last executing test programs:

2m19.10277769s ago: executing program 3 (id=235):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x481, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x9)
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}], 0xfffffffffffffff4, 0x0, 0x0})
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000540)={'binder1\x00'})

2m19.08111172s ago: executing program 3 (id=236):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='N-N:N/8N'], 0x6a)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$RTC_AIE_OFF(r2, 0x7002)
r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1})
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x11c001, &(0x7f0000000040)=ANY=[])

2m19.017604571s ago: executing program 3 (id=237):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r1, 0x0, 0x13)
prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd"], 0x22)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88)
write$FUSE_DIRENT(r3, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x200001d0)
write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8, 0x3a, '.\'&\xe3-+,*}}*-,\\-', 0x3a, '!', 0x3a, './file0', 0x3a, [0x46, 0x9, 0x43]}, 0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x3000})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000200)={0xa8002, 0x0, [0x40, 0x0, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x3ff, 0x200000001, 0x9]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000040)={0xb})
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000001c0))

2m18.978584341s ago: executing program 3 (id=240):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000000540)={[{@stats}], [{@smackfstransmute}, {@euid_lt}, {@obj_user={'obj_user', 0x3d, 'uid'}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@obj_user={'obj_user', 0x3d, '/(+'}}, {@smackfsdef={'smackfsdef', 0x3d, '-\\\v\x03'}}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '}$-{(\\:}'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/slabinfo\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000008180)={0x2020}, 0x2020) (async)
read$FUSE(r2, &(0x7f0000003680)={0x2020}, 0x2020)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000640)={0x94, 0x1000000})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x3, 0x0, [{0x491, 0x0, 0xe88}, {0x1b, 0x0, 0x7fffffff}, {0xa3f, 0x0, 0xa612}]}) (async)
ioctl$KVM_CAP_VM_TYPES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xeb, 0x0, 0x8}) (async)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7f) (async, rerun: 64)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=<r6=>0x0) (async, rerun: 64)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=<r7=>0x0)
mount$binderfs(&(0x7f0000000000), &(0x7f00000000c0)='./binderfs\x00', &(0x7f00000001c0), 0x90081, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0x5}}], [{@fowner_gt={'fowner>', r6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x38, 0x64, 0x31, 0x32, 0x37, 0x35], 0x2d, [0x34, 0x35, 0x34, 0x39], 0x2d, [0x65, 0x33, 0x35, 0x38], 0x2d, [0x32, 0x37, 0x63, 0x32], 0x2d, [0x65, 0xd, 0x37, 0x65, 0x64, 0x39, 0x64, 0x63]}}}, {@uid_gt={'uid>', r7}}]}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async, rerun: 32)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) (rerun: 32)
ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000ff7a88c50000000000"]) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0})

2m18.707677615s ago: executing program 3 (id=246):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b264899fa2f8b51f8a660653545ab78b6a47b6462efaa8192061344501fb8d96f8de3b132ee012626f94be7b4a9e572a43167614409ee4aa2a40d2feb04bb54137ca025e367e2eee1e8b4f78b741aac17c55ab77d0fd2b7318207e91fd536b9fb7c994a9ad0769020b45bc05965f6dffb15fd462bb2e49632c788cfeb74472be3d9eaf3284719df7187a354b3915df2661363052a24baf8cc101728d302f75878515b436d1fbdb3fc5fc88e8745c56b1bd79dc2cc7e7b5be814275a3edfc67e923d199c97fd6a8b2d11d2923b688471fe8c1e771545d17bad44fc5f7a91cf43ba91b4627c9554a333b6e8ee1c457b54c30bccbbabdfed6158fed6e548cd54ad7409e0a03fb2f685f8987e98ee687a09a730c2a757d3b1595a1146d57230e178284ef3fed5553bbd1e82bd418a13c03f944421d013d96182302122d01c432e24c43a9dff19658a3680167297367a1ee7f70e0968ce28ca2bc8b8525c41f8d4f9cdcaaa25b2d0fea854626eba2e86ecb31e9be7b8e704287fe45ad3f169d7f67e798b0de3bf70f485f81ba5e9aef1ec5782c4c609ffdc93a3bdfeeb7e7cd05ea7023895be4a3f78f188fdbd83ded6dcdf1d429c12b1b250284110295e3515bfb117119839f13057ea2366d3c4b75b28f60afe17b195d04ff58dd2f3382bb57152f2928f9a91bbcc42057777ba13becb4552419caa2ffc325219a6995f5d1e9a193a1aede859834ef765009d6c242ad918ecf3fe62c8dfe2ff309cbce740950cdd05c8e0b7f75aa21731be678552b2d0024a4b3815fb52f056ba37f3f466afab6b5728def0fdef93655524121927df3a39af0845df7612e9ccdae25f406ac0ad7a0e4f980398597ab2c2291d87a1ed618b9e392f1d055d5290be67b6cec9e7505c41025d2aa6e82a4f693042989b5f4a9abfe0ec51fd9dcb972a054b80ee6a460fd422eaa971e2cb759c72e676e2877c667c6ce002be1ce6ba8380e6dd691590c84ba68d26f3284280dcacd082b42bf5aac71467b3fcd5d68ab1bc26cf48fe770ccff5f14ff8afafb18d3127a6d989b7d77665a7a9bf4cb488621c904acd0b073396ad8509c9ddb02eb1d23510a52289a5f0d7edba66d4ef271b9c6acc3bfa996b55f6808650236b0001132ef85fc5070b69144ff5fdd8d64f6c3e0dd22711f69a940ebdb4ab5ff6240da3160049d2047e6713d47ad0db40ec543c095ad67c8cbe438fb875927c98e265498b3da8d4ca54bac0e6efe759a2d4d4190e9fc8835599da8237f472411a71236bb930d28a26f49062d270f4087a6a709c005eebc9740ed54dd005c787c44badac9c720b0d424d0ded9bb8c24c0e842deedf386fc7714a31268292d3bcc53b1cf24b156445c8bf64336f742b1ba836eba0ae4a5aaa9a6f35d4f81734e16bce965795d5b1255609d1860fe11c9c536db078af94772830ba000c13e1d9383e3d862fa07f2199da148632c036bc19f6014eeb206a3654d390c78911deeabebf128def61122754e0a4696db82666a018f8d2f44b5aadc12809ade8bed1b1ba2adbb6e3e82180e26748dc30a8eda0edb21fcaa702632ed3fb4e89550c3e0e1fd2b5ecf1983d85bf9569b231e28155756bd97f1220cbc2b5b1c02dab88ee4a8970d4833b9e51529895afe5029823576297d4a917602fe08df57e1d7f63d050877ddf8e82a5383e15f313171b2d5618a1549f3dfced0732b887508ca5e134124d0ed0bd4b767115d1530f73504387e0364d73a2d3b114fcb49219b1c15e066c455b01672e49499995454a502236f5a5007895d3d1d8843007352a3ccc3f71d3e801efd0a6ef922bf39ead16e01ec20ebff2b1ce7cfd0984b26225cb1359b36efe9ad2ae1f6de4862c0faaa52f4d0eb4c13960ceb4aeaa10ae61a09a5abdb0c61661962a0aab14d465a8ae6f45826e1e66428cf8572eb53c98160df6613a62bb611c63f1ffb7a795a889fc16670f6302fd36ee4247bdd4282f1afb6042c832a4b0857cecae0a7090d9b11ae46d9186c710c8dd12911db573493329bea2c743734d86a577cf27aa01e4fc6c91f1fa34bba173d20b97ed8bb4bad43692df90bfd2b193b9e8b93a95ec0d0d42217395d89db511d2e9bbeb3ef47b7b2d81ab54b5c8faa760ef5c0493af13a9327c9432521ed6bfcb9d778d25031da41a983027fe7d794c26326053d38172444307d88501cdd26c3fdeafdf5f599d3dcfd39972f28ec3fb1fb40982615f5d71d6693a8774df072576834c69b89f209b458fad4671f0108fdfc8548a6fcf76a843369a3bca4d2974221ed9af224d151fa8aa73276ba65ca3d8bc98d6504f16bcac30c697f68cb1625b4f2259ee0c694951752845fa11c20fc4dda369d53918c3746918692ee2cda958612808b841b8d36ef3933f5340e1fc8fb10ac2ae97da921f6a67806831356d515c7a32468dfd3385c"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
r3 = openat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x101800, 0x84)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000002c0)=""/76)

2m17.861788288s ago: executing program 3 (id=266):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
close(r5)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8c0, 0x0, 0xffffffffff7ffffe}]})
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0)
write$selinux_load(r9, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "79a413031fc007619cc2a25c749126cb43a1c463a36aeb7126c9c9435aa2b32268b091608e103fc1a5d738496954d6f9b102a1c57c86ffc9679d816c"}, 0x81)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x561}]})
read(r0, &(0x7f00000002c0)=""/83, 0x53)

2m2.833552078s ago: executing program 32 (id=266):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
close(r5)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x8c0, 0x0, 0xffffffffff7ffffe}]})
r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0)
write$selinux_load(r9, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "79a413031fc007619cc2a25c749126cb43a1c463a36aeb7126c9c9435aa2b32268b091608e103fc1a5d738496954d6f9b102a1c57c86ffc9679d816c"}, 0x81)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x561}]})
read(r0, &(0x7f00000002c0)=""/83, 0x53)

41.190626039s ago: executing program 0 (id=1879):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x3b8, 0x8002, 0x3e60, 0x1}]}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000000087"]) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

40.780170205s ago: executing program 0 (id=1885):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000062b03b9ec3b846d20000000067050000000000"])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64})
mkdirat(r4, &(0x7f0000000040)='./file1/file0\x00', 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000440)={{0x4000, 0x0, 0x43ca, 0x8}, 'syz0\x00', 0x24})
ioctl$UI_DEV_CREATE(r10, 0x5501)
write$uinput_user_dev(r10, &(0x7f0000001940)={'syz0\x00', {0x7, 0x5, 0x7, 0x4}, 0x15, [0xfffffffe, 0x4, 0x7, 0x2f0c, 0x9, 0x7, 0x1, 0x9, 0x8, 0x8, 0x80, 0x2, 0x0, 0x3, 0x9, 0x2e4cce8c, 0xa1, 0x1, 0x3, 0x8, 0x40, 0x3, 0xffff, 0x7, 0x947c, 0x805, 0x6, 0xb8b, 0x1, 0x4, 0x40000006, 0x0, 0x800006, 0x5, 0x9, 0x877, 0x5, 0x7, 0xf17, 0x870b, 0x10, 0xae, 0x1, 0x8, 0x4, 0xffffffee, 0x7fe0000, 0x200, 0x9, 0xc, 0x80000000, 0x54, 0x8, 0x2, 0x54c2, 0x7, 0x643e1dbc, 0x3d3, 0xeb2, 0xc, 0x10000, 0x1, 0x9f8b, 0x8], [0x4, 0x6, 0x7fffffff, 0xffffffff, 0x4, 0x1, 0x1, 0x6, 0x1, 0x6, 0x80000000, 0x3, 0x0, 0x4033, 0x6, 0x0, 0x8, 0x101, 0x80, 0x4, 0x2, 0x7, 0x1, 0x9, 0x2, 0x10, 0x100, 0x5, 0xac, 0xc, 0x1, 0x40, 0x6, 0x3, 0xfffffffe, 0x6, 0xf23, 0xe, 0x69, 0x9, 0x0, 0xfffffffb, 0x5, 0x1ff, 0x8, 0x401, 0x7ff, 0x7d, 0x1, 0x4, 0x2, 0xd218, 0xce, 0x6a8, 0x5d52cbeb, 0x5, 0x4, 0xfffffffd, 0x80, 0xc0, 0x4, 0x5, 0xffffffff, 0xa], [0x10001, 0x4, 0x3, 0x7, 0x3, 0x6, 0x5, 0x2, 0x7ff, 0x7, 0x7, 0x9, 0xffff, 0x3, 0x0, 0x3, 0x5, 0x1, 0x7, 0x1, 0x4, 0x1, 0x0, 0x7, 0xb, 0x6, 0x6, 0x66c2, 0x8, 0x81, 0x1, 0xe4b6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x16, 0x5, 0x20, 0x10, 0x6, 0x1000, 0x400, 0x7, 0x8, 0x7, 0xf68, 0x8000, 0x4, 0x4, 0x2, 0x8000, 0x7f, 0x7, 0x80, 0x2685, 0x9, 0x6, 0x7fffffff, 0x8000, 0x77, 0x3ff, 0xc], [0x9, 0x3, 0x7ff, 0xe, 0x7f, 0x10, 0x6, 0xcd9, 0x874, 0x5, 0xfffd, 0x3, 0x4, 0x8001, 0x1003, 0x40, 0x0, 0x5, 0x3ff, 0xa13, 0x1ff, 0x0, 0x2, 0x0, 0x2, 0xa9, 0x6, 0x0, 0x1, 0x7, 0x2, 0x1, 0x7, 0xb735, 0x100, 0xc78, 0x1, 0x888, 0x1, 0xdd9, 0x1ff, 0x0, 0x7f, 0x2, 0x9, 0x9, 0x3, 0x8, 0x7, 0xfffffff1, 0xfffffffa, 0x6, 0xffffff86, 0x7, 0x1, 0xffffffff, 0x6, 0x7f, 0x2, 0x2, 0x1000, 0x1, 0x7fff, 0x81]}, 0x45c)
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000b6000040"])
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0xc208ae62, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x10000, 0x9, 0xd, 0x7, 0x0, [{0x4, 0x9, 0x3, '\x00', 0x2}, {0x9, 0x2c, 0x4, '\x00', 0x5e}, {0x6, 0xf8, 0x5c, '\x00', 0x3}, {0x6, 0x4, 0xc8, '\x00', 0x7}, {0x9a, 0x10, 0xf9, '\x00', 0x3}, {0x40, 0x6, 0xe, '\x00', 0x1}, {0x40, 0x5d, 0x7, '\x00', 0x1}, {0xf8, 0x1, 0x2, '\x00', 0x3}, {0x0, 0x5, 0xa, '\x00', 0xf9}, {0xe, 0x7, 0x66, '\x00', 0x32}, {0x0, 0x5, 0x3, '\x00', 0xd4}, {0x4, 0x3, 0x0, '\x00', 0x7}, {0x73, 0x9, 0x8, '\x00', 0x1}, {0xf, 0x5a, 0xfd, '\x00', 0x8}, {0xb8, 0x8, 0x7, '\x00', 0x3}, {0x4, 0x5, 0xc0, '\x00', 0xc}, {0x52, 0xd7, 0x7, '\x00', 0x8}, {0x9, 0x0, 0x1, '\x00', 0x4}, {0x7, 0x7, 0x77, '\x00', 0x8}, {0x2, 0x10, 0x9, '\x00', 0x4}, {0x6f, 0xbe, 0xfd, '\x00', 0x7}, {0x3, 0x1, 0x4, '\x00', 0x2}, {0x7, 0xf9, 0x4, '\x00', 0xc}, {0x2, 0xf3, 0x6, '\x00', 0x1}]}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2})
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"])
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$selinux_create(r11, 0x0, 0x0)

40.353565491s ago: executing program 0 (id=1887):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '', 0x3a, '}!^-', 0x3a, './file0'}, 0x2b)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x400}], 0x18, 0x1000000, 0x0})

40.343373042s ago: executing program 0 (id=1889):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe3a)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5)

40.279566563s ago: executing program 0 (id=1890):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008404"])
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000300)=@x86={0xc, 0x1, 0x40, 0x0, 0xa, 0x0, 0x5, 0x2, 0x2, 0xd, 0x2, 0x6, 0x0, 0x8, 0x8, 0x1, 0x8, 0x0, 0x79, '\x00', 0xdd, 0x3})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeec, 0x8031, 0xffffffffffffffff, 0x4000)
write$cgroup_int(r8, &(0x7f00000001c0)=0x700, 0x12)
ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000000)={0x150001, 0x0, [0x6, 0x5, 0x1, 0x3715701a, 0x8, 0x299c0e99, 0x1ff, 0x92]})
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000040)=0x7, 0x12)
r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x240740, 0x0)
ioctl$BLKRRPART(r11, 0x125f, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @ioapic={0xeeeec000, 0x4, 0x5, 0xfffffffa, 0x0, [{0x1e, 0x40, 0x9, '\x00', 0xd8}, {0x3, 0x8, 0xa2, '\x00', 0xd8}, {0xb0, 0xf, 0x9, '\x00', 0x1}, {0x40, 0xd, 0x9, '\x00', 0x6}, {0x6, 0x7, 0x3, '\x00', 0x4}, {0x46, 0x5, 0x6, '\x00', 0xca}, {0x10, 0x7, 0x2, '\x00', 0x46}, {0x5, 0x94, 0x7, '\x00', 0x7}, {0x80, 0xef, 0x1, '\x00', 0x2}, {0x2, 0x81, 0xb0, '\x00', 0x3}, {0x7, 0x1, 0x51, '\x00', 0x6}, {0x1d, 0x5, 0x6, '\x00', 0x5}, {0x1, 0x4, 0x40, '\x00', 0xf8}, {0x8, 0x5, 0x6, '\x00', 0xf8}, {0x4, 0x10, 0x0, '\x00', 0x39}, {0x1, 0xff, 0x6, '\x00', 0xae}, {0x84, 0xf8, 0x5, '\x00', 0x3e}, {0x3, 0x5, 0xfb, '\x00', 0x4}, {0x3, 0x5, 0x2, '\x00', 0x5}, {0x4, 0x0, 0x5, '\x00', 0xd}, {0x1, 0x8, 0x5, '\x00', 0xff}, {0x6, 0x1, 0x1, '\x00', 0xeb}, {0x1, 0x2, 0x2, '\x00', 0x40}, {0x62, 0x8, 0x7, '\x00', 0x5c}]}})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
ioctl$FS_IOC_RESVSP(r11, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8001})

39.849195719s ago: executing program 0 (id=1894):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0xe, 0x5, 0x1, 0x0, 0x52, 0x5, 0x800, 0x7]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000640)={0x81aa001, 0x8000000, 0x40, 0x0, 0xffffffff})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0)

24.78261872s ago: executing program 33 (id=1894):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000000)={0x0, 0x0, [0xe, 0x5, 0x1, 0x0, 0x52, 0x5, 0x800, 0x7]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000640)={0x81aa001, 0x8000000, 0x40, 0x0, 0xffffffff})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f00000000c0)='freezer.state\x00', 0x0, 0x0)

3.505052916s ago: executing program 2 (id=2306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000050000e4004d564b04000000af"])
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

3.19845781s ago: executing program 2 (id=2308):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004540), 0x0, 0x0)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000004580))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]})
ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"])
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$FITHAW(r0, 0xc0045878)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x400, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0])
ioctl$TCFLSH(r0, 0x540b, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x12, 0x13, 0x16e, &(0x7f0000000100)})

3.045604373s ago: executing program 4 (id=2310):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x293, 0x0, 0x9}]})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x2})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0xe05, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000040)={0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.250829105s ago: executing program 2 (id=2315):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000034d564b"])
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x10000, 0x2000, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

2.125284387s ago: executing program 1 (id=2317):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc$})\'!&}*', 0x3a, '', 0x3a, './file0'}, 0x36)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x3, 0xf56, 0x0, [{0x0, 0xfe}, {}, {}, {0x0, 0x35, 0x0, '\x00', 0xfc}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x3}, {0x0, 0x5}, {}, {}, {0x40}, {}, {}, {}, {}, {0x3, 0xfc}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {}, {0x0, 0x1, 0x0, '\x00', 0xf}, {}, {0x4, 0x4}]}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x5], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000001440)={'syz1\x00', {0x4, 0x6, 0x7ff, 0x7ff}, 0x21, [0x0, 0x7, 0x9f, 0x3, 0x7fffffff, 0x0, 0xa5e, 0x4, 0x9, 0x3, 0x401, 0x10000, 0x0, 0x7, 0x80000001, 0x821d, 0x8c, 0x9, 0x2, 0x2, 0x2, 0xb8f, 0x0, 0x89, 0x5, 0xffffffff, 0xfff, 0x800, 0x42d2, 0x4, 0x3, 0x7, 0x5, 0x80000000, 0x2, 0x2, 0x8, 0x6, 0xa, 0x400, 0x3, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1, 0x7, 0xdfae, 0x7e6, 0x5, 0xfffffc01, 0x0, 0xa, 0x40, 0x5, 0xc4710000, 0x5, 0x4000000b, 0x6, 0x8, 0x17d4bd08, 0x80000000, 0x2], [0x7, 0x6, 0x1, 0x5, 0x0, 0x4, 0x3, 0x5, 0xb20, 0x4, 0x40, 0x4, 0x3, 0xffff0001, 0x4, 0xb, 0x4, 0x4, 0x1, 0x5, 0x5, 0x4, 0x8007, 0x8000, 0xfff, 0x1000, 0x6, 0x5, 0xf9, 0x10001, 0x8, 0x9b, 0x2, 0x2, 0x4, 0x7245, 0xfffffff1, 0x80000000, 0x9, 0xd21, 0x8, 0x4, 0xffff, 0x3ff, 0x68e4, 0x7, 0x3, 0x7, 0x581, 0x3, 0x3, 0xc, 0xfff, 0x2, 0x200, 0x7, 0x800, 0x7, 0xffffffff, 0x119b, 0x9, 0x10, 0x4, 0x4], [0x0, 0x1ffff, 0x1, 0x80000000, 0x5, 0x7, 0x5, 0x1, 0x6, 0x5, 0x800, 0x8, 0x7a2d, 0x1650c5fd, 0x2ab, 0x3, 0x800, 0x717, 0x1, 0x5, 0x7, 0x7, 0x4f, 0x1, 0x4e1, 0x8, 0x87, 0x5, 0x8, 0x6e, 0x10, 0x3, 0xa02a, 0x6, 0x91d3, 0x7, 0x6, 0x9, 0x9e9, 0x5, 0x6, 0x7fff, 0xb, 0x8003, 0x1, 0x6, 0x8, 0x4f42, 0x6, 0xa2a, 0x4, 0x1, 0x10000, 0x6, 0xfffffff9, 0xffffffa0, 0x3, 0x6, 0x5f, 0xfffffe42, 0x9, 0x3ff, 0x10001, 0x2], [0xfff, 0x117, 0x200, 0x6, 0x800, 0x2, 0x1ed, 0x200, 0x6, 0x3ff, 0xffffffff, 0x8, 0x0, 0xffffea38, 0x2, 0x8, 0xfffff13b, 0x0, 0x43, 0x4068, 0xc51, 0x6, 0x9, 0x4, 0xfffffff7, 0x3, 0x8, 0x10a2a7e, 0x4, 0x3, 0xc0000000, 0x80000000, 0x80000000, 0x400, 0x7, 0x7, 0x1, 0x0, 0x0, 0x1ff, 0x2, 0x6a, 0x10, 0x8, 0x0, 0xb, 0x3, 0xfffffe01, 0x4, 0x4, 0x8, 0x0, 0x10000, 0x3, 0x400, 0x1, 0x7, 0x800, 0x6, 0x675, 0x100, 0xc, 0x6, 0x20005]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xf6, 0xf0, '\x00', 0x6})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x6)

2.088078057s ago: executing program 4 (id=2318):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x100, 0x9, 0x62b, 0x40, 0x4}}, 0x120) (async)
write$UHID_CREATE(r0, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x100, 0x9, 0x62b, 0x40, 0x4}}, 0x120)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) (async)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

1.856024081s ago: executing program 2 (id=2321):
write$selinux_user(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'root\x00'}, 0x2e)
syz_clone3(&(0x7f0000000300)={0x100, &(0x7f0000000040)=<r0=>0xffffffffffffffff, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0), {0x26}, &(0x7f0000000100)=""/186, 0xba, &(0x7f00000001c0)=""/231, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0xa}, 0x58)
read(r0, &(0x7f0000000380)=""/248, 0xf8)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0)
write$cgroup_pid(r2, &(0x7f00000004c0)=r1, 0x12)
r3 = openat$cgroup_ro(r2, &(0x7f0000000500)='memory.events\x00', 0x0, 0x0)
close(r0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x400)
syz_clone(0x81088000, &(0x7f0000000540)="669791dd83945c1f964adab5e8c6846d8cfdf5f4ace63623d23eabd44caf20698751a46a2f9863bd8a444486a317c130b9defba3cd569363f43394cd610bd6fa68463ffed4e46d3625c38effa9776bdab0babc86ff36f752831f14815c69f2a98d33c5d7e5adaea0a0b4ee94f88ca3b3899ce704ec0fed9d27e70490176b0fd42ab4bfda327a7b86f67db0055576ae774cc44ba5ddfacc0ef377100ca75756836cd168a7273039806039df6e4e02064e4b5731febb81d7cdcb40866b23fec0b27953636781b0a67a94cc45ab0fa691d20d40ad09311db6e3d334535d429de8e69f1413d36c85b4bc50b01eb933a2db20", 0xf0, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="bb8c33a04de122efc59a375964868a7403d1ee01d0190725fc25f67801d14320e099f2dc7bcf37f7bbbb27ef4a4eee18c6214751ce4b6191dc9bbc4b417860f2faaa4c55428d1e510dc5df64d52d854c13d309a1155f36ebc4087cf9f4f2c9a2f9ddd2062b1aef5fe67385677a9caa085036ed8d61cf4a59a2214dc4d038c55100579d2a52b6cbf4b63a4cbec5dc5b61171f9f8779625892a4bce78c705c280c01b4271f65d991e2049be81957bd32e2c2a6fdb165f3fdd9f8fab1fcc65e5890431f212bbfcfb87de557c2a101e52f1d41bbc6adb6640516875c97a1e2191cfcd8e3f1c4d9af59b140fc846175fc67cdde1be36ba72d31b807935170d69682072dc7838e484bf174108a1c54443afd2d55f08b23bc6c4671b2039ec2f1b044ce5a55e2f5f95f5b04db6a04e79c3c0af7d6cf57e680ff399ae1fe740d3a98dcbc3cd4f75e8d9d008f68117f4e0ccfd5e0f730b59613a98485ac100f23212e56405c4292eb410b5924a6b56f148ad2755efe18731de0e103b6e353ff825d6e48913e73092b38351bf9790ca89e683b675db4bee2e26fd959e3b5e7f32bba68a9b2f57a14d21c46c364699f242ecc6e310d7a37daeaae6482084edf4ca2d6ddbd69d9142a1cc5e65066cba288e5c19d44053fe3bfd61953c7442199e15e8906d13f0bdee2aeb1467c70265c864b61bc4b97775eda6e75de04d060b84848ac1bd9629aec0f5a7cb4d5890e8bff23d97ebdb240ad27bc6db799f37b5ed5748543f67e0423bccbaa27904532647df1255931f575d4e9ae3aa46f0295ae774494a56d27aebaa38c39de42d683c79d89210e046271f824a77d47d0a26a881c5e3dd7bd916c2ad1027835984920e46974a9aca259124a4463044831554a9d2d70e6cef255f7f1f4efed17d8be710b4249d14b870fb286c5d7779ac6f7953557ea17c92e62080113246f8e2a67a8954bc9583fb4bd86fe1c29325331886de699192095112aea4d3e05059dc4687cd346c63e81e60d9fc7a28bec103ff2871966591d87ee455ddc0e128de4487e7e6e58a63be568e85faa665b100ad9212d0ee8f7a88ac94c4b9f7e3f4706c1086b48d1a006dffd9b08979e744e7a8dce84c088c582310e00d162d9e78c25357f4b3d00d659b5613839cbd07330af3e17a1ca05600a425509d86699c35d9456affe1910ed41fc734b4392264bba6b96496ad538741fa3153229f5876df36ebbe12d87dc60993b051381f84d8d6fbea64a4dbea65b25ee7afdaff4403dc25f4c0dc04e84c9acf0c6c9254ed774ee26b2b9bde6197de1ad08c3e3aae5537577292e08148364b9eda92593bd9726cef313d778b8b86df7ae8011ff19e95e358b77d83ddcfa23eb95f310425e6b1ee60854a8bc7b56a43587122481a8f3dac00809b9fe30b8ce9485e4a3033fbf7debe7c8fe65729a120fe4975d63737d83a1d46e43c0513cb465d9974384258a2ca4ca0f0fe8b8eaa77dc448d7b033b4645b9ee059700ca54a63c6374ee49139f23a536957182d9c89dc2af46c171c7a82b9ac2064732816671c55d9cd68b2d50ea16264b7674762bd081b5e0d3852eda2ff8ff4a4d56af811f2dc5656df50b1f4258d62363f02fb61a48fb90a363ec4f8b5ff04d9afcbafccb556e3f0d199a37be23262e2bb3893196f1a187583c9db115230fc36805b6f3b8be60f7abc0852629a461a94b72573c13c777f164f64c00f5b663d33bbe22d62199a08935c447ceea667e1c1766a4de0f2deebeb01364d5836bfc7c6b4ffc527f0bc96c5ab47806a7587009eee561acf97c3e8eda416642e0c164f7093b13bf252c3a11e5c809dafd6d35cdc295a6a5d4a77048191c22b8fca68328be32f7e292863d2e79f52bea1749a906872d665c2d1520c942af3a3c6d783d1e8c670d3d76f441353177d788a8c93ce4d725c1fbef1e6a2256ce7f21d14626bd0ff39e7689c06b767a5d6c63b1d8d5e78645e307b4301dd28b9b8373d1a5b0dad733fd9551705c7f3d606b1f4a7f417a5a3b52bba0e0a60bc566b5c010f38e160fbcb25d415e2665b07aa14957ce87a670bb9cf8fdfa118396f437645d15627471c93850cfc418a010e9df12fce02b18bf1623e52519497b8879d813f4df374a110fa34fad1b8a8113ad9ab3c7ee87884accd7ca6d5f97f7a6f909af5e29fb609b372bbd4bd41e87bab3b3d32221feec7294b1e33a1d3d5a13745ded23b4eac9ab8247e56f33e8746e0fce112981e10ef0739d3b4b13b88538f922d7fa97e548f982aa5fa47b6f50fd3ea718fad9f81365b6083e3bb07a276c695011a5ffbd78e9eaf108598882a264bf71396e723715388eae0652ce4de689a593a21d9fde6ce840aa893427a4fc2b9f2ab729183b226db0fc9b67f0b72de1050886ba1c7588aceb91c4710e8d8c96e2c79fe6374ef49a85e882ef074ef9eadf44c1325708d50d104cbc16b36f7f88921379cd3338d674a18f52a9cb64cc03fd295a72fd2db6056a12ef3a8348468512a186471b0d530d9a313a314e92e2cda15eafd6d7b1ff9df1c09088ce5733c83c1f3353cfc336d2e2634f74b3c5738df6b4b98996053a9aa56ae37cdaa6632e5b334843a1c10220406057034de29897d2e5417d15fe4c4eecc61c4704700349b0ffca206aa1d42e6b2fa3dbd2fa39a2638187da5fc1014e79753d6a65d25fef66444d7edbcd701e9080c5bfc9d0abbe87687deff1aaf5482071309c9fecc7dbb59fbafbc6a6658a4eacc7ae54e0f7ab55db983f5626c7897aee739fb925e8a5c88db15ff6f14cbe7ee780d2eb20d45b061498e60cf44ef8290c62534a7dc9574743069a083e9f2ae017f0ec3495eb0b0c15f51f7e0e101a7236d0c2f63aa22c7f0c73d9b46777f15815c3cfe09f0dad3ae2c289d5311d1fcfe7829867a4435d6efaa67e6e8e22ab2aeabe8a9a51ee37ffa07c48b64445001b4333139d53d66d6d19b199b4bec450ce8a8ffcb6462eecf67f38178afbd201d3900d629dcf06462286ad30049e491926a7237bdf0c26fc43505de41bdb3d0b5a187b77ea5ab4ed6636a3b9d93c4396006caf4a97cff5c44d43780269a569025675fff9984e3ebb8c9881ffc0f09b68e56bbc44451525b0fe9d8a42d11f9fe834ae41430db5ee36426ed66227699c8d81a92a3409d09251f5ea23a10d6feb27bf873119658d8583cc4f731b2d223cdd963f6f309120f77eeaf96096787516efc5794c189120b18a35c34f0d5a906bc1171daed17a242ba724f5c6804f4d1463931c96c25d6d25f074dac8f9c8d9db92f852d689e7619f22a2202cfd77438b42f7e70171ea19da804b796daf718cb8e69f7decfe785967d396b79caeb77ab42e63adb51344fcdb419e7cc64314edf96c330dd15bf5708cb794d26d84e1f43c3ad9b73ff1d312c4531b76a41db752be1f7ea98d2f4d6de8aba21fc039cf03d6e8f0f3e989f10aee4107859719d36bd5b962ad893dec30d60190de15a7fe1d4f782f01b2c0c4586ed6b0b8bdf4e4a54dfb17d87a244d476841b7da49263338b815f2bf13800669cff89643590f6e8d7e7bb875370aea014c1cfc3a2f64c6127a5d5ed6dbff1d58fcbd0e95e5373cddff658c9d27a10988dc1765cdf295242229d6bf8aad57f762c9f424d645bd718c0b834b23ff81e321b83c051dc0d5fe07c204af6aa61107a0b8e665a8ca352c166e7b5af8c33617d524e6a63098dbbd81973b2d7030e3391a85d6e00a8141163f6c1c44277d95a252aa162450f69b8421fdb953b5a6390048ddeba23b40cc0314af57259841da43b14ab40387bf6a51fc62d962a1bd2a8323cb45b553b974e88354956380e09fd02ff7d4c04fad2205a56da9496010170cf27708983e0e1a363726762f527d81ccfb54a2370eacd9c021b098138350548ef234ce886b94126276cec872a209ab5ffc3e1d4c0e45c2a4d78fd4e1b87edf4928bcc8a58e39e065518b5fc91b1b21144319eb4a88e8c646dcc63403dde02566e7cf1e863c302a0ec0afab8fd9beb73889c4bfde4887532d6cb3bb0a8c3d550f78b5847b8838edf82ae568440e9b4741ff2fa3dfc64f42aa42f633f4a7116466c95f6aa9e54df37c1952ae48cc41bb0764b1badca69ad09e2a930f38daf9cb02d8532ef0fd5abf655fc4f60c2a4f8d9a9f6b801bdf38c81f9e57974e371a3be41e41963d613730f71ae2f2475fa02573eaf7520d420260efacb1c8432894359cab6186518692c20fff11a0b71acc059799aa1beaf5b2f00e7272003d6f4450a4814e6028eb2c543c8e413f31a0b2adb2679dd6ee48a55316496fcfbc5c2c0ab63e4d3592e328192e7a80e2726ae66b101f3a5d96bb2627fdb4d9ba618bdbef797319caa4087ddd7b84d7de1c7df22d7ccf2976e8cf627362c6d6a26a9369c510f8826af33747f5d0abd87c30418727665b85a1ce9aecff007288343f100db8903ebc2e49c4fd8c20a9a872d11c581afd32e0b528ac7a721595f00238f624392dc158e69112641c6c99bdee23385cecfcbb04583cb1c348c737547450b24b473e5385c128e61464de7e19b280017d321118f4e7d6c64ce4c28e4610627832d94009c1d76c9e9318905bc8f5efb0ce468846c185e7482216f40db875565d53cc4e75855c572bc1c614add9a7a88f399801ff4541f7e8458e50af57a3e0eecb35c18dad533a97bd8de67aded340acfbfc2aae131d8540152dce8c23ca528281f36d9727c28ba4d56c5f142b090cef1d98dade2550d950d24e0f2c1cfb617cd2712fa19da1d28cd1c4fa318f4944744eb9c14f05ce7938f9fccd6070ca24bf10c05023243b3ff87b52508bc2414f4a4121fbba29f6a7229b3458e6ddac40b141bef2bc5166f168d68932c5418fdbe7ad5cb2e281372f187591791044b86a608d6c55a24f7fe0659fcb63bc9f9882fbf98d465df765977838cea7c4b20e69a175e40b6073aecd14b9b90e153c9edca4334a3e01b49e8df76f2143335af1d0e98bc11edb75b28332078766c903c4afa5eafe6bb9f5a13b8fe3d1546c3517deb2bb2da6438572b32f193c9943a19ef381144f20c8efbaa53cf8ad3a983321fbe4d298a78c3464a41802252ce02cdae52e98299d17a302c84e94d3ded1246868513fb22a293e5e3bf5b51edc406b5e9c141a94d8cd887bfa77dff81e59f14ba5707f04f80e84a8b1915228675e42f3251b2a30ef8a70caf6561079072a3633dd1b39caa51584ddff250006b930c4fa2a42eece7e2c333a2653ec39400977bc1335bcbe55355d746e771e463d419c84f9e187f3c7eb540e0add54903debe0ceb880a499cbf27c312a84f459684047832ab1bc6316ec25ac4b4786df5f0e177584f0ed511b96e845b0e203cbcaf1117e2a3dc6788c2333a264468adebecb3d6476faed2941e17b2e874ff4c25f6e2ec5295be4cc36ab2b5c48f013dbcaef540417366a5448e2905c49485598f8f39e22e2ba2b5aef69121bbcc62f0622e565833848fae69f1263fa3e8a04a971a878cce791e931a17f7b3636717415be23f44c4d5749dc128610b303a805c662fd3d41e8917c99a31b2c09f8c6cf20b49b28a585b71e87c8075d0c6fcbb27f9d32233312eab40498da665e2ed1731f32d62c2666fcb40e601bde05c6f828d66adf52bc2051ff7dfd6b03c6bd6863eba6be1bb1341aa1e826ec2683f6862fa52c003d3018f9b29043f5e92363c5c95d3045fc98347c70af2f6843171511c0b9a4a08df36d325d90439cce076e26738cec1fb97beeb7aa1c2acba314180401ee8b5e63b0506078337749470")
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)
write$cgroup_int(r3, &(0x7f00000016c0)=0x40, 0x12)
read(r0, &(0x7f0000001700)=""/4096, 0x1000)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000002700)={0x37, 0x6, 0x0, {0x4, 0x6, 0xe, 0x0, 'memory.events\x00'}}, 0x37)
syz_clone(0x40008600, &(0x7f0000002740)="fbe1d595fc2e7cd51a67aa50230c5f00c45406e961f2936bb3a1415e77fc0120aebfc00e1660dd42dd0ab9f6b1a155b04af9140b19a9b94429cee2dd7289243e3e04f5f9e34c83a71818ccbf887c88da6f037306c1", 0x55, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840)="78c8203c5681f80db39f9a140dc5e4b816297a71cda16ff36df52340a5b42b457a5c8d3d85873cc828e053016db233afedb52a2696af15b10c31c5ca12919e0a2d591013c7e8c6cb0de7894b36d66bb62077ed9ade17ca44fca7c1d1c40f4fa4425f37a71978b1976ecee94a74a230")
write$cgroup_subtree(r3, &(0x7f00000028c0)={[{0x2b, 'blkio'}, {0x2d, 'net'}, {0x2d, 'pids'}]}, 0x12)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x80010, r2, 0xd70f000)
r4 = openat$cgroup_int(r3, &(0x7f0000002900)='pids.max\x00', 0x2, 0x0)
read(r4, &(0x7f0000002940)=""/161, 0xa1)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002a00), 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002a40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002e40)={0x73622a85, 0x0, 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000002ec0)={0x5, &(0x7f0000002e80)=[{0x1, 0x7, 0xdb, 0x4}, {0x3, 0x3f, 0x40, 0x8}, {0x2, 0x97, 0x4, 0x3}, {0x401, 0x6, 0x2, 0x10000}, {0x800, 0x1, 0x6, 0x4}]})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000002f40)={0x2020}, 0x2020)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004f80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000004fc0)={0x0, ""/256, 0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000051c0)={<r8=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000053c0)={r7, r8, "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", "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"})
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000063c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x4}}, 0x30)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.799881652s ago: executing program 1 (id=2322):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8117, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x13c4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz0\x00')
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x1})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x800, &(0x7f0000000000)=ANY=[])
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$RTC_WKALM_SET(r1, 0x40187013, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x0, 0x15}}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8117, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x13c4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c) (async)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz0\x00') (async)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x0, 0x2, 0x1}) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x800, &(0x7f0000000000)=ANY=[]) (async)

1.799663202s ago: executing program 4 (id=2323):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000008c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000ce"])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xf0, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1001, 0x3}, @fda={0x66646185, 0x6, 0x2, 0x7}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/251, 0xfb, 0x2, 0x28}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x3}, @increfs_done, @decrefs={0x40046307, 0x2}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x2}, @exit_looper], 0xbe, 0x0, &(0x7f0000000600)="87141b8ce47e952bfc6c6725c7a064b1d0fdfef2e68ed7a9c89fbcdc383c0bba03bdc994773557c88efc0276388e75fc3264e9a0f632a9134b597c5019bcfc1648c1ce839efe4e0b3bd0ba5efa9b3e92d465f8b906780761b8a33660307317d4f6e25a6c73b106277db140a26a9bb5b42fa7819b7f28e42a2199f6ada9c777de90a6e124c1716839ef1a46e475c6c1ed3edaf7af3675f4e9e9615e605e8af662be764496158e2e1a8483ec28872dd854dccec1cc2c722843d5c52fdc5105"})

1.619020764s ago: executing program 1 (id=2325):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r1, 0x0)

1.536712296s ago: executing program 5 (id=2326):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0})

1.500166816s ago: executing program 1 (id=2327):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000140)={0xffff, 0x7, 0x2, 0x5})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

1.344059239s ago: executing program 5 (id=2328):
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x293f000)

1.26559833s ago: executing program 1 (id=2329):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x800, 0x12)

1.26141744s ago: executing program 4 (id=2330):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x800, 0x12) (fail_nth: 1)

1.162491432s ago: executing program 5 (id=2331):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x9c, 0x0, &(0x7f0000000240)=[@register_looper, @increfs_done={0x40106308, 0x1}, @request_death, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/13, 0xd, 0x0, 0x29}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @clear_death, @enter_looper], 0x6c, 0x0, &(0x7f0000000300)="42a7a32a8db46a390fb69261c59511b70bff242680586f2e1a0d1b80f5c9c84da4ec2bf97548cf2035658dada8afbf6c7791638bc0b95533880a10bdb809d6897fcdc72d817b5be96f689bea960c606fad2668431e50bf858bc22a11603fb9e0b8ec0680e49e3a52a0a63cd6"})

1.112650082s ago: executing program 1 (id=2332):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000080)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})

789.676827ms ago: executing program 4 (id=2333):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0xc0f85403, &(0x7f0000000040))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x186, 0x0, 0x3}]})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040))
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)=ANY=[@ANYBLOB='nXI'])

757.204498ms ago: executing program 5 (id=2334):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40345410, &(0x7f0000000340)={0x1}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"})

657.030289ms ago: executing program 2 (id=2335):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0), 0x2026fad2fe6d7db6, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
mmap(&(0x7f000032f000/0x3000)=nil, 0x3000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x31, 0x14, 0x5, 0x17, 0x0, 0x8, 0x1, 0x11b, 0xffffffffffffffff}) (async)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x2, 0x4, 0x1e, 0x0, 0x1, 0x80, 0x9, 0x7, 0xa3, 0x7, 0x8a, 0xf9, 0x6, 0x1, 0x4, 0x4}}) (async)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000980)={0x4, 0x0, [{0x10000, 0xa, &(0x7f0000000580)=""/10}, {0x2000, 0x16, &(0x7f00000005c0)=""/22}, {0x2, 0xc0, &(0x7f0000000640)=""/192}, {0x0, 0x0, 0x0}]}) (async)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000500)) (async)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r3, 0x293f000)

473.506612ms ago: executing program 5 (id=2336):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x80000, 0xd)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x60, 0x20}]})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0xfffffffffffffffc], 0x8000000, 0x40106})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000021c0)=ANY=[@ANYBLOB="0400000000000000160900000000000009000000000000009c010000000000000200000000000000f0020000000000000700000008000000850500000000000003"])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002180), 0x6682c3, 0x0)
ioctl$TIOCSETD(r6, 0x540b, &(0x7f0000000140))
close(r6)
r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x10000003)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read(r2, &(0x7f0000000080)=""/106, 0x6a)
read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r7, 0x5)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0xd672ed990c66297b)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e85411, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a')
openat$cgroup_subtree(r8, &(0x7f0000000180), 0x2, 0x0)

472.725742ms ago: executing program 4 (id=2337):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r1, 0xfffff000)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x4000}, 0x28, [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x10000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x41df1fd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0x0, 0xb89], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8000000, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe7)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x2})
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2c0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x10f)
ioctl$UI_DEV_CREATE(r3, 0x5501)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000002c00)={'syz1\x00', {0x9, 0x33, 0x1, 0x5}, 0x11, [0x9, 0x7fffffff, 0x7, 0x7, 0x6, 0x7ff, 0x0, 0x0, 0x0, 0xac8d, 0x9, 0xfffffeb4, 0xe6b5, 0x9, 0x8, 0x8, 0x1ff, 0xfffffff1, 0x7fff, 0x1, 0x0, 0xa, 0x3d, 0x7, 0x7ea79520, 0x7f, 0xb, 0x9, 0x0, 0xf, 0x0, 0x5, 0x3, 0x949, 0x2, 0x8, 0xf95f, 0x9, 0x101, 0x1000, 0x7, 0x1, 0x9, 0xd44, 0x3, 0x7f, 0x10001, 0x1ff, 0x0, 0x8, 0x6, 0x0, 0x7fff, 0x1d, 0x4, 0x8b, 0xffff0000, 0x1, 0x2, 0x7, 0x401, 0x4, 0x4, 0x7ff], [0x1, 0x6, 0x9, 0x3, 0x1, 0xffff, 0x1000, 0x9, 0x8, 0x6f, 0x4, 0x7, 0x5, 0x7fffffff, 0x8, 0x12f, 0x3, 0x1c765bd7, 0x273, 0x6, 0x9f, 0x448, 0x3, 0xb, 0x10000, 0x2, 0x5, 0x3, 0x3, 0x587, 0x100, 0x2, 0x80000000, 0x1, 0x2, 0x10000, 0x0, 0x80000001, 0x400, 0x6, 0x6, 0x1, 0x7fffffff, 0x9, 0x0, 0x3, 0x7, 0x5, 0x9, 0x2c824684, 0x838, 0xb, 0x1000, 0x4, 0x68d, 0x1, 0x5d3, 0x6, 0x55, 0xfffffffc, 0x2, 0x5, 0xffffffff, 0x4], [0x4, 0x1000, 0x6, 0x8, 0x2, 0x35344016, 0x8e, 0x7, 0x200, 0xd, 0x6, 0x80000001, 0x48, 0x6, 0x80000000, 0x9, 0x1, 0x2, 0x8, 0x3, 0x19ee, 0x51ed, 0x7fff, 0x9, 0x8, 0x6, 0x8, 0x8, 0xfff, 0x9, 0x38, 0x1, 0x1, 0x3, 0xfffffef5, 0x7, 0x9, 0x3, 0x5, 0xfffffffc, 0xaec0, 0x400, 0xf39, 0xfffff8f4, 0x3, 0x4, 0x39d, 0x200, 0x0, 0x1, 0x2, 0x2, 0x6, 0x8001, 0x7fff, 0x7, 0xfffffffd, 0x2a, 0xb0d, 0x6, 0x7f, 0x200, 0x52d, 0xc], [0x3, 0x35af, 0xffff, 0x8, 0x2, 0x0, 0xffffffff, 0x61, 0x8, 0x2, 0xff, 0x6, 0x5, 0x3fffc, 0x2, 0x1, 0x3, 0x19a, 0x9, 0x9, 0x9, 0x1000, 0xff, 0x4, 0x4812, 0x10, 0x5, 0x54e4, 0x6a, 0xb, 0xfffffffd, 0x5, 0xfffffffa, 0x8, 0x1, 0x40000, 0x6, 0x6, 0xffffffff, 0x0, 0x4, 0x7, 0x9, 0x400, 0x19d28fd2, 0x9, 0x0, 0x7fffffff, 0x6, 0x6, 0x9, 0x101, 0x4, 0x2, 0x800, 0xa0, 0x8, 0x401, 0x2, 0x2, 0x8100000, 0x3, 0x5eb, 0x4c0a]}, 0x45c)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r5, 0x2000)

36.034929ms ago: executing program 5 (id=2339):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1d1083, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x180) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x180)
close(r2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unlinkat(r4, &(0x7f0000000400)='.\x00', 0x200) (async)
unlinkat(r4, &(0x7f0000000400)='.\x00', 0x200)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, r0, 0x3000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=2340):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000))
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040)=0x5)
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, 0xfffffffffffffffe) (async)
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, 0xfffffffffffffffe)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080)) (async)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000080))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r1, 0x800, 0xa, 0x7fffffff}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r2=>r1, 0x800, 0xa, 0x7fffffff})
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x10)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000100)={{0x0, 0x0, 0x80}})
write$tcp_mem(r2, &(0x7f0000002180)={0x1, 0x20, 0xdc, 0x20, 0x9}, 0x48)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000002200)={0x4, 0x2, [{0x2}, {0xdf1, 0x0, 0xfffffffffffffff7}, {0xf, 0x0, 0x8}, {0x1, 0x0, 0x1}]})
ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000002280))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000002340)={[0x0, 0x2000, 0xeeef0000, 0xd000], 0x4, 0x8, 0x1}) (async)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000002340)={[0x0, 0x2000, 0xeeef0000, 0xd000], 0x4, 0x8, 0x1})
close_range(r0, r1, 0x2) (async)
close_range(r0, r1, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000002400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f00000023c0)=0xa3e})
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000002440)={0x0, 0x0, 0x8000, 0x7, 0x5})
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000002480)=r2)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000024c0)=0x1)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000002500)) (async)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000002500))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000002580)={0x3, 0x81, 0x2, 0x0, 0x8}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000002580)={0x3, 0x81, 0x2, 0x0, 0x8})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000002600)={{0x3, 0x1, 0x1, 0x2, 0x1ff}, 0x9441, 0x4, 'id1\x00', 'timer0\x00', 0x0, 0xfffffffffffffffd, 0x3a57, 0x7ff, 0x100})
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000002700)={0x7, 0x0, [{0x4, 0x3, 0x3, 0x100, 0x2}, {0xd, 0x10, 0x1000, 0xabd2, 0x8000}, {0x8000000a, 0x8, 0x8, 0x6, 0x1}, {0x7, 0xbc, 0x80, 0xff7, 0x4}, {0x0, 0x7, 0x4, 0x7, 0x3}, {0x1, 0x4, 0x1, 0x50e, 0xfffffff8}, {0x7, 0x8, 0x5, 0x80000001, 0xf}]})
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000027c0)) (async)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000027c0))
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000002800)={0x5, 0x0, [{0x187, 0x0, 0x1}, {0x834, 0x0, 0xa}, {0x884, 0x0, 0x9}, {0x827, 0x0, 0x401}, {0x981, 0x0, 0x9}]})

kernel console output (not intermixed with test programs):

:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.706700][   T36] audit: type=1400 audit(1750360308.150:3710): avc:  denied  { read } for  pid=5164 comm="syz.4.1497" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.741406][   T36] audit: type=1400 audit(1750360308.150:3711): avc:  denied  { read open } for  pid=5164 comm="syz.4.1497" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.780010][ T5175] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  105.795685][ T5177] input: syz1 as /devices/virtual/input/input83
[  105.804289][   T36] audit: type=1400 audit(1750360308.150:3712): avc:  denied  { read } for  pid=5164 comm="syz.4.1497" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.847391][   T36] audit: type=1400 audit(1750360308.150:3713): avc:  denied  { read open } for  pid=5164 comm="syz.4.1497" path="/dev/binderfs/binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.875477][   T36] audit: type=1400 audit(1750360308.160:3714): avc:  denied  { read } for  pid=5164 comm="syz.4.1497" name="binder0" dev="binder" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  105.938190][ T5181] audit: audit_backlog=65 > audit_backlog_limit=64
[  106.182814][ T5195] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.284545][ T5200] rust_binder: Error while translating object.
[  106.299935][ T5200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  106.312260][ T5200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1162
[  106.383496][ T5208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.408855][ T5208] rust_binder: Error while translating object.
[  106.415378][ T5208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  106.438125][ T5208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1299
[  106.509834][ T5212] rust_binder: Write failure EINVAL in pid:759
[  106.750161][ T5226] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.894940][ T5236] rust_binder: Write failure EINVAL in pid:371
[  107.423938][ T5242] rust_binder: Read failure Err(EFAULT) in pid:373
[  107.543471][ T5257] binder: Bad value for 'max'
[  107.607645][ T5263] rust_binder: Write failure EFAULT in pid:1307
[  107.693793][ T5269] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.744404][ T5272] rust_binder: Write failure EINVAL in pid:381
[  107.764824][ T5274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1309
[  107.772291][ T5272] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.795448][ T5272] rust_binder: Error in use_page_slow: ESRCH
[  107.806231][ T5272] rust_binder: use_range failure ESRCH
[  107.813541][ T5272] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  107.819783][ T5272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  107.839333][ T5272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:381
[  107.985938][ T5280] kvm: kvm [5279]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882
[  108.124095][ T5283] SELinux: security_context_str_to_sid () failed with errno=-22
[  108.453055][ T5293] serio: Serial port ttynull
[  108.684548][ T5302] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 89)
[  108.684576][ T5302] rust_binder: Error while translating object.
[  108.708464][ T5302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  108.727894][ T5302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:384
[  108.993971][ T5320] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.039504][ T5320] input: syz0 as /devices/virtual/input/input86
[  109.064669][ T5320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1317
[  109.339278][ T5329] rust_binder: Error in use_page_slow: ESRCH
[  109.348714][ T5329] rust_binder: use_range failure ESRCH
[  109.354825][ T5329] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  109.360425][ T5329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  109.370571][ T5329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1191
[  109.504586][ T5331] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  109.704564][ T5337] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  109.842263][ T5340] rust_binder: Write failure EINVAL in pid:399
[  109.965633][ T5345] binder: Unknown parameter 'nXI'
[  109.969696][ T5344] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401
[  110.090127][ T5352] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.137905][ T5352] rust_binder: Write failure EINVAL in pid:1325
[  110.287753][ T5357] input: syz1 as /devices/virtual/input/input87
[  110.300885][ T5360] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.307951][ T5359] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.338874][ T5367] rust_binder: Error while translating object.
[  110.338924][ T5367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  110.346870][ T5367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1327
[  110.584823][   T36] kauditd_printk_skb: 874 callbacks suppressed
[  110.584843][   T36] audit: type=1400 audit(1750360313.130:4533): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.646911][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.662252][ T5377] pim6reg0: linktype set to 769
[  110.671974][   T36] audit: type=1400 audit(1750360313.180:4534): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.697256][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.712221][ T5377] pim6reg0: linktype set to 769
[  110.723630][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.735656][ T5377] pim6reg0: linktype set to 769
[  110.744487][ T5381] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  110.746386][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.761676][   T36] audit: type=1400 audit(1750360313.190:4535): avc:  denied  { ioctl } for  pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  110.780446][ T5383] rust_binder: Write failure EINVAL in pid:1334
[  110.797937][ T5377] pim6reg0: linktype set to 769
[  110.814120][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.827534][ T5377] pim6reg0: linktype set to 769
[  110.834764][   T36] audit: type=1400 audit(1750360313.280:4536): avc:  denied  { read } for  pid=5379 comm="syz.0.1568" name="binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.866564][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.873008][ T5377] pim6reg0: linktype set to 769
[  110.879906][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.885722][ T5377] pim6reg0: linktype set to 769
[  110.891520][   T36] audit: type=1400 audit(1750360313.280:4537): avc:  denied  { read open } for  pid=5379 comm="syz.0.1568" path="/dev/binderfs/binder0" dev="binder" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.920207][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.935293][ T5377] pim6reg0: linktype set to 769
[  110.948110][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  110.958491][ T5377] pim6reg0: linktype set to 769
[  110.967773][   T36] audit: type=1400 audit(1750360313.280:4538): avc:  denied  { ioctl } for  pid=5379 comm="syz.0.1568" path="/dev/binderfs/binder0" dev="binder" ino=82 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  110.994386][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.007918][ T5377] pim6reg0: linktype set to 769
[  111.018749][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.027284][ T5377] pim6reg0: linktype set to 769
[  111.054772][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.068254][   T36] audit: type=1400 audit(1750360313.290:4539): avc:  denied  { read write } for  pid=5379 comm="syz.0.1568" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  111.097895][ T5377] pim6reg0: linktype set to 769
[  111.103069][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.116546][ T5377] pim6reg0: linktype set to 769
[  111.138997][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.145815][   T36] audit: type=1400 audit(1750360313.290:4540): avc:  denied  { read write open } for  pid=5379 comm="syz.0.1568" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  111.172544][ T5377] pim6reg0: linktype set to 769
[  111.188069][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.199880][ T5377] pim6reg0: linktype set to 769
[  111.206681][ T5405] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  111.209506][ T5405] audit: audit_backlog=65 > audit_backlog_limit=64
[  111.213610][  T291] audit: audit_backlog=65 > audit_backlog_limit=64
[  111.218161][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.256440][ T5405] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  111.256467][ T5405] rust_binder: Error while translating object.
[  111.271961][ T5377] pim6reg0: linktype set to 769
[  111.284139][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.289941][ T5405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  111.289972][ T5405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416
[  111.300315][ T5377] pim6reg0: linktype set to 769
[  111.330374][   T31] hid-generic C98F:0003:0000.000A: item fetching failed at offset 0/2
[  111.334431][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.342547][   T31] hid-generic C98F:0003:0000.000A: probe with driver hid-generic failed with error -22
[  111.354145][ T5377] pim6reg0: linktype set to 769
[  111.367500][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.379913][ T5377] pim6reg0: linktype set to 769
[  111.401273][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.408340][ T5377] pim6reg0: linktype set to 769
[  111.415648][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.422063][ T5377] pim6reg0: linktype set to 769
[  111.427230][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.433068][ T5377] pim6reg0: linktype set to 769
[  111.438165][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.443940][ T5377] pim6reg0: linktype set to 769
[  111.449147][ T5377] pim6reg0: tun_chr_ioctl cmd 1074025677
[  111.454939][ T5377] pim6reg0: linktype set to 769
[  111.468469][ T5416] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  112.286420][ T5435] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  112.375968][ T5442] binder: Bad value for 'defcontext'
[  112.517882][ T5445] input: syz1 as /devices/virtual/input/input88
[  112.926177][ T5456] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  113.060111][ T5474] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  113.134905][ T5476] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  113.223286][ T5481] __vm_enough_memory: pid: 5481, comm: syz.1.1598, bytes: 281474976845824 not enough memory for the allocation
[  113.346281][ T5484] __vm_enough_memory: pid: 5484, comm: syz.0.1599, bytes: 281474976845824 not enough memory for the allocation
[  113.759749][ T5497] input: syz1 as /devices/virtual/input/input89
[  114.126651][ T5512] SELinux: failed to load policy
[  114.165112][ T5512] binder: Bad value for 'defcontext'
[  114.184236][ T5520] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  114.216747][ T5520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:443
[  114.298326][ T5526] syz.1.1613 (5526) used obsolete PPPIOCDETACH ioctl
[  114.516002][ T5538] binder: Unknown parameter '?½!‚Àóobal'
[  114.597624][ T5545] rust_binder: Error while translating object.
[  114.597660][ T5545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  114.606047][ T5545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1263
[  114.861425][ T5556] binder: Unknown parameter 'defcontext01777777777777777777777'
[  115.109461][ T5565] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.209390][ T5572] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  115.460031][ T5579] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  115.591342][   T36] kauditd_printk_skb: 877 callbacks suppressed
[  115.591364][   T36] audit: type=1400 audit(1750360318.140:5414): avc:  denied  { ioctl } for  pid=5582 comm="syz.1.1630" path="/dev/binderfs/binder0" dev="binder" ino=54 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  115.634638][ T5584] rust_binder: Write failure EINVAL in pid:1281
[  115.640933][   T36] audit: type=1400 audit(1750360318.180:5415): avc:  denied  { call } for  pid=5582 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  115.687261][   T36] audit: type=1400 audit(1750360318.180:5416): avc:  denied  { transfer } for  pid=5582 comm="syz.1.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  115.708291][   T36] audit: type=1400 audit(1750360318.180:5417): avc:  denied  { read } for  pid=5582 comm="syz.1.1630" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  115.749072][   T36] audit: type=1400 audit(1750360318.190:5418): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.784312][ T5588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.784572][ T5588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.806357][ T5588] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.813590][   T36] audit: type=1400 audit(1750360318.190:5419): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.850489][   T36] audit: type=1400 audit(1750360318.190:5420): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.876715][   T36] audit: type=1400 audit(1750360318.290:5421): avc:  denied  { read write } for  pid=1816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.934433][   T36] audit: type=1400 audit(1750360318.290:5422): avc:  denied  { read write open } for  pid=1816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  115.969550][   T36] audit: type=1400 audit(1750360318.290:5424): avc:  denied  { read } for  pid=5586 comm="syz.1.1632" name="binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  115.990067][ T5595] SELinux:  policydb version 533 does not match my version range 15-33
[  116.002928][ T5595] SELinux: failed to load policy
[  116.010686][ T5595] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  116.121865][ T5600] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.129803][ T5600] rust_binder: Got transaction with invalid offset.
[  116.147921][ T5600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.154599][ T5600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1375
[  116.352957][ T5611] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.434941][ T5617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.458458][ T5617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1377
[  116.578010][ T5622] serio: Serial port ttynull
[  116.634281][ T5625] rust_binder: Write failure EINVAL in pid:852
[  116.719588][ T5628] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.746530][ T5630] rust_binder: Got transaction with invalid offset.
[  116.755438][ T5630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.763597][ T5630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1299
[  116.910976][ T5635] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  116.911303][ T5636] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  116.956582][ T5635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  116.970703][ T5635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1303
[  117.129034][ T5641] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.160644][ T5641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  117.167144][ T5641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1308
[  117.188494][ T5641] binder: Bad value for 'stats'
[  117.257294][ T5643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  117.257326][ T5643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1380
[  117.459184][ T5646] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.498276][ T5647] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.776435][ T5662] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 255)
[  117.797842][ T5662] rust_binder: Error while translating object.
[  117.816174][ T5662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  117.825235][ T5662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:860
[  117.836823][ T5666] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.841319][ T5665] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  117.876971][ T5667] rust_binder: Write failure EINVAL in pid:1386
[  117.877284][ T5667] rust_binder: Write failure EINVAL in pid:1386
[  117.877609][ T5666] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  117.912457][ T5667] rust_binder: Write failure EINVAL in pid:1386
[  118.169133][ T5682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.175933][ T5682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1391
[  118.187557][ T5682] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  118.199470][ T5682] rust_binder: Error while translating object.
[  118.206064][ T5682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  118.223155][ T5682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1391
[  118.291316][ T5685] SELinux: security_context_str_to_sid (syt

) failed with errno=-22
[  118.408299][ T5686] cgroup: fork rejected by pids controller in /syz4
[  119.103831][ T5767] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  119.145975][ T5767] rust_binder: Write failure EFAULT in pid:1322
[  119.150011][ T5767] rust_binder: Write failure EFAULT in pid:1322
[  119.325223][ T5779] SELinux:  policydb magic number 0x746c6562 does not match expected magic number 0xf97cff8c
[  119.341915][ T5779] SELinux: failed to load policy
[  119.481762][ T5785] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.487285][ T5785] rust_binder: Error in use_page_slow: ESRCH
[  119.507836][ T5785] rust_binder: use_range failure ESRCH
[  119.514770][ T5785] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  119.531219][ T5787] rust_binder: Write failure EINVAL in pid:940
[  119.539035][ T5785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  119.555244][ T5785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1327
[  119.613911][ T5789] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.635555][ T5791] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.693921][ T5789] rust_binder: Error while translating object.
[  119.700720][ T5789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  119.706973][ T5789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404
[  119.876319][ T5800] binder: Bad value for 'context'
[  120.139332][ T5813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.146293][ T5816] rust_binder: Error while translating object.
[  120.152928][ T5816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.159208][ T5816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1416
[  120.330155][ T5818] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.461613][ T5824] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.480549][ T5824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1427
[  120.500564][ T5825] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.551718][ T5829] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.597991][   T36] kauditd_printk_skb: 946 callbacks suppressed
[  120.598012][   T36] audit: type=1400 audit(1750360323.150:6370): avc:  denied  { read } for  pid=5830 comm="syz.2.1685" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  120.636488][   T36] audit: type=1400 audit(1750360323.150:6371): avc:  denied  { read open } for  pid=5830 comm="syz.2.1685" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  120.666163][   T36] audit: type=1400 audit(1750360323.150:6372): avc:  denied  { ioctl } for  pid=5830 comm="syz.2.1685" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  120.702531][   T36] audit: type=1400 audit(1750360323.150:6373): avc:  denied  { read } for  pid=5830 comm="syz.2.1685" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  120.756103][   T36] audit: type=1400 audit(1750360323.150:6374): avc:  denied  { read open } for  pid=5830 comm="syz.2.1685" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  120.789742][ T5837] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  120.789770][ T5837] rust_binder: Error while translating object.
[  120.812453][ T5837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.819549][ T5837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495
[  120.822697][   T36] audit: type=1400 audit(1750360323.150:6375): avc:  denied  { ioctl } for  pid=5830 comm="syz.2.1685" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  120.881744][   T36] audit: type=1400 audit(1750360323.160:6376): avc:  denied  { read write } for  pid=291 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.925498][ T5842] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  120.927672][ T5842] rust_binder: Error while translating object.
[  120.953382][ T5842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  120.957878][   T36] audit: type=1400 audit(1750360323.160:6377): avc:  denied  { read write open } for  pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  120.965914][ T5842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:949
[  120.987907][   T36] audit: type=1400 audit(1750360323.160:6378): avc:  denied  { ioctl } for  pid=291 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  121.060724][   T36] audit: type=1400 audit(1750360323.190:6379): avc:  denied  { map } for  pid=5828 comm="syz.1.1684" path="/dev/binderfs/binder0" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  121.149917][ T5850] __vm_enough_memory: pid: 5850, comm: syz.4.1691, bytes: 281474976845824 not enough memory for the allocation
[  121.300108][ T5856] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  121.300140][ T5856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1440
[  121.322299][ T5858] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.338647][ T5860] binder: Unknown parameter '00000000000000000000000'
[  121.524434][ T5867] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.700982][ T5877] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  121.788101][ T5883] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  122.078742][ T5892] rust_binder: Write failure EINVAL in pid:1453
[  122.247983][ T5908] binder: Bad value for 'stats'
[  122.620058][ T5925] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  123.058246][ T5942] kvm: kvm [5940]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4
[  123.173915][ T5955] rust_binder: Error while translating object.
[  123.173953][ T5955] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  123.189712][ T5955] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:519
[  123.219924][ T5957] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.411132][ T5971] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  123.483483][ T5974] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  123.818693][ T6085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1001
[  123.826163][  T305] bridge_slave_1: left allmulticast mode
[  123.847839][  T305] bridge_slave_1: left promiscuous mode
[  123.861708][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.878134][  T305] bridge_slave_0: left allmulticast mode
[  123.896860][  T305] bridge_slave_0: left promiscuous mode
[  123.907743][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.104583][ T6088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  124.132320][  T305] veth1_macvtap: left promiscuous mode
[  124.140340][  T305] veth0_vlan: left promiscuous mode
[  124.285940][ T6097] rust_binder: Write failure EINVAL in pid:1003
[  124.481003][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.520933][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.530334][ T6090] bridge_slave_0: entered allmulticast mode
[  124.548132][ T6090] bridge_slave_0: entered promiscuous mode
[  124.558475][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.569878][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.579108][ T6090] bridge_slave_1: entered allmulticast mode
[  124.586547][ T6090] bridge_slave_1: entered promiscuous mode
[  124.621114][ T6106] rust_binder: Error while translating object.
[  124.621145][ T6106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  124.637881][ T6106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1478
[  124.684654][ T6108] SELinux: security_context_str_to_sid () failed with errno=-22
[  124.878223][ T6114] rust_binder: Write failure EINVAL in pid:1480
[  124.988142][ T6118] binder: Unknown parameter 'm4000000000'
[  125.201597][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.208718][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.245404][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.252516][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.581212][ T6090] veth0_vlan: entered promiscuous mode
[  125.609308][   T36] kauditd_printk_skb: 755 callbacks suppressed
[  125.609328][   T36] audit: type=1400 audit(1750360328.160:7105): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.618692][ T6148] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  125.658193][   T36] audit: type=1400 audit(1750360328.160:7106): avc:  denied  { remount } for  pid=6142 comm="syz.1.1753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  125.696900][ T6090] veth1_macvtap: entered promiscuous mode
[  125.702791][   T36] audit: type=1400 audit(1750360328.190:7107): avc:  denied  { ioctl } for  pid=6144 comm="syz.2.1754" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  125.765115][   T36] audit: type=1400 audit(1750360328.190:7108): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.789399][   T36] audit: type=1400 audit(1750360328.190:7109): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.868506][   T36] audit: type=1400 audit(1750360328.200:7110): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.906571][   T36] audit: type=1400 audit(1750360328.200:7111): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  125.972148][   T36] audit: type=1400 audit(1750360328.200:7112): avc:  denied  { sys_module } for  pid=6090 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  126.002468][ T6157] audit: audit_backlog=65 > audit_backlog_limit=64
[  126.014967][ T6157] audit: audit_lost=35 audit_rate_limit=0 audit_backlog_limit=64
[  126.028196][ T6160] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1387
[  126.041809][ T6157] rust_binder: Write failure EFAULT in pid:1014
[  126.170825][ T6167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4
[  126.470343][ T6177] input: syz0 as /devices/virtual/input/input91
[  126.819026][ T6189] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  126.882033][ T6189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1027
[  126.910131][ T6194] rust_binder: Write failure EFAULT in pid:14
[  126.925170][ T6194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14
[  126.925901][ T6193] rust_binder: Error while translating object.
[  126.939830][ T6194] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  126.969670][ T6194] rust_binder: Read failure Err(EFAULT) in pid:14
[  126.984249][ T6193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  127.015192][ T6193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1391
[  127.429713][ T6211] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  127.429744][ T6211] rust_binder: Read failure Err(EFAULT) in pid:23
[  127.663663][ T6226] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.857071][ T6235] tun0: tun_chr_ioctl cmd 1074025675
[  127.866676][ T6235] tun0: persist disabled
[  128.088227][ T6244] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.092118][ T6240] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  128.116471][ T6240] rust_binder: Write failure EINVAL in pid:1511
[  128.140759][ T6246] rust_binder: Error while translating object.
[  128.147712][ T6246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  128.167288][ T6246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1399
[  128.207749][ T6243] rust_binder: Got transaction with invalid offset.
[  128.207829][ T6243] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  128.264484][ T6243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[  128.531502][ T6263] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.576933][ T6269] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.584778][  T911] udevd[911]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  128.642443][ T6264] binder: Unknown parameter 'subj_role'
[  128.768942][ T6279] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.861723][ T6283] rust_binder: Write failure EINVAL in pid:1408
[  128.984909][ T6287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[  129.014713][ T6287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.038426][ T6287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  129.373810][ T6299] input: syz0 as /devices/virtual/input/input93
[  129.436789][ T6299] binder: Unknown parameter '@ha
'
[  129.509939][ T6311] binder: Unknown parameter 'non'
[  129.668185][ T6320] rust_binder: Write failure EINVAL in pid:1420
[  129.963317][ T6332] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  130.047901][ T6332] SELinux: failed to load policy
[  130.173913][ T6341] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  130.202511][ T6341] rust_binder: Write failure EINVAL in pid:56
[  130.207279][ T6342] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  130.229377][ T6345] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.253906][ T6342] rust_binder: Write failure EINVAL in pid:56
[  130.262364][ T6345] SELinux: failed to load policy
[  130.306216][ T6345] rust_binder: Write failure EINVAL in pid:1065
[  130.524404][ T6351] PM: Enabling pm_trace changes system date and time during resume.
[  130.524404][ T6351] PM: Correct system time has to be restored manually after resume.
[  130.551513][ T6357] rust_binder: Write failure EINVAL in pid:1067
[  130.560917][ T6356] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  130.629287][   T36] kauditd_printk_skb: 1174 callbacks suppressed
[  130.629308][   T36] audit: type=1400 audit(1750360333.180:8241): avc:  denied  { read write } for  pid=1816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.640286][ T6356] rust_binder: Error in use_page_slow: ESRCH
[  130.668047][   T36] audit: type=1400 audit(1750360333.190:8242): avc:  denied  { ioctl } for  pid=6355 comm="syz.0.1819" path="/dev/binderfs/binder0" dev="binder" ino=65 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  130.675408][ T6356] rust_binder: use_range failure ESRCH
[  130.727896][ T6356] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  130.733076][   T36] audit: type=1400 audit(1750360333.190:8243): avc:  denied  { call } for  pid=6355 comm="syz.0.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  130.743669][ T6356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  130.797863][   T36] audit: type=1400 audit(1750360333.220:8244): avc:  denied  { read write open } for  pid=1816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.819230][ T6356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:61
[  130.896553][   T36] audit: type=1400 audit(1750360333.250:8245): avc:  denied  { ioctl } for  pid=1816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  130.946777][   T36] audit: type=1400 audit(1750360333.280:8246): avc:  denied  { read } for  pid=6360 comm="syz.4.1821" name="binder0" dev="binder" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  130.970598][   T36] audit: type=1400 audit(1750360333.280:8247): avc:  denied  { read open } for  pid=6360 comm="syz.4.1821" path="/dev/binderfs/binder0" dev="binder" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  131.004124][   T36] audit: type=1400 audit(1750360333.310:8248): avc:  denied  { ioctl } for  pid=6360 comm="syz.4.1821" path="/dev/binderfs/binder0" dev="binder" ino=90 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  131.030361][ T6363] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  131.049046][ T6363] rust_binder: Error while translating object.
[  131.057858][ T6363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  131.064071][ T6363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1073
[  131.076547][   T36] audit: type=1400 audit(1750360333.310:8249): avc:  denied  { call } for  pid=6360 comm="syz.4.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  131.141534][   T36] audit: type=1400 audit(1750360333.310:8250): avc:  denied  { transfer } for  pid=6360 comm="syz.4.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  131.192316][ T6369] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  131.224878][ T6369] rust_binder: Error in use_page_slow: ESRCH
[  131.245844][ T6369] rust_binder: use_range failure ESRCH
[  131.252673][ T6369] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  131.258226][ T6369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  131.267589][ T6369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:63
[  131.555607][ T6387] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  131.632443][ T6391] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  131.775360][ T6396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:71
[  131.956998][ T6408] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.188219][ T6421] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.216692][ T6417] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.348290][ T6423] random: crng reseeded on system resumption
[  132.496325][ T6431] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.742154][  T291] cgroup: fork rejected by pids controller in /syz2
[  132.857923][ T1427] bridge_slave_1: left allmulticast mode
[  132.864786][ T1427] bridge_slave_1: left promiscuous mode
[  132.887326][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.904004][ T1427] bridge_slave_0: left allmulticast mode
[  132.920996][ T1427] bridge_slave_0: left promiscuous mode
[  132.933184][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.117247][ T1427] veth1_macvtap: left promiscuous mode
[  133.137873][ T1427] veth0_vlan: left promiscuous mode
[  133.359507][ T6449] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  133.413522][ T6449] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.414070][ T6449] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  133.461701][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.478021][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.485133][ T6447] bridge_slave_0: entered allmulticast mode
[  133.498890][ T6447] bridge_slave_0: entered promiscuous mode
[  133.507220][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.514368][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.525990][ T6447] bridge_slave_1: entered allmulticast mode
[  133.532503][ T6447] bridge_slave_1: entered promiscuous mode
[  133.780869][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.787987][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.795290][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.802440][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.829382][ T6464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1101
[  133.878875][ T1427] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.921599][ T1427] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.998370][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.005497][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.047611][  T207] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.054717][  T207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.280593][ T6447] veth0_vlan: entered promiscuous mode
[  134.398366][ T6487] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.406168][ T6447] veth1_macvtap: entered promiscuous mode
[  134.429071][ T6487] rust_binder: Write failure EFAULT in pid:1111
[  134.447189][ T6487] rust_binder: Error while translating object.
[  134.468080][ T6487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.488428][ T6487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1111
[  134.811534][ T6496] random: crng reseeded on system resumption
[  135.501401][ T6505] tap1: tun_chr_ioctl cmd 1074025678
[  135.528001][ T6505] tap1: group set to 0
[  135.660532][   T36] kauditd_printk_skb: 617 callbacks suppressed
[  135.660551][   T36] audit: type=1400 audit(1750360338.210:8868): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  135.712076][ T6515] rust_binder: Write failure EFAULT in pid:103
[  135.737864][   T36] audit: type=1400 audit(1750360338.210:8869): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  135.770095][ T6516] random: crng reseeded on system resumption
[  135.799975][ T6519] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  135.821469][   T36] audit: type=1400 audit(1750360338.210:8870): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  135.910696][   T36] audit: type=1400 audit(1750360338.250:8871): avc:  denied  { read write } for  pid=6447 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  135.961006][   T36] audit: type=1400 audit(1750360338.260:8873): avc:  denied  { read write } for  pid=6514 comm="syz.0.1869" name="binder0" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  136.047272][   T36] audit: type=1400 audit(1750360338.260:8874): avc:  denied  { read write open } for  pid=6514 comm="syz.0.1869" path="/dev/binderfs/binder0" dev="binder" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  136.105524][ T6539] audit: audit_backlog=65 > audit_backlog_limit=64
[  136.115351][   T36] audit: type=1400 audit(1750360338.260:8875): avc:  denied  { ioctl } for  pid=6514 comm="syz.0.1869" path="/dev/binderfs/binder0" dev="binder" ino=65 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  136.145003][ T6541] audit: audit_backlog=65 > audit_backlog_limit=64
[  136.151659][ T6539] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64
[  136.186963][ T6541] binder: Bad value for 'defcontext'
[  136.210751][ T6544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.313534][ T6552] input: syz1 as /devices/virtual/input/input94
[  136.320373][ T6551] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.370565][ T6551] rust_binder: Error while translating object.
[  136.409652][ T6551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  136.438059][ T6551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112
[  136.504538][ T6560] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.622556][ T6564] rust_binder: Write failure EFAULT in pid:17
[  136.741615][ T6566] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.758620][ T6566] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.803851][ T6568] input: syz0 as /devices/virtual/input/input95
[  136.905432][ T6573] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  137.756911][ T6604] input: syz0 as /devices/virtual/input/input96
[  138.020728][ T6606] binder: Unknown parameter 'm~x'
[  138.040806][ T6606] kvm: kvm [6605]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x900000000
[  138.046834][ T6610] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿß) failed with errno=-22
[  138.095544][ T6606] binder: Unknown parameter ''
[  138.390067][ T6618] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  138.393866][ T6618] rust_binder: Error in use_page_slow: ESRCH
[  138.410798][ T6618] rust_binder: use_range failure ESRCH
[  138.427888][ T6618] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  138.434001][ T6618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  138.456589][ T6618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1138
[  138.811087][ T6623] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  138.876168][ T6630] binder: Unknown parameter 'defcontext01777777777777777777777'
[  139.584398][ T6643] binder: Unknown parameter 'fsuuid'
[  139.737318][ T6646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  139.737362][ T6646] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  139.767952][ T6646] rust_binder: Read failure Err(EFAULT) in pid:37
[  139.888830][ T6648] binder: Unknown parameter 'subj_type'
[  140.391925][ T6662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[  140.670970][   T36] kauditd_printk_skb: 2152 callbacks suppressed
[  140.670993][   T36] audit: type=1400 audit(1750360343.220:10985): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.751630][   T36] audit: type=1400 audit(1750360343.220:10986): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.798844][ T6090] audit: audit_backlog=65 > audit_backlog_limit=64
[  140.805591][   T36] audit: type=1400 audit(1750360343.220:10987): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.806709][ T6669] audit: audit_backlog=65 > audit_backlog_limit=64
[  140.828963][ T6090] audit: audit_lost=66 audit_rate_limit=0 audit_backlog_limit=64
[  140.844561][ T6090] audit: backlog limit exceeded
[  140.850090][   T36] audit: type=1400 audit(1750360343.220:10988): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  140.869916][ T6669] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64
[  140.878301][ T6090] audit: audit_backlog=65 > audit_backlog_limit=64
[  140.991110][ T6672] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  141.427302][ T6677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  141.427339][ T6677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1150
[  141.447999][ T6677] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  141.469337][ T6677] rust_binder: Read failure Err(EFAULT) in pid:1150
[  141.719055][ T6687] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  141.831253][ T6694] rust_binder: Write failure EFAULT in pid:56
[  142.461201][ T6709] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  142.507893][ T6709] SELinux: failed to load policy
[  142.530690][ T6709] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  142.617844][ T6709] SELinux: failed to load policy
[  143.801057][ T6757] binder: Unknown parameter 'stat'
[  144.252146][ T6773] input: syz0 as /devices/virtual/input/input100
[  144.258852][ T6771] rust_binder: Write failure EFAULT in pid:1185
[  144.289082][ T6775] SELinux: security_context_str_to_sid () failed with errno=-22
[  145.047173][ T6797] binder: Bad value for 'max'
[  145.495505][ T6803] rust_binder: Read failure Err(EFAULT) in pid:1197
[  145.539840][ T6813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  145.549348][ T6811] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  145.569336][ T6813] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  145.678622][   T36] kauditd_printk_skb: 2771 callbacks suppressed
[  145.678644][   T36] audit: type=1400 audit(1750360348.230:13727): avc:  denied  { append } for  pid=6814 comm="syz.4.1967" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  145.789170][   T36] audit: type=1400 audit(1750360348.260:13728): avc:  denied  { read write } for  pid=6816 comm="syz.1.1968" name="binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.828904][  T289] audit: audit_backlog=65 > audit_backlog_limit=64
[  145.835467][  T289] audit: audit_lost=79 audit_rate_limit=0 audit_backlog_limit=64
[  145.836149][ T6090] audit: audit_backlog=65 > audit_backlog_limit=64
[  145.844687][   T36] audit: type=1400 audit(1750360348.260:13729): avc:  denied  { read write open } for  pid=6816 comm="syz.1.1968" path="/dev/binderfs/binder0" dev="binder" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  145.868889][ T6824] audit: audit_backlog=65 > audit_backlog_limit=64
[  145.877832][  T289] audit: backlog limit exceeded
[  145.881330][ T6090] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64
[  145.907517][ T6824] audit: audit_lost=81 audit_rate_limit=0 audit_backlog_limit=64
[  146.067317][ T6833] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  146.521258][ T6840] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.040869][ T6848] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1219
[  147.058229][ T6849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1598
[  147.409661][ T6870] binder: Unknown parameter '/dev/rnullb0'
[  147.434084][ T6864] SELinux: security_context_str_to_sid () failed with errno=-22
[  147.790825][ T6879] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  147.795875][ T6879] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  147.926696][ T6886] rust_binder: Write failure EFAULT in pid:1239
[  148.337047][ T6900] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 152, size: 4096)
[  148.349943][ T6900] rust_binder: Error while translating object.
[  148.380691][ T6900] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  148.396699][ T6900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1250
[  148.476351][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.508174][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.508495][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.538180][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.538523][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.556241][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.595621][ T6910] rust_binder: Write failure EINVAL in pid:1255
[  148.596367][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.646893][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.647219][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.689648][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.689958][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.718204][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.718515][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.734834][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.735669][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.759595][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.759952][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.800140][ T6917] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  148.818153][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.818463][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.825248][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.899855][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.900167][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.906942][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.954710][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.955040][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.962990][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.970571][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.977344][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.985363][ T6921] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿßO‹ƒ\�jMÅ”ûÖ\%ò1`ØT}Ï…xnðŒY澎XÒå$À¥#N¥ßî9) failed with errno=-22
[  149.006989][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  149.007300][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  149.022756][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  149.038118][ T6906] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  149.080591][ T6920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  149.087087][ T6920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[  149.148564][ T6924] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  149.158793][ T6924] rust_binder: Error while translating object.
[  149.203615][ T6924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  149.228194][ T6924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1259
[  149.601668][ T6935] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  150.551838][ T6960] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  150.688813][   T36] kauditd_printk_skb: 2836 callbacks suppressed
[  150.688832][   T36] audit: type=1400 audit(1750360353.240:16414): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.747837][   T36] audit: type=1400 audit(1750360353.270:16415): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.781649][   T36] audit: type=1400 audit(1750360353.270:16416): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.805023][   T36] audit: type=1400 audit(1750360353.270:16417): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.843664][ T1816] audit: audit_backlog=65 > audit_backlog_limit=64
[  150.844115][ T6090] audit: audit_backlog=65 > audit_backlog_limit=64
[  150.850596][ T6967] audit: audit_backlog=65 > audit_backlog_limit=64
[  150.864429][   T36] audit: type=1400 audit(1750360353.270:16418): avc:  denied  { setattr } for  pid=6090 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  150.867835][ T6090] audit: audit_lost=132 audit_rate_limit=0 audit_backlog_limit=64
[  150.887859][ T1816] audit: audit_lost=133 audit_rate_limit=0 audit_backlog_limit=64
[  151.050610][ T6979] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  151.050639][ T6979] rust_binder: Error while translating object.
[  151.086309][ T6979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  151.093523][ T6979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[  151.304210][ T6985] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  151.465668][ T6993] binder: Unknown parameter 'yst'
[  151.527312][ T6993] binder: Unknown parameter 'yst'
[  151.767672][ T7008] binder: Unknown parameter '0177777777777777777777700000000000000000000000'
[  151.819843][ T7009] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  151.820080][ T7007] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  152.076843][ T7018] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  152.219052][ T7022] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  152.236219][ T7022] rust_binder: Error in use_page_slow: EBUSY
[  152.259731][ T7022] rust_binder: use_range failure EBUSY
[  152.265787][ T7022] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  152.291677][ T7022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  152.323592][ T7022] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  152.330359][ T7024] rust_binder: Write failure EINVAL in pid:150
[  152.356547][ T7022] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1639
[  152.502778][ T7036] SELinux: security_context_str_to_sid () failed with errno=-22
[  152.566327][ T7039] SELinux: security_context_str_to_sid () failed with errno=-22
[  152.619059][ T7042] binder: Unknown parameter 'clA×Ævc�# É»ontext'
[  152.745178][ T7045] rust_binder: Error while translating object.
[  152.745228][ T7045] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  152.758256][ T7047] random: crng reseeded on system resumption
[  152.777865][ T7045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1646
[  152.848856][ T7047] Restarting kernel threads ... done.
[  152.880730][   T46] bridge_slave_1: left allmulticast mode
[  152.886417][   T46] bridge_slave_1: left promiscuous mode
[  152.907927][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.938954][   T46] bridge_slave_0: left allmulticast mode
[  152.955990][   T46] bridge_slave_0: left promiscuous mode
[  152.962931][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.974377][ T7049] SELinux: security_context_str_to_sid () failed with errno=-22
[  153.171078][   T46] veth1_macvtap: left promiscuous mode
[  153.176656][   T46] veth0_vlan: left promiscuous mode
[  153.185611][ T7063] rust_binder: Error while translating object.
[  153.185644][ T7063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.197915][ T7063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:157
[  153.389757][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.396849][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.430471][ T7053] bridge_slave_0: entered allmulticast mode
[  153.450384][ T7053] bridge_slave_0: entered promiscuous mode
[  153.476821][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.508381][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.527594][ T7053] bridge_slave_1: entered allmulticast mode
[  153.548926][ T7079] rust_binder: Write failure EFAULT in pid:165
[  153.552706][ T7053] bridge_slave_1: entered promiscuous mode
[  153.675672][ T7087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169
[  153.760166][ T7089] rust_binder: Error while translating object.
[  153.781067][ T7092] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  153.797922][ T7089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  153.813321][ T7089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1320
[  153.815570][ T7092] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  153.835013][ T7092] rust_binder: Error while translating object.
[  153.848150][ T7092] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.854416][ T7092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171
[  154.052888][ T1427] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.069116][ T1427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.080035][ T7100] binder: Unknown parameter 'subj_role'
[  154.131732][ T1427] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.138879][ T1427] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.349706][ T7107] tap0: tun_chr_ioctl cmd 1074812118
[  154.369358][ T7107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  154.369395][ T7107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1656
[  154.423857][ T7053] veth0_vlan: entered promiscuous mode
[  154.543165][ T7053] veth1_macvtap: entered promiscuous mode
[  154.544618][ T7111] input: syz1 as /devices/virtual/input/input106
[  154.597426][ T7111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1658
[  154.945435][ T7126] binder: Bad value for 'max'
[  155.011528][ T7126] binder: Unknown parameter 'smackfstransmute'
[  155.168626][ T7133] binder: Unknown parameter '»†hrñ)4WW�°0ó‘ø|Yo±oÎþ\…²¨ô'
[  155.317953][ T7139] rust_binder: Write failure EINVAL in pid:181
[  155.319955][ T7137] rust_binder: Write failure EINVAL in pid:5
[  155.508649][ T7143] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  155.581751][ T7148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1343
[  155.711603][   T36] kauditd_printk_skb: 1685 callbacks suppressed
[  155.711624][   T36] audit: type=1400 audit(1750360358.260:18088): avc:  denied  { read } for  pid=7149 comm="syz.5.2076" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.785275][   T36] audit: type=1400 audit(1750360358.260:18089): avc:  denied  { read open } for  pid=7149 comm="syz.5.2076" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.817826][   T36] audit: type=1400 audit(1750360358.260:18090): avc:  denied  { ioctl } for  pid=7149 comm="syz.5.2076" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.874526][   T36] audit: type=1400 audit(1750360358.310:18091): avc:  denied  { read write } for  pid=6447 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.902768][   T36] audit: type=1400 audit(1750360358.310:18092): avc:  denied  { read write open } for  pid=6447 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.929849][   T36] audit: type=1400 audit(1750360358.310:18093): avc:  denied  { ioctl } for  pid=6447 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.956931][ T7165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189
[  155.971250][   T36] audit: type=1400 audit(1750360358.390:18094): avc:  denied  { read } for  pid=7159 comm="syz.2.2078" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.004354][   T36] audit: type=1400 audit(1750360358.390:18095): avc:  denied  { read open } for  pid=7159 comm="syz.2.2078" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.029639][   T36] audit: type=1400 audit(1750360358.400:18096): avc:  denied  { ioctl } for  pid=7159 comm="syz.2.2078" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  156.057972][   T36] audit: type=1400 audit(1750360358.400:18097): avc:  denied  { set_context_mgr } for  pid=7159 comm="syz.2.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  156.244886][ T7173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1348
[  156.504609][ T7183] binder: Unknown parameter 'obj_user'
[  156.534628][ T7182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  156.534666][ T7182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1352
[  156.557634][ T7186] binder: Unknown parameter 'obj_user'
[  156.679150][ T7188] rust_binder: Error while translating object.
[  156.679193][ T7188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  156.687840][ T7188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200
[  156.852594][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7
[  156.909453][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x7
[  156.917267][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x3
[  156.931303][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  156.940420][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  156.958121][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  156.977773][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  156.985951][ T7198] binder: Bad value for 'max'
[  157.000854][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.017896][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.035444][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.043356][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.054606][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.077658][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.093689][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.101827][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.117879][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.125712][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.133525][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.141404][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.150459][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.158271][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.166029][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.173837][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.181643][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.189487][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.197403][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.205209][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.213032][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.220880][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.228676][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.236440][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.244499][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.252404][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.260314][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.284749][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.297852][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.312568][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.327146][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.340389][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.351440][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.371685][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.394529][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.403778][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.413279][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.421091][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.428936][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.436672][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.444643][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.452483][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.460296][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.468141][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.475922][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.483756][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.491636][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.499435][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.507197][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.515029][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.523252][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.532689][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.547843][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.556878][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.565719][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.573622][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.581438][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.589242][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.597022][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.604885][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.614674][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.621076][ T7232] binder: Unknown parameter 'contextfs/binder0'
[  157.622515][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.632265][ T7232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1366
[  157.637708][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.655846][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.663858][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.672862][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.680739][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.688733][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.719033][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.726891][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.735868][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.744301][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.755281][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.763756][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.773418][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.776030][ T7242] serio: Serial port ttynull
[  157.813798][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.829723][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.837980][ T7245] rust_binder: Write failure EINVAL in pid:1370
[  157.838616][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.861742][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.870240][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.878312][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.886737][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.894588][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.902419][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.910280][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.919301][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.928220][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.936373][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.947840][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.956258][ T7256] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[  157.956481][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.974362][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.983104][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.990969][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  157.998784][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.006553][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.014402][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.022198][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.030041][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.037956][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.045830][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.053695][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.061570][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.069371][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.077132][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.087837][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.095626][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.106501][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.115583][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.124053][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.131903][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.140186][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.148222][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.156258][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.164204][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.172045][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.179843][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.187637][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.195989][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.204073][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.211904][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.219745][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.227599][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.236494][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.244933][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.253378][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.261818][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.270281][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.278712][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.289431][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.297252][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.305076][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.312917][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.320720][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.328521][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.336271][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.344086][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.351910][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.359804][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.367571][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.375409][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.383258][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.391670][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.400095][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.414082][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.423816][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.432446][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.441543][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.450415][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.458951][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.459262][ T7274] rust_binder: Write failure EFAULT in pid:1386
[  158.466756][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.480951][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.488969][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.496755][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.504575][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.512419][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.520601][  T306] hid-generic 0008:0000:FFFFFBFF.000B: unknown main item tag 0x0
[  158.530158][  T306] hid-generic 0008:0000:FFFFFBFF.000B: hidraw0: <UNKNOWN> HID v9.86 Device [syz0] on syz1
[  158.744440][ T7282] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  158.914366][ T7293] random: crng reseeded on system resumption
[  158.951891][ T7293] Unrecognized hibernate image header format!
[  158.958114][ T7293] PM: hibernation: Image mismatch: architecture specific data
[  159.321024][ T7300] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  159.353393][ T7300] random: crng reseeded on system resumption
[  159.427006][ T7302] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  159.692108][ T7304] fido_id[7304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  159.894079][ T7312] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  159.928084][ T7314] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  159.958171][ T7316] binder: Bad value for 'stats'
[  160.059072][ T7316] binder: Bad value for 'stats'
[  160.100084][ T7318] rust_binder: Error while translating object.
[  160.100136][ T7318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  160.106449][ T7318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1395
[  160.144589][ T7326] input: syz0 as /devices/virtual/input/input109
[  160.394421][ T7328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39
[  160.722506][   T36] kauditd_printk_skb: 816 callbacks suppressed
[  160.722528][   T36] audit: type=1400 audit(1750360363.270:18914): avc:  denied  { read } for  pid=7343 comm="syz.2.2137" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.788633][   T36] audit: type=1400 audit(1750360363.270:18915): avc:  denied  { read open } for  pid=7343 comm="syz.2.2137" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.818007][   T36] audit: type=1400 audit(1750360363.320:18916): avc:  denied  { ioctl } for  pid=7343 comm="syz.2.2137" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  160.898364][   T36] audit: type=1400 audit(1750360363.340:18917): avc:  denied  { map } for  pid=7343 comm="syz.2.2137" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  160.926233][   T36] audit: type=1400 audit(1750360363.340:18918): avc:  denied  { read } for  pid=7343 comm="syz.2.2137" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  160.993233][   T36] audit: type=1400 audit(1750360363.340:18919): avc:  denied  { ioctl } for  pid=7343 comm="syz.2.2137" path="/dev/binderfs/binder0" dev="binder" ino=20 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  161.064372][   T36] audit: type=1400 audit(1750360363.360:18920): avc:  denied  { read } for  pid=7343 comm="syz.2.2137" name="binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  161.090349][   T36] audit: type=1400 audit(1750360363.360:18921): avc:  denied  { read open } for  pid=7343 comm="syz.2.2137" path="/dev/binderfs/binder0" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  161.115839][   T36] audit: type=1400 audit(1750360363.360:18922): avc:  denied  { read } for  pid=7343 comm="syz.2.2137" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  161.138956][   T36] audit: type=1400 audit(1750360363.360:18923): avc:  denied  { read open } for  pid=7343 comm="syz.2.2137" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  161.642940][ T7372] binder: Bad value for 'max'
[  161.795156][ T7378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230
[  161.825735][ T7383] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  161.873531][ T7383] rust_binder: Write failure EINVAL in pid:1407
[  161.936401][ T7380] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[  161.983577][ T7380] random: crng reseeded on system resumption
[  162.182333][ T7391] rust_binder: Write failure EINVAL in pid:235
[  162.183351][ T7391] rust_binder: Error while translating object.
[  162.198544][ T7391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  162.217980][ T7391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[  162.616354][ T7414] rust_binder: Error while translating object.
[  162.627921][ T7414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  162.643344][ T7414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238
[  162.875824][ T7424] input: syz1 as /devices/virtual/input/input110
[  162.975517][ T7428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[  163.075512][ T7427] rust_binder: Error while translating object.
[  163.085722][ T7427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  163.091984][ T7427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:244
[  163.141583][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.173088][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.188049][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.195591][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.232601][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.247844][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.257967][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.265599][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.273634][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.281269][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.288769][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.296190][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.303678][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.311141][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.318653][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.326082][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.333597][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.341644][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.349751][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.357182][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.363614][ T7454] binder: Bad value for 'max'
[  163.366369][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.376840][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.384361][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.391879][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.411077][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.424747][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.433295][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.441307][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.449390][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.457200][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.465912][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.474090][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.481637][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.489177][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.496636][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.504127][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.511609][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.519657][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.527087][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.535523][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.543589][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.551070][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.560852][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.568334][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.575762][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.583258][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.590706][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.598131][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.605529][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.612951][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.620384][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.627845][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.635253][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.642680][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.650151][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.657542][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.665003][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.672515][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.679986][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.687445][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.694955][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.702451][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.709956][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.717370][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.724828][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.732292][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.739779][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.747187][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.754616][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.762090][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.769594][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.777035][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.784511][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.792011][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.799645][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.807132][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.814638][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.822091][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.830647][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.838138][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.845555][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.854127][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.868084][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.876719][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.885292][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.893569][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.911687][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.926735][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.943933][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.952154][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.966858][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.974897][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.982417][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  163.998010][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.005466][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.024545][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.035145][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.044618][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.053239][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.067753][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.075727][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.085871][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.095060][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.103301][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.114054][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.125301][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.135376][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.143430][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.152726][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.167881][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.175347][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.196091][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.204395][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.212712][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.213437][ T7475] binder: Unknown parameter 'dont_hash'
[  164.221519][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.242244][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.251342][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.260413][ T7482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  164.260447][ T7482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[  164.270775][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.287900][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.302191][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.315606][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.323856][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.332243][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.340465][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.348713][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.356146][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.364717][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.373910][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.381401][ T7486] kvm: kvm [7485]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3
[  164.396463][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.407091][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.421398][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.432606][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.441286][ T7486] rust_binder: Write failure EFAULT in pid:267
[  164.441775][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.456561][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.464708][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.472934][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.480434][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.487924][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.495399][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.502944][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.511508][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.519911][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.527356][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.535763][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.543843][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.552486][ T7499] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  164.561736][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.569231][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.576699][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.584190][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.591751][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.599245][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.614593][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.622073][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.629580][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.637036][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.646024][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.656291][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.664352][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.687855][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.695485][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.704582][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.712654][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.721156][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.729219][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.736646][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.744949][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.753049][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.761092][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.768577][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.777740][ T7509] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  164.779065][ T7509] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  164.787434][ T7509] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  164.794031][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.811312][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.819367][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.826799][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.834295][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.842027][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.850137][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.859204][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.866660][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.868834][ T7514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.875392][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.891369][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.905428][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.913587][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.921766][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.931100][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.939195][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.946629][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.954850][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.963053][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.971114][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.986187][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  164.995361][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.005816][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.019270][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.028492][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.035969][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.044567][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.052807][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.061054][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.075205][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.084694][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.092975][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.101239][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.109521][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.116985][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.125676][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.133949][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.142246][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.150567][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.158806][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.166239][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.174974][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.175811][ T7527] SELinux: failed to load policy
[  165.184812][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.195779][   T10] hid-generic 0003:0004:0003.000C: unknown main item tag 0x0
[  165.216421][   T10] hid-generic 0003:0004:0003.000C: hidraw0: USB HID v0.05 Device [syz0] on syz1
[  165.440818][ T7541] input: syz0 as /devices/virtual/input/input111
[  165.495809][ T7546] binder: Bad value for 'defcontext'
[  165.559067][ T7548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94
[  165.572262][ T7548] rust_binder: Read failure Err(EFAULT) in pid:94
[  165.740753][   T36] kauditd_printk_skb: 846 callbacks suppressed
[  165.740775][   T36] audit: type=1400 audit(1750360368.290:19770): avc:  denied  { read } for  pid=7556 comm="syz.2.2203" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  165.773382][ T7559] rust_binder: Error while translating object.
[  165.776240][ T7559] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  165.797162][ T7559] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289
[  165.831671][   T36] audit: type=1400 audit(1750360368.290:19771): avc:  denied  { read open } for  pid=7556 comm="syz.2.2203" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  165.841547][ T7562] rust_binder: Write failure EFAULT in pid:98
[  165.886402][   T36] audit: type=1400 audit(1750360368.290:19772): avc:  denied  { ioctl } for  pid=7556 comm="syz.2.2203" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  165.945528][   T36] audit: type=1400 audit(1750360368.310:19773): avc:  denied  { ioctl } for  pid=7556 comm="syz.2.2203" path="/dev/binderfs/binder0" dev="binder" ino=102 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  165.997092][   T36] audit: type=1400 audit(1750360368.310:19774): avc:  denied  { set_context_mgr } for  pid=7556 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  166.037847][   T36] audit: type=1400 audit(1750360368.310:19775): avc:  denied  { map } for  pid=7556 comm="syz.2.2203" path="/dev/binderfs/binder0" dev="binder" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.084853][   T36] audit: type=1400 audit(1750360368.310:19776): avc:  denied  { read } for  pid=7556 comm="syz.2.2203" path="/dev/binderfs/binder0" dev="binder" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.134957][   T36] audit: type=1400 audit(1750360368.320:19777): avc:  denied  { read } for  pid=7556 comm="syz.2.2203" name="binder1" dev="binder" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.181573][   T36] audit: type=1400 audit(1750360368.320:19778): avc:  denied  { read open } for  pid=7556 comm="syz.2.2203" path="/dev/binderfs/binder1" dev="binder" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.246621][   T36] audit: type=1400 audit(1750360368.320:19779): avc:  denied  { ioctl } for  pid=7556 comm="syz.2.2203" path="/dev/binderfs/binder0" dev="binder" ino=102 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  166.361941][ T7568] rust_binder: Error while translating object.
[  166.361991][ T7568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  166.369029][ T7569] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  166.379597][ T7568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:103
[  166.388410][ T7569] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  166.402413][ T7569] rust_binder: Read failure Err(EFAULT) in pid:1464
[  166.403738][ T7571] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  166.461459][ T7575] binfmt_misc: register: failed to install interpreter file ./file0
[  166.812423][ T7596] rust_binder: Error while translating object.
[  166.812452][ T7596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  166.820389][ T7600] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  166.834673][ T7600] rust_binder: Error while translating object.
[  166.838032][ T7596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1470
[  166.855256][ T7600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  166.877878][ T7600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:295
[  166.909651][ T7607] input: syz1 as /devices/virtual/input/input114
[  166.952800][ T7607] binder: Unknown parameter 'noninderfs/binder1'
[  167.272782][ T7623] fido_id[7623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  167.516724][ T7635] binder: Binderfs stats mode cannot be changed during a remount
[  167.630060][ T7640] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  167.661729][ T7640] rust_binder: Write failure EINVAL in pid:123
[  167.905473][ T7649] SELinux: security_context_str_to_sid () failed with errno=-22
[  168.009187][ T7653] input: syz1 as /devices/virtual/input/input115
[  168.098331][ T7655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311
[  168.144809][ T7653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:126
[  168.161077][ T7657] rust_binder: Write failure EINVAL in pid:311
[  168.188451][ T7653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[  168.339022][ T7662] input: syz1 as /devices/virtual/input/input116
[  168.403708][ T7662] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  168.404678][ T7662] rust_binder: Failed to allocate buffer. len:4294966496, is_oneway:false
[  168.411221][ T7662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  168.429535][ T7662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1790
[  168.968046][ T7673] SELinux:  policydb magic number 0x697cff8c does not match expected magic number 0xf97cff8c
[  168.987541][ T7673] SELinux: failed to load policy
[  169.000952][ T7673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  169.049260][ T7676] __vm_enough_memory: pid: 7676, comm: syz.2.2237, bytes: 281474976845824 not enough memory for the allocation
[  169.062087][ T7673] rust_binder: Write failure EINVAL in pid:1484
[  169.198985][ T7681] random: crng reseeded on system resumption
[  169.289207][ T7687] binder: Bad value for 'max'
[  169.318551][ T7689] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  169.369175][ T7687] binder: Bad value for 'max'
[  169.373977][ T7689] rust_binder: Write failure EINVAL in pid:316
[  169.438772][ T7687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer.
[  169.547975][ T7688] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  169.565437][ T7688] rust_binder: Write failure EINVAL in pid:1793
[  169.776413][ T7706] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  169.805603][ T7708] input: syz1 as /devices/virtual/input/input117
[  169.816231][ T7706] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  169.825002][ T7706] rust_binder: Error while translating object.
[  169.869760][ T7706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  169.894869][ T7706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1492
[  170.085559][ T7713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  170.208279][ T7716] random: crng reseeded on system resumption
[  170.658277][ T7744] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.666692][ T7744] rust_binder: Error while translating object.
[  170.673305][ T7744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  170.679868][ T7744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1504
[  170.755859][   T36] kauditd_printk_skb: 743 callbacks suppressed
[  170.755880][   T36] audit: type=1400 audit(1750360373.300:20523): avc:  denied  { read } for  pid=7747 comm="syz.1.2261" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  170.784559][ T7744] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  170.851243][ T7748] rust_binder: Failed copying remainder into alloc: EFAULT
[  170.857702][ T7748] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  170.867415][   T36] audit: type=1400 audit(1750360373.300:20524): avc:  denied  { read write } for  pid=7053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  170.897965][ T7748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  170.899932][ T7748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1806
[  170.958722][   T36] audit: type=1400 audit(1750360373.300:20525): avc:  denied  { read write open } for  pid=7053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  171.019238][   T36] audit: type=1400 audit(1750360373.300:20526): avc:  denied  { ioctl } for  pid=7053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  171.109912][   T36] audit: type=1400 audit(1750360373.320:20527): avc:  denied  { read } for  pid=7742 comm="syz.4.2259" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  171.133714][   T36] audit: type=1400 audit(1750360373.320:20528): avc:  denied  { read open } for  pid=7742 comm="syz.4.2259" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  171.158088][   T36] audit: type=1400 audit(1750360373.320:20529): avc:  denied  { ioctl } for  pid=7742 comm="syz.4.2259" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  171.235774][   T36] audit: type=1400 audit(1750360373.320:20530): avc:  denied  { read } for  pid=7742 comm="syz.4.2259" name="binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.272564][   T36] audit: type=1400 audit(1750360373.320:20531): avc:  denied  { read open } for  pid=7742 comm="syz.4.2259" path="/dev/binderfs/binder0" dev="binder" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.317744][   T36] audit: type=1400 audit(1750360373.320:20532): avc:  denied  { ioctl } for  pid=7742 comm="syz.4.2259" path="/dev/binderfs/binder0" dev="binder" ino=56 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  171.420724][ T7770] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  171.424709][ T7770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  171.437737][ T7770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1511
[  171.448087][ T7774] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  171.464539][ T7773] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  171.823945][ T7787] rust_binder: Write failure EINVAL in pid:1515
[  171.979871][ T7795] random: crng reseeded on system resumption
[  172.437315][ T7815] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  172.454692][ T7815] rust_binder: Write failure EINVAL in pid:1525
[  172.483242][ T7817] binder: Unknown parameter 'context'
[  172.587275][ T7822] kvm: kvm [7820]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9
[  172.632742][ T7823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172
[  172.645972][ T7823] rust_binder: Error while translating object.
[  172.660127][ T7823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  172.666426][ T7823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172
[  173.198378][ T7838] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  173.549840][ T7846] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  173.689051][ T7858] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  173.715853][ T7858] rust_binder: Error while translating object.
[  173.742280][ T7858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  173.749245][ T7858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:356
[  173.778181][ T7861] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  173.829309][ T7861] rust_binder: Write failure EINVAL in pid:187
[  173.933561][ T7873] binder: Unknown parameter 'fscontext?}'
[  174.021065][ T7874] PM: Enabling pm_trace changes system date and time during resume.
[  174.021065][ T7874] PM: Correct system time has to be restored manually after resume.
[  174.051173][ T7878] kvm: kvm [7877]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[  174.165115][ T7874] SELinux: security_context_str_to_sid () failed with errno=-22
[  174.407899][ T7887] binder: Unknown parameter ''
[  174.438740][ T7890] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  174.517736][ T7894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1546
[  174.537995][ T7895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198
[  175.243006][ T7905] binder: Unknown parameter 'fscontext]§±%£aú'1·C½ž'
[  175.384582][ T7909] input: syz1 as /devices/virtual/input/input119
[  175.453151][ T7911] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.489305][ T7911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  175.526615][ T7911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1550
[  175.605644][ T7916] rust_binder: Write failure EINVAL in pid:203
[  175.671047][ T7922] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  175.672748][ T7920] input: syz0 as /devices/virtual/input/input120
[  175.765569][   T36] kauditd_printk_skb: 726 callbacks suppressed
[  175.772904][   T36] audit: type=1400 audit(1750360378.310:21235): avc:  denied  { read } for  pid=94 comm="acpid" dev="devtmpfs" ino=548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.822094][ T7922] rust_binder: Error in use_page_slow: ESRCH
[  175.822121][ T7922] rust_binder: use_range failure ESRCH
[  175.837831][   T36] audit: type=1400 audit(1750360378.310:21236): avc:  denied  { read open } for  pid=94 comm="acpid" path=2F6465762F696E7075742F6576656E7433202864656C6574656429 dev="devtmpfs" ino=548 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  175.837850][ T7922] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  175.837871][ T7922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  175.843362][   T36] audit: type=1400 audit(1750360378.350:21237): avc:  denied  { read write } for  pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  175.897931][ T7922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1553
[  175.915178][   T36] audit: type=1400 audit(1750360378.350:21238): avc:  denied  { read write open } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.004514][ T7937] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  176.006028][ T7937] rust_binder: Write failure EINVAL in pid:207
[  176.019057][ T7940] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  176.043580][   T36] audit: type=1400 audit(1750360378.350:21239): avc:  denied  { ioctl } for  pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.117863][   T36] audit: type=1400 audit(1750360378.370:21240): avc:  denied  { ioctl } for  pid=7921 comm="syz.4.2323" path="/dev/binderfs/binder0" dev="binder" ino=56 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  176.189644][   T36] audit: type=1400 audit(1750360378.370:21241): avc:  denied  { call } for  pid=7921 comm="syz.4.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  176.243529][ T7946] FAULT_INJECTION: forcing a failure.
[  176.243529][ T7946] name failslab, interval 1, probability 0, space 0, times 1
[  176.258786][   T36] audit: type=1400 audit(1750360378.370:21242): avc:  denied  { read write } for  pid=7053 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.307856][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.4.2330 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[  176.307893][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  176.307915][ T7946] Call Trace:
[  176.307923][ T7946]  <TASK>
[  176.307939][ T7946]  __dump_stack+0x21/0x30
[  176.307969][ T7946]  dump_stack_lvl+0x10c/0x190
[  176.307994][ T7946]  ? __cfi_dump_stack_lvl+0x10/0x10
[  176.308020][ T7946]  ? kstrtouint_from_user+0xfb/0x150
[  176.308043][ T7946]  ? x64_sys_call+0xe69/0x2ee0
[  176.308071][ T7946]  dump_stack+0x19/0x20
[  176.308095][ T7946]  should_fail_ex+0x3d9/0x530
[  176.308120][ T7946]  should_failslab+0xac/0x100
[  176.308150][ T7946]  __kmalloc_noprof+0x69/0x450
[  176.308175][ T7946]  ? __kasan_check_write+0x18/0x20
[  176.308198][ T7946]  ? kernfs_fop_write_iter+0x16f/0x4d0
[  176.308218][ T7946]  ? proc_fail_nth_write+0x17e/0x210
[  176.308239][ T7946]  kernfs_fop_write_iter+0x16f/0x4d0
[  176.308260][ T7946]  vfs_write+0x694/0xe80
[  176.308285][ T7946]  ? __cfi_kernfs_fop_write_iter+0x10/0x10
[  176.308317][ T7946]  ? __cfi_vfs_write+0x10/0x10
[  176.308342][ T7946]  ? __cfi_mutex_lock+0x10/0x10
[  176.308365][ T7946]  ksys_write+0x141/0x250
[  176.308391][ T7946]  ? __cfi_ksys_write+0x10/0x10
[  176.308417][ T7946]  ? __kasan_check_read+0x15/0x20
[  176.308440][ T7946]  __x64_sys_write+0x7f/0x90
[  176.308464][ T7946]  x64_sys_call+0x271c/0x2ee0
[  176.308491][ T7946]  do_syscall_64+0x58/0xf0
[  176.308518][ T7946]  ? clear_bhb_loop+0x35/0x90
[  176.308550][ T7946]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  176.308580][ T7946] RIP: 0033:0x7fd76c98e929
[  176.308603][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.308622][ T7946] RSP: 002b:00007fd76d793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  176.308646][ T7946] RAX: ffffffffffffffda RBX: 00007fd76cbb5fa0 RCX: 00007fd76c98e929
[  176.308662][ T7946] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003
[  176.308676][ T7946] RBP: 00007fd76d793090 R08: 0000000000000000 R09: 0000000000000000
[  176.308689][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.308701][ T7946] R13: 0000000000000000 R14: 00007fd76cbb5fa0 R15: 00007ffc4a7b92e8
[  176.308719][ T7946]  </TASK>
[  176.334550][   T36] audit: type=1400 audit(1750360378.370:21243): avc:  denied  { read write open } for  pid=7053 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  176.525782][ T7949] rust_binder: Write failure EINVAL in pid:211
[  176.545687][ T7951] audit: audit_backlog=65 > audit_backlog_limit=64
[  176.671293][ T7951] rust_binder: Error in use_page_slow: ESRCH
[  176.671316][ T7951] rust_binder: use_range failure ESRCH
[  176.677350][ T7951] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  176.707946][ T7951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  176.747965][ T7951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1851
[  176.769128][ T7956] kvm: kvm [7955]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3
[  176.798752][ T7956] binder: Unknown parameter 'nXI'
[  176.828778][ T7958] rust_binder: Error while translating object.
[  176.828808][ T7958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  176.835022][ T7958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214
[  177.085910][ T7966] input: syz0 as /devices/virtual/input/input122
[  177.161200][ T7972] input: syz0 as /devices/virtual/input/input121
[  177.191369][ T7972] input: failed to attach handler leds to device input121, error: -6
[  177.415411][    T9] ==================================================================
[  177.423540][    T9] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[  177.430343][    T9] Write of size 8 at addr 0000000000000098 by task kworker/0:0/9
[  177.438084][    T9] 
[  177.440431][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[  177.440461][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  177.440477][    T9] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  177.440532][    T9] Call Trace:
[  177.440541][    T9]  <TASK>
[  177.440550][    T9]  __dump_stack+0x21/0x30
[  177.440576][    T9]  dump_stack_lvl+0x10c/0x190
[  177.440601][    T9]  ? __cfi_dump_stack_lvl+0x10/0x10
[  177.440627][    T9]  print_report+0x3d/0x70
[  177.440653][    T9]  kasan_report+0x163/0x1a0
[  177.440683][    T9]  ? down_write+0x83/0x2a0
[  177.440707][    T9]  ? down_write+0x83/0x2a0
[  177.440727][    T9]  kasan_check_range+0x299/0x2a0
[  177.440758][    T9]  __kasan_check_write+0x18/0x20
[  177.440781][    T9]  down_write+0x83/0x2a0
[  177.440803][    T9]  ? __cfi_down_write+0x10/0x10
[  177.440824][    T9]  ? _raw_spin_lock+0x8c/0x120
[  177.440851][    T9]  ? __cfi__raw_spin_lock+0x10/0x10
[  177.440878][    T9]  ? mutex_unlock+0x8b/0x240
[  177.440898][    T9]  ? __cfi_mutex_unlock+0x10/0x10
[  177.440918][    T9]  rust_binderfs_remove_file+0x6c/0x110
[  177.440939][    T9]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  177.440976][    T9]  ? update_curr_dl_se+0x10c/0xb20
[  177.441003][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  177.441026][    T9]  ? update_curr+0x60d/0xc60
[  177.441054][    T9]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  177.441089][    T9]  ? update_load_avg+0x506/0x19a0
[  177.441110][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[  177.441136][    T9]  ? __kasan_check_read+0x15/0x20
[  177.441159][    T9]  ? dequeue_entity+0xa9c/0x1750
[  177.441182][    T9]  ? tg_unthrottle_up+0x980/0x980
[  177.441201][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[  177.441228][    T9]  ? kvm_sched_clock_read+0x15/0x30
[  177.441251][    T9]  ? sched_clock_noinstr+0xd/0x30
[  177.441271][    T9]  ? sched_clock+0x44/0x60
[  177.441292][    T9]  ? sched_clock_cpu+0x75/0x400
[  177.441316][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  177.441340][    T9]  ? sched_clock+0x44/0x60
[  177.441361][    T9]  ? __cfi_sched_clock_cpu+0x10/0x10
[  177.441387][    T9]  ? __kasan_check_write+0x18/0x20
[  177.441411][    T9]  ? __switch_to+0xc7b/0x1310
[  177.441436][    T9]  ? psi_group_change+0xb44/0x1130
[  177.441460][    T9]  ? __cfi___switch_to+0x10/0x10
[  177.441487][    T9]  ? _raw_spin_unlock+0x45/0x60
[  177.441514][    T9]  ? __switch_to_asm+0x3d/0x70
[  177.441542][    T9]  ? __schedule+0x1463/0x1f10
[  177.441572][    T9]  ? kick_pool+0xad/0x550
[  177.441603][    T9]  process_scheduled_works+0x7d2/0x1020
[  177.441636][    T9]  worker_thread+0xc58/0x1250
[  177.441675][    T9]  kthread+0x2c7/0x370
[  177.441706][    T9]  ? __cfi_worker_thread+0x10/0x10
[  177.441734][    T9]  ? __cfi_kthread+0x10/0x10
[  177.441763][    T9]  ret_from_fork+0x64/0xa0
[  177.441787][    T9]  ? __cfi_kthread+0x10/0x10
[  177.441816][    T9]  ret_from_fork_asm+0x1a/0x30
[  177.441845][    T9]  </TASK>
[  177.441853][    T9] ==================================================================
[  177.759446][    T9] Disabling lock debugging due to kernel taint
[  177.765651][    T9] BUG: kernel NULL pointer dereference, address: 0000000000000098
[  177.773470][    T9] #PF: supervisor write access in kernel mode
[  177.779554][    T9] #PF: error_code(0x0002) - not-present page
[  177.785563][    T9] PGD 0 P4D 0 
[  177.788966][    T9] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  177.795060][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G    B              6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[  177.809845][    T9] Tainted: [B]=BAD_PAGE
[  177.814013][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  177.824091][    T9] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  177.840904][    T9] RIP: 0010:down_write+0x9a/0x2a0
[  177.845967][    T9] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  177.865610][    T9] RSP: 0018:ffffc90000097500 EFLAGS: 00010256
[  177.871710][    T9] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  177.879711][    T9] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000097520
[  177.887709][    T9] RBP: ffffc90000097598 R08: ffffc90000097527 R09: 1ffff92000012ea4
[  177.895708][    T9] R10: dffffc0000000000 R11: fffff52000012ea5 R12: dffffc0000000000
[  177.903713][    T9] R13: 1ffff92000012ea0 R14: ffffc90000097520 R15: 0000000000000000
[  177.911712][    T9] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  177.920665][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.927271][    T9] CR2: 0000000000000098 CR3: 00000000072aa000 CR4: 00000000003526b0
[  177.935265][    T9] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006
[  177.943258][    T9] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  177.951249][    T9] Call Trace:
[  177.954543][    T9]  <TASK>
[  177.957486][    T9]  ? __cfi_down_write+0x10/0x10
[  177.962365][    T9]  ? _raw_spin_lock+0x8c/0x120
[  177.967166][    T9]  ? __cfi__raw_spin_lock+0x10/0x10
[  177.972402][    T9]  ? mutex_unlock+0x8b/0x240
[  177.977017][    T9]  ? __cfi_mutex_unlock+0x10/0x10
[  177.982070][    T9]  rust_binderfs_remove_file+0x6c/0x110
[  177.987642][    T9]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  178.000428][    T9]  ? update_curr_dl_se+0x10c/0xb20
[  178.005575][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  178.011680][    T9]  ? update_curr+0x60d/0xc60
[  178.016305][    T9]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  178.029531][    T9]  ? update_load_avg+0x506/0x19a0
[  178.034606][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[  178.040193][    T9]  ? __kasan_check_read+0x15/0x20
[  178.045248][    T9]  ? dequeue_entity+0xa9c/0x1750
[  178.050225][    T9]  ? tg_unthrottle_up+0x980/0x980
[  178.055280][    T9]  ? detach_entity_load_avg+0x7b0/0x7b0
[  178.060862][    T9]  ? kvm_sched_clock_read+0x15/0x30
[  178.066089][    T9]  ? sched_clock_noinstr+0xd/0x30
[  178.071137][    T9]  ? sched_clock+0x44/0x60
[  178.075576][    T9]  ? sched_clock_cpu+0x75/0x400
[  178.080465][    T9]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  178.086574][    T9]  ? sched_clock+0x44/0x60
[  178.091062][    T9]  ? __cfi_sched_clock_cpu+0x10/0x10
[  178.096388][    T9]  ? __kasan_check_write+0x18/0x20
[  178.101533][    T9]  ? __switch_to+0xc7b/0x1310
[  178.106251][    T9]  ? psi_group_change+0xb44/0x1130
[  178.111395][    T9]  ? __cfi___switch_to+0x10/0x10
[  178.116367][    T9]  ? _raw_spin_unlock+0x45/0x60
[  178.121254][    T9]  ? __switch_to_asm+0x3d/0x70
[  178.126054][    T9]  ? __schedule+0x1463/0x1f10
[  178.130765][    T9]  ? kick_pool+0xad/0x550
[  178.135133][    T9]  process_scheduled_works+0x7d2/0x1020
[  178.140726][    T9]  worker_thread+0xc58/0x1250
[  178.145445][    T9]  kthread+0x2c7/0x370
[  178.149549][    T9]  ? __cfi_worker_thread+0x10/0x10
[  178.154696][    T9]  ? __cfi_kthread+0x10/0x10
[  178.159335][    T9]  ret_from_fork+0x64/0xa0
[  178.163781][    T9]  ? __cfi_kthread+0x10/0x10
[  178.168416][    T9]  ret_from_fork_asm+0x1a/0x30
[  178.173219][    T9]  </TASK>
[  178.176256][    T9] Modules linked in:
[  178.180179][    T9] CR2: 0000000000000098
[  178.184358][    T9] ---[ end trace 0000000000000000 ]---
[  178.189830][    T9] RIP: 0010:down_write+0x9a/0x2a0
[  178.194881][    T9] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  178.214511][    T9] RSP: 0018:ffffc90000097500 EFLAGS: 00010256
[  178.220610][    T9] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  178.228606][    T9] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90000097520
[  178.236601][    T9] RBP: ffffc90000097598 R08: ffffc90000097527 R09: 1ffff92000012ea4
[  178.244601][    T9] R10: dffffc0000000000 R11: fffff52000012ea5 R12: dffffc0000000000
[  178.252627][    T9] R13: 1ffff92000012ea0 R14: ffffc90000097520 R15: 0000000000000000
[  178.260623][    T9] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  178.269597][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.276207][    T9] CR2: 0000000000000098 CR3: 00000000072aa000 CR4: 00000000003526b0
[  178.284208][    T9] DR0: 0000000000000008 DR1: 0000000000000008 DR2: 0000000000000006
[  178.292202][    T9] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  178.300199][    T9] Kernel panic - not syncing: Fatal exception
[  178.306611][    T9] Kernel Offset: disabled
[  178.310944][    T9] Rebooting in 86400 seconds..