last executing test programs:

45.619585701s ago: executing program 0 (id=2092):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0})

45.353814725s ago: executing program 0 (id=2093):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0)
ioctl$BLKROSET(r2, 0x125d, 0x0)
read(r1, &(0x7f0000000040)=""/104, 0x68)

45.271973786s ago: executing program 0 (id=2096):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1b)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x380)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

45.252989986s ago: executing program 0 (id=2097):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) (async)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x0, 0x20010, r1, 0x0) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0)

45.246783946s ago: executing program 0 (id=2098):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40402, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x100})
write$cgroup_devices(r1, &(0x7f0000002d80)=ANY=[], 0xffdd)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x769, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c1ae2008448e5750c3a3d5733b4a2486788550e6353e9b12cc09750d5b9dcd2aedba61d0520e99a51e880d3dd78a2b502029deac1860cf50885f8bf5119491c6b1e06492e98ca64e5e3"})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}, {0x7ff}]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
ioctl$KVM_SET_TSC_KHZ(r10, 0xaea2, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11)

44.875034662s ago: executing program 0 (id=2104):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400, {0x0, 0x7, 0x0, 0x0, 0x7f}})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020)
openat$cgroup_subtree(r6, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x2, 0x3c, 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES16=r7, @ANYRES32=r7, @ANYBLOB="92982fa3"], 0xfdef)
ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

38.2695911s ago: executing program 1 (id=2211):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b40)={0x14, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}], 0xa7, 0x0, &(0x7f0000000fc0)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065aa00e0b913630d0a5ed92401880ed54d0fca037e2b4a71e1f80c814bd22ed55c9ee8cb33ef29c28c8a0b1973fd2abc43687b3907a58aafbaa625ccb36e9082cb66c5186669613684973dbd11fc37951f2e85993a0272ca9c06742ce7d08e55c6c1136675136"})

37.375175913s ago: executing program 1 (id=2227):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="df0000000000000003b59c"])
syz_clone(0x8040000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0)

37.191889106s ago: executing program 1 (id=2228):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0)

37.020024649s ago: executing program 1 (id=2230):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x4, 0x0, 0x9})
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x280880, 0x0)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000140)={0x20, 0x8f})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x4)
read(r1, &(0x7f00000001c0)=""/233, 0xe9)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f00000002c0)={0x10, 0x0, "254f210882819d8e8be0eb456c573975"})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000340)={0x800, 0xb, 0x3e14, 0x8, 0x1a, "a978245288eaca2e164b547be42633fad013e8"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x9)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000003c0)={0xc, 0x10001, 0xffffffff, 0x7, 0x16, "03911ec582c5027d7dcc5af53598d77ecb9cb4"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400))
ioctl$TCXONC(r1, 0x540a, 0x3)
ioctl$KDMKTONE(r2, 0x4b30, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/bus/input/handlers\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000640)={0x2, 0x0, [{0x8a5, 0x0, 0xad23}, {0x29e, 0x0, 0xfffffffffffffff6}]})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x8102, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000006c0)={0x4, 0x1, 0x9, 0x0, 0x0, "559829a0a2e81065"})
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000700)={0x5, 0x3ddc, 0xfffc, 0xf801, 0x1, 0x8})
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000740)=<r5=>0x0)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000780)=r5)
r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f00000007c0)=""/34)
write$FUSE_OPEN(r3, &(0x7f0000000800)={0x20, 0x0, 0x0, {0x0, 0x3}}, 0x20)
ioctl$KDENABIO(r4, 0x4b36)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000900)={&(0x7f0000000840)=""/189, 0xbd, 0x2, 0x3e6})
ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000940)=0x5)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000980)={0xff, 0xe, 0x7ff, 0x8, 0xa, "bd4befe821701a2e6df229b4453a11c164a7cf"})

36.90795984s ago: executing program 1 (id=2232):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x10b, 0x0, 0x6}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, 0x0) (async)
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0xdb80000000000000, 0x1000, 0x7, 0x5, 0x8})

36.851623111s ago: executing program 1 (id=2234):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001700), 0x42, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}]})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0x8000000, 0x4, 0x7, 0x10, 0x4, 0x3, 0xa7, 0x4, 0xfe, 0x4, 0x7}, {0x4, 0x4, 0x3, 0x3e, 0x50, 0x2, 0x40, 0x2, 0x3, 0x0, 0x4, 0x9}, {0xdddd1000, 0x100000, 0x9, 0x4, 0x81, 0x31, 0x4, 0x4, 0x3, 0x4, 0xf8, 0xe}, {0x0, 0xdddd1000, 0xc, 0xd, 0x0, 0x6f, 0x4, 0xb, 0xbb, 0x8, 0x5e, 0xf4}, {0x8080000, 0x8080000, 0x3, 0x6, 0x3, 0xc, 0x3, 0x8, 0x9, 0xde, 0xea, 0xff}, {0xdddd1003, 0xd000, 0xb, 0x45, 0x8, 0x10, 0x4, 0xb, 0x4, 0x6, 0x6, 0x5}, {0x0, 0x4000, 0xb, 0x5, 0x1, 0x5, 0x5f, 0xb, 0x8, 0x5, 0xb, 0x8}, {0x4000, 0x4000, 0x0, 0x3, 0x0, 0x8, 0x7, 0x0, 0x3, 0x40, 0x7, 0x80}, {0x100000, 0x9}, {0x4b57b8aa980733be, 0x2}, 0xc, 0x0, 0x80a0000, 0xa04207, 0x5, 0x800, 0xeeef0000, [0x1, 0x0, 0x6, 0x8]})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af25, &(0x7f00000007c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x4, 0x9, '\x00', 0x9})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb, 0x1})

29.690126478s ago: executing program 32 (id=2104):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400, {0x0, 0x7, 0x0, 0x0, 0x7f}})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0)
read$FUSE(r6, &(0x7f000001aa80)={0x2020}, 0x2020)
openat$cgroup_subtree(r6, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x2, 0x3c, 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRES16=r7, @ANYRES32=r7, @ANYBLOB="92982fa3"], 0xfdef)
ioctl$BTRFS_IOC_GET_FEATURES(r6, 0x80189439, &(0x7f0000000080))
openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000)

21.843681315s ago: executing program 33 (id=2234):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001700), 0x42, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}]})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000440)={{0x4000, 0x8000000, 0x4, 0x7, 0x10, 0x4, 0x3, 0xa7, 0x4, 0xfe, 0x4, 0x7}, {0x4, 0x4, 0x3, 0x3e, 0x50, 0x2, 0x40, 0x2, 0x3, 0x0, 0x4, 0x9}, {0xdddd1000, 0x100000, 0x9, 0x4, 0x81, 0x31, 0x4, 0x4, 0x3, 0x4, 0xf8, 0xe}, {0x0, 0xdddd1000, 0xc, 0xd, 0x0, 0x6f, 0x4, 0xb, 0xbb, 0x8, 0x5e, 0xf4}, {0x8080000, 0x8080000, 0x3, 0x6, 0x3, 0xc, 0x3, 0x8, 0x9, 0xde, 0xea, 0xff}, {0xdddd1003, 0xd000, 0xb, 0x45, 0x8, 0x10, 0x4, 0xb, 0x4, 0x6, 0x6, 0x5}, {0x0, 0x4000, 0xb, 0x5, 0x1, 0x5, 0x5f, 0xb, 0x8, 0x5, 0xb, 0x8}, {0x4000, 0x4000, 0x0, 0x3, 0x0, 0x8, 0x7, 0x0, 0x3, 0x40, 0x7, 0x80}, {0x100000, 0x9}, {0x4b57b8aa980733be, 0x2}, 0xc, 0x0, 0x80a0000, 0xa04207, 0x5, 0x800, 0xeeef0000, [0x1, 0x0, 0x6, 0x8]})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af25, &(0x7f00000007c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]})
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad86558"], 0xffdd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x65, 0x0, &(0x7f0000000140)="6efa86ba44c4dcef07b59db7e9a27f48a6e930da91c08c993e71a416eb2235d1314cf41411de9aa874429c871656ff38656d42c237a569b22dc9923150d6eb5b381125c2173cdb022eb5d8fc7a7df730ad34e08a536eaca88d851d6505f7b2b6831911631a"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x4, 0x9, '\x00', 0x9})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb, 0x1})

2.03051235s ago: executing program 2 (id=2696):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$TCSETSF(r2, 0x5432, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x96, 0xf, 0x3, 0x7fff}]})
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x1, 0x0, 0x1, 0x6, 0x6, 0xfe, 0x4, 0x6, 0xfc, 0x7f, 0x1, 0xe4, 0x10, 0x0, 0x4, 0x2}})
ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000340)={0x0, 0x2bd9})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x40305839, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5})
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r10 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r10}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0})

1.716831945s ago: executing program 4 (id=2702):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x2010042, 0x0)

1.635931436s ago: executing program 4 (id=2704):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0xd4, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x0, 0x2, 0x3d}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x1}, @request_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/10, 0xa, 0x0, 0x1d}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/243, 0xf3, 0x2, 0xd}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/53, 0x35, 0x2, 0x40}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x2}, @increfs], 0xd5, 0x0, &(0x7f0000000540)="f986a761ff7e3cea278ba22c7aca2d406242961025f801b6764a9f38101c1814bb4339a61e3a90e66a339d1ca4fd35d92073a88f52e8fc8055c2c02f510c835ed445b7e259599fa9321a177a406d475e175e2b083469e02ea471cdd9654e7c85be67e67d71393a0be5fc73972d4ff7842fb879ca6c8d774904dcd42d03fa4ddeccd61d92068c88bb189d1f62525d420af448b552eb42a6fab9dcfb4488e2e8b2883e4b7adbeeda483dc4a1397acee89f5c939c7c4306463a8833f00ef99a423357f321002fba4500a8693eca1d04f1ed70b1c81c8f"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, &(0x7f00000001c0)})
r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000000)={0x1})

1.599239896s ago: executing program 4 (id=2706):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x80000002, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

1.458410788s ago: executing program 3 (id=2709):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400), 0xba902, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9cc6d000)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
write(r1, &(0x7f00000003c0)="53b067edd1236a983587ac770767f7429748", 0x12)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a9a00, 0x0)
write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '@:$&/![', 0x3a, '/dev/ashmem\x00', 0x3a, './file0', 0x3a, [0x43]}, 0x3b)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x7})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xb8H\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&`<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6#M\"\x87\x05W\f0b(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\xfe\x8c\x87\x0f\x99\xc3E\xcfc\x8cX\xa3\xf5&}\a\xbf\xf8N\"C!\x1f\x96\xd7\xe9\xa5tw\'\x8f,_\xa0\xea\x90\"\x19i\f\xd5\x02\xe2+\xc1\x8e\xfb@\xc56\xb5\xe4\x91\xbc\xbf\xf7\xea\x01]\xd8\xf8.\x99\x82\x89\x9a\x97\x8b\xdd\xcf\xe6\xb4\xad\xda\x7f\xc8\xd0(Q\x8dP\xd9\xd8(){\xca\x84\xd3(\xb6\xd5\xd4\x94\xdf\xde\x05B\"\xa3L\xc9t\xd4]\x95.\x02\x97\xb5\xc5E\xc7H\x84d\xe6I\xd8\\&\xc6\x81t\xa38u\xc0\xa3\x9b\b,4-\x8a\x9fo:\x86J?\xac\xd1\xa8\x02\xb6\xc5m\x85,\x97\xbe\xba\x0eWnW\xdd,\x1eT\x9c\xde\x9e{;\xb2X\x89\xdc\xcfO6\xba\xcbK\xb5\xfbD\xc9\xc4D\x04BT\xe1\xe9]s\x18$F\x9b\xe9<\xdb\x03\b\xfc\xe9\x19E\x8b\x83\xa6\x84Y\xab\x85\xea\x1f^K\xd6I\x10G<@n\x9e\x81\xc6\x1d\xbc\x1a\xc1G')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)

1.239759852s ago: executing program 3 (id=2711):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x10000000000000bf, 0x0, [{0x8d, 0x0, 0xffffffffffffff8f}]})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000a40)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0xc36a, 0x12)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0)

1.035484165s ago: executing program 3 (id=2714):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te']) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0)

967.881486ms ago: executing program 2 (id=2715):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000d80)={{0x5, 0x2, 0xf1f8, 0xe}, 'syz1\x00', 0x22})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

967.259446ms ago: executing program 3 (id=2716):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x0, 0x38}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000011c0), 0x65101, 0x0)
ioctl$BLKROGET(r3, 0x125e, &(0x7f0000001200))
mkdirat(r2, &(0x7f0000000000)='./file2\x00', 0x15c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x58, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000009c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/208, 0xd0, 0x2, 0x30}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x38}}, 0x0}}], 0xe9, 0x0, &(0x7f0000000700)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065aa00e0b913630d0a5ed92401880ed54d0fca037e2b4a71e1f80c814bd22ed55c9ee8cb33ef29c28c8a0b1973fd2abc436878b2e1ffcaafbaa625ccb36e9082cb66c5186669613684973dbd11fc37951f2e85993a0272ca9c06742ce7d08e55c6c1136675136cb02fec1f4c1e4a3d777dbe2f807b7c0269d813ddb8b83dd9962dc7527d8daef94a428040572c07695cf6b1d4538ca01d3f868ef4171ba93499207da1c84403d16ad"})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xe2402, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
read$FUSE(r4, &(0x7f0000002d80)={0x2020}, 0x2020)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0x4)
read(r5, &(0x7f00000022c0)=""/4107, 0x100b)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0)

787.749848ms ago: executing program 2 (id=2719):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000000000000a00100000000000007000000000000006cb708d72ed6756251405788a8d11d06442035891e6637262d344ba4ffb0205135f09640404105aeb752ed957ef399762a871d43d70cb8c4bb6eaa956019ac0a88bd882be2abf50389145f886e1c97df41fef046d9bdfabebbf36dd027bfb56a6603ba8803d0f01682511c88e3f8fd7edb216c3eb97c240980a48910492b7b28767f40fca7f87fa0f6511e9772bb933f32a42dfd35c465b58f5abd"])
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x50, 0x0, &(0x7f0000000580)=[@register_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/119, 0x77, 0x1, 0x3}, @fda={0x66646185, 0x7, 0x2, 0x11}, @flat=@binder={0x73622a85, 0x10a, 0x1}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}, 0x1000}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x1d9}]})
r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000010, 0x0, 0x92}]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x58, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000009c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/208, 0xd0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001080)=""/114, 0x72, 0x0, 0x38}}, 0x0}}], 0x42, 0x0, &(0x7f0000000fc0)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065a"})

781.448678ms ago: executing program 5 (id=2720):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000040), 0x818000, 0x0)

738.571599ms ago: executing program 5 (id=2721):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

655.82551ms ago: executing program 4 (id=2722):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000008000080", @ANYRESDEC=r2])
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x0, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000944000/0x1000)=nil, 0x1000, 0xa, 0x840000000000a132, r4, 0x304f3000)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r5, 0x0)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r6, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000004900)=0xfffff4cc)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7b)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10])

636.798411ms ago: executing program 5 (id=2723):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) (async)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x560d, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101, 0x300}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r3) (async)
close(r3)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000600)=0x2)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

587.410491ms ago: executing program 2 (id=2724):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x9, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

503.669113ms ago: executing program 5 (id=2725):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) (async)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)

503.187962ms ago: executing program 2 (id=2726):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x59)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000b40)={0x58, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000009c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/208, 0xd0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x38}}, 0x0}}], 0xa7, 0x0, &(0x7f0000000fc0)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065aa00e0b913630d0a5ed92401880ed54d0fca037e2b4a71e1f80c814bd22ed55c9ee8cb33ef29c28c8a0b1973fd2abc43687b3907a58aafbaa625ccb36e9082cb66c5186669613684973dbd11fc37951f2e85993a0272ca9c06742ce7d08e55c6c1136675136"})
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0xfbfe)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r3, 0xf8b3b000)

455.835753ms ago: executing program 5 (id=2727):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNGETFILTER(r0, 0x801054db, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
r4 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
write$cgroup_int(r3, &(0x7f0000000100), 0x12)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
mount$binderfs(0x0, &(0x7f0000000180)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r2])
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000008180)={0x2020}, 0x42)
read$FUSE(r6, &(0x7f0000003680)={0x2020}, 0x2020)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{0x1, 0xf9, 0x83e, 0x8}, 'syz1\x00', 0x2})
ioctl$UI_DEV_CREATE(r7, 0x5501)
ioctl$UI_GET_SYSNAME(r7, 0x8040552c, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000000080)={0x57})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0)

445.433513ms ago: executing program 4 (id=2728):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r1, &(0x7f0000000040)={0x1, 0x20, 0x8}, 0x48)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

283.533476ms ago: executing program 2 (id=2729):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x4000009e, 0x0, 0xb}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}, {0x6}]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x33)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000300)={0x0, 0x3, 0x101, 0x1})
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x258, 0x0, 0x5802000000000002}]})
close(0x3)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x4}, {0x5000, 0xffff1000, 0x3, 0x5, 0x4, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0xfe, 0x1, 0xee, 0xc, 0x0, 0x1, 0xd, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x1002b, 0x0, 0x0, 0x4040, 0x7, 0x1000, 0x6000, [0x5, 0x8001, 0x8]})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x10}], 0x6b, 0x0, &(0x7f0000000280)="27340dbe79e8af432ff4fa2360c88df5a04d8e7eeb14f8d0fab09d900a6bb5bc0f07887e054cb7693ae1fb57bdf9173c6f2dd3f6284401f0a87fa2166027d3eda04b0809ab53399e60c5169690bcaa67b7123d2729933e63d78255ba0d07ff07000066677001adbe306baa"})

283.032186ms ago: executing program 4 (id=2730):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000500)=ANY=[@ANYBLOB="01000062347254b888fe07f674dbcc0300000000645c96464ba5cf00000000000000000659b36257a52141fb8f136c43fefbb15242e9f5f91898d29050bf7ac26ad7095b2b964c750639b8eba4eca2eaf3fe1b4883"])
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x9)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7ff, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x3fc, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x5, 0x11b, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x489, 0x0, 0x1}]})
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x9, 0x1, 0x101, 0x8}, 0x22, [0x80, 0x6, 0x56, 0x80000001, 0x1922, 0x2, 0x67a8, 0x9, 0x0, 0x2, 0x9, 0x8, 0x5e5, 0x800, 0x2, 0x9, 0x3ff, 0x20, 0xddf, 0x1, 0x1ff, 0xfffffff8, 0x1, 0x5, 0x5, 0x23, 0x5, 0xffff, 0xffff8000, 0xfffffffd, 0x3, 0x6, 0xfffffff9, 0x1, 0x4, 0x7, 0x2, 0x401, 0x94, 0x9, 0x4, 0x8, 0x3, 0x9, 0x10001, 0x3, 0x5, 0x401, 0x10001, 0x7ff, 0x40, 0xd, 0x0, 0x5, 0x1, 0x101, 0x4, 0x80000001, 0x8, 0x8e, 0x6, 0x5, 0x3bf9, 0x91], [0xbd5, 0x9, 0x7f, 0x0, 0xfffffffc, 0x4, 0x6, 0x10001, 0x3, 0x80000001, 0x6, 0xfffffff9, 0x8, 0xe, 0xc, 0x4, 0x28f5, 0xc, 0x5, 0x38a5, 0xdaec, 0xd4, 0x0, 0x8, 0x3ff, 0x1, 0x8, 0x1, 0x200, 0x7fff, 0xfffffff9, 0x0, 0x1, 0x2b, 0x3b53, 0x8001, 0xeee, 0x9, 0x7b, 0x943, 0x8, 0xd, 0x29e, 0x9, 0x9, 0x10001, 0x3a, 0x4, 0x0, 0xf137, 0x4, 0x9, 0x9, 0x7f, 0x5, 0x9, 0x800, 0x1350, 0x35a29e2d, 0x0, 0x82b, 0x3, 0x1, 0x2], [0x0, 0x8, 0x400, 0x1, 0x9, 0x800, 0x8, 0x10001, 0x9, 0x9, 0xfffff98d, 0x7, 0x75e2f897, 0x4, 0x6, 0x9, 0x5, 0x8001, 0x5, 0x918a, 0xdfc2, 0xffffffff, 0x5, 0xd, 0xb, 0x4, 0x10000, 0x7, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5, 0xa73f, 0x6, 0x7, 0x1, 0x2, 0xffffffff, 0x9, 0x200, 0x77, 0x401, 0x0, 0x0, 0x1ff, 0x9, 0xd, 0x9, 0x52, 0x3, 0x8, 0x7, 0x80, 0xffffffff, 0x4, 0x8, 0x7, 0x7, 0x5, 0x9, 0x0, 0x1ff], [0x8, 0xfff, 0xe73, 0x1, 0x3, 0x127, 0x0, 0x8, 0x1ff, 0x7f, 0x6, 0x6, 0x7, 0x9ca, 0x9, 0x2, 0x4, 0x4, 0x8, 0xb8d, 0xbf6, 0x6, 0x5, 0x9, 0xfffffffe, 0x2, 0x2, 0x2, 0xff, 0x1, 0xcf, 0x3ff, 0x4, 0x3, 0x2, 0x369, 0x6, 0x1, 0x5, 0x1, 0xffffff3b, 0x8, 0x2, 0x8, 0xb, 0x1, 0x1, 0x0, 0x2, 0x5, 0x8, 0x7, 0x2, 0x1, 0x4, 0x7, 0x7f, 0xa4447459, 0x8, 0xf, 0x9, 0x8000c, 0x10, 0xc]}, 0x45c)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"])
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, 0x0)

115.427779ms ago: executing program 3 (id=2731):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x3a, 0x10, 0x0, 0x7}, 'syz1\x00', 0x44})
r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r3, 0x8004af7a, &(0x7f0000000180))
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)=<r4=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"d42df645fe83e8a2e85950bd729d5d0e", 0x0, <r5=>r4, {0xffff, 0x21}, {0xfffffffffffffffd, 0x5}, 0x5, [0x8, 0xa3, 0xf, 0x1, 0xabbc, 0x9, 0x3, 0x94f, 0x40, 0xf, 0x7bca, 0x100, 0x3, 0x9, 0x5, 0x8]})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x3, 0x0, [{0x5000, 0xc9, &(0x7f0000000300)=""/201}, {0x8080000, 0x0, &(0x7f0000000400)}, {0x4, 0x2, &(0x7f0000000440)=""/2}]})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/schedstat\x00', 0x0, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000540), 0x28280, 0x0)
ioctl$BLKFRAGET(r7, 0x1265, &(0x7f0000000580))
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000600)=<r9=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000700)={{r0}, r9, 0x10, @inherit={0x90, &(0x7f0000000640)={0x1, 0x9, 0x2, 0x77ae, {0x21, 0x4, 0xebe9, 0x7, 0x200}, [0xfffffffffffffff0, 0x1000, 0x6, 0x45, 0x7fffffff, 0xceca, 0xe4b, 0x100000000, 0x4]}}, @name="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"})
ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000001700))
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000001740))
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000001780))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000017c0)={0xd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r10=>0x0}], 0x1, "6cfd5bbfc42c6e"})
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000027c0)={{r10, 0x0, 0x0, 0x9, 0x1ff, 0x0, 0x1, 0x5, 0x7, 0x9, 0xb814, 0x3, 0x1, 0x5, 0x8}})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000037c0)={0x1, r6})
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000003800)={{0x21, 0x40}, 0x100, './file0\x00'})
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000003940))
r11 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000003980)='./binderfs2/binder-control\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000039c0)={{r11}, r5, 0x4, @unused=[0x3, 0x100000001, 0x81, 0x9ae4], @name="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"})
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000049c0)={0xf, 0x3})

46.236459ms ago: executing program 5 (id=2732):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x202c) (async)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
prctl$PR_SET_NAME(0xf, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0x4, 0x3, 0x0, 0x7, 0x0, 0x4, 0xf, 0x81, 0x8, 0x8, 0x2, 0x0, 0x3, 0xa, 0x9, 0x57, 0xb3, 0xd, '\x00', 0x1, 0xc3d2})
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f00000005c0)={{}, "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"}) (async)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffa)
ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000080)={0x7, 0x8001}) (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='/dev/ashmem\x00') (async)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/195, 0xc3, 0x6, 0x1, 0x9, 0x2}}, 0x120) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x8008770b, 0x0)

0s ago: executing program 3 (id=2733):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009702"])
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=global,staTs=global,max=00000000000000000000000,stats=global,seclabel,\x00'])

kernel console output (not intermixed with test programs):

MGR already set
[   99.061247][ T5286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1177
[   99.577220][ T5318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1138
[   99.682516][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.699228][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.706620][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.718536][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.726815][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.735047][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.754029][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.772708][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.787149][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.794619][  T596] hid-generic 009C:0008:0003.0005: unknown main item tag 0x0
[   99.805665][  T596] hid-generic 009C:0008:0003.0005: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[   99.819700][ T5326] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   99.913457][ T5332] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.019258][ T5336] fido_id[5336]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  100.243006][ T5347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1149
[  100.345137][ T5356] random: crng reseeded on system resumption
[  100.394082][ T5353] binder: Bad value for 'stats'
[  100.399747][ T5358] rust_binder: Write failure EINVAL in pid:1188
[  100.504297][ T5367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1158
[  100.573551][ T5371] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  100.691337][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.691565][ T5375] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.875552][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.890820][ T5387] binder: Bad value for 'defcontext'
[  100.896319][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.904961][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.917778][ T5391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1164
[  100.920728][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.938074][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.946573][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.954472][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.962366][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.975017][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.987291][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  100.995270][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.003171][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.007830][ T5401] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  101.011081][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.026411][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.033834][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.041284][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.048681][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.056138][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.063607][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.071053][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.078456][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.085894][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.093309][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.100766][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.108798][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.116230][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.118357][ T5407] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  101.126292][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.137993][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  101.137994][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.138020][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.159125][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.166529][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.173917][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.181316][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.188729][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.196114][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.203508][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.210895][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.218250][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.225655][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.233123][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.240548][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.247950][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.255338][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.262875][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.270300][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.277682][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.285086][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.292564][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.299983][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.307402][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.314799][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.322226][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.329644][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.337044][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.344461][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.352317][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.360303][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.367683][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.375750][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.383640][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.391487][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.399352][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.406733][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.414835][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.422722][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x6
[  101.430579][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x3
[  101.438709][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.447092][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.454948][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.462809][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.470668][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.479271][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.486772][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.494847][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.506654][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.514514][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.527002][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.532309][ T5422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1250
[  101.539503][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.556501][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.563969][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.567397][ T5426] rust_binder: Error while translating object.
[  101.571929][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.585490][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.586700][ T5426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  101.592877][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.592901][ T5426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1252
[  101.602168][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.642812][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.650781][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.658219][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.665666][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.673814][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.681289][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.688660][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.696674][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.704111][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.711556][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.719050][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.726473][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.733859][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.741259][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.748612][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.755985][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.763376][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.770749][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.778112][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.785489][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.792862][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.800246][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.807612][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.814990][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.822368][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.829742][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.837107][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.844485][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.851918][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.859979][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.867383][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.874789][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.882185][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.890049][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.897438][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.905741][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.913608][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.921500][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.929360][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.936746][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.945631][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.953641][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x4
[  101.962381][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.970682][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.978156][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  101.986487][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x2
[  101.994696][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.002125][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.010006][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.017383][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.025448][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.033337][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.041231][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.048610][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.056624][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.064488][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.072377][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.080292][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.087702][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.095775][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.107612][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.115458][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.124130][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.132339][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.145357][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.153237][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.162196][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.170997][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.179273][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.186655][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.194738][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.204030][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.211910][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.224237][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.232699][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.242309][ T5462] rust_binder: Write failure EINVAL in pid:1195
[  102.242667][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.256991][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.264966][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.273021][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.280903][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.288302][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.296384][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.304229][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.312066][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.319454][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.326820][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.334239][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.341662][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.349102][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x1
[  102.356481][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x4
[  102.363863][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.371248][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.378602][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.385976][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.393355][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.400767][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.408234][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.416583][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.426889][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.434283][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.441675][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.449056][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.456424][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.463824][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.471216][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.478574][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.485956][   T10] hid-generic 01FF:0004:0400.0006: unknown main item tag 0x0
[  102.494444][   T10] hid-generic 01FF:0004:0400.0006: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[  102.553671][ T5466] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  102.712316][ T5471] fido_id[5471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  102.901229][ T5477] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  102.908654][ T5477] rust_binder: Write failure EINVAL in pid:1288
[  102.910128][ T5477] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  102.967304][   T36] kauditd_printk_skb: 995 callbacks suppressed
[  102.967320][   T36] audit: type=1400 audit(1750318616.719:11876): avc:  denied  { write } for  pid=5478 comm="syz.1.1653" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  102.972860][ T5479] cgroup: fork rejected by pids controller in 
[  102.975294][   T36] audit: type=1400 audit(1750318616.719:11877): avc:  denied  { write open } for  pid=5478 comm="syz.1.1653" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  102.982991][ T5479] /syz1
[  103.004656][   T36] audit: type=1400 audit(1750318616.729:11878): avc:  denied  { read write } for  pid=5478 comm="syz.1.1653" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  103.011170][ T5479] 
[  103.033898][   T36] audit: type=1400 audit(1750318616.729:11879): avc:  denied  { read write open } for  pid=5478 comm="syz.1.1653" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  103.088180][   T36] audit: type=1400 audit(1750318616.729:11880): avc:  denied  { ioctl } for  pid=5478 comm="syz.1.1653" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  103.118610][   T36] audit: type=1400 audit(1750318616.829:11881): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.152833][   T36] audit: type=1400 audit(1750318616.829:11882): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.197579][   T36] audit: type=1400 audit(1750318616.829:11883): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  103.198813][ T1374] Bluetooth: hci0: command 0x1003 tx timeout
[  103.223892][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  103.258907][   T36] audit: type=1400 audit(1750318616.899:11884): avc:  denied  { read } for  pid=5581 comm="syz.3.1654" name="binder0" dev="binder" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  103.282000][   T36] audit: type=1400 audit(1750318616.899:11885): avc:  denied  { read open } for  pid=5581 comm="syz.3.1654" path="/dev/binderfs/binder0" dev="binder" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  103.393328][ T5592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1205
[  103.507225][ T5598] rust_binder: Write failure EFAULT in pid:1210
[  103.608111][   T12] bridge_slave_1: left allmulticast mode
[  103.634340][   T12] bridge_slave_1: left promiscuous mode
[  103.648827][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.679132][   T12] bridge_slave_0: left allmulticast mode
[  103.684825][   T12] bridge_slave_0: left promiscuous mode
[  103.691125][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.830872][   T12] veth1_macvtap: left promiscuous mode
[  103.836413][   T12] veth0_vlan: left promiscuous mode
[  103.917117][ T5620] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  103.954535][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.961601][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.968642][ T5599] bridge_slave_0: entered allmulticast mode
[  103.974942][ T5599] bridge_slave_0: entered promiscuous mode
[  103.981758][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.988794][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.995831][ T5599] bridge_slave_1: entered allmulticast mode
[  104.002145][ T5599] bridge_slave_1: entered promiscuous mode
[  104.152487][ T5630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  104.152517][ T5630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1207
[  104.172196][ T5630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1207
[  104.186987][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.203240][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.240475][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.247522][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.318372][ T5635] syz.0.1671: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0
[  104.371986][ T5635] CPU: 1 UID: 0 PID: 5635 Comm: syz.0.1671 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd
[  104.372014][ T5635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  104.372032][ T5635] Call Trace:
[  104.372038][ T5635]  <TASK>
[  104.372045][ T5635]  __dump_stack+0x21/0x30
[  104.372071][ T5635]  dump_stack_lvl+0x10c/0x190
[  104.372088][ T5635]  ? __cfi_dump_stack_lvl+0x10/0x10
[  104.372106][ T5635]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  104.372128][ T5635]  dump_stack+0x19/0x20
[  104.372146][ T5635]  warn_alloc+0x1bc/0x2a0
[  104.372161][ T5635]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  104.372183][ T5635]  ? __cfi_warn_alloc+0x10/0x10
[  104.372199][ T5635]  ? __get_vm_area_node+0x1dc/0x3a0
[  104.372216][ T5635]  ? __vcalloc_noprof+0x3a/0x50
[  104.372235][ T5635]  __vmalloc_node_range_noprof+0x68e/0x1420
[  104.372255][ T5635]  ? __se_sys_ioctl+0x132/0x1b0
[  104.372276][ T5635]  ? __x64_sys_ioctl+0x7f/0xa0
[  104.372296][ T5635]  ? x64_sys_call+0x1878/0x2ee0
[  104.372317][ T5635]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  104.372336][ T5635]  ? __vcalloc_noprof+0x3a/0x50
[  104.372355][ T5635]  __vmalloc_noprof+0xfe/0x1d0
[  104.372371][ T5635]  ? __vcalloc_noprof+0x3a/0x50
[  104.372389][ T5635]  ? __cfi___vmalloc_noprof+0x10/0x10
[  104.372405][ T5635]  ? mutex_lock+0x92/0x1c0
[  104.372427][ T5635]  ? __cfi_mutex_lock+0x10/0x10
[  104.372450][ T5635]  __vcalloc_noprof+0x3a/0x50
[  104.372467][ T5635]  kvm_set_memslot+0x4c6/0x13f0
[  104.372487][ T5635]  ? __kasan_kmalloc+0x96/0xb0
[  104.372508][ T5635]  __kvm_set_memory_region+0x87c/0xb80
[  104.372530][ T5635]  kvm_set_memory_region+0x2f/0x50
[  104.372550][ T5635]  kvm_vm_ioctl+0x9ad/0xb80
[  104.372569][ T5635]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  104.372588][ T5635]  ? ioctl_has_perm+0x1aa/0x4d0
[  104.372609][ T5635]  ? __asan_memcpy+0x5a/0x80
[  104.372627][ T5635]  ? ioctl_has_perm+0x3e0/0x4d0
[  104.372650][ T5635]  ? __cfi_futex_wait+0x10/0x10
[  104.372667][ T5635]  ? selinux_file_ioctl+0x6e0/0x1360
[  104.372689][ T5635]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  104.372711][ T5635]  ? kfree+0x156/0x400
[  104.372728][ T5635]  ? do_futex+0x309/0x500
[  104.372748][ T5635]  ? __cfi_do_futex+0x10/0x10
[  104.372768][ T5635]  ? anon_inode_getfile+0xfb/0x190
[  104.372792][ T5635]  ? __fget_files+0x2c5/0x340
[  104.372813][ T5635]  ? bpf_lsm_file_ioctl+0xd/0x20
[  104.372831][ T5635]  ? security_file_ioctl+0x34/0xd0
[  104.372851][ T5635]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  104.372869][ T5635]  __se_sys_ioctl+0x132/0x1b0
[  104.372889][ T5635]  __x64_sys_ioctl+0x7f/0xa0
[  104.372909][ T5635]  x64_sys_call+0x1878/0x2ee0
[  104.372935][ T5635]  do_syscall_64+0x58/0xf0
[  104.372954][ T5635]  ? clear_bhb_loop+0x35/0x90
[  104.372976][ T5635]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  104.372997][ T5635] RIP: 0033:0x7f485ed8e929
[  104.373019][ T5635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  104.373034][ T5635] RSP: 002b:00007f485fbcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.373053][ T5635] RAX: ffffffffffffffda RBX: 00007f485efb5fa0 RCX: 00007f485ed8e929
[  104.373067][ T5635] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 000000000000000a
[  104.373079][ T5635] RBP: 00007f485ee10b39 R08: 0000000000000000 R09: 0000000000000000
[  104.373091][ T5635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.373102][ T5635] R13: 0000000000000000 R14: 00007f485efb5fa0 R15: 00007ffca1ce2168
[  104.373116][ T5635]  </TASK>
[  104.375319][ T5635] Mem-Info:
[  104.385127][ T5599] veth0_vlan: entered promiscuous mode
[  104.418416][ T5635] active_anon:5832 inactive_anon:0 isolated_anon:0
[  104.418416][ T5635]  active_file:21716 inactive_file:2212 isolated_file:0
[  104.418416][ T5635]  unevictable:0 dirty:118 writeback:0
[  104.418416][ T5635]  slab_reclaimable:6448 slab_unreclaimable:70172
[  104.418416][ T5635]  mapped:24041 shmem:161 pagetables:756
[  104.418416][ T5635]  sec_pagetables:3 bounce:0
[  104.418416][ T5635]  kernel_misc_reclaimable:0
[  104.418416][ T5635]  free:1531129 free_pcp:2601 free_cma:0
[  104.495360][ T5599] veth1_macvtap: entered promiscuous mode
[  104.596336][ T5635] Node 0 active_anon:23428kB inactive_anon:0kB active_file:86864kB inactive_file:8848kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96164kB dirty:472kB writeback:0kB shmem:644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4336kB pagetables:3024kB sec_pagetables:12kB all_unreclaimable? no
[  104.807215][ T5635] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:64kB free_cma:0kB
[  104.837767][ T5635] lowmem_reserve[]: 0 3921 3921
[  104.844294][ T5635] Normal free:3166840kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23444kB inactive_anon:0kB active_file:86864kB inactive_file:8848kB unevictable:0kB writepending:472kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1420kB local_pcp:840kB free_cma:0kB
[  104.875575][ T5635] lowmem_reserve[]: 0 0 0
[  104.880081][ T5635] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  104.895567][ T5635] Normal: 193*4kB (ME) 426*8kB (UME) 541*16kB (ME) 677*32kB (UME) 285*64kB (UME) 91*128kB (UME) 47*256kB (UME) 21*512kB (UME) 17*1024kB (UM) 9*2048kB (UME) 743*4096kB (M) = 3166340kB
[  104.913740][ T5635] 24086 total pagecache pages
[  104.922563][ T5635] 0 pages in swap cache
[  104.926709][ T5635] Free swap  = 124996kB
[  104.931630][ T5635] Total swap = 124996kB
[  104.936029][ T5635] 2097051 pages RAM
[  104.940542][ T5635] 0 pages HighMem/MovableOnly
[  104.945206][ T5635] 351520 pages reserved
[  104.950056][ T5635] 0 pages cma reserved
[  104.955800][ T5635] Memory allocations:
[  104.961191][ T5635]          0 B        0 init/main.c:1370 func:do_initcalls
[  104.968388][ T5635]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  104.998675][ T5635]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  105.008800][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.009088][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.020198][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.026917][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.028932][ T5635]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  105.035156][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.052010][ T5635]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  105.072356][ T5642] input: syz1 as /devices/virtual/input/input96
[  105.076982][ T5635]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  105.088090][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.088355][ T5644] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.109147][ T5635]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  105.124823][ T5635]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  105.136689][ T5635]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  105.145199][ T5635]          0 B        0 init/initramfs.c:101 func:find_link
[  105.413564][ T5664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1233
[  105.482874][ T5670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1235
[  105.593711][ T5679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13
[  105.658537][ T5683] binder: Bad value for 'stats'
[  105.716669][ T5688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[  105.786021][ T5694] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.888546][ T5694] rust_binder: Got transaction with invalid offset.
[  105.888597][ T5694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  105.900949][ T5694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1224
[  105.923062][ T5703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[  105.983315][ T5711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:26
[  106.189483][ T5726] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  106.244865][ T5729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.257421][ T5729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1226
[  106.273688][ T5730] rust_binder: Error while translating object.
[  106.282945][ T5730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  106.289121][ T5730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:36
[  106.353134][ T5734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.428174][ T5738] rust_binder: inc_ref_done called when no active inc_refs
[  106.437245][ T5738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1228
[  106.733799][ T5749] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.743715][ T5749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.750164][ T5749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1237
[  106.893944][ T5757] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.969939][ T5762] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.976820][ T5762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1250
[  107.016794][ T5764] rust_binder: inc_ref_done called when no active inc_refs
[  107.026220][ T5764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1252
[  107.389063][ T5777] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.418313][ T5779] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  107.433995][ T5777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  107.434024][ T5777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1238
[  107.521221][ T5785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.649601][ T5791] rust_binder: inc_ref_done called when no active inc_refs
[  107.649627][ T5791] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1243
[  107.701583][ T5795] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.749374][ T5798] SELinux: security_context_str_to_sid () failed with errno=-22
[  107.882751][ T5808] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  107.914284][ T5810] binder: Unknown parameter 'dont_hash'
[  107.941939][ T5813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.963100][ T5813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1274
[  108.089305][   T36] kauditd_printk_skb: 1149 callbacks suppressed
[  108.089322][   T36] audit: type=1400 audit(1750318621.849:13035): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.136657][   T36] audit: type=1400 audit(1750318621.849:13036): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.187328][   T36] audit: type=1400 audit(1750318621.849:13037): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  108.214074][   T36] audit: type=1400 audit(1750318621.889:13038): avc:  denied  { read } for  pid=5817 comm="syz.3.1735" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  108.232132][ T5822] binder: Bad value for 'stats'
[  108.237586][   T36] audit: type=1400 audit(1750318621.889:13039): avc:  denied  { read open } for  pid=5817 comm="syz.3.1735" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  108.285698][   T36] audit: type=1400 audit(1750318621.889:13040): avc:  denied  { read write } for  pid=5817 comm="syz.3.1735" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  108.323831][   T36] audit: type=1400 audit(1750318621.889:13041): avc:  denied  { read write open } for  pid=5817 comm="syz.3.1735" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  108.354175][ T5831] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.356292][   T36] audit: type=1400 audit(1750318621.889:13042): avc:  denied  { map } for  pid=5817 comm="syz.3.1735" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  108.366957][  T289] audit: audit_backlog=65 > audit_backlog_limit=64
[  108.393446][ T5831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.393785][ T5831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  108.522928][ T5841] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  108.552155][ T5844] binder: Unknown parameter 'maZÈ000000100N)½*
mþ�¦Úš.F«z65Þ#ðñ~ÚÚ¾óy*¯ž'
[  108.704752][ T5851] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  109.032920][ T5862] binder: Bad value for 'stats'
[  109.311521][ T5867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  109.478417][ T5877] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.482038][ T5877] can0: slcan on ttyS3.
[  109.519653][ T5877] rust_binder: Error while translating object.
[  109.519682][ T5877] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  109.535235][ T5877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1283
[  109.620901][ T5876] can0 (unregistered): slcan off ttyS3.
[  109.797069][ T5880] kvm: Disabled LAPIC found during irq injection
[  110.091277][ T5910] binder: Unknown parameter ')'
[  110.149848][ T5911] binder: Bad value for 'stats'
[  110.200381][ T5916] SELinux: security_context_str_to_sid () failed with errno=-22
[  110.443960][ T5928] rust_binder: Write failure EFAULT in pid:67
[  110.669574][ T5936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  110.675681][ T5936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[  110.758513][ T5940] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  110.892626][ T5946] binder: Bad value for 'max'
[  110.905479][ T5952] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.971539][ T5960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1297
[  110.972055][ T5959] rust_binder: Write failure EINVAL in pid:1311
[  110.986086][ T5946] rust_binder: Error while translating object.
[  111.004736][ T5946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  111.018517][ T5946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1264
[  111.221452][ T5968] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  111.230751][ T5968] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  111.238457][ T5968] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  111.281083][ T5971] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  111.739235][ T5990] binder: Unknown parameter '0x0000000000000000HºÎw¿“¢'Dšaƒ€à‰¾º)µNÁ7ºª)ì÷0#´Ó¡6
åyâ2aÏÿƒ�@u
[  111.739235][ T5990] ÚD±€H;ÃZ'
[  111.763929][ T5992] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  111.832689][ T5994] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  111.832716][ T5994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1315
[  111.850345][ T5998] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  111.859977][ T5998] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  111.943231][ T6009] input: syz0 as /devices/virtual/input/input101
[  112.012795][ T6011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1321
[  112.054461][ T6014] rust_binder: Write failure EFAULT in pid:1323
[  112.873278][ T6056] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  112.958777][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  112.958795][ T1374] Bluetooth: hci0: command 0x1003 tx timeout
[  113.029672][ T6071] rust_binder: Error while translating object.
[  113.029698][ T6071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  113.047467][ T6071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1318
[  113.048036][ T6073] input: syz1 as /devices/virtual/input/input105
[  113.098960][   T36] kauditd_printk_skb: 1268 callbacks suppressed
[  113.098974][   T36] audit: type=1400 audit(1750318626.859:14307): avc:  denied  { ioctl } for  pid=6072 comm="syz.1.1807" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  113.150145][   T36] audit: type=1400 audit(1750318626.869:14308): avc:  denied  { read } for  pid=6069 comm="syz.0.1806" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  113.226634][   T36] audit: type=1400 audit(1750318626.869:14309): avc:  denied  { read open } for  pid=6069 comm="syz.0.1806" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  113.250935][   T36] audit: type=1400 audit(1750318626.879:14310): avc:  denied  { read } for  pid=6069 comm="syz.0.1806" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.280774][   T36] audit: type=1400 audit(1750318626.879:14311): avc:  denied  { read open } for  pid=6069 comm="syz.0.1806" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.305348][   T36] audit: type=1400 audit(1750318626.879:14312): avc:  denied  { ioctl } for  pid=6069 comm="syz.0.1806" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  113.329991][   T36] audit: type=1400 audit(1750318626.879:14313): avc:  denied  { read } for  pid=6069 comm="syz.0.1806" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.352750][   T36] audit: type=1400 audit(1750318626.879:14314): avc:  denied  { read open } for  pid=6069 comm="syz.0.1806" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.377062][   T36] audit: type=1400 audit(1750318626.879:14315): avc:  denied  { read } for  pid=6069 comm="syz.0.1806" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.399831][   T36] audit: type=1400 audit(1750318626.879:14316): avc:  denied  { read open } for  pid=6069 comm="syz.0.1806" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  113.462764][ T6088] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  113.559596][ T6092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  113.630365][ T6094] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  113.653532][ T6094] binder: Bad value for 'max'
[  113.717279][   T45] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  113.785874][ T6111] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  113.838656][ T6115] SELinux: security_context_str_to_sid () failed with errno=-22
[  113.887566][ T6114] fido_id[6114]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  114.254440][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253
[  114.308630][ T6132] kvm: kvm [6131]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001
[  114.358842][ T6136] rust_binder: Error while translating object.
[  114.358877][ T6136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  114.384189][ T6136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1329
[  114.576950][ T6148] binder: Bad value for 'defcontext'
[  114.783524][ T6153] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  114.840481][ T6156] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  114.942516][ T6168] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.240380][ T6186] binder: Unknown parameter 'euid<00000000000000060928'
[  115.343243][ T6192] binder: Unknown parameter 'dont_hash'
[  115.752113][ T6212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  115.752142][ T6212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1387
[  115.784441][ T6212] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  115.794029][  T309] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1
[  115.804504][ T6212] rust_binder: Read failure Err(EFAULT) in pid:1387
[  115.817964][  T309] hid-generic 0000:0000:0000.0008: probe with driver hid-generic failed with error -22
[  115.821916][ T6217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1387
[  116.174371][ T6229] input: syz1 as /devices/virtual/input/input108
[  116.289016][ T6229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  116.330611][ T6229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.330639][ T6229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1350
[  116.490195][ T6254] SELinux: security_context_str_to_sid () failed with errno=-22
[  117.101969][ T6283] input: syz0 as /devices/virtual/input/input110
[  117.261913][ T6288] tap0: tun_chr_ioctl cmd 1074812118
[  117.293219][ T6288] binder: Bad value for 'stats'
[  117.524984][ T6306] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  117.744396][ T6316] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  117.765158][ T6319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  117.778796][ T6319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1376
[  117.798381][ T6319] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  117.807638][ T6319] rust_binder: Read failure Err(EFAULT) in pid:1376
[  118.055126][ T6329] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.080262][ T6329] rust_binder: Error while translating object.
[  118.086720][ T6329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.108785][ T6329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1381
[  118.111499][   T36] kauditd_printk_skb: 939 callbacks suppressed
[  118.111513][   T36] audit: type=1400 audit(1750318631.869:15256): avc:  denied  { create } for  pid=6330 comm="syz.2.1889" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  118.119407][ T6332] binder: Bad value for 'stats'
[  118.157771][   T36] audit: type=1400 audit(1750318631.869:15257): avc:  denied  { mounton } for  pid=6330 comm="syz.2.1889" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  118.219658][   T36] audit: type=1400 audit(1750318631.889:15258): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.318852][   T36] audit: type=1400 audit(1750318631.889:15259): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.434782][   T36] audit: type=1400 audit(1750318631.889:15260): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  118.479335][ T6343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1427
[  118.510735][   T36] audit: type=1400 audit(1750318631.959:15261): avc:  denied  { read } for  pid=6333 comm="syz.0.1891" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  118.512425][   T45] hid (null): unknown global tag 0xd
[  118.540456][   T36] audit: type=1400 audit(1750318631.959:15262): avc:  denied  { read open } for  pid=6333 comm="syz.0.1891" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  118.545733][   T45] hid-generic 8001:0008:0003.0009: unknown global tag 0xd
[  118.558762][   T36] audit: type=1400 audit(1750318631.959:15263): avc:  denied  { ioctl } for  pid=6333 comm="syz.0.1891" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  118.581678][   T45] hid-generic 8001:0008:0003.0009: item 0 1 1 13 parsing failed
[  118.611612][   T45] hid-generic 8001:0008:0003.0009: probe with driver hid-generic failed with error -22
[  118.622872][   T36] audit: type=1400 audit(1750318631.969:15264): avc:  denied  { read } for  pid=6335 comm="syz.3.1890" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  118.669044][   T36] audit: type=1400 audit(1750318631.969:15265): avc:  denied  { read open } for  pid=6335 comm="syz.3.1890" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  118.820665][ T6356] binder: Unknown parameter 'dont_hash'
[  118.857705][ T6356] rust_binder: Write failure EINVAL in pid:1395
[  119.239428][ T6380] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  119.353695][ T6388] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.722690][ T6406] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  119.877090][ T6415] input: syz0 as /devices/virtual/input/input113
[  119.905782][ T6411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1446
[  119.971553][ T6419] rust_binder: inc_ref_done called when no active inc_refs
[  119.991816][ T6419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1400
[  120.088187][ T6421] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  120.112834][ T6421] rust_binder: Write failure EINVAL in pid:1402
[  120.134827][ T6421] binder: Unknown parameter 'dev/rnullb0'
[  120.245498][ T6432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:142
[  120.473204][ T6447] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.599106][ T6460] SELinux:  truncated policydb string identifier
[  120.637537][ T6460] SELinux: failed to load policy
[  120.669686][ T6468] rust_binder: Write failure EINVAL in pid:152
[  120.734458][ T6473] SELinux:  policydb version -571016149 does not match my version range 15-33
[  120.756540][ T6475] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.758218][ T6475] rust_binder: inc_ref_done called when no active inc_refs
[  120.759919][ T6473] SELinux: failed to load policy
[  120.783839][ T6475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1418
[  120.814793][ T6477] input: syz1 as /devices/virtual/input/input117
[  120.971927][ T6494] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.971955][ T6494] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1459
[  121.174650][ T6507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1467
[  121.274742][ T6515] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  121.319513][ T6516] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.361911][ T6516] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  121.378184][ T6516] rust_binder: Read failure Err(EFAULT) in pid:1425
[  121.388687][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.427870][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.428150][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.472971][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.473208][ T6521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.493564][ T6519] binder: Unknown parameter 'dont_hash'
[  121.540129][ T6531] input: syz0 as /devices/virtual/input/input118
[  121.746500][ T6545] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.909981][ T6554] binder: Unknown parameter 'dont_hash'
[  122.026852][ T6560] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  122.026879][ T6560] rust_binder: Error in use_page_slow: EBUSY
[  122.038837][ T6560] rust_binder: use_range failure EBUSY
[  122.044887][ T6560] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  122.050372][ T6560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  122.058037][ T6560] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  122.113967][ T6560] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:177
[  122.158939][ T6573] tun0: tun_chr_ioctl cmd 1074025675
[  122.178111][ T6573] tun0: persist disabled
[  122.228641][ T6577] rust_binder: Write failure EINVAL in pid:182
[  122.389876][ T6583] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  122.396127][ T6583] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:186
[  122.408439][ T6583] SELinux:  Context system_u: is not valid (left unmapped).
[  122.627015][ T6595] kvm: kvm [6594]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff
[  122.694738][ T6601] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  123.131723][   T36] kauditd_printk_skb: 1224 callbacks suppressed
[  123.131740][   T36] audit: type=1400 audit(1750318636.889:16490): avc:  denied  { read } for  pid=6627 comm="syz.3.1986" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.135515][ T6628] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  123.138067][   T36] audit: type=1400 audit(1750318636.889:16491): avc:  denied  { read open } for  pid=6627 comm="syz.3.1986" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.228789][   T36] audit: type=1400 audit(1750318636.889:16492): avc:  denied  { read } for  pid=6627 comm="syz.3.1986" name="binder0" dev="binder" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.256692][   T36] audit: type=1400 audit(1750318636.889:16493): avc:  denied  { read open } for  pid=6627 comm="syz.3.1986" path="/dev/binderfs/binder0" dev="binder" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.295234][   T36] audit: type=1400 audit(1750318636.889:16494): avc:  denied  { ioctl } for  pid=6627 comm="syz.3.1986" path="/dev/binderfs/binder0" dev="binder" ino=179 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.335861][   T36] audit: type=1400 audit(1750318636.889:16495): avc:  denied  { set_context_mgr } for  pid=6627 comm="syz.3.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  123.355791][   T36] audit: type=1400 audit(1750318636.889:16496): avc:  denied  { ioctl } for  pid=6627 comm="syz.3.1986" path="/dev/binderfs/binder0" dev="binder" ino=179 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.382164][   T36] audit: type=1400 audit(1750318636.889:16497): avc:  denied  { call } for  pid=6627 comm="syz.3.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  123.401226][   T36] audit: type=1400 audit(1750318636.929:16498): avc:  denied  { ioctl } for  pid=6627 comm="syz.3.1986" path="/dev/binderfs/binder0" dev="binder" ino=179 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.426801][   T36] audit: type=1400 audit(1750318636.939:16499): avc:  denied  { read write } for  pid=6629 comm="syz.1.1987" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  123.566480][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  123.573279][   T13] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[  123.589796][ T6651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:209
[  123.612519][ T6653] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  123.814221][ T6663] rust_binder: Write failure EINVAL in pid:1444
[  123.822798][ T6663] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  123.829065][ T6663] rust_binder: Read failure Err(EFAULT) in pid:1444
[  123.837772][ T6661] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  123.844410][ T6661] rust_binder: Error in use_page_slow: EBUSY
[  123.854837][ T6661] rust_binder: use_range failure EBUSY
[  123.861246][ T6661] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  123.866783][ T6661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  123.874434][ T6661] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  123.884366][ T6661] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1444
[  124.060327][ T6674] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  124.262056][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.278888][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.286289][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.295155][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.303177][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.311226][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.318607][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.326965][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.334965][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.343000][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.348495][ T6699] SELinux:  Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped).
[  124.351165][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.366951][  T305] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0
[  124.376227][  T305] hid-generic 009C:0008:0003.000A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  124.446254][ T6701] fido_id[6701]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.557524][ T6705] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  124.600120][ T6711] binder: Unknown parameter 'ÿÿ'
[  124.630567][ T6703] binder: Unknown parameter '00000000000000000000011	'
[  124.710214][ T6717] rust_binder: Error while translating object.
[  124.710252][ T6717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  124.716533][ T6717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1483
[  124.967392][ T6735] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  125.017279][ T6737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1490
[  125.068544][ T6737] input: syz0 as /devices/virtual/input/input121
[  125.169486][ T6737] rust_binder: Write failure EINVAL in pid:1490
[  125.170170][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4
[  125.185515][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2
[  125.193215][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.201647][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.209330][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.216958][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.224602][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.232275][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.240614][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.248252][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.255890][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.263572][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.271242][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.278905][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.286565][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.294217][   T45] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0
[  125.303392][   T45] hid-generic 0000:3000000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  125.391371][ T6753] fido_id[6753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  125.423264][ T6756] binder: Unknown parameter 'de‡m
[  125.423264][ T6756] c`âfcontext'
[  125.496208][ T6760] binder: Bad value for 'defcontext'
[  125.516701][ T6762] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  125.598773][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  125.598800][ T1374] Bluetooth: hci0: command 0x1003 tx timeout
[  125.721757][ T6776] binder: Unknown parameter ''
[  126.001562][   T12] bridge_slave_1: left allmulticast mode
[  126.010389][   T12] bridge_slave_1: left promiscuous mode
[  126.026421][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.039466][   T12] bridge_slave_0: left allmulticast mode
[  126.051315][   T12] bridge_slave_0: left promiscuous mode
[  126.064216][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.213671][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.220891][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.227967][ T6794] bridge_slave_0: entered allmulticast mode
[  126.235534][ T6794] bridge_slave_0: entered promiscuous mode
[  126.250234][   T12] veth1_macvtap: left promiscuous mode
[  126.258904][   T12] veth0_vlan: left promiscuous mode
[  126.304900][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.311999][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.322244][ T6794] bridge_slave_1: entered allmulticast mode
[  126.324860][ T6806] rust_binder: Write failure EINVAL in pid:1474
[  126.328508][ T6794] bridge_slave_1: entered promiscuous mode
[  126.471538][ T6819] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  126.471558][ T6819] rust_binder: Read failure Err(EFAULT) in pid:1537
[  126.496397][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.510019][ T6794] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.517274][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.524313][ T6794] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.585775][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.593987][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.610312][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.617373][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.628423][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.635469][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.649678][ T6827] binder: Unknown parameter '/dev/kvm'
[  126.720100][ T6794] veth0_vlan: entered promiscuous mode
[  126.745970][ T6794] veth1_macvtap: entered promiscuous mode
[  126.928351][ T6839] SELinux: security_context_str_to_sid () failed with errno=-22
[  127.055543][ T6841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  127.238202][ T6866] SELinux: security_context_str_to_sid (n) failed with errno=-22
[  127.567169][ T6889] binder: Unknown parameter ''
[  127.724599][ T6906] random: crng reseeded on system resumption
[  128.153297][   T36] kauditd_printk_skb: 1415 callbacks suppressed
[  128.153313][   T36] audit: type=1400 audit(1750318641.909:17915): avc:  denied  { read } for  pid=6932 comm="syz.0.2092" name="binder0" dev="binder" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.185033][   T36] audit: type=1400 audit(1750318641.939:17916): avc:  denied  { read open } for  pid=6932 comm="syz.0.2092" path="/dev/binderfs/binder0" dev="binder" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.211269][   T36] audit: type=1400 audit(1750318641.939:17917): avc:  denied  { read } for  pid=6928 comm="syz.2.2090" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  128.234666][   T36] audit: type=1400 audit(1750318641.939:17918): avc:  denied  { read open } for  pid=6928 comm="syz.2.2090" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  128.262859][   T36] audit: type=1400 audit(1750318641.939:17919): avc:  denied  { ioctl } for  pid=6928 comm="syz.2.2090" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  128.290939][   T36] audit: type=1400 audit(1750318641.949:17920): avc:  denied  { ioctl } for  pid=6932 comm="syz.0.2092" path="/dev/binderfs/binder0" dev="binder" ino=196 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.316911][ T6933] rust_binder: Write failure EINVAL in pid:1531
[  128.337088][   T36] audit: type=1400 audit(1750318641.949:17921): avc:  denied  { set_context_mgr } for  pid=6932 comm="syz.0.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  128.367793][   T36] audit: type=1400 audit(1750318641.949:17922): avc:  denied  { ioctl } for  pid=6932 comm="syz.0.2092" path="/dev/binderfs/binder0" dev="binder" ino=196 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.393567][   T36] audit: type=1400 audit(1750318641.949:17923): avc:  denied  { read } for  pid=6928 comm="syz.2.2090" name="binder1" dev="binder" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.423697][   T36] audit: type=1400 audit(1750318641.959:17924): avc:  denied  { read open } for  pid=6928 comm="syz.2.2090" path="/dev/binderfs/binder1" dev="binder" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  128.516813][ T6945] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  129.019770][ T6971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:23
[  129.052741][ T6974] binder: Bad value for 'stats'
[  129.250521][ T6984] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  129.282998][ T6987] rust_binder: inc_ref_done called when no active inc_refs
[  129.308775][ T6987] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  129.324806][ T6987] rust_binder: Read failure Err(EFAULT) in pid:1527
[  129.628011][ T7002] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  129.659640][ T7000] binder: Bad value for 'defcontext'
[  129.685364][ T7000] binder: Bad value for 'defcontext'
[  129.759383][ T7007] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  130.109285][ T7036] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  130.468434][ T7057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40
[  130.545713][ T7059] rust_binder: Error while translating object.
[  130.554815][ T7059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  130.563995][ T7059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1615
[  130.613094][ T7061] input: syz0 as /devices/virtual/input/input126
[  130.755997][ T7063] binder: Bad value for 'stats'
[  130.944837][ T7065] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  130.992747][ T3697] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  131.024650][ T3697] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  132.464162][ T7121] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  132.541344][ T7123] rust_binder: Error while translating object.
[  132.556521][ T7123] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  132.568219][ T7123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1581
[  133.078573][ T7145] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  133.161205][   T36] kauditd_printk_skb: 809 callbacks suppressed
[  133.161221][   T36] audit: type=1400 audit(1750318646.919:18734): avc:  denied  { read } for  pid=7148 comm="syz.2.2170" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.208858][   T36] audit: type=1400 audit(1750318646.919:18735): avc:  denied  { read open } for  pid=7148 comm="syz.2.2170" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.256336][   T36] audit: type=1400 audit(1750318646.919:18736): avc:  denied  { ioctl } for  pid=7148 comm="syz.2.2170" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.320998][   T36] audit: type=1400 audit(1750318646.919:18737): avc:  denied  { read } for  pid=7148 comm="syz.2.2170" name="binder1" dev="binder" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  133.361192][   T36] audit: type=1400 audit(1750318646.919:18738): avc:  denied  { read open } for  pid=7148 comm="syz.2.2170" path="/dev/binderfs/binder1" dev="binder" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  133.427778][   T36] audit: type=1400 audit(1750318646.919:18739): avc:  denied  { execmem } for  pid=7148 comm="syz.2.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  133.447191][   T36] audit: type=1400 audit(1750318647.109:18740): avc:  denied  { read write } for  pid=7146 comm="syz.1.2169" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  133.479427][   T36] audit: type=1400 audit(1750318647.109:18741): avc:  denied  { read write open } for  pid=7146 comm="syz.1.2169" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  133.503730][   T36] audit: type=1400 audit(1750318647.119:18742): avc:  denied  { read } for  pid=7146 comm="syz.1.2169" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  133.526961][   T36] audit: type=1400 audit(1750318647.119:18743): avc:  denied  { read open } for  pid=7146 comm="syz.1.2169" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  133.799218][ T7175] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  134.245082][ T7206] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  134.393094][ T7216] binder: Bad value for 'defcontext'
[  134.549591][ T7221] input: syz0 as /devices/virtual/input/input129
[  135.251794][ T7263] input: syz1 as /devices/virtual/input/input130
[  135.507174][ T7276] binder: Unknown parameter 'dont_hash'
[  135.526947][ T7276] random: crng reseeded on system resumption
[  135.647802][ T7286] tun0: tun_chr_ioctl cmd 1074025675
[  135.653205][ T7286] tun0: persist disabled
[  135.764530][ T7289] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  135.864698][ T7297] rust_binder: Write failure EINVAL in pid:1718
[  136.073924][ T7308] tap1: tun_chr_ioctl cmd 1074025678
[  136.088587][ T7308] tap1: group set to 0
[  136.362946][ T7316] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  136.492744][ T7325] binder: Unknown parameter 'ß'
[  137.124700][ T7350] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  138.149814][ T7395] binder: Unknown parameter 'dont_hash'
[  138.181701][   T36] kauditd_printk_skb: 1628 callbacks suppressed
[  138.181715][   T36] audit: type=1400 audit(1750318651.939:20372): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.225324][ T7399] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  138.240555][ T7397] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.249088][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.268839][   T36] audit: type=1400 audit(1750318651.939:20373): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.270911][ T7397] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64
[  138.298440][ T6794] audit: audit_lost=60 audit_rate_limit=0 audit_backlog_limit=64
[  138.307440][ T6794] audit: backlog limit exceeded
[  138.313691][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.329484][ T7402] audit: audit_backlog=65 > audit_backlog_limit=64
[  138.330409][   T36] audit: type=1400 audit(1750318651.939:20374): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  138.351596][ T7402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1674
[  138.834033][ T7416] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  138.834061][ T7417] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  138.863675][ T7416] rust_binder: Read failure Err(EFAULT) in pid:1782
[  138.888795][ T7417] rust_binder: Read failure Err(EFAULT) in pid:1782
[  139.169946][ T7425] rust_binder: Write failure EINVAL in pid:1788
[  139.772772][ T7438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1798
[  140.626994][ T7461] kvm: kvm [7460]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4
[  140.803897][   T13] bridge_slave_1: left allmulticast mode
[  140.809586][   T13] bridge_slave_1: left promiscuous mode
[  140.822196][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.830838][   T13] bridge_slave_0: left allmulticast mode
[  140.837514][   T13] bridge_slave_0: left promiscuous mode
[  140.849356][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.001586][   T13] veth1_macvtap: left promiscuous mode
[  141.007112][   T13] veth0_vlan: left promiscuous mode
[  141.148098][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.158753][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.179945][ T7459] bridge_slave_0: entered allmulticast mode
[  141.186213][ T7459] bridge_slave_0: entered promiscuous mode
[  141.230426][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.237452][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.254019][ T7459] bridge_slave_1: entered allmulticast mode
[  141.264600][ T7459] bridge_slave_1: entered promiscuous mode
[  141.396849][  T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x4
[  141.408873][  T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x2
[  141.416391][  T305] hid-generic 0000:0000:0000.000D: unknown main item tag 0x3
[  141.440153][  T305] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  141.498675][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.505737][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.513022][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.520066][ T7459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.533663][ T7473] rust_binder: Write failure EINVAL in pid:1706
[  141.614182][ T7475] fido_id[7475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  141.643719][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.659305][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.694258][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.701309][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.720039][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.727108][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.904883][ T7459] veth0_vlan: entered promiscuous mode
[  141.944855][ T7459] veth1_macvtap: entered promiscuous mode
[  142.177384][ T7478] can0: slcan on ttyS3.
[  142.231927][ T7477] can0 (unregistered): slcan off ttyS3.
[  142.481392][ T7485] binder: Bad value for 'defcontext'
[  142.789904][ T7491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9
[  142.790838][ T7490] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  143.048885][ T7495] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  143.088778][ T7495] rust_binder: Write failure EINVAL in pid:14
[  143.189670][   T36] kauditd_printk_skb: 3848 callbacks suppressed
[  143.189687][   T36] audit: type=1400 audit(1750318656.949:24089): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.278906][   T36] audit: type=1400 audit(1750318656.979:24090): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.332714][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  143.348756][   T36] audit: type=1400 audit(1750318656.979:24091): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.372004][ T6794] audit: audit_lost=106 audit_rate_limit=0 audit_backlog_limit=64
[  143.379827][ T6794] audit: backlog limit exceeded
[  143.386106][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  143.392641][ T6794] audit: audit_lost=107 audit_rate_limit=0 audit_backlog_limit=64
[  143.401369][   T36] audit: type=1400 audit(1750318656.979:24092): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  143.425443][ T6794] audit: backlog limit exceeded
[  144.138792][ T7502] rust_binder: Write failure EINVAL in pid:20
[  144.630296][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.643575][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.650685][ T7504] bridge_slave_0: entered allmulticast mode
[  144.664310][ T7504] bridge_slave_0: entered promiscuous mode
[  144.671207][   T59] bridge_slave_1: left allmulticast mode
[  144.677106][   T59] bridge_slave_1: left promiscuous mode
[  144.684972][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.695968][   T59] bridge_slave_0: left allmulticast mode
[  144.702050][   T59] bridge_slave_0: left promiscuous mode
[  144.709696][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.785497][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.792680][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.800683][ T7504] bridge_slave_1: entered allmulticast mode
[  144.807067][ T7504] bridge_slave_1: entered promiscuous mode
[  144.826701][   T59] veth1_macvtap: left promiscuous mode
[  144.833360][   T59] veth0_vlan: left promiscuous mode
[  144.922858][ T7514] PM: Enabling pm_trace changes system date and time during resume.
[  144.922858][ T7514] PM: Correct system time has to be restored manually after resume.
[  145.035559][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.042623][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.049908][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.056927][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.170057][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.177306][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.198706][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.205758][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.225307][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.232358][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.396020][ T7504] veth0_vlan: entered promiscuous mode
[  145.472077][ T7504] veth1_macvtap: entered promiscuous mode
[  145.749449][ T7543] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  145.839127][ T7550] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  145.865883][ T7550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  145.896735][ T7553] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  145.962636][ T7555] rust_binder: Error while translating object.
[  145.994647][ T7555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  146.001917][ T7555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10
[  146.035163][ T7555] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  146.274566][ T7566] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  146.320561][ T7571] SELinux: failed to load policy
[  146.603539][ T7589] rust_binder: Write failure EINVAL in pid:1757
[  146.603962][ T7589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1757
[  146.653639][ T7593] input: syz0 as /devices/virtual/input/input132
[  146.730870][ T7590] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  146.730897][ T7590] rust_binder: Error in use_page_slow: EBUSY
[  146.767383][ T7590] rust_binder: use_range failure EBUSY
[  146.787552][ T7590] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  146.809056][ T7590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  146.838859][ T7590] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  146.848176][ T7590] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:17
[  147.101535][ T7604] kvm: kvm [7602]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[  147.139366][ T7603] kvm: kvm [7602]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[  147.171231][ T7612] random: crng reseeded on system resumption
[  147.189983][ T7614] Unrecognized hibernate image header format!
[  147.211871][ T7614] PM: hibernation: Image mismatch: architecture specific data
[  147.607184][ T7635] binder: Unknown parameter 'dont_hash'
[  147.608472][ T7636] binder: Unknown parameter 'dont_hash'
[  147.672238][ T7631] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  147.672266][ T7631] rust_binder: Error in use_page_slow: EBUSY
[  147.683963][ T7631] rust_binder: use_range failure EBUSY
[  147.690408][ T7631] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  147.696150][ T7631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  147.701881][ T7641] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  147.704028][ T7631] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  147.722189][ T7631] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1777
[  147.835845][ T7643] SELinux:  policydb version 905587468 does not match my version range 15-33
[  147.860169][ T7643] SELinux: failed to load policy
[  147.930994][ T7652] kvm: kvm [7650]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[  148.097682][ T7664] SELinux: security_context_str_to_sid (sytem_uÝGÐ<) failed with errno=-22
[  148.136342][ T7664] SELinux: security_context_str_to_sid (sytem_uÝGÐ<) failed with errno=-22
[  148.198955][   T36] kauditd_printk_skb: 4822 callbacks suppressed
[  148.198967][   T36] audit: type=1400 audit(1750318661.959:28867): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  148.258420][   T36] audit: type=1400 audit(1750318661.989:28868): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  148.316333][   T36] audit: type=1400 audit(1750318661.989:28869): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  148.341265][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.347770][ T6794] audit: audit_lost=124 audit_rate_limit=0 audit_backlog_limit=64
[  148.356675][   T36] audit: type=1400 audit(1750318661.989:28870): avc:  denied  { setattr } for  pid=6794 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  148.379940][ T6794] audit: backlog limit exceeded
[  148.386373][ T6794] audit: audit_backlog=65 > audit_backlog_limit=64
[  148.395833][ T6794] audit: audit_lost=125 audit_rate_limit=0 audit_backlog_limit=64
[  148.404253][ T6794] audit: backlog limit exceeded
[  148.635110][ T7684] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  148.825714][ T7692] random: crng reseeded on system resumption
[  148.945755][ T7696] input: syz1 as /devices/virtual/input/input133
[  149.128860][ T7700] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  149.900257][ T7721] rust_binder: Error in use_page_slow: ESRCH
[  149.900278][ T7721] rust_binder: use_range failure ESRCH
[  149.906280][ T7721] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  149.911890][ T7721] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  149.919950][ T7721] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76
[  149.929671][ T7721] rust_binder: Write failure EINVAL in pid:76
[  150.523445][  T304] bridge_slave_1: left allmulticast mode
[  150.541980][  T304] bridge_slave_1: left promiscuous mode
[  150.550919][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.564756][  T304] bridge_slave_0: left allmulticast mode
[  150.575660][  T304] bridge_slave_0: left promiscuous mode
[  150.586287][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.751454][ T7728] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  150.832752][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.858761][ T7723] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.865819][ T7723] bridge_slave_0: entered allmulticast mode
[  150.865911][ T7733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58
[  150.889757][ T7723] bridge_slave_0: entered promiscuous mode
[  150.926325][  T304] veth1_macvtap: left promiscuous mode
[  150.939742][  T304] veth0_vlan: left promiscuous mode
[  151.039626][ T7738] input: syz0 as /devices/virtual/input/input134
[  151.059269][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.066485][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.108917][ T7723] bridge_slave_1: entered allmulticast mode
[  151.115208][ T7723] bridge_slave_1: entered promiscuous mode
[  151.301231][ T7745] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  151.309772][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.316824][ T7723] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.324098][ T7723] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.331137][ T7723] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.372674][ T7747] binder: Bad value for 'stats'
[  151.414328][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.428881][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.477131][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.484183][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.494275][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.501320][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.649341][ T7723] veth0_vlan: entered promiscuous mode
[  151.709312][ T7723] veth1_macvtap: entered promiscuous mode
[  151.850909][ T7754] binder: Bad value for 'stats'
[  152.029559][ T7760] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  152.128756][ T7764] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  152.399769][ T7790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9
[  152.489539][  T304] bridge_slave_1: left allmulticast mode
[  152.504701][  T304] bridge_slave_1: left promiscuous mode
[  152.510342][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.519063][  T304] bridge_slave_0: left allmulticast mode
[  152.525549][  T304] bridge_slave_0: left promiscuous mode
[  152.532151][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.620856][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.627901][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.635002][ T7768] bridge_slave_0: entered allmulticast mode
[  152.641352][ T7768] bridge_slave_0: entered promiscuous mode
[  152.652429][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.665485][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.673762][ T7768] bridge_slave_1: entered allmulticast mode
[  152.680277][ T7768] bridge_slave_1: entered promiscuous mode
[  152.695960][  T304] veth1_macvtap: left promiscuous mode
[  152.701483][  T304] veth0_vlan: left promiscuous mode
[  152.838604][ T7809] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  152.885937][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.900910][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.920195][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.927237][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.934806][ T7811] binder: Bad value for 'stats'
[  153.022450][ T7768] veth0_vlan: entered promiscuous mode
[  153.058262][ T7768] veth1_macvtap: entered promiscuous mode
[  153.219028][   T36] kauditd_printk_skb: 4246 callbacks suppressed
[  153.219044][   T36] audit: type=1400 audit(1750318666.979:33117): avc:  denied  { read write } for  pid=7817 comm="syz.3.2388" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  153.281306][   T36] audit: type=1400 audit(1750318666.979:33118): avc:  denied  { read open } for  pid=7817 comm="syz.3.2388" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  153.316819][   T36] audit: type=1400 audit(1750318666.989:33119): avc:  denied  { read } for  pid=7816 comm="syz.5.2371" name="binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  153.342537][   T36] audit: type=1400 audit(1750318666.989:33120): avc:  denied  { read open } for  pid=7816 comm="syz.5.2371" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  153.369983][   T36] audit: type=1400 audit(1750318666.989:33121): avc:  denied  { ioctl } for  pid=7816 comm="syz.5.2371" path="/dev/binderfs/binder1" dev="binder" ino=26 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  153.401324][   T36] audit: type=1400 audit(1750318667.009:33122): avc:  denied  { read } for  pid=7820 comm="syz.4.2389" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  153.429736][   T36] audit: type=1400 audit(1750318667.009:33123): avc:  denied  { read open } for  pid=7820 comm="syz.4.2389" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  153.457972][   T36] audit: type=1400 audit(1750318667.039:33124): avc:  denied  { read } for  pid=7816 comm="syz.5.2371" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  153.482893][   T36] audit: type=1400 audit(1750318667.039:33125): avc:  denied  { read open } for  pid=7816 comm="syz.5.2371" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  153.507234][   T36] audit: type=1400 audit(1750318667.039:33126): avc:  denied  { ioctl } for  pid=7816 comm="syz.5.2371" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  153.541688][ T7831] kvm: kvm [7830]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x8953bcbf00000000
[  153.653211][ T7839] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.685868][ T7839] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  153.692373][ T7843] rust_binder: Write failure EFAULT in pid:8
[  153.851012][ T7850] can0: slcan on ptm0.
[  153.957256][ T7853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  154.004494][ T7856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105
[  154.119344][ T7849] can0 (unregistered): slcan off ptm0.
[  154.146438][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.160855][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  154.192782][ T7866] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  154.524652][ T7891] random: crng reseeded on system resumption
[  154.580045][ T7891] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  154.602798][ T7891] SELinux: failed to load policy
[  154.825376][ T7910] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  154.829046][ T7911] rust_binder: Error while translating object.
[  154.835515][ T7911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  154.858771][ T7911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:31
[  154.963163][ T7917] SELinux: failed to load policy
[  154.976759][ T7921] rust_binder: Write failure EFAULT in pid:23
[  155.082749][ T7925] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  155.084235][  T305] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  155.137563][  T305] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  155.241302][ T7927] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.408211][ T7944] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.428890][ T7944] rust_binder: Error while translating object.
[  155.436145][ T7944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  155.443173][ T7944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39
[  155.654123][ T7958] binder: Bad value for 'max'
[  155.669306][ T7959] binder: Bad value for 'max'
[  155.856607][ T7968] SELinux:  policydb string length 24 does not match expected length 8
[  155.866460][ T7968] SELinux: failed to load policy
[  155.903092][ T7976] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  155.928911][ T7979] input: syz1 as /devices/virtual/input/input137
[  156.158782][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  156.245300][ T7992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127
[  156.411565][ T8002] input: syz1 as /devices/virtual/input/input138
[  156.456339][ T8002] binder: Bad value for 'defcontext'
[  156.555646][ T8006] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  156.767403][ T8017] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  156.769234][ T8017] rust_binder: inc_ref_done called when no active inc_refs
[  156.775723][ T8017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64
[  157.001687][ T8021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  157.040224][ T8023] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  157.045168][ T8025] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  157.132892][ T8030] binder: Bad value for 'stats'
[  157.138892][ T8030] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  157.455142][ T8044] binder: Unknown parameter 'dont_hash'
[  157.635266][ T8063] SELinux: security_context_str_to_sid () failed with errno=-22
[  157.768125][ T8081] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.768182][ T8079] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  157.875561][ T8092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[  158.098424][ T8107] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  158.230724][   T36] kauditd_printk_skb: 1264 callbacks suppressed
[  158.230741][   T36] audit: type=1400 audit(1750318671.989:34391): avc:  denied  { read } for  pid=8112 comm="syz.4.2474" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.284359][ T8122] rust_binder: Write failure EINVAL in pid:179
[  158.333725][   T36] audit: type=1400 audit(1750318671.989:34392): avc:  denied  { read open } for  pid=8112 comm="syz.4.2474" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.409103][   T36] audit: type=1400 audit(1750318671.989:34393): avc:  denied  { ioctl } for  pid=8112 comm="syz.4.2474" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.469868][ T8127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:182
[  158.476159][   T36] audit: type=1400 audit(1750318671.989:34394): avc:  denied  { read } for  pid=8112 comm="syz.4.2474" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.544505][   T36] audit: type=1400 audit(1750318671.989:34395): avc:  denied  { read open } for  pid=8112 comm="syz.4.2474" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  158.584354][   T36] audit: type=1400 audit(1750318671.989:34396): avc:  denied  { map } for  pid=8114 comm="syz.2.2476" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  158.619955][   T36] audit: type=1400 audit(1750318671.989:34397): avc:  denied  { read } for  pid=8114 comm="syz.2.2476" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  158.649699][ T8130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184
[  158.668752][   T36] audit: type=1400 audit(1750318671.989:34398): avc:  denied  { execmem } for  pid=8120 comm="syz.5.2477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  158.722519][   T36] audit: type=1400 audit(1750318671.989:34399): avc:  denied  { read } for  pid=8114 comm="syz.2.2476" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  158.759938][ T8135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108
[  158.773364][   T36] audit: type=1400 audit(1750318671.989:34400): avc:  denied  { read open } for  pid=8114 comm="syz.2.2476" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  159.218096][ T8158] rust_binder: Error while translating object.
[  159.218124][ T8158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  159.224419][ T8158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63
[  159.235384][ T8160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  159.811155][ T8194] input: syz0 as /devices/virtual/input/input139
[  159.849665][ T8197] binder: Unknown parameter 'obj_type'
[  159.862893][ T8194] random: crng reseeded on system resumption
[  160.143055][ T8213] rust_binder: Failed to allocate buffer. len:128, is_oneway:true
[  160.495784][ T8221] SELinux: failed to load policy
[  160.533305][ T8227] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  160.625282][ T8230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:88
[  161.019626][ T8265] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  161.527629][ T8303] serio: Serial port ttynull
[  161.589863][ T8296] rust_binder: Write failure EINVAL in pid:148
[  161.692532][ T8319] rust_binder: Write failure EFAULT in pid:227
[  161.996665][ T8335] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  162.010803][ T8334] rust_binder: Error while translating object.
[  162.011242][ T8334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  162.026583][ T8334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:118
[  162.032731][ T8338] kvm: kvm [8337]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253
[  162.100286][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.122985][ T8342] binder: Bad value for 'stats'
[  162.129702][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.144152][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.155702][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.170798][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.179370][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.187769][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.196425][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.208500][ T8352] SELinux: security_context_str_to_sid () failed with errno=-22
[  162.215712][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.224301][ T8352] SELinux: security_context_str_to_sid () failed with errno=-22
[  162.228756][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.248761][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.257939][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.266259][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.267468][ T8348] tap0: tun_chr_ioctl cmd 1074025677
[  162.280821][ T8355] binder: Unknown parameter '/dev/ptp0'
[  162.282455][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.286478][ T8348] tap0: linktype set to 776
[  162.300990][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.318851][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.329491][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.336871][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.346347][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.353804][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.361242][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.368619][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.371085][ T8359] rust_binder: Write failure EFAULT in pid:160
[  162.376125][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.389741][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.397107][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.404502][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.411979][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.419411][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.426778][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.434157][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.441544][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.448937][   T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  162.457297][   T45] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  162.537758][ T8361] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  162.569104][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  162.598766][ T8361] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  162.630129][ T8362] fido_id[8362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  162.709315][ T8372] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  162.814670][ T8379] rust_binder: Error while translating object.
[  162.841645][ T8379] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  162.850483][ T8378] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  162.875134][ T8379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:162
[  162.875207][ T8378] rust_binder: Write failure EINVAL in pid:246
[  163.220054][ T8394] input: syz1 as /devices/virtual/input/input145
[  163.240182][   T36] kauditd_printk_skb: 1078 callbacks suppressed
[  163.240196][   T36] audit: type=1400 audit(1750318676.999:35479): avc:  denied  { read } for  pid=8395 comm="syz.4.2572" name="binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.278003][   T36] audit: type=1400 audit(1750318676.999:35480): avc:  denied  { read open } for  pid=8395 comm="syz.4.2572" path="/dev/binderfs/binder0" dev="binder" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.302462][   T36] audit: type=1400 audit(1750318677.009:35481): avc:  denied  { ioctl } for  pid=8395 comm="syz.4.2572" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.308479][ T8398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:225
[  163.330180][   T36] audit: type=1400 audit(1750318677.009:35482): avc:  denied  { set_context_mgr } for  pid=8395 comm="syz.4.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  163.359723][   T36] audit: type=1400 audit(1750318677.009:35483): avc:  denied  { ioctl } for  pid=8395 comm="syz.4.2572" path="/dev/binderfs/binder0" dev="binder" ino=58 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  163.385787][   T36] audit: type=1400 audit(1750318677.029:35484): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.408324][   T36] audit: type=1400 audit(1750318677.029:35485): avc:  denied  { read open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.415344][ T8406] SELinux:  policydb version 544428969 does not match my version range 15-33
[  163.432138][   T36] audit: type=1400 audit(1750318677.029:35486): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.451129][ T8406] SELinux: failed to load policy
[  163.465866][   T36] audit: type=1400 audit(1750318677.029:35487): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=531 ioctlcmd=0x4525 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  163.497968][ T8407] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  163.528969][   T36] audit: type=1400 audit(1750318677.029:35488): avc:  denied  { ioctl } for  pid=8393 comm="syz.3.2571" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  163.780176][ T8415] rust_binder: Error in use_page_slow: ESRCH
[  163.780197][ T8415] rust_binder: use_range failure ESRCH
[  163.786252][ T8415] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  163.791761][ T8415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  163.799873][ T8415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:236
[  163.810495][ T8415] rust_binder: Error in use_page_slow: ESRCH
[  163.819556][ T8415] rust_binder: use_range failure ESRCH
[  163.825953][ T8415] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  163.833629][ T8415] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  163.841564][ T8415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:236
[  163.853632][   T13] bridge_slave_1: left allmulticast mode
[  163.868481][   T13] bridge_slave_1: left promiscuous mode
[  163.874669][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.884980][   T13] bridge_slave_0: left allmulticast mode
[  163.891763][   T13] bridge_slave_0: left promiscuous mode
[  163.897436][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.065849][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.072945][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.080148][ T8411] bridge_slave_0: entered allmulticast mode
[  164.086618][ T8411] bridge_slave_0: entered promiscuous mode
[  164.093951][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.101074][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.108150][ T8411] bridge_slave_1: entered allmulticast mode
[  164.116312][ T8411] bridge_slave_1: entered promiscuous mode
[  164.133156][   T13] veth1_macvtap: left promiscuous mode
[  164.138732][   T13] veth0_vlan: left promiscuous mode
[  164.272939][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.279981][ T8411] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.287203][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.294219][ T8411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.333259][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.340645][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.354959][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.362007][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.378676][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.385728][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.472183][ T8411] veth0_vlan: entered promiscuous mode
[  164.498886][ T8411] veth1_macvtap: entered promiscuous mode
[  164.621138][ T8436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:265
[  164.637173][ T8435] input: syz0 as /devices/virtual/input/input147
[  164.652778][ T1374] Bluetooth: hci0: command 0x1003 tx timeout
[  164.659138][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  164.692978][ T8443] rust_binder: Write failure EINVAL in pid:4
[  164.797108][ T8447] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  165.167812][ T8471] binder: Unknown parameter 'def#ontext'
[  165.185393][ T8467] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  165.188760][ T8464] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  165.401171][ T8481] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.401219][ T8482] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.562605][ T8492] binder: Unknown parameter 'dont_hash'
[  165.563434][ T8493] binder: Unknown parameter 'dont_hash'
[  165.694318][ T8496] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  165.697840][ T8499] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  165.809306][ T8503] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.060887][ T8511] rust_binder: Write failure EINVAL in pid:150
[  166.120470][ T8513] rust_binder: Write failure EINVAL in pid:254
[  166.279315][ T8518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:152
[  166.518901][ T8543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261
[  166.720138][ T8545] binder: Unknown parameter 'co
'
[  166.798896][ T8552] kvm: user requested TSC rate below hardware speed
[  166.852857][ T8555] binder: Bad value for 'stats'
[  166.917518][ T8560] rust_binder: Write failure EFAULT in pid:160
[  167.249233][ T8576] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  167.280648][ T8578] binder: Bad value for 'defcontext'
[  167.403932][ T8587] binder: Unknown parameter ''
[  167.459487][ T8589] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  167.514226][ T8592] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  167.542368][ T8593] binder: Bad value for 'stats'
[  167.847929][ T8602] input: syz0 as /devices/virtual/input/input149
[  168.122618][ T8608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  168.122643][ T8608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:309
[  168.208561][ T8614] rust_binder: Write failure EINVAL in pid:184
[  168.250398][   T36] kauditd_printk_skb: 1014 callbacks suppressed
[  168.250414][   T36] audit: type=1400 audit(1750318682.009:36503): avc:  denied  { read } for  pid=8615 comm="syz.5.2640" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.295030][   T36] audit: type=1400 audit(1750318682.009:36504): avc:  denied  { read open } for  pid=8615 comm="syz.5.2640" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.319593][   T36] audit: type=1400 audit(1750318682.009:36505): avc:  denied  { ioctl } for  pid=8615 comm="syz.5.2640" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.353962][   T36] audit: type=1400 audit(1750318682.009:36506): avc:  denied  { read } for  pid=8615 comm="syz.5.2640" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.377037][   T36] audit: type=1400 audit(1750318682.009:36507): avc:  denied  { read open } for  pid=8615 comm="syz.5.2640" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.400716][   T36] audit: type=1400 audit(1750318682.009:36508): avc:  denied  { ioctl } for  pid=8615 comm="syz.5.2640" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.441942][ T8618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315
[  168.444057][   T36] audit: type=1400 audit(1750318682.009:36509): avc:  denied  { ioctl } for  pid=8615 comm="syz.5.2640" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  168.478383][   T36] audit: type=1400 audit(1750318682.079:36510): avc:  denied  { read } for  pid=8617 comm="syz.3.2641" name="binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  168.502869][   T36] audit: type=1400 audit(1750318682.079:36511): avc:  denied  { read open } for  pid=8617 comm="syz.3.2641" path="/dev/binderfs/binder1" dev="binder" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  168.528557][   T36] audit: type=1400 audit(1750318682.079:36512): avc:  denied  { read } for  pid=8617 comm="syz.3.2641" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  168.625156][ T8629] binder: Bad value for 'stats'
[  168.700500][ T8640] SELinux: security_context_str_to_sid () failed with errno=-22
[  168.817141][ T8667] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  168.959723][ T8683] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.052170][ T8685] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  169.390611][ T8697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342
[  169.631397][ T8714] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.669716][ T8714] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 164)
[  169.676194][ T8714] rust_binder: Error while translating object.
[  169.686944][ T8714] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  169.693147][ T8714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359
[  169.737036][ T8722] rust_binder: Write failure EINVAL in pid:198
[  169.878038][ T8724] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.885891][ T8724] rust_binder: Write failure EINVAL in pid:364
[  169.896553][ T8724] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.964063][ T8725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364
[  170.198383][ T8732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[  170.289632][ T8734] rust_binder: Error while translating object.
[  170.298788][ T8734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  170.304936][ T8734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270
[  170.333139][ T8736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.342322][ T8736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272
[  170.353722][ T8736] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.390548][ T8742] rust_binder: Error in use_page_slow: ESRCH
[  170.390553][ T8741] rust_binder: Error in use_page_slow: ESRCH
[  170.390563][ T8742] rust_binder: use_range failure ESRCH
[  170.390574][ T8742] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  170.396563][ T8741] rust_binder: use_range failure ESRCH
[  170.404499][ T8742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  170.409418][ T8741] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  170.416700][ T8742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:277
[  170.421522][ T8741] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  170.447472][ T8741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:277
[  170.534487][ T8745] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  170.809006][ T8757] input: syz0 as /devices/virtual/input/input153
[  170.908417][ T8760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:94
[  171.060035][ T8771] rust_binder: Write failure EINVAL in pid:98
[  171.077797][ T8773] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.141301][ T8782] input: syz1 as /devices/virtual/input/input154
[  171.376607][ T8784] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  171.376636][ T8784] rust_binder: Error in use_page_slow: EBUSY
[  171.390253][ T8784] rust_binder: use_range failure EBUSY
[  171.410451][ T8784] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  171.415918][ T8784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  171.424402][ T8784] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  171.458791][ T8784] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:105
[  171.529107][ T8799] binder: Bad value for 'defcontext'
[  171.848020][ T8824] binder: Binderfs stats mode cannot be changed during a remount
[  171.950291][ T8827] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.950560][ T8827] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.185878][ T8845] binder: Unknown parameter 'coúo'
[  172.302083][ T8851] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  172.304403][ T8851] rust_binder: Write failure EINVAL in pid:395
[  172.795532][ T8872] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  172.840043][ T8877] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  172.891034][ T8881] input: syz1 as /devices/virtual/input/input155
[  173.019763][ T8889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[  173.261570][   T36] kauditd_printk_skb: 891 callbacks suppressed
[  173.261586][   T36] audit: type=1400 audit(1750318687.019:37404): avc:  denied  { read write } for  pid=7768 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.309974][   T36] audit: type=1400 audit(1750318687.019:37405): avc:  denied  { read write open } for  pid=7768 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.369031][   T36] audit: type=1400 audit(1750318687.019:37406): avc:  denied  { ioctl } for  pid=7768 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  173.370696][ T8905] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  173.421277][   T36] audit: type=1400 audit(1750318687.079:37407): avc:  denied  { read append } for  pid=8901 comm="syz.5.2725" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  173.426650][ T8909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316
[  173.431400][ T8907] input: syz1 as /devices/virtual/input/input156
[  173.475389][   T36] audit: type=1400 audit(1750318687.079:37408): avc:  denied  { read open } for  pid=8901 comm="syz.5.2725" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  173.525952][   T36] audit: type=1400 audit(1750318687.089:37409): avc:  denied  { ioctl } for  pid=8901 comm="syz.5.2725" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  173.550980][   T36] audit: type=1400 audit(1750318687.099:37410): avc:  denied  { read } for  pid=8902 comm="syz.2.2726" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  173.573852][   T36] audit: type=1400 audit(1750318687.099:37411): avc:  denied  { read open } for  pid=8902 comm="syz.2.2726" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  173.625239][ T8914] input: syz1 as /devices/virtual/input/input157
[  173.627768][   T36] audit: type=1400 audit(1750318687.099:37412): avc:  denied  { read } for  pid=8902 comm="syz.2.2726" name="binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  173.655266][   T36] audit: type=1400 audit(1750318687.099:37413): avc:  denied  { read open } for  pid=8902 comm="syz.2.2726" path="/dev/binderfs/binder0" dev="binder" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  173.811778][ T8920] ------------[ cut here ]------------
[  173.817285][ T8920] WARNING: CPU: 1 PID: 8920 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0
[  173.826703][ T8920] Modules linked in:
[  173.830627][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.5.2732 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd
[  173.844116][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.854186][ T8920] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0
[  173.860113][ T8920] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 7a ee 05 00 0f 85 c4 00 00 00 c6 05 a7 7a ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
[  173.879754][ T8920] RSP: 0018:ffffc90002bdf5a0 EFLAGS: 00010246
[  173.885821][ T8920] RAX: 0000000000000000 RBX: 1ffff9200057beb8 RCX: 0000000000000000
[  173.893921][ T8920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002bdf648
[  173.898757][ T8923] binder: Unknown parameter 'staTs'
[  173.901905][ T8920] RBP: ffffc90002bdf6c8 R08: ffffc90002bdf647 R09: 0000000000000000
[  173.915063][ T8920] R10: ffffc90002bdf630 R11: fffff5200057bec9 R12: ffffc90002bdf5e0
[  173.923085][ T8920] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000
[  173.931071][ T8920] FS:  00007f2dff9de6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  173.940100][ T8920] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.946716][ T8920] CR2: 0000200000002000 CR3: 0000000123b1c000 CR4: 00000000003526b0
[  173.954700][ T8920] DR0: 0000000000000008 DR1: 00000000000000ff DR2: fffffffffffffffb
[  173.962699][ T8920] DR3: 3e00000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  173.970690][ T8920] Call Trace:
[  173.973957][ T8920]  <TASK>
[  173.976869][ T8920]  ? do_syscall_64+0x58/0xf0
[  173.981486][ T8920]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  173.987202][ T8920]  ? hashtab_init+0xdb/0x1f0
[  173.991798][ T8920]  ___kmalloc_large_node+0x9c/0x1d0
[  173.996990][ T8920]  ? hashtab_init+0xdb/0x1f0
[  174.001603][ T8920]  __kmalloc_large_node_noprof+0x1e/0xe0
[  174.007232][ T8920]  ? hashtab_init+0xdb/0x1f0
[  174.011824][ T8920]  __kmalloc_noprof+0x26d/0x450
[  174.016667][ T8920]  hashtab_init+0xdb/0x1f0
[  174.021096][ T8920]  ? common_read+0x16d/0x480
[  174.025676][ T8920]  symtab_init+0x44/0x70
[  174.029923][ T8920]  common_read+0x1de/0x480
[  174.034328][ T8920]  ? __cfi_common_read+0x10/0x10
[  174.039265][ T8920]  ? hashtab_init+0x105/0x1f0
[  174.043938][ T8920]  policydb_read+0xaa8/0x28c0
[  174.048595][ T8920]  ? kasan_save_alloc_info+0x40/0x50
[  174.053875][ T8920]  ? __cfi_policydb_read+0x10/0x10
[  174.059009][ T8920]  ? security_load_policy+0x128/0x12f0
[  174.064454][ T8920]  security_load_policy+0x162/0x12f0
[  174.069737][ T8920]  ? irqentry_exit+0x4a/0x60
[  174.074316][ T8920]  ? exc_page_fault+0x66/0xc0
[  174.078996][ T8920]  ? asm_exc_page_fault+0x2b/0x30
[  174.084014][ T8920]  ? __cfi_security_load_policy+0x10/0x10
[  174.089734][ T8920]  ? rep_movs_alternative+0x4a/0xa0
[  174.094925][ T8920]  sel_write_load+0x298/0x5e0
[  174.099620][ T8920]  ? futex_wait+0x288/0x540
[  174.104121][ T8920]  ? __cfi_sel_write_load+0x10/0x10
[  174.109321][ T8920]  ? __cfi_futex_wait+0x10/0x10
[  174.114163][ T8920]  ? bpf_lsm_file_permission+0xd/0x20
[  174.119540][ T8920]  ? __cfi_sel_write_load+0x10/0x10
[  174.124734][ T8920]  vfs_write+0x3c0/0xe80
[  174.128988][ T8920]  ? __cfi_vfs_write+0x10/0x10
[  174.133744][ T8920]  ? __kasan_check_write+0x18/0x20
[  174.138854][ T8920]  ? mutex_lock+0x92/0x1c0
[  174.143269][ T8920]  ? __cfi_mutex_lock+0x10/0x10
[  174.148101][ T8920]  ? __fget_files+0x2c5/0x340
[  174.152778][ T8920]  ksys_write+0x141/0x250
[  174.157098][ T8920]  ? xfd_validate_state+0x68/0x150
[  174.162215][ T8920]  ? __cfi_ksys_write+0x10/0x10
[  174.167058][ T8920]  ? __kasan_check_write+0x18/0x20
[  174.172169][ T8920]  ? fpregs_restore_userregs+0x11d/0x260
[  174.177801][ T8920]  __x64_sys_write+0x7f/0x90
[  174.182396][ T8920]  x64_sys_call+0x271c/0x2ee0
[  174.187067][ T8920]  do_syscall_64+0x58/0xf0
[  174.191482][ T8920]  ? clear_bhb_loop+0x35/0x90
[  174.196153][ T8920]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  174.202044][ T8920] RIP: 0033:0x7f2dfeb8e929
[  174.206458][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.226076][ T8920] RSP: 002b:00007f2dff9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  174.234501][ T8920] RAX: ffffffffffffffda RBX: 00007f2dfedb5fa0 RCX: 00007f2dfeb8e929
[  174.242612][ T8920] RDX: 000000000000202c RSI: 0000200000000000 RDI: 0000000000000004
[  174.250603][ T8920] RBP: 00007f2dfec10b39 R08: 0000000000000000 R09: 0000000000000000
[  174.258565][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.266554][ T8920] R13: 0000000000000000 R14: 00007f2dfedb5fa0 R15: 00007fff6f049b58
[  174.274543][ T8920]  </TASK>
[  174.277553][ T8920] ---[ end trace 0000000000000000 ]---
[  174.283820][ T8920] SELinux: failed to load policy