T8899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 182.106181][ T8898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:178 [ 182.115117][ T8899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:178 [ 182.196807][ T13] bridge_slave_1: left allmulticast mode [ 182.211734][ T13] bridge_slave_1: left promiscuous mode [ 182.217509][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.225025][ T13] bridge_slave_0: left allmulticast mode [ 182.230789][ T13] bridge_slave_0: left promiscuous mode [ 182.236559][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.263251][ T8911] rust_binder: Write failure EINVAL in pid:858 [ 182.328158][ T8917] rust_binder: Write failure EINVAL in pid:185 [ 182.378538][ T8918] tap0: tun_chr_ioctl cmd 1074025677 [ 182.384966][ T8916] rust_binder: Read failure Err(EAGAIN) in pid:185 [ 182.390215][ T8918] tap0: linktype set to 776 [ 182.409426][ T13] veth1_macvtap: left promiscuous mode [ 182.415045][ T13] veth0_vlan: left promiscuous mode [ 182.462121][ T8920] binder: Bad value for 'stats' [ 182.476869][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.484922][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.498890][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.507017][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.514510][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 182.522788][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 182.540656][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.549859][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.557022][ T8893] bridge_slave_0: entered allmulticast mode [ 182.563412][ T8893] bridge_slave_0: entered promiscuous mode [ 182.570017][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.577450][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.584569][ T8893] bridge_slave_1: entered allmulticast mode [ 182.591213][ T8893] bridge_slave_1: entered promiscuous mode [ 182.594990][ T8924] fido_id[8924]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 182.705079][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.712176][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.721161][ T2098] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.728236][ T2098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.754146][ T8893] veth0_vlan: entered promiscuous mode [ 182.764422][ T8893] veth1_macvtap: entered promiscuous mode [ 182.846184][ T8941] input: syz0 as /devices/virtual/input/input141 [ 182.994623][ T8953] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 183.002630][ T8953] rust_binder: Write failure EINVAL in pid:824 [ 183.358239][ T8997] binder: Bad value for 'max' [ 183.369429][ T8999] SELinux: security_context_str_to_sid () failed with errno=-22 [ 183.377751][ T8996] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 183.475429][ T9011] binder: Bad value for 'max' [ 183.541177][ T9013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 183.541397][ T9013] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 183.552932][ T9014] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 183.725801][ T9026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 183.797692][ T9029] block device autoloading is deprecated and will be removed. [ 183.824467][ T9029] syz.3.2650: attempt to access beyond end of device [ 183.824467][ T9029] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 183.948490][ T9031] binder: Unknown parameter 'dãcontext' [ 184.030729][ T9035] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.133138][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 184.133156][ T36] audit: type=1400 audit(1750406563.600:11483): avc: denied { write } for pid=9037 comm="syz.4.2653" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.213216][ T9044] rust_binder: Error in use_page_slow: ESRCH [ 184.213246][ T9044] rust_binder: use_range failure ESRCH [ 184.220035][ T9043] rust_binder: Error in use_page_slow: ESRCH [ 184.225510][ T9043] rust_binder: use_range failure ESRCH [ 184.231669][ T9044] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 184.237274][ T9044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 184.245439][ T9044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 184.254929][ T9043] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 184.272639][ T9043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 184.280805][ T9043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:32 [ 184.323755][ T9050] rust_binder: Write failure EINVAL in pid:876 [ 184.346159][ T9052] input: syz0 as /devices/virtual/input/input143 [ 184.370188][ T9053] rust_binder: Error while translating object. [ 184.370231][ T9053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 184.376603][ T9053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37 [ 184.432483][ T36] audit: type=1326 audit(1750406563.900:11484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.1.2659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 184.535673][ T36] audit: type=1326 audit(1750406564.000:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.1.2659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 184.559233][ T9067] rust_binder: Write failure EFAULT in pid:862 [ 184.590547][ T36] audit: type=1400 audit(1750406564.060:11486): avc: denied { execute } for pid=9068 comm="syz.1.2661" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.674047][ T9071] SELinux: failed to load policy [ 184.798959][ T9083] rust_binder: Write failure EFAULT in pid:46 [ 184.873939][ T9087] input: syz0 as /devices/virtual/input/input144 [ 184.886679][ T9087] input: failed to attach handler leds to device input144, error: -6 [ 185.092063][ T9090] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.215499][ T9094] binder: Bad value for 'max' [ 185.261692][ T9096] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 185.262995][ T9097] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.340302][ T9094] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 185.380427][ T9106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:875 [ 186.052430][ T9120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:903 [ 186.082519][ T9122] rust_binder: Write failure EFAULT in pid:905 [ 186.106750][ T9124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:907 [ 186.249224][ T9130] rust_binder: Write failure EFAULT in pid:67 [ 186.264031][ T9134] SELinux: policydb version 214964618 does not match my version range 15-33 [ 186.299288][ T9134] SELinux: failed to load policy [ 186.313583][ T9134] SELinux: policydb version -549017011 does not match my version range 15-33 [ 186.335683][ T9134] SELinux: failed to load policy [ 186.346254][ T9134] SELinux: policydb version -252246620 does not match my version range 15-33 [ 186.365306][ T9134] SELinux: failed to load policy [ 186.493970][ T9146] rust_binder: Write failure EINVAL in pid:881 [ 186.540648][ T9153] rust_binder: Error while translating object. [ 186.546980][ T9153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.553202][ T9153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 186.580136][ T9154] binder: Bad value for 'max' [ 186.597093][ T36] audit: type=1400 audit(1750406566.070:11487): avc: denied { ioctl } for pid=9156 comm="syz.1.2693" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 186.955704][ T9162] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 186.971342][ T9162] rust_binder: Write failure EINVAL in pid:890 [ 187.078992][ T9172] rust_binder: Write failure EINVAL in pid:897 [ 187.432074][ T9180] rust_binder: Write failure EINVAL in pid:905 [ 187.476057][ T9185] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 187.482257][ T9185] rust_binder: Read failure Err(EFAULT) in pid:924 [ 187.755352][ T9203] input: syz1 as /devices/virtual/input/input145 [ 187.946763][ T9206] rust_binder: inc_ref_done called when no active inc_refs [ 187.960741][ T9208] rust_binder: got new transaction with bad transaction stack [ 187.968215][ T9208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 187.993434][ T9210] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿßÿÿÿÿÿÿÿÿ01777777777777777777777) failed with errno=-22 [ 188.064955][ T9215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.065060][ T9215] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.251169][ T36] audit: type=1326 audit(1750406567.720:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9218 comm="syz.3.2713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x0 [ 188.430144][ T9223] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 188.584373][ T9227] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 188.805797][ T9232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 188.815960][ T9231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 188.825401][ T9232] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 188.840741][ T9231] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 188.848801][ T9232] rust_binder: Read failure Err(EFAULT) in pid:95 [ 188.856785][ T9239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:940 [ 188.863322][ T9231] rust_binder: Read failure Err(EFAULT) in pid:95 [ 188.895712][ T9241] block device autoloading is deprecated and will be removed. [ 188.911491][ T9241] syz.1.2720: attempt to access beyond end of device [ 188.911491][ T9241] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 189.019044][ T9241] syz.1.2720: attempt to access beyond end of device [ 189.019044][ T9241] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 189.103346][ T9249] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 189.149089][ T9254] binder: Unknown parameter 'context' [ 189.154178][ T36] audit: type=1326 audit(1750406568.620:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 189.205702][ T36] audit: type=1326 audit(1750406568.620:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 189.257179][ T36] audit: type=1326 audit(1750406568.630:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.1.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 189.321523][ T9274] rust_binder: Error while translating object. [ 189.321567][ T9274] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.335688][ T9274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 189.392467][ T9278] rust_binder: Error while translating object. [ 189.408867][ T9278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 189.419047][ T36] audit: type=1326 audit(1750406568.880:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x0 [ 189.422602][ T9282] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 189.428522][ T9278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:106 [ 189.511253][ T9282] rust_binder: Write failure EINVAL in pid:961 [ 189.654175][ T9292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:963 [ 189.725062][ T9299] rust_binder: Write failure EINVAL in pid:963 [ 189.734656][ T9304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 189.800277][ T9313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 190.125145][ T36] audit: type=1400 audit(1750406569.590:11493): avc: denied { checkpoint_restore } for pid=9327 comm="syz.4.2746" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.354235][ T9335] binder: Unknown parameter 'processor : 0 [ 190.354235][ T9335] vendor_id : GenuineIntel [ 190.354235][ T9335] cpu family : 6 [ 190.354235][ T9335] model : 79 [ 190.354235][ T9335] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 190.354235][ T9335] stepping : 0 [ 190.354235][ T9335] microcode : 0xffffffff [ 190.354235][ T9335] cpu MHz : 2199.998 [ 190.354235][ T9335] cache size : 56320 KB [ 190.354235][ T9335] physical id : 0 [ 190.354235][ T9335] siblings : 2 [ 190.354235][ T9335] core id : 0 [ 190.354235][ T9335] cpu cores : 1 [ 190.354235][ T9335] apicid : 0 [ 190.354235][ T9335] initial apicid : 0 [ 190.354235][ T9335] fpu : yes [ 190.354235][ T9335] fpu_exception : yes [ 190.354235][ T9335] cpuid level : 13 [ 190.354235][ T9335] wp : yes [ 190.354235][ T9335] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 190.354235][ T9335] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 190.586772][ T9341] binder: Bad value for 'stats' [ 190.726712][ T9347] input: syz1 as /devices/virtual/input/input148 [ 190.769379][ T36] audit: type=1400 audit(1750406570.240:11494): avc: denied { read } for pid=9340 comm="syz.1.2749" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 190.832331][ T9341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.329544][ T9387] __vm_enough_memory: pid: 9387, comm: syz.4.2761, bytes: 281474976845824 not enough memory for the allocation [ 191.418588][ T9395] rust_binder: Error while translating object. [ 191.418638][ T9395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.424836][ T9395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157 [ 191.469722][ T36] audit: type=1326 audit(1750406570.940:11495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.2765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x0 [ 191.578370][ T9401] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 191.578925][ T9403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.709284][ T9409] input: syz0 as /devices/virtual/input/input149 [ 191.810775][ T9411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.810812][ T9411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:985 [ 191.849193][ T9417] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 191.866480][ T9417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 191.875241][ T9417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:988 [ 191.886262][ T9417] rust_binder: Error while translating object. [ 191.895425][ T9417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.915668][ T9417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:988 [ 192.135716][ T9436] rust_binder: Error while translating object. [ 192.165657][ T9436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 192.171880][ T9436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:996 [ 192.317454][ T9447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1000 [ 192.327086][ T9447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 192.336635][ T9447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1000 [ 192.413724][ T9441] rust_binder: Read failure Err(EFAULT) in pid:175 [ 192.481061][ T36] audit: type=1400 audit(1750406571.950:11496): avc: denied { setattr } for pid=9448 comm="syz.3.2782" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 192.594957][ T9453] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 192.594996][ T9453] rust_binder: Error in use_page_slow: EBUSY [ 192.605648][ T9453] rust_binder: use_range failure EBUSY [ 192.611791][ T9453] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 192.617553][ T9453] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 192.625221][ T9453] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 192.635090][ T9453] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:179 [ 192.743971][ T36] audit: type=1400 audit(1750406572.210:11497): avc: denied { write } for pid=9462 comm="syz.4.2787" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.803742][ T9465] rust_binder: Error while translating object. [ 192.803775][ T9465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.810355][ T9465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182 [ 193.117274][ T9480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 193.157341][ T9482] rust_binder: Read failure Err(EAGAIN) in pid:1020 [ 193.201820][ T9486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.209688][ T9486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1002 [ 193.297635][ T36] audit: type=1400 audit(1750406572.770:11498): avc: denied { write } for pid=9491 comm="syz.1.2799" name="pfkey" dev="proc" ino=4026532871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 193.312206][ T9494] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 193.344494][ T9494] SELinux: failed to load policy [ 193.370938][ T9498] random: crng reseeded on system resumption [ 193.397620][ T9498] rust_binder: Write failure EFAULT in pid:1011 [ 193.541269][ T9509] random: crng reseeded on system resumption [ 193.584439][ T9509] rust_binder: Write failure EINVAL in pid:1020 [ 193.667258][ T9516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 193.674093][ T9516] rust_binder: Error while translating object. [ 193.683910][ T9516] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.690212][ T9516] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1024 [ 193.876037][ T9525] input: syz0 as /devices/virtual/input/input150 [ 193.891715][ T9525] input: failed to attach handler leds to device input150, error: -6 [ 194.238450][ T9534] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:199 [ 194.365950][ T9537] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 194.446716][ T9546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206 [ 194.448371][ T9546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.475855][ T9546] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.661878][ T9556] binder: Unknown parameter '/dev/kvm' [ 194.777243][ T9562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.857233][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 194.857253][ T36] audit: type=1326 audit(1750406574.330:11500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.3.2823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f497e58e929 code=0x0 [ 194.913029][ T9571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1042 [ 195.072305][ T9574] block device autoloading is deprecated and will be removed. [ 195.090332][ T9574] syz.4.2825: attempt to access beyond end of device [ 195.090332][ T9574] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 195.104860][ T9574] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.119175][ T9580] rust_binder: Write failure EINVAL in pid:216 [ 195.125944][ T9581] rust_binder: Write failure EINVAL in pid:216 [ 195.521370][ T9598] input: syz1 as /devices/virtual/input/input152 [ 195.536574][ T9598] input: failed to attach handler leds to device input152, error: -6 [ 195.642928][ T9603] rust_binder: Error while translating object. [ 195.642977][ T9603] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 195.654493][ T9603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 195.678676][ T36] audit: type=1326 audit(1750406575.150:11501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.1.2834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 195.747310][ T9611] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 195.797525][ T9618] SELinux: failed to load policy [ 195.940987][ T9627] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 195.949287][ T9627] rust_binder: Write failure EINVAL in pid:242 [ 196.067114][ T9632] rust_binder: Write failure EFAULT in pid:1047 [ 196.136568][ T9637] rust_binder: Write failure EFAULT in pid:248 [ 196.459151][ T9646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 196.492828][ T9648] binder: Unknown parameter 'nXI' [ 196.533036][ T9653] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 196.533065][ T9653] rust_binder: Error while translating object. [ 196.548810][ T9653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 196.555101][ T9653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1061 [ 196.704826][ T9659] rust_binder: Write failure EINVAL in pid:1057 [ 197.077926][ T9675] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.092269][ T9677] rust_binder: Error in use_page_slow: ESRCH [ 197.099095][ T9677] rust_binder: use_range failure ESRCH [ 197.105111][ T9677] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 197.110853][ T9677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 197.125372][ T9677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:261 [ 197.155763][ T9679] kvm: Disabled LAPIC found during irq injection [ 197.173441][ T9679] random: crng reseeded on system resumption [ 197.284586][ T9683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 197.351365][ T9686] rust_binder: Error while translating object. [ 197.357965][ T9686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.364187][ T9686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1069 [ 197.413836][ T9690] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 197.431713][ T9690] rust_binder: Write failure EINVAL in pid:1070 [ 197.905733][ T9705] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 197.912020][ T9705] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 197.945667][ T9705] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:277 [ 198.116212][ T9715] binder: Bad value for 'max' [ 198.162957][ T36] audit: type=1400 audit(1750406577.630:11502): avc: denied { execute } for pid=9712 comm="syz.1.2873" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 198.761568][ T9737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 198.761825][ T9737] rust_binder: Error in use_page_slow: ESRCH [ 198.774370][ T9737] rust_binder: use_range failure ESRCH [ 198.780598][ T9737] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 198.795677][ T9737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 198.805008][ T9737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 198.887176][ T9743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1100 [ 199.028698][ T13] bridge_slave_1: left allmulticast mode [ 199.050551][ T13] bridge_slave_1: left promiscuous mode [ 199.058416][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.072048][ T13] bridge_slave_0: left allmulticast mode [ 199.078084][ T13] bridge_slave_0: left promiscuous mode [ 199.083789][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.206716][ T13] veth1_macvtap: left promiscuous mode [ 199.212269][ T13] veth0_vlan: left promiscuous mode [ 199.313590][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.322462][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.329580][ T9742] bridge_slave_0: entered allmulticast mode [ 199.336022][ T9742] bridge_slave_0: entered promiscuous mode [ 199.342525][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.349760][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.350107][ T9759] kvm: user requested TSC rate below hardware speed [ 199.356870][ T9742] bridge_slave_1: entered allmulticast mode [ 199.370215][ T9742] bridge_slave_1: entered promiscuous mode [ 199.384556][ T9760] kvm: user requested TSC rate below hardware speed [ 199.391657][ T9759] kvm: user requested TSC rate below hardware speed [ 199.399298][ T9761] binder: Bad value for 'defcontext' [ 199.404694][ T9760] binder: Bad value for 'defcontext' [ 199.463134][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.470256][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.477596][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.484690][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.512303][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.520214][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.537183][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.544349][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.557227][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.564305][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.602420][ T9765] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 199.602554][ T36] audit: type=1400 audit(1750406579.070:11503): avc: granted { setsecparam } for pid=9764 comm="syz.4.2888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 199.608007][ T9742] veth0_vlan: entered promiscuous mode [ 199.612305][ T9767] rust_binder: Write failure EINVAL in pid:1107 [ 199.638730][ T9767] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 199.645098][ T9767] rust_binder: Read failure Err(EFAULT) in pid:1107 [ 199.654242][ T9767] rust_binder: Write failure EINVAL in pid:1107 [ 199.663779][ T9767] rust_binder: Write failure EINVAL in pid:1107 [ 199.666342][ T9742] veth1_macvtap: entered promiscuous mode [ 199.799937][ T9774] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 199.827195][ T9776] rust_binder: Error while translating object. [ 199.835388][ T9776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 199.843198][ T9776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 200.071960][ T36] audit: type=1400 audit(1750406579.540:11504): avc: granted { setsecparam } for pid=9777 comm="syz.6.2893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 200.104461][ T9780] rust_binder: Write failure EFAULT in pid:1113 [ 200.236857][ T9789] rtc_cmos 00:00: Alarms can be up to one day in the future [ 200.280540][ T36] audit: type=1326 audit(1750406579.750:11505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.6.2897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e858e929 code=0x0 [ 200.504815][ T9804] binder: Bad value for 'max' [ 200.544797][ T9807] SELinux: security policydb version 17 (MLS) not backwards compatible [ 200.556132][ T9807] SELinux: failed to load policy [ 200.562516][ T36] audit: type=1326 audit(1750406580.030:11506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9805 comm="syz.1.2901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 200.562703][ T9807] rust_binder: Error in use_page_slow: ESRCH [ 200.589050][ T9807] rust_binder: use_range failure ESRCH [ 200.595081][ T9807] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 200.600829][ T9807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 200.609092][ T9807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1125 [ 200.712027][ T36] audit: type=1326 audit(1750406580.180:11507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9814 comm="syz.4.2903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0482b8e929 code=0x0 [ 200.901316][ T9820] rust_binder: Write failure EINVAL in pid:320 [ 200.925924][ T9825] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 201.280762][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.280787][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.293299][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.302745][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.310987][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.317564][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.325591][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.334807][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.343004][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.350088][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.359580][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.366342][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.376188][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.382671][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.391477][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.399663][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.407911][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.414403][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.422725][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.429479][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.445964][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.454104][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.463206][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.470115][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.480001][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.486928][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.495285][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.502695][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.511213][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.519361][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.527689][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.534494][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.542919][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.556360][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.564544][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.572422][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.580626][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.589365][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.599164][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.607276][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.617203][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.623677][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.636907][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.643395][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.652175][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.658825][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.668933][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.675418][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.683693][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.690361][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.698602][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.705141][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.723598][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.733701][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.743099][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.749913][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.758166][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.764651][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.774750][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.781707][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.792010][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.814529][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.825675][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.832184][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.841083][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.841666][ T9847] SELinux: policydb version -313122636 does not match my version range 15-33 [ 201.847903][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.864489][ T9847] SELinux: failed to load policy [ 201.881280][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.881301][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.889626][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.902436][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.917402][ T9854] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 201.920097][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.930603][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.944368][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.952008][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.962729][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.969530][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 201.980244][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 201.992943][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.002636][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.011723][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.021551][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.028546][ T9860] rust_binder: Write failure EINVAL in pid:1144 [ 202.028577][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.045094][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.052880][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.062711][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.071098][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.080459][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.087087][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.095260][ T9836] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.102625][ T9836] rust_binder: Read failure Err(EFAULT) in pid:16 [ 202.137437][ T9863] rust_binder: Write failure EINVAL in pid:20 [ 202.228448][ T9865] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 202.235215][ T9865] rust_binder: Error while translating object. [ 202.245910][ T9865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 202.258703][ T9865] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 202.283786][ T9870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.363383][ T9874] rust_binder: Write failure EFAULT in pid:1147 [ 202.414249][ T36] audit: type=1326 audit(1750406581.880:11508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9877 comm="syz.1.2921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 202.522777][ T9876] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 202.726473][ T9887] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 202.812328][ T9889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.855692][ T9889] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 202.996344][ T9891] kvm: kvm [9890]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 203.019599][ T9893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:25 [ 203.060036][ T9899] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.304363][ T9911] binder: Unknown parameter 'ÿÿ' [ 203.326045][ T36] audit: type=1326 audit(1750406582.800:11509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9912 comm="syz.1.2932" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdba578e929 code=0x0 [ 203.375534][ T9916] binder: Unknown parameter 'fsmagic' [ 203.648182][ T9923] rust_binder: Error in use_page_slow: ESRCH [ 203.648206][ T9923] rust_binder: use_range failure ESRCH [ 203.665642][ T9923] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 203.671165][ T9923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 203.691162][ T9925] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 203.695653][ T9923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 203.875926][ T9929] random: crng reseeded on system resumption [ 204.060396][ T9936] rust_binder: Write failure EFAULT in pid:50 [ 204.113289][ T36] audit: type=1326 audit(1750406583.580:11510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.4.2939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0482b8e929 code=0x0 [ 204.164260][ T9943] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 204.164539][ T9943] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 204.202019][ T9945] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 204.319129][ T36] audit: type=1400 audit(1750406583.790:11511): avc: denied { setcheckreqprot } for pid=9953 comm="syz.6.2945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 204.641733][ T9971] rust_binder: Write failure EINVAL in pid:1174 [ 204.712499][ T9973] rust_binder: Error in use_page_slow: ESRCH [ 204.712524][ T9973] rust_binder: use_range failure ESRCH [ 204.720433][ T9973] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 204.727274][ T9973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 204.735187][ T9973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1176 [ 204.957681][ T9988] rust_binder: Error while translating object. [ 204.994974][ T9988] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 205.005006][ T9988] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:70 [ 205.511208][T10011] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 205.527588][T10011] rust_binder: Write failure EINVAL in pid:84 [ 206.413331][T10019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.419859][ T36] audit: type=1400 audit(1750406585.880:11512): avc: denied { validate_trans } for pid=10018 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 206.460114][T10019] SELinux: failed to load policy [ 206.465494][T10019] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 206.502042][T10021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 206.508570][T10021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1188 [ 206.565379][T10026] binder: Bad value for 'max' [ 206.587652][T10029] binder: Bad value for 'max' [ 206.629843][T10034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1197 [ 206.963521][T10048] binder: Binderfs stats mode cannot be changed during a remount [ 207.108800][T10054] rust_binder: Write failure EFAULT in pid:1208 [ 207.108938][T10054] rust_binder: Write failure EINVAL in pid:1208 [ 207.156265][T10056] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 207.284363][T10060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.324131][T10060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 207.388087][T10060] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 207.480661][T10069] serio: Serial port ttynull [ 207.494573][T10065] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 207.512153][T10065] rust_binder: Write failure EINVAL in pid:112 [ 207.515004][T10067] rust_binder: Error in use_page_slow: ESRCH [ 207.524079][T10067] rust_binder: use_range failure ESRCH [ 207.539058][T10067] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 207.550010][T10067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 207.575531][T10067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1212 [ 207.628869][ T36] audit: type=1326 audit(1750406587.100:11513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.1.2987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdba578e929 code=0x0 [ 207.662596][ T36] audit: type=1326 audit(1750406587.100:11514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10076 comm="syz.1.2987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdba578e929 code=0x0 [ 207.686390][T10079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1214 [ 207.716061][T10084] rust_binder: Error while translating object. [ 207.754767][T10084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 207.761263][T10084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1219 [ 207.771176][ T36] audit: type=1400 audit(1750406587.250:11515): avc: denied { append } for pid=10086 comm="syz.6.2989" name="pfkey" dev="proc" ino=4026532611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 207.847988][T10092] rust_binder: Error in use_page_slow: ESRCH [ 207.848011][T10092] rust_binder: use_range failure ESRCH [ 207.854128][T10092] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 207.861081][T10092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 207.870694][T10092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:124 [ 207.885638][ T36] audit: type=1400 audit(1750406587.350:11516): avc: denied { ioctl } for pid=10096 comm="syz.1.2991" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.020839][ T36] audit: type=1400 audit(1750406587.490:11517): avc: denied { map } for pid=10098 comm="syz.1.2992" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 208.414408][T10114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 208.469615][ T36] audit: type=1400 audit(1750406587.940:11518): avc: granted { setsecparam } for pid=10115 comm="syz.6.2996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 208.549825][T10119] binder: Unknown parameter '01777777777777777777777' [ 208.948566][T10139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:147 [ 208.951435][T10139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 208.965053][T10141] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.087323][T10148] rtc_cmos 00:00: Alarms can be up to one day in the future [ 209.157908][ T36] audit: type=1400 audit(1750406588.630:11519): avc: denied { write } for pid=10153 comm="syz.1.3009" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 209.191422][T10156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.194871][T10157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 209.205869][T10156] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.321658][T10162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414 [ 209.339926][T10162] rust_binder: Read failure Err(EFAULT) in pid:414 [ 209.431958][ T36] audit: type=1400 audit(1750406588.900:11520): avc: denied { write } for pid=10165 comm="syz.4.3014" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 209.431970][T10166] random: crng reseeded on system resumption [ 209.482347][T10169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 209.496410][T10169] rust_binder: Write failure EINVAL in pid:416 [ 209.542370][T10168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.555379][T10168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1244 [ 209.597525][T10174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.666802][T10181] input: syz1 as /devices/virtual/input/input157 [ 209.792145][T10185] kvm: kvm [10184]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 209.812100][T10185] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.817574][ T36] audit: type=1400 audit(1750406589.290:11521): avc: denied { write } for pid=10184 comm="syz.4.3020" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.817712][T10185] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 209.875691][T10185] rust_binder: Error while translating object. [ 209.884362][T10185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.895768][T10185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:428 [ 209.984606][T10189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.004073][T10189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1253 [ 210.192218][T10197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.243194][T10208] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 210.265081][T10208] input: syz1 as /devices/virtual/input/input158 [ 210.286187][T10209] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.286375][T10210] rust_binder: Failed to allocate buffer. len:32780223047628208, is_oneway:false [ 210.319339][T10213] rust_binder: Write failure EFAULT in pid:1256 [ 210.360162][T10219] binder: Unknown parameter 's%Öô°‰ecla߯21i‚íÓ°W4Cq+Å¡qu/ÎüFé –>9jŸ@VÃTTø%Éý¥Ü—É×?┚ŒîÇ‹‡·éùë3è"9Öòµ¨<šÕ@ Í~èÅzÎ' [ 210.409719][T10222] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 210.410433][T10223] rust_binder: Error while translating object. [ 210.417110][T10222] rust_binder: Error while translating object. [ 210.426558][T10222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 210.432879][T10223] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 210.442587][T10222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:445 [ 210.457902][T10223] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:445 [ 210.469293][T10226] rust_binder: Write failure EINVAL in pid:163 [ 210.811505][T10243] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 210.818697][T10243] rust_binder: Error in use_page_slow: EBUSY [ 210.829505][T10253] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 210.835848][T10243] rust_binder: use_range failure EBUSY [ 210.844189][T10243] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 210.849867][T10243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 210.858038][T10243] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 210.880177][T10243] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1263 [ 211.114730][T10273] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 211.242083][T10277] can0: slcan on ttyS3. [ 211.250444][T10275] rust_binder: Write failure EFAULT in pid:183 [ 211.254793][T10277] binder: Unknown parameter 'fscontext?}' [ 211.321973][T10276] can0 (unregistered): slcan off ttyS3. [ 211.374663][T10286] __vm_enough_memory: pid: 10286, comm: syz.1.3050, bytes: 274877906944 not enough memory for the allocation [ 211.395361][T10291] SELinux: policydb magic number 0x53000000 does not match expected magic number 0xf97cff8c [ 211.430030][T10291] SELinux: failed to load policy [ 211.436736][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 211.436752][ T36] audit: type=1400 audit(1750406590.910:11533): avc: denied { write } for pid=10279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.466578][ T36] audit: type=1400 audit(1750406590.910:11534): avc: denied { add_name } for pid=10279 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.490132][ T36] audit: type=1400 audit(1750406590.910:11535): avc: denied { create } for pid=10279 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.539211][ T36] audit: type=1400 audit(1750406590.910:11536): avc: denied { write } for pid=10279 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=13375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.567231][ T36] audit: type=1400 audit(1750406590.910:11537): avc: denied { append } for pid=10279 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=13375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.620232][ T36] audit: type=1400 audit(1750406590.960:11538): avc: denied { remove_name } for pid=10297 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=13375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.668790][ T36] audit: type=1400 audit(1750406590.960:11539): avc: denied { unlink } for pid=10297 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=13375 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.704787][T10309] kernel profiling enabled (shift: 8) [ 211.862018][T10330] rust_binder: Write failure EINVAL in pid:1284 [ 212.008852][T10343] rust_binder: Failed to allocate buffer. len:184, is_oneway:true [ 212.076943][T10345] rust_binder: Write failure EINVAL in pid:472 [ 212.113796][T10348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 212.217892][T10356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:474 [ 212.218002][ T36] audit: type=1326 audit(1750406591.690:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.1.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 212.287093][T10354] binder: Unknown parameter '' [ 212.343974][T10357] rust_binder: Write failure EINVAL in pid:474 [ 212.419965][T10363] kvm: user requested TSC rate below hardware speed [ 212.446289][T10363] binder: Unknown parameter 'ÿÿÿÿ' [ 212.570785][T10366] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 212.857660][ T2098] bridge_slave_1: left allmulticast mode [ 212.863349][ T2098] bridge_slave_1: left promiscuous mode [ 212.869062][ T2098] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.876711][ T2098] bridge_slave_0: left allmulticast mode [ 212.882371][ T2098] bridge_slave_0: left promiscuous mode [ 212.888098][ T2098] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.999811][T10382] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 213.009754][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.009754][T10378] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 213.009780][T10378] rust_binder: Error in use_page_slow: EBUSY [ 213.020593][T10372] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.028689][T10378] rust_binder: use_range failure EBUSY [ 213.040393][T10372] bridge_slave_0: entered allmulticast mode [ 213.040455][T10378] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 213.046590][T10372] bridge_slave_0: entered promiscuous mode [ 213.052236][T10378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 213.065791][T10378] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 213.075185][T10378] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:218 [ 213.087059][ T2098] veth1_macvtap: left promiscuous mode [ 213.104713][ T2098] veth0_vlan: left promiscuous mode [ 213.139871][T10387] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 213.180369][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.195349][T10372] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.202486][T10372] bridge_slave_1: entered allmulticast mode [ 213.209090][T10372] bridge_slave_1: entered promiscuous mode [ 213.217319][T10390] binder: Bad value for 'stats' [ 213.273075][T10392] rust_binder: Write failure EFAULT in pid:479 [ 213.283531][ T36] audit: type=1400 audit(1750406592.750:11541): avc: denied { map } for pid=10391 comm="syz.4.3078" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 213.318703][T10397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.324402][T10372] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.334454][T10372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.341762][T10372] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.342123][T10397] rust_binder: Write failure EFAULT in pid:1298 [ 213.348826][T10372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.371215][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.378814][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.388616][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.395706][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.416468][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.423565][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.425688][T10400] rust_binder: Error while translating object. [ 213.431095][T10400] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 213.437818][T10400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:229 [ 213.454932][T10372] veth0_vlan: entered promiscuous mode [ 213.479006][T10372] veth1_macvtap: entered promiscuous mode [ 213.570387][T10413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.574100][ T36] audit: type=1326 audit(1750406593.040:11542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10414 comm="syz.6.3087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e858e929 code=0x7ffc0000 [ 213.610574][T10415] binder: Bad value for 'context' [ 213.622043][T10418] rust_binder: Write failure EINVAL in pid:482 [ 213.670772][T10410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.708279][T10424] input: syz1 as /devices/virtual/input/input162 [ 213.715972][T10411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 213.907653][T10431] rust_binder: Error in use_page_slow: ESRCH [ 213.907675][T10431] rust_binder: use_range failure ESRCH [ 213.913744][T10431] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 213.919359][T10431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 213.927255][T10431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1312 [ 214.252737][T10456] rust_binder: Write failure EINVAL in pid:250 [ 214.253847][T10455] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 214.268435][T10455] rust_binder: Read failure Err(EFAULT) in pid:250 [ 214.413257][T10463] rust_binder: Write failure EINVAL in pid:1322 [ 214.570823][T10483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.578076][T10483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:491 [ 214.584706][T10483] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.789955][T10496] rust_binder: Write failure EFAULT in pid:496 [ 215.058948][T10513] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 215.087472][T10513] rust_binder: Write failure EINVAL in pid:503 [ 215.120272][T10520] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.171354][T10528] rust_binder: Write failure EINVAL in pid:291 [ 215.190961][T10531] binder: Bad value for 'max' [ 215.228716][ T306] hid (null): global environment stack underflow [ 215.236061][ T306] hid-generic 009C:0005:6066.0014: unknown main item tag 0x1 [ 215.243545][ T306] hid-generic 009C:0005:6066.0014: global environment stack underflow [ 215.252060][ T306] hid-generic 009C:0005:6066.0014: item 0 2 1 11 parsing failed [ 215.260086][ T306] hid-generic 009C:0005:6066.0014: probe with driver hid-generic failed with error -22 [ 215.310851][T10541] rust_binder: Write failure EINVAL in pid:15 [ 215.339245][T10545] binder: Unknown parameter '18446744073709551615' [ 215.350167][T10546] rust_binder: Got transaction with invalid offset. [ 215.351971][T10546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.361033][T10546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:297 [ 215.475760][T10552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:300 [ 215.517754][T10554] SELinux: failed to load policy [ 215.532555][T10554] random: crng reseeded on system resumption [ 215.575438][T10564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 215.575473][T10564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1341 [ 215.584903][T10554] SELinux: unknown common r [ 215.584981][T10554] SELinux: failed to load policy [ 215.597389][T10567] rust_binder: Write failure EINVAL in pid:309 [ 215.603133][T10554] rust_binder: Write failure EFAULT in pid:17 [ 215.674242][T10579] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 215.702596][T10583] binder: Binderfs stats mode cannot be changed during a remount [ 215.741526][T10591] input: syz0 as /devices/virtual/input/input166 [ 215.748387][T10583] input input167: cannot allocate more than FF_MAX_EFFECTS effects [ 215.778493][T10595] rust_binder: inc_ref_done called when no active inc_refs [ 215.856473][T10599] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 215.987147][T10610] rust_binder: Write failure EINVAL in pid:1351 [ 216.033631][T10614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1355 [ 216.057839][T10617] input: syz1 as /devices/virtual/input/input168 [ 216.086636][T10614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer. [ 216.107278][T10617] rust_binder: Error while translating object. [ 216.107307][T10617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 216.113501][T10617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:37 [ 216.226491][T10624] rust_binder: Write failure EINVAL in pid:516 [ 216.380094][T10636] kvm: user requested TSC rate below hardware speed [ 216.393683][T10636] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 216.418696][T10634] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 216.426754][T10634] rust_binder: Error in use_page_slow: EBUSY [ 216.437407][T10634] rust_binder: use_range failure EBUSY [ 216.443477][T10634] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 216.449026][T10634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 216.456758][T10634] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 216.475283][T10634] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1358 [ 216.566364][T10653] rust_binder: Error while translating object. [ 216.574701][T10653] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 216.580931][T10653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1365 [ 216.610539][T10653] kvm: kvm [10652]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 216.653202][T10657] serio: Serial port ttynull [ 216.664012][T10660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:331 [ 216.675301][T10660] rust_binder: Write failure EINVAL in pid:331 [ 216.704352][T10666] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 216.766854][T10668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:524 [ 216.778383][T10673] rust_binder: Write failure EINVAL in pid:529 [ 216.793218][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 216.793237][ T36] audit: type=1400 audit(1750406596.260:11566): avc: denied { setattr } for pid=10672 comm="syz.4.3171" path="/dev/binderfs/binder0" dev="binder" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 216.793519][T10673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529 [ 216.871611][ T36] audit: type=1326 audit(1750406596.340:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.1.3172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdba578e929 code=0x0 [ 217.051432][T10682] SELinux: failed to load policy [ 217.056854][T10682] rust_binder: Error in use_page_slow: ESRCH [ 217.056869][T10682] rust_binder: use_range failure ESRCH [ 217.062943][T10682] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 217.071089][T10682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 217.079338][T10682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 217.089371][T10682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 217.348071][T10690] rust_binder: Write failure EINVAL in pid:539 [ 217.358135][T10690] rust_binder: Write failure EINVAL in pid:539 [ 217.434303][T10693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 217.440730][T10693] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 217.521824][T10695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.556171][T10696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.565302][T10695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50 [ 217.681921][ T36] audit: type=1400 audit(1750406597.150:11568): avc: denied { setattr } for pid=10700 comm="syz.7.3181" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.840984][T10705] rust_binder: Write failure EFAULT in pid:58 [ 217.923427][T10712] kvm: emulating exchange as write [ 217.971612][T10719] binder: Unknown parameter '0xffffffffffffffff' [ 217.995030][T10721] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 218.010461][T10723] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 218.025819][T10723] rust_binder: Write failure EINVAL in pid:1382 [ 218.283946][T10740] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 218.298972][T10740] rust_binder: Write failure EINVAL in pid:70 [ 218.381395][T10743] kvm: kvm [10742]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x2fbf00000882 [ 218.458302][T10743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 218.527690][T10746] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.548220][T10746] rust_binder: Error while translating object. [ 218.554996][T10746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 218.561436][T10746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:544 [ 218.672280][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.689606][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.697651][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.705427][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.715522][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.728515][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.736785][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.745190][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.755079][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.764715][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.772711][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.780476][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.788248][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.796034][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.803761][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.811526][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.819292][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.827103][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.835193][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.843110][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.850975][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.858757][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.866513][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.874248][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.882121][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.889921][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.897751][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.910235][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.918093][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.926096][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.933991][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.941865][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.944373][T10763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 218.949688][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.951665][T10763] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 218.959031][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.968942][T10763] rust_binder: Error while translating object. [ 218.983798][T10763] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 218.987810][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 218.990501][T10763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:348 [ 218.999639][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.010340][T10763] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:348 [ 219.024855][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.041954][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.049790][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.057644][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.065417][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.073369][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.081135][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.088898][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.096682][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.104407][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.112168][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.119941][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.127699][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.135450][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.143227][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.151249][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.160762][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.168825][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.176732][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.184484][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.192298][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.200332][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.206405][T10772] input: syz1 as /devices/virtual/input/input170 [ 219.208159][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.208195][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.208220][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.238230][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.244680][T10772] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 219.246157][T10772] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:559 [ 219.255680][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.255711][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.255735][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.255788][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.308146][T10778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 219.308177][T10778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1391 [ 219.316847][ T36] audit: type=1400 audit(1750406598.780:11569): avc: denied { map } for pid=10777 comm="syz.1.3205" path="/dev/bsg" dev="devtmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 219.349184][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.356983][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.364757][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.372573][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.380368][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.388153][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.395944][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.403684][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.411637][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.419438][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.427266][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.435105][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.442860][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.450661][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.458481][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.466531][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.475944][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.483714][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.491603][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.499409][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.507451][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.509336][T10781] binder: Bad value for 'max' [ 219.515236][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515262][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515283][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515306][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515328][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515350][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515372][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515395][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.515417][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.589764][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.597729][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.605513][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.613305][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.621151][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.628965][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.636793][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.644545][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.652339][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.660228][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.668045][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.675816][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.683563][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.691773][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.702063][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.711491][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.720787][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.728662][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.736482][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.744287][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.752418][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.760247][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.769533][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.769642][T10792] binfmt_misc: register: failed to install interpreter file ./file0 [ 219.778207][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.800665][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.801070][T10792] serio: Serial port ttynull [ 219.813562][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.822124][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.830157][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.838263][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.846214][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.854024][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.862004][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.869960][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x6 [ 219.877386][T10800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1404 [ 219.877859][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x1 [ 219.894837][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.902815][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.910621][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.918548][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.926369][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.934123][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.941908][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.949679][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.957484][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.965244][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.973017][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.980836][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.988679][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 219.996579][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.004352][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.012143][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.019908][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.027734][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.035530][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.043325][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.051153][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.058996][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.066789][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.074517][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.082309][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.090088][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.098049][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.105886][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.113648][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.121441][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.129266][ T9] hid-generic 0008:0000:FFFFFBFF.0015: unknown main item tag 0x0 [ 220.137865][ T9] hid-generic 0008:0000:FFFFFBFF.0015: hidraw0: HID v9.86 Device [syz0] on syz1 [ 220.167358][T10905] fido_id[10905]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.213521][T10910] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.347400][ T12] bridge_slave_1: left allmulticast mode [ 220.353280][ T12] bridge_slave_1: left promiscuous mode [ 220.359023][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.366777][ T12] bridge_slave_0: left allmulticast mode [ 220.372507][ T12] bridge_slave_0: left promiscuous mode [ 220.378269][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.468867][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.475998][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.483283][T10918] bridge_slave_0: entered allmulticast mode [ 220.489719][T10918] bridge_slave_0: entered promiscuous mode [ 220.497328][ T12] veth1_macvtap: left promiscuous mode [ 220.502854][ T12] veth0_vlan: left promiscuous mode [ 220.550037][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.557136][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.564284][T10918] bridge_slave_1: entered allmulticast mode [ 220.570700][T10918] bridge_slave_1: entered promiscuous mode [ 220.623983][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.631079][T10918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.638380][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.645428][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.667090][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.674340][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.684180][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.691264][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.700626][ T2098] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.707726][ T2098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.732761][T10918] veth0_vlan: entered promiscuous mode [ 220.743424][T10918] veth1_macvtap: entered promiscuous mode [ 220.824167][T10925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 220.824207][T10925] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 220.833370][T10925] rust_binder: Read failure Err(EFAULT) in pid:2 [ 220.856018][T10928] rust_binder: Failed to allocate buffer. len:65384, is_oneway:true [ 220.856014][T10929] rust_binder: Failed to allocate buffer. len:65384, is_oneway:true [ 220.856034][T10928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 220.862431][T10929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 220.870897][T10928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:5 [ 220.878880][T10929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:5 [ 220.932316][T10933] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 220.984166][T10941] rust_binder: Write failure EINVAL in pid:360 [ 221.042436][T10938] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 221.052035][T10938] rust_binder: Error in use_page_slow: EBUSY [ 221.076561][T10938] rust_binder: use_range failure EBUSY [ 221.091982][T10938] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 221.097974][T10938] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 221.106463][T10938] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 221.124789][T10950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:365 [ 221.175727][T10938] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:93 [ 221.330378][T10962] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.362515][T10967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 221.441298][ T36] audit: type=1400 audit(1750406600.910:11570): avc: denied { execute } for pid=10970 comm="syz.7.3234" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 221.460203][T10983] rust_binder: Write failure EINVAL in pid:102 [ 221.512449][T10991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.519508][T10991] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 221.526008][T10991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 221.535954][T10991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1427 [ 221.776034][ T36] audit: type=1400 audit(1750406601.250:11571): avc: denied { map } for pid=11018 comm="syz.6.3249" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 221.982451][T11027] rust_binder: Write failure EFAULT in pid:42 [ 222.036759][T11030] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 222.052487][T11030] SELinux: failed to load policy [ 222.086508][T11035] __vm_enough_memory: pid: 11035, comm: syz.4.3254, bytes: 281474976845824 not enough memory for the allocation [ 222.109178][T11037] rust_binder: Write failure EINVAL in pid:47 [ 222.354958][ T36] audit: type=1400 audit(1750406601.820:11572): avc: denied { remove_name } for pid=11048 comm="syz.1.3260" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.384175][ T36] audit: type=1400 audit(1750406601.820:11573): avc: denied { unlink } for pid=11048 comm="syz.1.3260" name="binder0" dev="binder" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.673724][T11066] binder: Unknown parameter 'sglobïŒ' [ 222.791857][ T12] bridge_slave_1: left allmulticast mode [ 222.798112][T11064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.798280][ T12] bridge_slave_1: left promiscuous mode [ 222.810555][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.856447][ T12] bridge_slave_0: left allmulticast mode [ 222.864533][ T12] bridge_slave_0: left promiscuous mode [ 222.870470][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.959770][T11076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 223.029847][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.046230][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.053462][T11062] bridge_slave_0: entered allmulticast mode [ 223.072909][T11062] bridge_slave_0: entered promiscuous mode [ 223.076064][T11084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 223.083257][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.104231][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.111374][T11062] bridge_slave_1: entered allmulticast mode [ 223.117703][T11062] bridge_slave_1: entered promiscuous mode [ 223.133492][T11088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 223.134112][ T12] veth1_macvtap: left promiscuous mode [ 223.149306][ T12] veth0_vlan: left promiscuous mode [ 223.155343][T11091] binder: Bad value for 'max' [ 223.157049][T11087] rust_binder: Write failure EINVAL in pid:119 [ 223.254349][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.267588][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.278992][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.286079][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.310560][T11062] veth0_vlan: entered promiscuous mode [ 223.322171][T11062] veth1_macvtap: entered promiscuous mode [ 223.431386][T11100] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 223.439256][T11100] SELinux: failed to load policy [ 223.846677][T11113] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.847034][T11113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 223.854042][T11113] rust_binder: Error while translating object. [ 223.863286][T11113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 223.869526][T11113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 224.000107][ T36] audit: type=1326 audit(1750406603.470:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.1.3283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x0 [ 224.081011][T11122] rust_binder: Error while translating object. [ 224.081059][T11122] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 224.087320][T11122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:394 [ 224.328308][T11143] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.337643][T11145] rust_binder: Error in use_page_slow: ESRCH [ 224.344099][T11145] rust_binder: use_range failure ESRCH [ 224.350469][T11145] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 224.356045][T11145] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 224.364128][T11145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:141 [ 224.385168][T11147] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 224.655197][T11169] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 224.672852][T11169] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 224.672874][T11169] rust_binder: Read failure Err(EFAULT) in pid:414 [ 224.705760][T11173] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4232, size: 4098) [ 224.712450][T11173] rust_binder: Error while translating object. [ 224.724685][T11173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.724757][T11175] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 224.730931][T11173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 224.752432][T11175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 224.761877][T11175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:152 [ 224.788370][T11181] cgroup: fork rejected by pids controller in /syz7 [ 224.852810][T11288] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext' [ 224.860078][T11288] rust_binder: Got transaction with invalid offset. [ 224.860146][T11288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 224.867193][T11288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 224.901127][T11291] binder: Unknown parameter 'ÿÿÿÿ' [ 225.131952][T11299] input: syz0 as /devices/virtual/input/input173 [ 225.179644][ T12] bridge_slave_1: left allmulticast mode [ 225.185352][ T12] bridge_slave_1: left promiscuous mode [ 225.195246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.209269][ T12] bridge_slave_0: left allmulticast mode [ 225.215290][ T12] bridge_slave_0: left promiscuous mode [ 225.221730][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.279575][T11305] rust_binder: Error while translating object. [ 225.279623][T11305] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 225.286841][T11305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 225.500901][ T12] veth1_macvtap: left promiscuous mode [ 225.518747][T11307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:36 [ 225.520617][ T12] veth0_vlan: left promiscuous mode [ 225.639343][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.646761][T11301] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.653843][T11301] bridge_slave_0: entered allmulticast mode [ 225.660955][T11301] bridge_slave_0: entered promiscuous mode [ 225.667705][T11318] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.667815][T11318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 225.667879][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.674258][T11318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:41 [ 225.690774][T11301] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.708476][T11301] bridge_slave_1: entered allmulticast mode [ 225.714877][T11301] bridge_slave_1: entered promiscuous mode [ 225.733200][T11328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44 [ 225.784817][T11331] rust_binder: Write failure EINVAL in pid:44 [ 225.815363][T11301] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.828570][T11301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.835877][T11301] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.842918][T11301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.895068][T11337] rust_binder: Write failure EINVAL in pid:428 [ 225.895068][T11338] rust_binder: Write failure EINVAL in pid:428 [ 225.907874][T11339] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 225.910069][T11301] veth0_vlan: entered promiscuous mode [ 225.940042][T11341] rust_binder: Write failure EINVAL in pid:431 [ 225.943076][T11301] veth1_macvtap: entered promiscuous mode [ 226.219709][T11350] binder: Unknown parameter '0x0000000000000007!çÞtÛðÓu!L/1 g [ 226.219709][T11350] Á]è P#ÄÓÆR¨WÆ|ñ¶—<H&™“Ðä0%­–®ÊO@æž'€ðeg’ÝeZ—pkIM½ø‘PRº»jŠQÈÀ}äá+½›‰•Ãd®¿<}*Þ'• [ 226.219709][T11350] ØÕ¤ªŠr ë00000000000000000012' [ 226.404429][T11356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:441 [ 226.420677][T11358] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 226.438186][T11358] rust_binder: Write failure EINVAL in pid:443 [ 226.514345][T11361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446 [ 226.678523][T11375] rust_binder: Error while translating object. [ 226.687854][T11375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.706676][T11375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:454 [ 226.739650][T11388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.778739][T11388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.854447][T11398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.861348][T11398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1492 [ 226.909213][T11403] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.997873][T11406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.004427][T11406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 227.074337][T11414] rust_binder: Write failure EFAULT in pid:17 [ 227.127923][T11420] rust_binder: Write failure EFAULT in pid:61 [ 227.258959][T11435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 227.567232][ T36] audit: type=1326 audit(1750406607.040:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11447 comm="syz.6.3360" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e858e929 code=0x0 [ 227.567650][T11451] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 227.609130][T11451] rust_binder: Read failure Err(EFAULT) in pid:1502 [ 227.639447][T11457] can0: slcan on ttyS3. [ 227.747695][T11457] can0 (unregistered): slcan off ttyS3. [ 227.920508][T11507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1519 [ 227.927076][T11509] rust_binder: Error while translating object. [ 227.936463][T11509] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.942738][T11509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 227.977813][T11511] SELinux: syz.1.3374 (11511) set checkreqprot to 1. This is no longer supported. [ 228.237987][T11515] binder: Unknown parameter 'defcontext01777777777777777777777' [ 228.246673][T11514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.246707][T11514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:84 [ 228.271451][T11519] rust_binder: Write failure EFAULT in pid:87 [ 228.293510][T11523] input: syz1 as /devices/virtual/input/input176 [ 228.310940][ T36] audit: type=1326 audit(1750406607.780:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11522 comm="syz.4.3378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc418e929 code=0x0 [ 228.365142][T11531] rust_binder: Error while translating object. [ 228.365176][T11531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 228.375645][T11531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90 [ 228.453784][T11538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1529 [ 228.463586][T11540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1529 [ 228.548068][T11547] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.729121][T11561] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.732735][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.743984][T11560] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.820043][T11572] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.919899][T11575] block device autoloading is deprecated and will be removed. [ 228.939869][T11575] syz.6.3391: attempt to access beyond end of device [ 228.939869][T11575] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 228.964705][T11575] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.070757][T11585] rust_binder: Write failure EFAULT in pid:1553 [ 229.330138][T11599] rust_binder: Error while translating object. [ 229.330188][T11599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.336635][T11599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 229.422337][T11602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.469280][T11608] binder: Unknown parameter 'context' [ 229.477578][ T36] audit: type=1326 audit(1750406608.940:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.1.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 229.505708][ T36] audit: type=1326 audit(1750406608.940:11578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.1.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 229.530793][ T36] audit: type=1326 audit(1750406608.940:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.1.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 229.556995][ T36] audit: type=1326 audit(1750406608.940:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.1.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 229.580944][ T36] audit: type=1326 audit(1750406608.940:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11605 comm="syz.1.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 229.662409][T11627] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 229.662445][T11627] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 229.672066][ T36] audit: type=1400 audit(1750406609.130:11582): avc: denied { setattr } for pid=11628 comm="syz.1.3407" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 229.728954][T11636] SELinux: security_context_str_to_sid () failed with errno=-22 [ 229.729248][T11637] SELinux: security_context_str_to_sid () failed with errno=-22 [ 229.742361][T11639] rust_binder: Write failure EFAULT in pid:114 [ 230.082952][T11669] random: crng reseeded on system resumption [ 230.123353][T11674] kvm: user requested TSC rate below hardware speed [ 230.207043][T11688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 230.207092][T11688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:127 [ 230.217094][T11688] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 230.226424][T11688] rust_binder: Read failure Err(EFAULT) in pid:127 [ 230.378464][T11692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.385068][T11692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 230.507610][T11715] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 230.516981][T11714] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 230.527649][T11715] rust_binder: Error while translating object. [ 230.536398][T11714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 230.543697][T11714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1581 [ 230.553545][T11715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.562910][T11715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1581 [ 230.584512][T11727] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.599677][T11727] rust_binder: Error while translating object. [ 230.606409][T11727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 230.612619][T11727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:517 [ 230.659596][T11731] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 230.669591][T11731] rust_binder: Error while translating object. [ 230.680501][T11731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.681483][T11730] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.686929][T11731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1585 [ 230.696680][T11730] rust_binder: Error in use_page_slow: ESRCH [ 230.712153][T11730] rust_binder: use_range failure ESRCH [ 230.718301][T11730] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 230.723817][T11730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 230.733036][T11730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 230.910159][ T36] audit: type=1326 audit(1750406610.380:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6f8e929 code=0x7ffc0000 [ 230.948192][T11748] binder: Unknown parameter 'context' [ 230.967210][T11753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 230.967691][T11753] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 230.980211][ T36] audit: type=1326 audit(1750406610.380:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.7.3446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6f8e929 code=0x7ffc0000 [ 230.982202][T11753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 231.013040][T11753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:521 [ 231.180799][T11764] binder: Unknown parameter '00000000000000000004' [ 231.313422][T11771] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 231.392159][T11776] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 231.415764][T11776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 231.423876][T11776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:528 [ 231.442721][T11773] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 231.446062][T11779] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 231.461361][T11773] SELinux: failed to load policy [ 231.509251][T11785] input: syz0 as /devices/virtual/input/input179 [ 231.700158][T11791] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.135687][T11812] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.154140][T11812] rust_binder: Write failure EINVAL in pid:533 [ 232.536440][T11847] binder: Unknown parameter 'contextrfs/binder0' [ 232.557807][T11845] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 232.557853][T11845] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 232.565740][T11845] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 232.566065][T11852] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 232.612032][T11862] binder: Bad value for 'stats' [ 232.766879][T11868] binder: Unknown parameter 'stats.ñK‚D̵5 ƒŠFÀ' [ 233.237012][T11872] rust_binder: Error in use_page_slow: ESRCH [ 233.237043][T11872] rust_binder: use_range failure ESRCH [ 233.243110][T11872] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 233.248882][T11872] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.257018][T11872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195 [ 233.283865][ T36] kauditd_printk_skb: 79 callbacks suppressed [ 233.283883][ T36] audit: type=1326 audit(1750406612.750:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.6.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e858e929 code=0x7ffc0000 [ 233.322912][ T36] audit: type=1326 audit(1750406612.750:11665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.6.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0e858e929 code=0x7ffc0000 [ 233.361656][T11879] rust_binder: Write failure EFAULT in pid:202 [ 233.418295][ T36] audit: type=1326 audit(1750406612.880:11666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.7.3482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f6f8e929 code=0x0 [ 233.426031][T11888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.458366][T11885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.465568][T11888] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 233.465617][T11888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 233.467156][T11885] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 233.473728][T11888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:540 [ 233.483102][T11885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 233.500388][T11885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:540 [ 233.587917][T11899] rust_binder: Error while translating object. [ 233.597256][T11899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 233.603484][T11899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1612 [ 233.627244][T11903] binder: Bad value for 'max' [ 233.662664][T11902] rtc_cmos 00:00: Alarms can be up to one day in the future [ 233.666562][ T36] audit: type=1400 audit(1750406613.130:11667): avc: denied { append } for pid=11907 comm="syz.1.3490" name="binder1" dev="binder" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 233.670973][T11902] SELinux: security_context_str_to_sid () failed with errno=-22 [ 233.803767][T11918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.804042][T11918] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 233.810629][T11918] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 233.818706][T11918] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:547 [ 233.891733][T11927] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.920633][T11926] binder: Bad value for 'max' [ 233.937877][T11923] syz.1.3495: attempt to access beyond end of device [ 233.937877][T11923] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 233.951687][T11923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1625 [ 234.358246][T11938] binder: Unknown parameter 'contexNLsyste"_uÝGй ‰‰óN58' [ 234.714478][T11943] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 234.855649][T11948] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 234.855683][T11948] rust_binder: Error in use_page_slow: EBUSY [ 234.868885][T11948] rust_binder: use_range failure EBUSY [ 234.875017][T11948] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 234.875068][T11951] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 234.880867][T11948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 234.896406][T11948] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 234.906097][T11948] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1631 [ 234.912793][T11951] rust_binder: Read failure Err(EFAULT) in pid:218 [ 234.931836][T11951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:218 [ 235.206513][ T36] audit: type=1326 audit(1750406614.680:11668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.238585][T11974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1646 [ 235.240305][T11974] rust_binder: Error while translating object. [ 235.251064][ T36] audit: type=1326 audit(1750406614.680:11669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.265671][T11974] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.285253][T11974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1646 [ 235.305926][T11978] rust_binder: Write failure EFAULT in pid:134 [ 235.306497][ T36] audit: type=1326 audit(1750406614.710:11670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.345564][T11980] binder: Unknown parameter 'fscontext?}' [ 235.349009][ T36] audit: type=1326 audit(1750406614.710:11671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.375117][ T36] audit: type=1326 audit(1750406614.710:11672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.405002][ T36] audit: type=1326 audit(1750406614.710:11673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11973 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdba578e929 code=0x7ffc0000 [ 235.431181][T11985] rust_binder: Write failure EFAULT in pid:1650 [ 235.440300][T11987] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.446635][T11987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 235.457319][T11988] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.654115][T12003] rust_binder: Write failure EINVAL in pid:142 [ 235.817320][T12011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145 [ 236.060050][T12030] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.107002][T12034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.139315][T12036] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 236.151450][T12042] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.156036][T12040] serio: Serial port ttynull [ 236.159757][T12042] rust_binder: Read failure Err(EFAULT) in pid:153 [ 236.218036][T12048] input: syz1 as /devices/virtual/input/input180 [ 236.239771][T12048] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 236.242845][T12048] rust_binder: Error while translating object. [ 236.250631][T12048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.258148][T12048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 236.285080][T12051] SELinux: truncated policydb string identifier [ 236.301441][T12051] SELinux: failed to load policy [ 236.352088][T12055] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 236.359685][T12055] rust_binder: Write failure EINVAL in pid:239 [ 236.419810][T12060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.439053][T12061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.616175][T12068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 236.622788][T12068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 236.635417][T12067] rust_binder: Write failure EFAULT in pid:162 [ 236.739044][T12070] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.746032][T12070] rust_binder: Error in use_page_slow: ESRCH [ 236.752593][T12070] rust_binder: use_range failure ESRCH [ 236.758821][T12070] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 236.764831][T12070] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 236.773128][T12070] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:164 [ 236.828168][T12073] rust_binder: Write failure EINVAL in pid:167 [ 236.837723][T12073] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.843928][T12073] rust_binder: Read failure Err(EFAULT) in pid:167 [ 236.852606][T12073] rust_binder: Write failure EINVAL in pid:167 [ 236.878367][T12075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 236.942497][T12075] rust_binder: Read failure Err(EFAULT) in pid:169 [ 236.992005][T12078] rust_binder: Write failure EINVAL in pid:172 [ 237.030504][T12084] binder: Unknown parameter 'fowner>00000000000000000000' [ 237.259849][T12096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.261579][T12096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.271324][T12099] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.281422][T12102] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 237.287938][T12102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 237.296902][T12102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1681 [ 237.346365][T12107] random: crng reseeded on system resumption [ 237.401409][T12107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.516652][T12126] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 237.523115][T12126] rust_binder: Error while translating object. [ 237.533783][T12126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 237.539982][T12126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1688 [ 237.593163][T12134] input: syz0 as /devices/virtual/input/input181 [ 237.636036][T12134] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 237.644018][T12141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 237.663012][T12141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1690 [ 237.674147][T12145] binder: Unknown parameter '0xffffffffffffffff' [ 237.752370][T12151] binder: Bad value for 'max' [ 237.824583][T12131] rust_binder: Read failure Err(EFAULT) in pid:193 [ 238.231952][T12159] binder: Unknown parameter 'nXI' [ 238.364287][ T36] kauditd_printk_skb: 83 callbacks suppressed [ 238.364306][ T36] audit: type=1400 audit(1750406617.830:11757): avc: denied { read } for pid=12167 comm="syz.6.3575" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.544866][T12180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.545919][ T36] audit: type=1400 audit(1750406618.010:11758): avc: denied { append } for pid=12169 comm="syz.6.3576" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 238.576512][T12182] rust_binder: Got transaction with invalid offset. [ 238.576554][T12182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.583182][T12182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 238.596403][T12184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:598 [ 238.634970][T12191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 238.645868][T12195] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1697 [ 238.646227][T12190] rust_binder: Error while translating object. [ 238.665910][T12190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.672209][T12190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 238.708213][T12200] rust_binder: Error while translating object. [ 238.718235][T12200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.724476][T12200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:213 [ 238.874222][ T36] audit: type=1400 audit(1750406618.340:11759): avc: denied { execute } for pid=12208 comm="syz.4.3587" path="/87/cgroup.controllers" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.930960][T12219] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 238.938255][T12219] rust_binder: Write failure EINVAL in pid:219 [ 239.004443][ T36] audit: type=1400 audit(1750406618.470:11760): avc: denied { read append } for pid=12223 comm="syz.4.3591" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.034684][ T36] audit: type=1400 audit(1750406618.470:11761): avc: denied { open } for pid=12223 comm="syz.4.3591" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 239.058809][ T36] audit: type=1400 audit(1750406618.470:11762): avc: denied { mount } for pid=12223 comm="syz.4.3591" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 239.081417][ T36] audit: type=1326 audit(1750406618.510:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12227 comm="syz.4.3593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc418e929 code=0x0 [ 239.141047][T12229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 239.141087][T12229] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 239.150301][T12229] rust_binder: Read failure Err(EFAULT) in pid:287 [ 239.210215][ T36] audit: type=1400 audit(1750406618.680:11764): avc: denied { append } for pid=12232 comm="syz.7.3595" name="pfkey" dev="proc" ino=4026532537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 239.308771][ T36] audit: type=1326 audit(1750406618.780:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.7.3596" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3f6f8e929 code=0x0 [ 239.360745][T12236] binder: Bad value for 'context' [ 239.508892][T12244] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.509133][T12245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.516158][T12244] rust_binder: Error while translating object. [ 239.522678][T12244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 239.528978][T12244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:609 [ 239.568999][T12250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.581973][T12250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.588544][T12250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 239.588730][T12251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 239.604455][T12250] rust_binder: Error while translating object. [ 239.605378][T12251] rust_binder: Error while translating object. [ 239.613740][T12250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.620292][T12251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 239.626311][T12250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 239.645680][T12251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 239.654720][T12250] rust_binder: Error while translating object. [ 239.663958][T12250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 239.670210][T12250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:615 [ 239.798762][ T36] audit: type=1400 audit(1750406619.270:11766): avc: denied { execute } for pid=12256 comm="syz.6.3604" path="/syzcgroup/unified/syz6/cgroup.procs" dev="cgroup2" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 239.951433][T12259] kvm_intel: kvm [12258]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff [ 239.965796][T12263] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 240.370522][T10568] hid-generic C98F:0003:0000.0016: unknown main item tag 0x0 [ 240.378124][T10568] hid-generic C98F:0003:0000.0016: unknown main item tag 0x0 [ 240.388307][T10568] hid-generic C98F:0003:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.477037][T12288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.477274][T12288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.604892][T12299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 240.697465][T12305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 240.921142][T12311] binder: Bad value for 'max' [ 240.954155][T12313] rust_binder: Write failure EINVAL in pid:310 [ 240.972574][T12313] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 241.009093][T12313] rust_binder: Write failure EINVAL in pid:310 [ 241.063913][T12317] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 241.070463][T12317] rust_binder: Failed to allocate buffer. len:48, is_oneway:false [ 241.172615][T12319] input: syz1 as /devices/virtual/input/input184 [ 241.335063][T12324] input: syz1 as /devices/virtual/input/input185 [ 241.425288][T12328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1717 [ 241.542776][T12336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1720 [ 241.594602][T12338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.605035][T12338] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:642 [ 241.612352][T12339] rust_binder: Write failure EINVAL in pid:1720 [ 241.663087][T12340] binder: Bad value for 'max' Stopping sshd: [ 241.820688][T12347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. stopped /usr/sbin/sshd (pid 201) OK [ 241.847653][T12347] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 Stopping crond: stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 241.867237][T12347] rust_binder: Write failure EINVAL in pid:318 [ 242.071505][T12379] binder: Bad value for 'defcontext' OK Stopping iptable[ 242.206527][T12389] binder: Bad value for 'max' s: [ 242.213481][T12399] binder: Bad value for 'stats' OK Stopping system message bus: done [ 242.371333][T12405] input: syz1 as /devices/virtual/input/input186 [ 242.459963][T12412] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 242.494179][T12412] SELinux: policydb version 51618937 does not match my version range 15-33 [ 242.510567][T12412] SELinux: failed to load policy Stopping klogd: OK Stopping acpid: [ 242.905004][T12464] rust_binder: Write failure EINVAL in pid:1744 [ 242.905085][T12464] rust_binder: Read failure Err(EAGAIN) in pid:1744 [ 242.948140][T12472] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.973290][T12475] binder: Unknown parameter 'permit_directio' [ 242.995763][T12465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.025429][T12479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.029140][T12479] rust_binder: Error while translating object. [ 243.040653][T12479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 243.047043][T12479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:656 [ 243.121987][T12492] binder: Bad value for 'stats' [ 243.154013][T12490] SELinux: security_context_str_to_sid (sytee_control) failed with errno=-22 [ 243.193190][T12506] input: syz1 as /devices/virtual/input/input188 [ 243.207543][T12507] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.207877][T12507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 243.217994][T12507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:658 [ 243.344744][T12520] binder: Bad value for 'stats' [ 243.385446][T12525] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.386718][T12525] rust_binder: Error while translating object. [ 243.393359][T12525] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 243.399668][T12525] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:661 [ 243.486686][T12529] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 243.597028][T12537] binder: Binderfs stats mode cannot be changed during a remount [ 243.620689][T12542] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 243.632684][T12545] rust_binder: Error while translating object. [ 243.639174][T12545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 243.645431][T12545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1772 [ 243.667331][T12547] binder: Bad value for 'max' [ 243.683790][T12548] rust_binder: Write failure EFAULT in pid:666 [ 243.684204][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 243.684222][ T36] audit: type=1400 audit(1750406623.150:11800): avc: denied { setcheckreqprot } for pid=12539 comm="syz.6.3677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 243.876274][T12558] kvm: Disabled LAPIC found during irq injection [ 243.884667][ T36] audit: type=1400 audit(1750406623.350:11801): avc: denied { checkpoint_restore } for pid=12557 comm="syz.1.3681" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 umount: can't remount debugfs read-only [ 243.971387][ T36] audit: type=1400 audit(1750406623.440:11802): avc: denied { ioctl } for pid=12565 comm="syz.1.3684" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 244.039294][ T36] audit: type=1400 audit(1750406623.500:11803): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2666]" dev="pipefs" ino=2666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Connection to 10.128.0.168 closed by remote host. Sent SIGTERM to all processes [ 244.497418][ T292] bridge_slave_1: left allmulticast mode [ 244.503107][ T292] bridge_slave_1: left promiscuous mode [ 244.508762][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.516225][ T292] bridge_slave_0: left allmulticast mode [ 244.521862][ T292] bridge_slave_0: left promiscuous mode [ 244.527555][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.786801][ T292] veth1_macvtap: left promiscuous mode [ 244.792319][ T292] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 245.788789][ T292] bridge_slave_1: left allmulticast mode [ 245.794473][ T292] bridge_slave_1: left promiscuous mode [ 245.800138][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.807664][ T292] bridge_slave_0: left allmulticast mode [ 245.813315][ T292] bridge_slave_0: left promiscuous mode [ 245.818975][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.826658][ T292] bridge_slave_1: left allmulticast mode [ 245.832293][ T292] bridge_slave_1: left promiscuous mode [ 245.837926][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.845334][ T292] bridge_slave_0: left allmulticast mode [ 245.851038][ T292] bridge_slave_0: left promiscuous mode [ 245.856714][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.864337][ T292] bridge_slave_1: left allmulticast mode [ 245.870019][ T292] bridge_slave_1: left promiscuous mode [ 245.875627][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.883033][ T292] bridge_slave_0: left allmulticast mode [ 245.888714][ T292] bridge_slave_0: left promiscuous mode [ 245.894298][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.183936][T12573] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 246.191351][T12573] ACPI: PM: Preparing to enter system sleep state S5 [ 246.198361][T12573] kvm: exiting hardware virtualization [ 246.203876][T12573] reboot: Power down serialport: VM disconnected.