last executing test programs:

1m59.617479063s ago: executing program 2 (id=182):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000440)={<r1=>0x0, 0x7f, 0x0, [0x0, 0x5, 0x3, 0x6, 0xdd1], [0x7fffffff, 0x1, 0x7f2e, 0x9, 0x2, 0x100000000, 0x4, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x40, 0xed9e, 0x8, 0xfffffffffffffffe, 0x6ec792a6, 0x7, 0xfeb, 0x5, 0x9, 0x3, 0x106, 0x4, 0xffffffffffffffff, 0x401, 0x7, 0x8000000000000000, 0x3, 0x8, 0x0, 0x0, 0x9, 0x3ff, 0x1, 0x9, 0x8, 0x10000, 0x0, 0x1, 0x3, 0x2, 0x6, 0x1, 0xf358, 0x2, 0x0, 0x25b, 0x1, 0x8, 0x863c, 0xcd, 0x1, 0x3, 0xfffffffffffffffa, 0x7, 0x100000001, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x9, 0x7, 0xffffffffffffffff, 0x10000, 0x0, 0x6, 0x6, 0xe, 0x5, 0x4, 0x6, 0x0, 0x80000001, 0xfffffffffffffffd, 0xc, 0x3, 0x0, 0xfffffffffffffffc, 0x4, 0x2, 0xfff, 0x8000000000000001, 0x9, 0x2, 0x8f, 0x6, 0xfffffffffffffff7, 0x7fffffff, 0xff, 0x10000, 0x5, 0x5, 0xd6, 0x80, 0xa0, 0x4, 0x650, 0x94b, 0x401, 0x0, 0x6, 0x5, 0x10001, 0x72c26685, 0x0, 0xba61, 0xe3f, 0x7, 0xba, 0x7, 0xac, 0xa, 0x7f, 0x3, 0x0, 0x8, 0x100, 0x7, 0x0, 0x80, 0x3, 0xfffffffffffffff7]})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={<r2=>0x0, 0x1, 0x6, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xe8)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c80)={<r4=>0x0, 0x401, 0x1, [0x81, 0x1, 0x2, 0x2, 0x3], [0x101, 0x219f, 0xffffffff, 0x7fff, 0x5, 0x80000001, 0x6, 0x7, 0x3ff, 0x1c00, 0xaea1, 0x401, 0x100000001, 0x5, 0x1c1, 0x8, 0x87, 0x7, 0x91e0, 0x7, 0x90, 0x630, 0x0, 0x7, 0x1, 0x9, 0x7, 0x6, 0x2, 0x7, 0x400, 0x8, 0x2, 0x80000000, 0x7, 0x43f, 0x0, 0x4, 0x9, 0x4, 0x1, 0xd5c, 0x2, 0x85cd, 0xb, 0x0, 0x5, 0x7ff, 0x63e, 0x4, 0x40, 0x2, 0x6, 0x714, 0x2, 0x0, 0x4, 0x2e2, 0x4, 0x8, 0x17, 0xffe, 0xef1, 0x2, 0x2, 0xdbac, 0x4, 0xffffffffffffffff, 0xfffffffffffffff9, 0x5, 0xfffffffffffffff8, 0x4b0e7d28, 0x800, 0x7, 0x1a7d, 0x8, 0xa19f, 0x8, 0x7fff, 0xf, 0x2, 0xb5, 0x4, 0x10, 0x0, 0x5, 0x5, 0x9, 0x7, 0x0, 0x81, 0x8, 0x6, 0x1, 0xfffffffffffffffa, 0x8001, 0x5, 0x4, 0xffffffff, 0x0, 0xc45, 0x1, 0xff, 0x2, 0x9, 0x6, 0x7, 0xffffffffffffffff, 0x6, 0x9, 0x270b, 0xc7b, 0x10001, 0xffffffffffffffff, 0x16c0000000000, 0x100000001, 0x7, 0x4, 0x5100887d, 0x1, 0x7]})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000010c0)={0x0, 0x5, {0x6, @usage=0xd, r1, 0xd, 0x7fffffffffffffff, 0x94, 0x0, 0x7, 0x3, @usage=0xf, 0x3ff, 0xfffffffa, [0x6, 0x7fff, 0x8000000000000000, 0xff, 0x0, 0x1]}, {0x1, @usage=0x1, r2, 0x1, 0x3, 0x7, 0x4f, 0xffffffff, 0x41, @usage=0xfffffffffffffffe, 0x6, 0x86, [0x4, 0x3, 0x2, 0x0, 0x4, 0xfffffffffffffff8]}, {0x6, @struct={0x7, 0x6d}, r4, 0xa, 0xe0e, 0x3ff, 0xa4, 0x10000, 0xf, @struct={0x2, 0x1000}, 0x6, 0x81, [0x2, 0x101, 0x5, 0x80, 0x9]}, {0x1ff, 0xb, 0x4}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000300)=[@increfs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1m59.587323373s ago: executing program 2 (id=183):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @increfs_done={0x40106308, 0x3}, @dead_binder_done, @request_death={0x400c630e, 0x1}, @increfs={0x40046304, 0x3}], 0x1000, 0x0, &(0x7f0000000600)="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"})

1m59.475252854s ago: executing program 2 (id=185):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000009c0)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000000)={0x248072180, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0xf56784c689fdf204)
r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_access(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xa7e30000)

1m59.372840986s ago: executing program 2 (id=186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x2})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x8000014)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001600))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xbc, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}, @increfs, @acquire_done, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/4, 0x4, 0x1, 0xe}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x1a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x8b)

1m59.241152958s ago: executing program 2 (id=188):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x581, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000002c0)=0x4)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETAW(r5, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x6, 0xafa, 0x0, "e32401186a9ed9a9"})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0xa)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0xa}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

1m59.210652399s ago: executing program 2 (id=191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
close(r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0xa, 0xb, 0x3}, {0x5, 0x6, 0x4, 0x6}, {0x2, 0x9, 0xe, 0xa3}, {0x7f, 0x1, 0x6, 0x9}]})
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100'])

1m44.152469314s ago: executing program 32 (id=191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x0, 0xc, 0x0)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
close(r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0xa, 0xb, 0x3}, {0x5, 0x6, 0x4, 0x6}, {0x2, 0x9, 0xe, 0xa3}, {0x7f, 0x1, 0x6, 0x9}]})
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='max=000000100'])

1m34.670401705s ago: executing program 4 (id=693):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)

1m34.642439386s ago: executing program 4 (id=695):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000002)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00')
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r2, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x180000a, 0x12, r0, 0x45809000)
read(r0, &(0x7f0000000040)=""/102, 0x66)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x4, 0x100, 0x4, 0x3}, 'syz1\x00', 0x2c})

1m34.581255537s ago: executing program 4 (id=696):
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r0, 0x0, 0x1f00)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10, r1, 0x8e158000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x10, r1, 0x8e158000)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) (async)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='-&:\x00') (async)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000000)='-&:\x00')
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x0, 'memory'}, {0x2b, 'freezer'}, {0x2d, 'net_cls'}, {0x2d, 'net'}, {0x2d, 'net'}, {0x2b, 'pids'}]}, 0x2a)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)

1m34.580635377s ago: executing program 4 (id=697):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x877, 0x3, 0xfffffff9, 0x2}, {0x7, 0x7fffffff, 0x7d6, 0x3396, 0x6}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r11, 0x4008ae48, &(0x7f0000000e40)=0x2)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})

1m34.39297509s ago: executing program 4 (id=701):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0xd6, 0x12)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(r1, &(0x7f00000004c0)='./file1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mkdirat(r2, &(0x7f0000000300)='./file1\x00', 0x83) (async)
mkdirat(r2, &(0x7f0000000300)='./file1\x00', 0x83)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async)
r6 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
unlinkat(r6, &(0x7f0000000440)='./file1\x00', 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x400003)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000100)=[@acquire={0x40046305, 0x1}, @register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_binder={0x77622a85, 0x3001}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x30}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d) (async)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7d)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @c}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x800, 0x0)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0xfffffffe, 0xfe, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"}) (async)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0xfffffffe, 0xfe, "cf0da7087b9539556f7ab2a8bf68b63bfcbea9"})
ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000100)=0x8683)
ioctl$TCSETS(r7, 0x5402, &(0x7f0000000080)={0x7ff, 0x5, 0x3, 0x1, 0x4, "efd36c8697e67f323922c0a0614bfab679f142"})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m34.193162063s ago: executing program 4 (id=705):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0x8008b705, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4880, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000200)={0x3, 0x0, [0x40, 0x4, 0x3, 0xe3, 0x0, 0x7216, 0x1, 0x9]})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x6, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x6, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59})
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}]}})
ioctl$KVM_RUN(r8, 0x8004ae98, 0x20e10000)
r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000007c0)={0x1, 0x1, 0x10})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31f2552d984251b8, r1, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r11}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$rfkill(r13, &(0x7f0000000c80), 0x8)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="7365636c6162656c2c001e00e146ee87d7bec0160e3c6ce25136abeb874f69ed21b12b304c42c26648aa99604fa867861d33bc80f53e2c2c140600000000000000e195b4c14181b71742d8a85eb2f6931d21e194f9785ca86ea14b9fa6b4881d3464e7c7cf63eac09a44d8c41a388476e8e737"])

1m18.750422123s ago: executing program 33 (id=705):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r1, 0x8008b705, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x4880, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000200)={0x3, 0x0, [0x40, 0x4, 0x3, 0xe3, 0x0, 0x7216, 0x1, 0x9]})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9})
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x6, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x6, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59})
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}]}})
ioctl$KVM_RUN(r8, 0x8004ae98, 0x20e10000)
r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000007c0)={0x1, 0x1, 0x10})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x31f2552d984251b8, r1, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r11}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
r13 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000900)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$rfkill(r13, &(0x7f0000000c80), 0x8)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="7365636c6162656c2c001e00e146ee87d7bec0160e3c6ce25136abeb874f69ed21b12b304c42c26648aa99604fa867861d33bc80f53e2c2c140600000000000000e195b4c14181b71742d8a85eb2f6931d21e194f9785ca86ea14b9fa6b4881d3464e7c7cf63eac09a44d8c41a388476e8e737"])

51.782709346s ago: executing program 0 (id=1539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad888ca"], 0xffdd)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r3, 0x8010aebb, &(0x7f0000000280)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x3}], 0x5})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6)
write$binfmt_register(r5, &(0x7f0000000380)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x4, 0x3a, '${*', 0x3a, '/dev/net/tun\x00', 0x3a, './cgroup/pids.max', 0x3a, [0x46]}, 0x42)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d03, 0x0, 0x10}]})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x400, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

51.457256351s ago: executing program 0 (id=1546):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002}]}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async)

51.385154302s ago: executing program 0 (id=1549):
ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000))
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x8, 0xae, 0x6})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x4, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$VHOST_VDPA_SET_STATUS(r0, 0x4001af72, &(0x7f0000000100)=0xa)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x100000001, 0x8, 0x100000001, 0x0, 0xea5, 0x8, 0x5, 0xc, 0xb5760000000, 0x6d2, 0xdcdb, 0xffffffff, 0x500000000000000, 0xc, 0x73, 0xffffffffffffff00], 0xeeef0000})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000200)={0x100000, 0x1000, 0x1, 0x2, 0xff}) (async)
ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000200)={0x100000, 0x1000, 0x1, 0x2, 0xff})
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000240)={"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"})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000006c0)={{r3}, "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"})
r4 = openat$cgroup_subtree(r0, &(0x7f00000016c0), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000001700)={[{0x2d, 'pids'}, {0x2b, 'devices'}, {0x2b, 'cpuset'}, {0x6, 'net_prio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2d, 'blkio'}, {0x2d, 'freezer'}]}, 0x51) (async)
write$cgroup_subtree(r4, &(0x7f0000001700)={[{0x2d, 'pids'}, {0x2b, 'devices'}, {0x2b, 'cpuset'}, {0x6, 'net_prio'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'net_cls'}, {0x2d, 'blkio'}, {0x2d, 'freezer'}]}, 0x51)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000001780))
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001800)={0x10003, 0x5, 0xffff1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
write$cgroup_int(r0, &(0x7f0000001840)=0xfffffffffffffffd, 0x12)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'vlan0\x00', 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001880)={'vlan0\x00', 0x1})
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001900)=@arm64_ccsidr={0x6020000000110005, &(0x7f00000018c0)=0x2a6}) (async)
ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000001900)=@arm64_ccsidr={0x6020000000110005, &(0x7f00000018c0)=0x2a6})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001940)={{0xf000, 0x4000, 0x0, 0xde, 0xfe, 0x3, 0x9, 0x2, 0x40, 0x8, 0x15, 0x5}, {0xffff1000, 0xdddd0000, 0x9, 0xb, 0xa, 0x0, 0x5, 0x9, 0x0, 0x4, 0xf7, 0x6}, {0x10000, 0x8080000, 0xa, 0xd, 0x40, 0xff, 0x5, 0x5, 0x5, 0xf8, 0x3, 0x78}, {0xffff1000, 0x1000, 0xc, 0x4, 0xcf, 0x3, 0x5, 0x2, 0x1, 0x2, 0x10, 0x7}, {0xd000, 0x0, 0xe, 0x80, 0x2, 0xc5, 0x5, 0x61, 0xff, 0xe, 0x3, 0xa}, {0x0, 0x2000, 0xf, 0x73, 0x7, 0xe, 0x1, 0x4, 0xcd, 0x9, 0x37, 0x7}, {0xeeee8000, 0x6000, 0x10, 0x0, 0x2, 0x5, 0x2, 0x1d, 0x44, 0x7, 0x50, 0xb}, {0x10000, 0x8080000, 0xd, 0xed, 0x3f, 0x2d, 0x3, 0x0, 0x3, 0xff, 0x7, 0x12}, {0xdddd1000, 0x6}, {0x2}, 0xa0050002, 0x0, 0x5000, 0x60204, 0x2, 0xa000, 0xeeee0000, [0x8000000000000001, 0x9, 0x80, 0x5]}) (async)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000001940)={{0xf000, 0x4000, 0x0, 0xde, 0xfe, 0x3, 0x9, 0x2, 0x40, 0x8, 0x15, 0x5}, {0xffff1000, 0xdddd0000, 0x9, 0xb, 0xa, 0x0, 0x5, 0x9, 0x0, 0x4, 0xf7, 0x6}, {0x10000, 0x8080000, 0xa, 0xd, 0x40, 0xff, 0x5, 0x5, 0x5, 0xf8, 0x3, 0x78}, {0xffff1000, 0x1000, 0xc, 0x4, 0xcf, 0x3, 0x5, 0x2, 0x1, 0x2, 0x10, 0x7}, {0xd000, 0x0, 0xe, 0x80, 0x2, 0xc5, 0x5, 0x61, 0xff, 0xe, 0x3, 0xa}, {0x0, 0x2000, 0xf, 0x73, 0x7, 0xe, 0x1, 0x4, 0xcd, 0x9, 0x37, 0x7}, {0xeeee8000, 0x6000, 0x10, 0x0, 0x2, 0x5, 0x2, 0x1d, 0x44, 0x7, 0x50, 0xb}, {0x10000, 0x8080000, 0xd, 0xed, 0x3f, 0x2d, 0x3, 0x0, 0x3, 0xff, 0x7, 0x12}, {0xdddd1000, 0x6}, {0x2}, 0xa0050002, 0x0, 0x5000, 0x60204, 0x2, 0xa000, 0xeeee0000, [0x8000000000000001, 0x9, 0x80, 0x5]})
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001bc0)={0x0, 0xaea, &(0x7f0000001a80)="e0dfe55e29dbc36f675caa155b98bbe9ec2d28bca77c35fde93a5d21cfd28ad73088cd7a96971459251d5b98f83a5658b8c2848f1e49ce4b4cad7e9786167a81045ffe71c380cc853ee37e3ace6a4289b56118dc35", &(0x7f0000001b00)="fb425e3e1abcaba085ab25f304c828adeb36e90c5c95146dbbc2c528ab0d811d036f0369750d5cb8d5fdaaf1c9475ad2cfbf6f7dc9f1e2e92ef106c500c11cf02f8f89f535cffeee38da8e7d9433781cfb312be430b90981125f32354dc77a18a2d9d7898d3f11261dc8c2d956214a56085508a126e2a07ee9c789e716fa1953fb640a9cf4e1c79076cb24f9830d1e4b0eee21067842bda11572c26709a796e252f20efd4cfd33f230610563bd2f51231a491d", 0x55, 0xb3}) (async)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000001bc0)={0x0, 0xaea, &(0x7f0000001a80)="e0dfe55e29dbc36f675caa155b98bbe9ec2d28bca77c35fde93a5d21cfd28ad73088cd7a96971459251d5b98f83a5658b8c2848f1e49ce4b4cad7e9786167a81045ffe71c380cc853ee37e3ace6a4289b56118dc35", &(0x7f0000001b00)="fb425e3e1abcaba085ab25f304c828adeb36e90c5c95146dbbc2c528ab0d811d036f0369750d5cb8d5fdaaf1c9475ad2cfbf6f7dc9f1e2e92ef106c500c11cf02f8f89f535cffeee38da8e7d9433781cfb312be430b90981125f32354dc77a18a2d9d7898d3f11261dc8c2d956214a56085508a126e2a07ee9c789e716fa1953fb640a9cf4e1c79076cb24f9830d1e4b0eee21067842bda11572c26709a796e252f20efd4cfd33f230610563bd2f51231a491d", 0x55, 0xb3})
write$vga_arbiter(r0, &(0x7f0000001c00), 0xf)

51.333279223s ago: executing program 0 (id=1550):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x882000, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae09, &(0x7f0000000000))
read(r0, &(0x7f0000000000)=""/107, 0x6b)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x882000, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)) (async)
read(r0, &(0x7f0000000000)=""/107, 0x6b) (async)

51.332494263s ago: executing program 0 (id=1551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000001380)=[{0x1c}, {0x6}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r2, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

51.261934564s ago: executing program 0 (id=1553):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0x4018aee2, &(0x7f0000000100))
mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]})

36.247714959s ago: executing program 34 (id=1553):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0x4018aee2, &(0x7f0000000100))
mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]})

1.789119634s ago: executing program 1 (id=2664):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000580)={0x2, 0x5, 0xe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0})
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x5, 0x0, 0x5})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000200)={0x28003, 0x0, [0x40, 0x4, 0x3, 0x10e3, 0xfffffffffffffffc, 0x3ff, 0x200000001, 0x9]})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa7)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x4ca602, 0x0)
ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000380))

1.628865986s ago: executing program 6 (id=2672):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000040)={0x10})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
ioctl$KVM_GET_MP_STATE(r9, 0x8004ae98, &(0x7f0000000280))
ioctl$TCXONC(r6, 0x540a, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x2)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000e80)={0x2, 0x0, [{0x7, 0x80000001, 0x4, 0x3, 0x1f17b93f, 0x9, 0x5}, {0x1, 0x7, 0x0, 0xfffffff9, 0x80000001, 0x200007e, 0x9}]})
prctl$PR_SET_KEEPCAPS(0x8, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x2, 0x4, 0xafe3, 0xea34})
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '/_', 0x3a, '\\x@K-^{', 0x3a, './file0'}, 0x30)
write(r1, &(0x7f0000000000)="836f069be95abe98527c8d730896ae1e2292dcef770d82767399ceb844eb6d55db620ab812fc597e19d1b3cd2161c5d7f9b28bed584292351e7371b9a7d27bb69c4add04eb9a308b864e123a569dca6eda81957421635ce36bfa8aac59af2b59d5062cde1d6944", 0x67)
read(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xfffff000)

1.539198007s ago: executing program 1 (id=2673):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0xe})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x74, 0x0, 0x0, 0xfffffffd}]})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x34004000)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2)
read$FUSE(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)

1.38226128s ago: executing program 6 (id=2676):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r0, &(0x7f0000000200)=0x8000, 0x12)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000001, 0x4, 0x2, 0x5, 0x0, 0x4, 0x2, 0x0, 0x4, 0x46, 0x0, 0x404], 0x2000, 0x98302})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
write$cgroup_int(r0, &(0x7f0000000000)=0x5, 0x12)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/156, 0x9c, 0x0, 0x13}, @fda={0x66646185, 0xa, 0x0, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x90, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/156, 0x9c, 0x0, 0x13}, @fda={0x66646185, 0xa, 0x0, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}}], 0x5, 0x0, &(0x7f0000000500)="7da3644468"})

1.229725532s ago: executing program 6 (id=2677):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x26}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0)
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
read$FUSE(r1, 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x26}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) (async)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) (async)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) (async)
write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:printer_device_t:s0\x00', 0x9) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async)
read$FUSE(r1, 0x0, 0x0) (async)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x7) (async)

1.157128073s ago: executing program 1 (id=2679):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2'}, 0x4a)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x6)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4)
write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x868]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000)

1.146610983s ago: executing program 6 (id=2680):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x25c) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x400000000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x4) (async)
write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe]}, 0x45c) (async, rerun: 32)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) (async, rerun: 32)
write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00', {0xc, 0xc, 0x8ce, 0x8}, 0x28, [0x6, 0x9, 0x8f28, 0x987, 0xfffff5b6, 0x80000001, 0x9, 0x80000000, 0x200, 0x8001, 0x36c9, 0xec, 0x1, 0xfffffffb, 0x6, 0x1, 0x6, 0x5d9, 0x3, 0x0, 0x5, 0xb, 0x9, 0xc9e2, 0x9, 0x7, 0x3, 0xe, 0x8, 0x2aed2b6e, 0x46, 0x7f, 0x400, 0x8000, 0x2, 0x0, 0x3, 0x0, 0x7, 0xa4, 0x4, 0x3, 0x2, 0x6, 0xfffffff2, 0x6, 0x3, 0x7, 0x5, 0x200, 0x2, 0x0, 0x8, 0x10, 0x8, 0x1, 0x40, 0x80000001, 0x9, 0x6, 0x8, 0xcd2, 0x0, 0x5], [0xe9, 0xf, 0x1000, 0x5, 0xfff, 0x9, 0x346d353, 0x6, 0x2f, 0xff, 0x80000000, 0x7f, 0x7fff, 0x3, 0x80b, 0x1, 0x3d5, 0x10000, 0xffffff1f, 0x6, 0x7, 0x5, 0x3, 0x10, 0x3, 0x80000000, 0x5, 0x7, 0x4, 0x10, 0x3, 0xfffffff8, 0x4, 0x3, 0x3f1, 0x2, 0xc, 0x91, 0x30000000, 0xfffffff8, 0x4, 0x1ff, 0x2, 0x1c000, 0x5, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0x22f5688b, 0xd6c, 0xf6e5, 0xdf, 0x6, 0x2, 0x2, 0xfffffff8, 0x4, 0xffff, 0xb, 0x1, 0x1, 0x7], [0x0, 0x48, 0x0, 0xa13e, 0x4, 0x3, 0x3, 0x9, 0x8, 0x4, 0x8000, 0x3, 0x5, 0x2, 0x9, 0x5, 0x6, 0x401, 0x800, 0x80000000, 0x0, 0xf, 0x9, 0x3, 0x0, 0x0, 0x8000, 0x7fff, 0x5, 0x5, 0x14580ffb, 0x6, 0x5, 0x1, 0x1, 0x80, 0x400, 0x8, 0xb0, 0x8, 0x9, 0x7, 0x6, 0x97af, 0x7, 0x3, 0x18000, 0x101, 0x3, 0x4, 0xae3, 0x4, 0x8, 0xec, 0x3a, 0x7, 0x186, 0x0, 0x38000000, 0x8b3, 0x9, 0x7, 0x9, 0x4], [0x200, 0x89, 0x0, 0x2, 0x1, 0x7f, 0xa, 0x3, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3, 0x4d1d, 0x2, 0x6, 0x4, 0x5, 0x0, 0x9, 0x9, 0xff, 0x8, 0x4, 0x2, 0x0, 0xe6, 0x6, 0x81, 0xdbe, 0xffff34e6, 0x0, 0x3, 0x800, 0x8000, 0x7, 0x0, 0x376d, 0x3, 0x2, 0x1a, 0x8, 0xe, 0x7, 0x80, 0x2478e471, 0x2, 0x7, 0x4, 0x4, 0x1, 0x868, 0x8001, 0x8, 0xb, 0x8, 0xd, 0x80, 0x4, 0x1, 0x7, 0x8c, 0x6]}, 0x45c) (async)
r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write$selinux_attr(r4, &(0x7f0000000080)='system_u:object_r:tty_device_t:s0\x00', 0x22) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@enter_looper, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000180)=@x86={0xfe, 0x0, 0xd, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0x8, 0xf9, 0x9, 0x5, 0x0, 0xda, 0x80000001, 0x2, 0x5, 0x92, 0x9, '\x00', 0x6, 0x4})

1.146267363s ago: executing program 5 (id=2681):
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x42004, &(0x7f0000000000)=ANY=[@ANYRESOCT])

1.131910423s ago: executing program 5 (id=2682):
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0xfffffffffffffcdc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x5c, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x101}, @fda={0x66646185, 0x3, 0x0, 0x36}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @dead_binder_done, @register_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x20010, r2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0xfffffffffffffffe)
read(r6, &(0x7f0000000040)=""/8, 0x8)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x1, 0x0, 0x1, "ff00f7000000af88008300"})
ioctl$TIOCGPTPEER(r8, 0x5441, 0x8)
close(0x3)
write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x202201, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)

1.073254214s ago: executing program 1 (id=2683):
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf920030000533ad81995e24cc2"], 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x8, 0x0, 0x0, 0x2, 0x2, 0xe, 0x7, 0x0, 0x12, 0x20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x5, 0x34, '\x00', 0x0, 0x3})
ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000b00))
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000001040)={0x0, 0x2000})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x3000, 0x0, 0x1, 0x0, 0x64, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000}, {0x0, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0xc, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xf000, 0x10000, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3a, 0x2}, {0x0, 0xeeee8000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0xddf8ffdb, 0x0, 0x0, 0x3400b0, 0x8000000000000a, 0x8000, 0x3000, [0x0, 0x0, 0x2]})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f00000011c0)={0x6000, 0x8000})
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, 0x0)

1.072914124s ago: executing program 6 (id=2684):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000000000032190000010000000700000000000000ff000000020000000000000000000000000000008c0ec47994d2"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x2ff, 0x0, 0x8}]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000140)=[@request_death], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0x4, 0x7, 0x3, 0xfffffffb, 0x1, 0x0, [{0xfffffffffffffff3, 0x8, 0x7fffffffffffffff, '\x00', 0x1200}]})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000280)='syz0\x00')
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x10000, 0x140, 0x3c0, 0x0})
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]})
r10 = openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r10, 0x40189429, &(0x7f0000000400)={0x1, 0x2, 0x23e8})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x61, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b4187098442946238cdd38a235b2"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}], 0xf, 0x0, &(0x7f0000000040)="b78daa21f65bb0f5a2d7547bdeef57"})

762.409389ms ago: executing program 5 (id=2689):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x3a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
read(r4, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0x9, 0x8, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0x11100002, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x1, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0x2, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x7, 0x9}, {0x100002, 0xeeee8000, 0x4, 0xff, 0x80, 0xa, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xf000, 0xc, 0x0, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0x1000, 0x2, 0x4, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x1000, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x8000000, 0x44, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r6, 0xc004ae02, 0x0)
write$UHID_INPUT2(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6458835f7c"], 0x6)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
write$UHID_CREATE2(r5, &(0x7f00000020c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xe9, 0x8, 0x6, 0x80, 0xffffff31, 0x8, "57beb89411799f083de15f41aee2a93cb3558d1c7f8e0e3db39f4d1c31c4afdf1239f05ca5027bd207511dffd423bc01d50eba460601a6a9c9ee244de4b9a2e656ff9954e592449bd57901dee5a53ec266c91740c07f6a7d8b722da7c152209547b0febdf904b2cc2fc198142f9a7ade4f56934490cfa89f1130a3f536f98517f7dc15a8c98372b68b8e7077fb80e0ff1f1c8cdb9187cd29cdde578b24e1b8d5028e394ef31b587247ec3187c582ad493dce25184b1a20e81bf77d99408e87485c3aa69c4b4d284e61449ed23538e70c11cc9a86c3b94371195989c7a8c70b3687ef9a750ee5a32f32"}}, 0x201)
ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003600)={{0x2, 0x0, 0x80, {0x5000, 0x1000}}, "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", "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"})
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

710.099619ms ago: executing program 1 (id=2690):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r3])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x8, 0xb4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x40}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}]})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r3])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r4, 0xa7)

619.856941ms ago: executing program 1 (id=2693):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}})
read(r0, &(0x7f00000000c0)=""/77, 0x4d)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x181240, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
write$cgroup_subtree(r6, 0x0, 0x0)
write$cgroup_devices(r6, 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x7)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0xca, 0x8, 0xb0, 0x0, 0xc51, 0x9, 0x0, 0x81, 0x7, 0x8, 0xf9, 0x9, 0x0, 0xffff, 0x8, 0x6, 0x7, 0xe, 0xfd, '\x00', 0xff, 0x5})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$selinux_attr(r2, &(0x7f0000000140)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e)
read(r2, &(0x7f0000000040)=""/93, 0x5d)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

517.214872ms ago: executing program 5 (id=2695):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
prctl$PR_SET_PDEATHSIG(0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
syz_clone(0x100001000, 0x0, 0x0, &(0x7f0000001e00), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x3a}]})
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TIOCNXCL(r6, 0x540d)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1101})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000b40)={0x58, 0x0, &(0x7f0000000a80)=[@acquire_done={0x40106309, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x0, &(0x7f00000009c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/208, 0xd0, 0x2, 0x14}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x38}}, 0x0}}], 0xa7, 0x0, &(0x7f0000000fc0)="80a289296205dcc5620700e76a07d991e84f31a147f91d2ce73dc0cb80c2e8c19e67135ade4f34119a7e420826efd0f177be2c15a630cd403e86e4a77b4a9478065aa00e0b913630d0a5ed92401880ed54d0fca037e2b4a71e1f80c814bd22ed55c9ee8cb33ef29c28c8a0b1973fd2abc43687b3907a58aafbaa625ccb36e9082cb66c5186669613684973dbd11fc37951f2e85993a0272ca9c06742ce7d08e55c6c1136675136"})

516.911962ms ago: executing program 5 (id=2696):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
prctl$PR_MCE_KILL(0x29, 0x0, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40300, 0x0) (async)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"547f37ac98435d85f10981edb71da6c42e5f501dd88db91c1ce734830962180e6a2552c353c8c70c49211912b85f64438ac05dfaafcc27e5d0af50a9b0ce8eb8940ddf0e3ff3295898068c48bd6800a388c33b89673120c5d0061f7aa493fcd1a82b35d75ac5709c3b2fd2970877d2d86f129dea827fc104679695452581f7f3ba4bdcd93d411dd8259216a7a44fd8680da2bc4a40c2eb92c3f64440f43e93c86c87b55d02311565f1a85cbd27ac074c7a4ebbbd2e30a2bfa3799cc01035a11c7e3d5bc24e02575370d40169503697ab6c4b129ebb3185d1bb076dd34551edf875c98ff4b3a47da3ce45b29feda9af45e6d3cc6bbc7123c242c37bb01e7f7e15abf793795f9e8ed48ee0961bfce77786db62a5e40cdfa6fb145af1b6b5d266badc766217c7e49497ebcf1277962334c15f3654cafda1292b7d8f8e6b72a448c586fb404ad3884c664db46016f8232e59cf52c9c9ff1352ce967e60d79726c587c1b5ca7f4813513e41315c690c96340a45af1368f22308eb947ec54d8eaf09835f7eb60a17cdc55a303b56e16cb203e159f4e710f28d85734bff97bd1211090f59ea7b2316870ab24e2290eeb8464129fb434c88c31a6f71dcb9d94af4897c75e706bad561228e9917f1e63d058e12dff241cc3c17575246d627107fb664e9bba66707f29b3f6cadb4be663cf1307c8970489d0bc291863ab4ab0fa1eef68f384dbacb516927ee5944b687c831d66c8c489bc63b31baee96088df5a37d80bf320262d38177844957d96244d1cfd8f597d5002d46ac3a2ddf4ad09908c93398dc1178a8d20cdbe0a904ecfb09420ac3d229e3b11479080f6d0973ec2f01d28083d806fe610d5c9944d8186c18f43eebf4e611d2a30d02306e2676b465cb24a59e3097726730ba30520cad907eadf2f39443bc7965d63eb3950a81e506b0fb6a97ee390326031ce61d79d747542613b591d29574e354374cdab86e9d3581b518e955301ba64e33b7aba1af51e1c1c762ec8784f03c552327f530ad370bbefc82cd2bce1b097e352f77d9eccfb5cf8fcdf75d63b148b587d22fa3f8fe5a7a85f9e81025a6a03cd7f778e21069374ef54209870977f9810be792d3e07697fdd2f3ebcaa45d153d890e5e6a0af645da152c2b7e14018fb2fd55055e47368922bdd06b6164f4e0eb2adefc25fd7086b279787eb0dde365442f9e236c809d1988c11f6ecabc5c11b207dc9e4e9f8fe81779595ce57eea0b41b358ad9ecace22ea5bf8c76a49289a87a1991c3d39ed4a88ffe604d58462700859e5ade19b190322f5b77a9083074cee23a4004a6a98dd29de543aeab703023956eb7d9cdaaedf7bec9a76469c14bdf6a6768e0c14d7a9ccb5c05d9969980eca571f4b2967fcdf91cb4bc16a3d8e070a1a7e5831868ea4bec2dedcc112df0d9704a97a7670aae1c7d89e26"}) (async)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x2000, 0x8, 0x1, 0xeffffdff, 0x0, [{0xff, 0xff}, {0x15, 0x3, 0x5, '\x00', 0x7}, {0x8, 0x4}, {0xfe, 0x0, 0x7d, '\x00', 0xdc}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x31, '\x00', 0x3}, {0x0, 0x5d, 0x0, '\x00', 0x6}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x6}, {0xff, 0x5, 0x0, '\x00', 0x4}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {}, {0x3, 0x0, 0x0, '\x00', 0x5}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x2, '\x00', 0x25}, {0x58, 0x9}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x7, '\x00', 0x1}]}})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

385.500984ms ago: executing program 5 (id=2699):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(r2, 0x0, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
read(r1, &(0x7f0000000180)=""/1, 0x1)
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0)

360.000715ms ago: executing program 35 (id=2699):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write(r2, 0x0, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
read(r1, &(0x7f0000000180)=""/1, 0x1)
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0)

181.270717ms ago: executing program 3 (id=2704):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000400))
r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r1, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x43)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext='])

181.038837ms ago: executing program 3 (id=2705):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4010, 0xffffffffffffffff, 0x2000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4010, 0xffffffffffffffff, 0x2000)

180.577127ms ago: executing program 3 (id=2706):
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1ac2)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x0, 0x9})
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f00000000c0))
close(r0)
ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000100))
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140))
write$cgroup_pressure(r1, &(0x7f0000000180)={'full', 0x20, 0x6, 0x20, 0x2}, 0x2f)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000200)={0x3, 0xffffffff, 0xfffffffd, 0xfffff53f, 0x43, "9807da4beb8d6331568e7c2db15e84fa2e42fb", 0x3e1c, 0x4})
r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000002c0)={0x3c, 0x38, [0x100000000, 0x9, 0x5, 0x7], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, <r4=>0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000500)={{r2}, r5, 0x2, @unused=[0x9, 0x80000000, 0x3, 0xffff], @devid})
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000015c0)={{r6}, 0x0, 0x6, @inherit={0x58, &(0x7f0000001540)={0x15cd215c0ce47744, 0x2, 0x8, 0x7, {0x9, 0x6, 0xffffffff, 0x100000001, 0xf20}, [0x8, 0x41]}}, @subvolid=0x3})
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000025c0)={0x2, 0x9})
ioctl$TIOCMBIS(r2, 0x5416, 0xfffffffffffffffd)
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000002600)={<r7=>0x0, "b188ba6bbdf1cb2fcc13c8c3f588dbb2"})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000003600)={{r0}, {@val={r7}, @actul_num={@val=0x2d, 0x531, 0x50}}})
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000003640)={0x7, 0xc30, 0x9, 0x8, 0x7, 0x770})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003680)={{r4, 0x10, 0x0, 0x2, 0x3e, 0x2, 0x4, 0xf, 0x81, 0xffffffff, 0x3, 0x8000000000000000, 0x3a8, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000003740)=0x2)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000003780))
ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f0000003800)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f00000037c0)=0x8})
r8 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000003840), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000003880)={{r8}, r5, 0x2, @unused=[0xfff, 0x3ff, 0x3ff, 0xc], @devid=r7})
ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, &(0x7f0000004880)=0x9)

172.795438ms ago: executing program 3 (id=2707):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0)
close_range(r0, r1, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xfffff000)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)

160.556888ms ago: executing program 3 (id=2708):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0)
ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000300)={0x80000001, 0x1})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x40045402)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101801)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
unlinkat(r3, &(0x7f0000000080)='./cgroup\x00', 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})

105.207089ms ago: executing program 3 (id=2709):
prctl$PR_GET_TIMERSLACK(0x1e)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x45809000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x450000, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r2, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"])
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000a40)={0x0, 0x2, [@link_local, @remote]})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x3)
ioctl$TCSETSW2(r5, 0x5425, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB='1-', @ANYRESDEC], 0x31)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)

0s ago: executing program 6 (id=2710):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffff01)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)

kernel console output (not intermixed with test programs):

 unknown main item tag 0x0
[   94.993825][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.001569][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.001566][ T4976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:392
[   95.001599][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.025634][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.033292][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.040894][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.048387][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.057018][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.065493][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.073227][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.080630][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.088233][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.095846][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.103406][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.110878][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.118277][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.125703][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.133118][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.140510][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.148039][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.155554][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.162964][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.170384][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.177770][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.185210][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.192623][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.199999][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.207416][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.214849][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.222426][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.230105][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.237593][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.253340][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.261181][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.268649][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.276092][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.283633][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.283742][ T4991] binder: Binderfs stats mode cannot be changed during a remount
[   95.291027][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.291055][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.313843][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.334884][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.339753][ T4991] SELinux: security_context_str_to_sid () failed with errno=-22
[   95.342487][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x6
[   95.357657][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x3
[   95.365470][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.373222][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.383070][ T4995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   95.383102][ T4995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1238
[   95.395583][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.413192][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.420817][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.428621][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.442332][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.468907][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.482994][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.500617][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.510884][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.541949][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.549517][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.559372][ T5013] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.562046][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.573721][ T5013] input: syz0 as /devices/virtual/input/input99
[   95.576077][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.589727][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.597579][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.611100][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.629338][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.637694][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.648838][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.658155][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.665731][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.673168][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.677937][ T5018] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[   95.680555][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.698621][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.706089][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.728321][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.735949][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.762652][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.782622][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.790157][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.801302][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.808824][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.816399][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.823894][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.831331][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.839434][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.847232][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.856341][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.863804][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.871258][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.878741][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.890902][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.898552][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.919217][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.933998][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.941565][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.949128][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.959289][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   95.970251][   T36] audit: type=1400 audit(1750329047.520:645): avc:  denied  { map } for  pid=5030 comm="syz.5.1499" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   95.993878][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.001301][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.008920][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.017885][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.025400][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.033129][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.042284][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.050522][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.058908][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.066467][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.073897][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.081499][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.089062][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.098217][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.106293][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.114098][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.121598][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.129219][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.137131][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.147273][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.161742][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.169423][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.176992][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.185021][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.192803][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.194894][ T5044] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   96.200366][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.208441][ T5047] random: crng reseeded on system resumption
[   96.215934][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.233860][   T36] audit: type=1400 audit(1750329047.780:646): avc:  granted  { setsecparam } for  pid=5041 comm="syz.5.1502" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   96.254307][ T5050] serio: Serial port ttynull
[   96.255099][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.266615][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.274167][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.281537][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.289062][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.296468][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.303847][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.311368][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.313684][ T5053] rust_binder: Write failure EFAULT in pid:427
[   96.319265][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.332948][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.340366][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.347784][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.355810][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.363239][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.370717][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.381164][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.388604][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.396351][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.409371][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.419308][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.427082][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.434672][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.442400][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.450002][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.458000][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.458046][ T5055] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   96.465611][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.479491][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.496020][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.503756][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.512216][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.513223][ T5057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1262
[   96.519892][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.529174][   T36] audit: type=1326 audit(1750329048.080:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5056 comm="syz.3.1507" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd09b78e929 code=0x0
[   96.536571][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.566891][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.574951][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.582447][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.589933][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.598645][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.606248][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.613683][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.621069][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.628644][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.636089][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.643628][ T3577] hid-generic 01FF:0004:0400.0011: unknown main item tag 0x0
[   96.651801][ T3577] hid-generic 01FF:0004:0400.0011: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[   96.691649][ T5058] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[   96.702427][ T5063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1218
[   96.740036][ T5064] fido_id[5064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   96.839462][ T5079] SELinux: security_context_str_to_sid () failed with errno=-22
[   97.123500][ T5101] binder: Unknown parameter 'contextfs/binder1'
[   97.124544][   T36] audit: type=1326 audit(1750329048.690:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.163055][   T36] audit: type=1326 audit(1750329048.690:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.189001][   T36] audit: type=1326 audit(1750329048.690:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.216084][   T36] audit: type=1326 audit(1750329048.690:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.239904][   T36] audit: type=1326 audit(1750329048.690:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.264935][   T36] audit: type=1326 audit(1750329048.690:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.288936][   T36] audit: type=1326 audit(1750329048.690:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.5.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[   97.329738][ T5125] binder: Unknown parameter 'dont_hash'
[   97.410804][ T5133] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer.
[   97.502436][ T5144] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   97.511141][ T5144] SELinux: failed to load policy
[   97.588928][ T5158] binder: Unknown parameter 'cntext'
[   97.660979][ T5163] rust_binder: Write failure EINVAL in pid:1268
[   97.667712][ T5168] binder: Unknown parameter '0x0000000000000000'
[   97.686854][ T5170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   97.686876][ T5170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1273
[   97.699867][ T5170] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.761638][ T5171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1273
[   97.884881][ T5179] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.900141][ T5184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.933793][ T5189] rust_binder: Write failure EINVAL in pid:457
[   97.934281][ T5188] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   97.940347][ T5189] rust_binder: Write failure EINVAL in pid:457
[   97.974846][ T5193] binder: Unknown parameter ''
[   98.021100][ T5203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.132837][ T5205] rust_binder: Error in use_page_slow: ESRCH
[   98.132860][ T5205] rust_binder: use_range failure ESRCH
[   98.138852][ T5205] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   98.153100][ T5205] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   98.153135][ T5205] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1255
[   98.194698][ T5208] binder: Unknown parameter 'cont/b�q�{ext'
[   98.234313][ T5212] rust_binder: Error in use_page_slow: ESRCH
[   98.234332][ T5212] rust_binder: use_range failure ESRCH
[   98.240399][ T5212] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   98.245914][ T5212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   98.253893][ T5212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:466
[   98.312177][ T5221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   98.332626][ T5221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1258
[   98.594580][ T5232] kernel profiling enabled (shift: 8)
[   98.703487][ T5243] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   98.967167][ T5259] kvm: apic: phys broadcast and lowest prio
[   98.998929][ T5259] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   98.998954][ T5259] rust_binder: Read failure Err(EFAULT) in pid:1273
[   99.412860][ T5288] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   99.419602][ T5288] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281
[   99.444747][ T5290] rust_binder: Error while translating object.
[   99.460303][ T5290] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   99.478912][ T5290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1283
[   99.515765][ T5296] binder: Unknown parameter 'defcontextnts'
[   99.607494][ T5301] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.607730][ T5301] rust_binder: Write failure EINVAL in pid:1284
[   99.668183][ T5304] binder: Unknown parameter 'mask'
[   99.686444][ T5306] rust_binder: Write failure EINVAL in pid:518
[   99.763671][ T5310] binder: Unknown parameter 'stats���3�&�R!���T�U��	^�%�l!��A�h'V*v��	t�*���n�F�Ǝ�+�@p-O�cpZ�Y��a�*�g����O���$؏*��^���e?ctp>01�$UV������3�����|��LjcY"�9�9�J32 o+>���H
�΀�q~��Sڼ)}��'
[   99.829718][ T5314] binder: Bad value for 'stats'
[  100.029425][ T5348] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.035439][ T5351] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.058144][ T5355] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.081865][ T5350] binder: Unknown parameter ''
[  100.093374][ T5356] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  100.093398][ T5356] rust_binder: Error while translating object.
[  100.102060][ T5356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  100.109477][ T5356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1303
[  100.164323][ T5366] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.337669][ T5387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1313
[  100.434523][ T5392] SELinux:  policydb magic number 0x10 does not match expected magic number 0xf97cff8c
[  100.472791][ T5392] SELinux: failed to load policy
[  100.722097][ T5404] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.723153][ T5404] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  100.742948][ T5404] rust_binder: Error in use_page_slow: ESRCH
[  100.749434][ T5404] rust_binder: use_range failure ESRCH
[  100.762642][ T5404] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  100.773778][ T5404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  100.792068][ T5404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:546
[  100.873840][ T5406] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  100.943444][ T5415] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  101.142717][ T5423] input: syz1 as /devices/virtual/input/input105
[  101.459056][ T5429] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  102.181636][ T5460] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  102.197161][ T5462] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  102.297889][ T5466] SELinux:  policydb magic number 0xa0000 does not match expected magic number 0xf97cff8c
[  102.309114][ T5466] SELinux: failed to load policy
[  102.309159][ T5464] rust_binder: Write failure EINVAL in pid:1342
[  102.466648][ T5477] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1343
[  102.533258][ T5484] binder: Unknown parameter 'appraise'
[  102.938971][ T5499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1355
[  103.085100][ T5508] SELinux: security_context_str_to_sid (syte00001) failed with errno=-22
[  103.166254][ T5511] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  103.166279][ T5511] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  103.166283][ T5510] rust_binder: Error while translating object.
[  103.166302][ T5511] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1356
[  103.202642][ T5510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  103.232604][ T5510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1356
[  103.436871][ T5530] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1378
[  103.761566][   T36] kauditd_printk_skb: 17 callbacks suppressed
[  103.761586][   T36] audit: type=1400 audit(1750329055.320:672): avc:  denied  { map } for  pid=5552 comm="syz.1.1663" path="/dev/bsg" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1
[  103.834646][ T5556] rust_binder: Error while translating object.
[  103.834683][ T5556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  103.840992][ T5556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1392
[  103.850956][ T5556] rust_binder: Write failure EINVAL in pid:1392
[  104.019725][ T5560] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.047424][ T5560] tap2: tun_chr_ioctl cmd 1074025677
[  104.059313][ T5560] tap2: linktype set to 774
[  104.259277][ T5562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.259636][ T5562] rust_binder: Error while translating object.
[  104.266486][ T5562] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  104.272883][ T5562] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1379
[  104.309855][ T5564] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  104.338531][ T5564] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.628485][ T5578] binder: Bad value for 'defcontext'
[  104.803702][ T5587] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  104.855708][ T5588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1397
[  104.955760][   T36] audit: type=1326 audit(1750329056.520:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  104.988598][   T36] audit: type=1326 audit(1750329056.520:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.012349][   T36] audit: type=1326 audit(1750329056.520:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.037090][   T36] audit: type=1326 audit(1750329056.520:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.061034][   T36] audit: type=1326 audit(1750329056.520:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.098308][   T36] audit: type=1326 audit(1750329056.550:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.121641][   T36] audit: type=1326 audit(1750329056.550:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.150309][   T36] audit: type=1326 audit(1750329056.550:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.173712][   T36] audit: type=1326 audit(1750329056.550:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5589 comm="syz.3.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09b78e929 code=0x7ffc0000
[  105.614419][ T5599] input: syz1 as /devices/virtual/input/input111
[  105.687285][ T5599] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1953391990 (3906783980 ns) > initial count (2417261282 ns). Using initial count to start timer.
[  105.713165][  T556] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  106.108544][ T5613] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  106.302000][ T5622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1418
[  106.306878][ T5622] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  106.332052][ T5624] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.401634][ T5630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1415
[  106.433800][ T5634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1422
[  106.466324][ T5636] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  106.544782][ T5637] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1424
[  106.875554][ T5647] binder: Bad value for 'stats'
[  107.261421][ T5668] SELinux: security_context_str_to_sid () failed with errno=-22
[  107.285028][ T5670] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  107.322026][ T5674] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.334445][   T59] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.340498][ T5677] rust_binder: Write failure EINVAL in pid:1427
[  107.347335][ T5678] Bluetooth: hci0: Frame reassembly failed (-84)
[  107.413467][ T5684] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  107.480137][ T5690] rust_binder: Write failure EFAULT in pid:1432
[  107.603259][ T5694] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.609909][ T5694] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  107.666366][ T5702] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  107.762389][ T5706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  107.782682][ T5706] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  108.212406][ T5727] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  108.231449][ T5726] cgroup: fork rejected by pids controller in /syz3
[  108.249960][ T5729] binder: Unknown parameter '0x0000000000000000'
[  108.468883][ T5843] SELinux: security_context_str_to_sid () failed with errno=-22
[  108.789375][  T306] bridge_slave_1: left allmulticast mode
[  108.795468][  T306] bridge_slave_1: left promiscuous mode
[  108.801130][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.811506][  T306] bridge_slave_0: left allmulticast mode
[  108.817295][  T306] bridge_slave_0: left promiscuous mode
[  108.823186][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.949069][  T306] veth1_macvtap: left promiscuous mode
[  108.961291][  T306] veth0_vlan: left promiscuous mode
[  109.022850][ T5864] SELinux: security_context_str_to_sid () failed with errno=-22
[  109.123061][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.130292][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.137500][ T5860] bridge_slave_0: entered allmulticast mode
[  109.161428][ T5860] bridge_slave_0: entered promiscuous mode
[  109.173623][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.182596][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.189659][ T5860] bridge_slave_1: entered allmulticast mode
[  109.210072][ T5860] bridge_slave_1: entered promiscuous mode
[  109.301166][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.308302][ T5860] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.315645][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.322825][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.372622][  T424] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  109.372683][   T52] Bluetooth: hci0: command 0x1003 tx timeout
[  109.401230][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.419139][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.444068][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.451191][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.460530][  T305] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.467619][  T305] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.507008][ T5860] veth0_vlan: entered promiscuous mode
[  109.520698][ T5860] veth1_macvtap: entered promiscuous mode
[  109.582798][ T5882] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  109.648661][ T5890] rust_binder: Error while translating object.
[  109.648712][ T5890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  109.663090][ T5890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:4
[  109.883179][ T5900] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=320745794 (2565966352 ns) > initial count (325012024 ns). Using initial count to start timer.
[  110.045228][   T36] kauditd_printk_skb: 26 callbacks suppressed
[  110.045247][   T36] audit: type=1326 audit(1750329061.610:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.3.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a74b8e929 code=0x0
[  110.232088][ T5912] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  110.232163][ T5912] rust_binder: Error in use_page_slow: EBUSY
[  110.242734][ T5912] rust_binder: use_range failure EBUSY
[  110.248793][ T5912] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  110.259628][ T5912] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  110.275241][ T5912] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  110.294420][ T5912] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1440
[  110.546398][ T5942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  111.200194][ T5974] SELinux: failed to load policy
[  111.207060][ T5974] input: syz0 as /devices/virtual/input/input115
[  111.384134][ T5984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:29
[  111.536676][ T5991] SELinux: failed to load policy
[  111.706130][ T6018] input: syz1 as /devices/virtual/input/input116
[  111.778490][   T36] audit: type=1400 audit(1750329063.340:709): avc:  denied  { setattr } for  pid=289 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  111.831669][   T36] audit: type=1400 audit(1750329063.380:710): avc:  denied  { read write } for  pid=3356 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  111.863164][   T36] audit: type=1400 audit(1750329063.380:711): avc:  denied  { open } for  pid=3356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  111.887861][   T36] audit: type=1400 audit(1750329063.380:712): avc:  denied  { ioctl } for  pid=3356 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  111.921184][   T36] audit: type=1400 audit(1750329063.420:713): avc:  denied  { read } for  pid=6035 comm="syz.5.1790" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  111.944821][   T36] audit: type=1400 audit(1750329063.420:714): avc:  denied  { open } for  pid=6035 comm="syz.5.1790" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  111.968996][   T36] audit: type=1400 audit(1750329063.420:715): avc:  denied  { ioctl } for  pid=6035 comm="syz.5.1790" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  112.014742][   T36] audit: type=1400 audit(1750329063.570:716): avc:  denied  { write } for  pid=6040 comm="syz.1.1791" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  112.045202][   T36] audit: type=1400 audit(1750329063.570:717): avc:  denied  { read } for  pid=6040 comm="syz.1.1791" name="binder0" dev="binder" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  112.190331][ T6064] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  112.467871][ T6081] SELinux: security_context_str_to_sid (System_u) failed with errno=-22
[  112.585002][ T6087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:57
[  113.205977][ T6114] SELinux: security_context_str_to_sid (���j�syt�) failed with errno=-22
[  113.323561][   T12] bridge_slave_1: left allmulticast mode
[  113.329261][   T12] bridge_slave_1: left promiscuous mode
[  113.335452][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.343327][   T12] bridge_slave_0: left allmulticast mode
[  113.348972][   T12] bridge_slave_0: left promiscuous mode
[  113.362733][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.528729][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.535915][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.543049][ T6121] bridge_slave_0: entered allmulticast mode
[  113.549151][ T6121] bridge_slave_0: entered promiscuous mode
[  113.556696][   T12] veth1_macvtap: left promiscuous mode
[  113.562250][   T12] veth0_vlan: left promiscuous mode
[  113.590588][ T6133] binder: Unknown parameter 'dont_hash'
[  113.616632][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.623756][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.631978][ T6121] bridge_slave_1: entered allmulticast mode
[  113.638432][ T6121] bridge_slave_1: entered promiscuous mode
[  113.713924][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.720974][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.728263][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.735326][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.752161][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.759489][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.768611][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.775682][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.785232][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.792310][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.819605][ T6121] veth0_vlan: entered promiscuous mode
[  113.828742][ T6121] veth1_macvtap: entered promiscuous mode
[  113.882295][ T6149] rust_binder: Write failure EINVAL in pid:1489
[  113.896606][ T6151] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  113.922541][ T6147] SELinux: failed to load policy
[  113.951568][ T6156] rtc_cmos 00:00: Alarms can be up to one day in the future
[  113.961578][ T6155] rtc_cmos 00:00: Alarms can be up to one day in the future
[  114.058595][ T6161] rust_binder: Write failure EINVAL in pid:89
[  114.070756][ T6164] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  114.165876][ T6170] binder: Unknown parameter 'qe���pZ5��'
[  114.172017][ T6170] binder: Unknown parameter 'qe���pZ5��'
[  114.280363][ T6183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:12
[  114.298858][ T3577] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  114.348582][ T6189] kvm: kvm [6188]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253
[  114.360207][ T6187] fido_id[6187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  114.377923][ T6190] kvm: kvm [6188]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc2) = 0xffffffffffff6253
[  114.404028][ T6189] SELinux: security_context_str_to_sid (sytem_u�G���) failed with errno=-22
[  114.429532][ T6192] binder: Bad value for 'defcontext'
[  114.489598][  T556] rtc_cmos 00:00: Alarms can be up to one day in the future
[  114.498614][  T556] rtc_cmos 00:00: Alarms can be up to one day in the future
[  114.507108][  T556] rtc_cmos 00:00: Alarms can be up to one day in the future
[  114.514804][  T556] rtc_cmos 00:00: Alarms can be up to one day in the future
[  114.522607][  T556] rtc rtc0: __rtc_set_alarm: err=-22
[  114.727895][ T6214] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  114.823525][ T6220] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  114.921407][ T6226] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  114.921669][ T6226] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  114.953848][ T6226] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  115.060257][   T36] kauditd_printk_skb: 64 callbacks suppressed
[  115.060276][   T36] audit: type=1400 audit(1750329066.620:782): avc:  denied  { execute } for  pid=6232 comm="syz.1.1855" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  115.099177][ T6239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.099294][ T6239] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.268369][ T6250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[  115.500257][ T6263] rust_binder: Write failure EINVAL in pid:49
[  115.563541][ T6269] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  115.602303][ T6269] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  115.643782][   T36] audit: type=1400 audit(1750329067.210:783): avc:  denied  { read } for  pid=6273 comm="syz.6.1866" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  115.672678][ T6274] tap0: tun_chr_ioctl cmd 1074025678
[  115.678224][ T6274] tap0: group set to 0
[  115.764220][ T6274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  115.842309][ T6283] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  115.851301][ T6287] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  115.858000][ T6287] rust_binder: Error while translating object.
[  115.868780][ T6287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  115.875087][ T6287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[  115.907659][   T36] audit: type=1400 audit(1750329067.470:784): avc:  denied  { relabelfrom } for  pid=6288 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  115.912655][ T6289] rust_binder: Error while translating object.
[  115.919348][   T36] audit: type=1400 audit(1750329067.470:785): avc:  denied  { relabelto } for  pid=6288 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  115.937134][ T6289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  115.969037][   T36] audit: type=1400 audit(1750329067.470:786): avc:  denied  { transfer } for  pid=6288 comm="syz.3.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  115.999588][ T6289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:123
[  116.265585][   T36] audit: type=1400 audit(1750329067.820:787): avc:  denied  { ioctl } for  pid=6330 comm="syz.6.1883" path="net:[4026532551]" dev="nsfs" ino=4026532551 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  116.303055][ T6331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71
[  116.303089][ T6331] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  116.326887][ T6331] rust_binder: Read failure Err(EFAULT) in pid:71
[  116.375912][ T6334] rust_binder: Error while translating object.
[  116.392802][ T6334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  116.412912][ T6334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:125
[  116.744460][   T36] audit: type=1400 audit(1750329068.310:788): avc:  granted  { setsecparam } for  pid=6367 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  116.862764][ T6378] input: syz0 as /devices/virtual/input/input119
[  116.896364][   T36] audit: type=1400 audit(1750329068.460:789): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=538 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  116.942606][   T36] audit: type=1400 audit(1750329068.460:790): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=538 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  117.012484][   T36] audit: type=1400 audit(1750329068.460:791): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=538 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  117.041936][ T6385] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  117.159458][  T305] bridge_slave_1: left allmulticast mode
[  117.166526][  T305] bridge_slave_1: left promiscuous mode
[  117.172207][  T305] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.182812][  T305] bridge_slave_0: left allmulticast mode
[  117.188525][  T305] bridge_slave_0: left promiscuous mode
[  117.194427][  T305] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.240727][ T6413] binder: Unknown parameter 'measure'
[  117.278074][ T6419] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  117.307336][ T6424] rust_binder: Error while translating object.
[  117.307383][ T6424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  117.314925][ T6424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1558
[  117.339494][ T6427] SELinux:  policydb version -1384762963 does not match my version range 15-33
[  117.357969][ T6427] SELinux: failed to load policy
[  117.363851][  T305] veth1_macvtap: left promiscuous mode
[  117.369477][  T305] veth0_vlan: left promiscuous mode
[  117.432859][ T6429] input: syz1 as /devices/virtual/input/input120
[  117.522727][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.529801][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.551920][ T6426] bridge_slave_0: entered allmulticast mode
[  117.566976][ T6426] bridge_slave_0: entered promiscuous mode
[  117.586264][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.600648][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.608443][ T6426] bridge_slave_1: entered allmulticast mode
[  117.618147][ T6426] bridge_slave_1: entered promiscuous mode
[  117.757811][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.765017][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.774973][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.782050][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.803350][ T6426] veth0_vlan: entered promiscuous mode
[  117.824117][ T6426] veth1_macvtap: entered promiscuous mode
[  117.857234][ T6468] binder: Unknown parameter 'measure'
[  118.048999][ T6477] binder: Unknown parameter 'euid>00000000000000000000'
[  118.209891][ T6490] input: syz0 as /devices/virtual/input/input123
[  118.249658][ T6494] tap0: tun_chr_ioctl cmd 1074025677
[  118.255457][ T6494] tap0: linktype set to 776
[  118.285530][ T6496] input: syz0 as /devices/virtual/input/input125
[  118.362137][ T6497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3355644928 (6711289856 ns) > initial count (6 ns). Using initial count to start timer.
[  118.381249][ T6497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  118.878038][ T6542] rtc_cmos 00:00: Alarms can be up to one day in the future
[  118.953672][ T6552] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  119.046009][ T6561] binder: Unknown parameter 's�ats'
[  119.130017][ T6578] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  119.197726][ T6586] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  119.259684][ T6602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34
[  119.323455][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.342052][ T6608] Bluetooth: hci0: Frame reassembly failed (-84)
[  119.382715][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.382742][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.393191][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.399724][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.408773][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.417583][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.424480][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.430922][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.437653][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.444962][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.451532][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.459454][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.466002][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.472639][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.479434][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.486325][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.493173][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.499699][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.506207][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.512729][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.519173][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.525934][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.536864][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.543620][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.550076][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.558560][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.565817][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.572263][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.578961][ T6632] binder: Unknown parameter 'seo�	x��ܬ��+��M�'
[  119.579375][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.602978][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.609852][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.616544][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.624509][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.631121][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.637679][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.644621][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.644644][ T6636] rust_binder: Write failure EINVAL in pid:44
[  119.651183][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.651211][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.651228][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.651244][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.691704][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.698225][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.704789][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.717519][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.724081][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.730534][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.737110][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.743580][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.750114][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.756782][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.763304][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.769752][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.776920][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.783402][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.789820][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.796250][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.802673][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.809074][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.815516][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.821938][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.828380][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.834828][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.841416][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.847844][ T6621] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  119.899190][ T6651] binder: Bad value for 'stats'
[  119.914127][ T6651] binder: Bad value for 'stats'
[  120.010017][   T12] Bluetooth: hci1: Frame reassembly failed (-90)
[  120.018428][ T6660] input: syz1 as /devices/virtual/input/input126
[  120.059135][ T6669] input: syz1 as /devices/virtual/input/input127
[  120.131393][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  120.131410][   T36] audit: type=1400 audit(1750329071.690:798): avc:  denied  { map } for  pid=6672 comm="syz.5.1992" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  120.341638][   T36] audit: type=1400 audit(1750329071.900:799): avc:  denied  { execute } for  pid=6674 comm="syz.5.1993" path="/307/cgroup.controllers" dev="tmpfs" ino=1614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  120.402850][ T6677] binder: Bad value for 'max'
[  120.505049][ T6682] binder: Binderfs stats mode cannot be changed during a remount
[  120.642469][ T6688] cgroup: fork rejected by pids controller in /syz5
[  120.871203][   T36] audit: type=1400 audit(1750329072.430:800): avc:  denied  { map } for  pid=7033 comm="syz.3.2003" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  120.895170][   T36] audit: type=1400 audit(1750329072.430:801): avc:  denied  { execute } for  pid=7033 comm="syz.3.2003" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  120.929147][   T36] audit: type=1400 audit(1750329072.490:802): avc:  denied  { read } for  pid=7035 comm="syz.5.2004" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  120.953496][   T36] audit: type=1400 audit(1750329072.490:803): avc:  denied  { open } for  pid=7035 comm="syz.5.2004" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  120.978378][   T36] audit: type=1400 audit(1750329072.520:804): avc:  denied  { ioctl } for  pid=7035 comm="syz.5.2004" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  121.182014][   T36] audit: type=1400 audit(1750329072.740:805): avc:  denied  { map } for  pid=7053 comm="syz.3.2009" path="/" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  121.253647][ T7066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  121.253680][ T7066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68
[  121.264114][ T7066] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.372637][  T424] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  121.372674][  T456] Bluetooth: hci0: command 0x1003 tx timeout
[  121.406345][ T7078] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.406572][ T7078] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  121.465438][ T7082] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  121.472231][ T7082] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  121.522405][   T36] audit: type=1400 audit(1750329073.080:806): avc:  denied  { append } for  pid=7093 comm="syz.6.2021" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  121.686151][ T7108] SELinux: failed to load policy
[  121.791434][ T7118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer.
[  121.868013][ T7125] binder: Unknown parameter 't'
[  122.012605][  T424] Bluetooth: hci1: command 0x1003 tx timeout
[  122.012625][   T52] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  122.035318][ T7132] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.213782][   T36] audit: type=1400 audit(1750329073.780:807): avc:  denied  { map } for  pid=7140 comm="syz.1.2035" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  122.441713][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.441739][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.441755][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.462498][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.462523][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.469782][ T7170] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  122.475693][ T7167] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  122.637650][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.651906][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.659840][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.667857][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.675789][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.683527][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.691288][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.699142][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.706981][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.714746][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.722533][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.730359][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.738117][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.746114][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.753953][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.761687][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.769460][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.777291][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.785035][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.792848][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.800583][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.808346][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.816199][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.824072][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.831806][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.839554][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.847309][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.855057][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.862823][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.870540][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.878443][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.886231][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.894119][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.901836][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.909627][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.917485][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.925424][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.933208][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.940947][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.948736][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.956500][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.964436][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.972223][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.980335][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.988472][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  122.996373][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.004134][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.011880][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.019635][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.027380][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.035129][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.042875][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.050593][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.058335][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.066161][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.073909][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.081624][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.089432][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.097170][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.104893][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.112639][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.120464][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.128279][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.136331][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.144195][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.152123][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.160026][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.167943][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.175722][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.183701][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.191698][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.199555][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.207432][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.215638][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.223425][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.231389][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.240746][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.249274][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.257103][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.264912][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.272864][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.280654][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.288434][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.296515][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.304285][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.312243][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.320117][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.327960][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.335780][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.343707][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.351485][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.359262][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.367021][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.375035][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.382807][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.390536][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.398293][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.406049][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.413987][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.421838][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.429581][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.437335][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.445085][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.453017][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.460738][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.468634][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.476429][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.484195][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.491948][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.499699][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.507619][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.515438][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.523298][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.531042][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.539946][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.548871][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.556701][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.565266][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.573046][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.580815][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.588645][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.589727][ T7194] SELinux: failed to load policy
[  123.601891][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.604129][ T7194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203
[  123.618687][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.636041][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.643931][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.651717][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.668671][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.676602][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.684488][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.692372][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.700544][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.708362][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.716165][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.724007][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.731785][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.740040][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.747853][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.755600][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.763361][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.771081][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.778816][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.786582][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.794712][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.802430][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.810203][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.817957][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.825737][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.833568][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.841333][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.849264][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.860664][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.868636][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.878196][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.886168][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.902248][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.910121][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.917963][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.925786][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.933712][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.941451][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.949228][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.956985][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.964724][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.972536][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.980477][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.988317][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  123.996439][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  124.004319][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  124.012113][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: unknown main item tag 0x0
[  124.020359][ T7144] hid-generic 0008:0000:FFFFFBFF.0014: hidraw0: <UNKNOWN> HID v9.86 Device [syz0] on syz1
[  124.085351][ T7213] fido_id[7213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  124.176451][ T7223] random: crng reseeded on system resumption
[  124.193261][ T7229] rust_binder: Error while translating object.
[  124.193287][ T7229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  124.218861][ T7229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1330
[  124.228951][ T7231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1649
[  124.262401][ T7236] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  124.264594][ T7231] rust_binder: Write failure EFAULT in pid:1649
[  124.291280][ T7239] binder: Unknown parameter '<Z%�-d�	��7_�Z�:Q�$y�Ti�U`���G���Q�@.7B���[{�eƺS�E�'
[  124.341414][ T7249] rust_binder: Write failure EINVAL in pid:111
[  124.349502][ T7252] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  124.355743][ T7252] rust_binder: Read failure Err(EFAULT) in pid:114
[  124.382712][ T7256] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false
[  124.393156][ T7257] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  124.544244][ T7272] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  124.567381][ T7272] binder: Unknown parameter '�+v�����A�nr��'
[  124.704418][  T306] Bluetooth: hci0: Frame reassembly failed (-84)
[  124.714697][ T7289] Bluetooth: hci0: Frame reassembly failed (-84)
[  124.721707][ T7289] Bluetooth: hci0: Frame reassembly failed (-84)
[  124.816654][ T7300] binder: Bad value for 'stats'
[  125.082694][ T7309] binder: Unknown parameter 'dont_hash'
[  125.217103][ T7323] input: syz0 as /devices/virtual/input/input131
[  125.423815][ T7340] binder: Unknown parameter 'dont_hash'
[  125.507875][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  125.507890][   T36] audit: type=1400 audit(1750329077.070:814): avc:  denied  { map } for  pid=7356 comm="syz.1.2107" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  125.574514][ T7350] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  125.574535][ T7350] rust_binder: Error in use_page_slow: EBUSY
[  125.584978][ T7350] rust_binder: use_range failure EBUSY
[  125.590969][ T7350] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  125.596524][ T7350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  125.604198][ T7350] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  125.613942][ T7350] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1359
[  125.893215][ T7385] random: crng reseeded on system resumption
[  125.930800][ T7387] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  125.959012][ T7395] kvm: kvm [7394]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400
[  126.011523][   T36] audit: type=1400 audit(1750329077.570:815): avc:  denied  { checkpoint_restore } for  pid=7398 comm="syz.5.2120" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  126.057731][ T7404] input: syz1 as /devices/virtual/input/input132
[  126.064769][   T36] audit: type=1400 audit(1750329077.620:816): avc:  granted  { setsecparam } for  pid=7396 comm="syz.1.2119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  126.087079][   T36] audit: type=1400 audit(1750329077.650:817): avc:  denied  { write } for  pid=7403 comm="syz.3.2122" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  126.109076][   T36] audit: type=1400 audit(1750329077.650:818): avc:  denied  { remove_name } for  pid=7403 comm="syz.3.2122" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  126.134159][   T36] audit: type=1400 audit(1750329077.650:819): avc:  denied  { unlink } for  pid=7403 comm="syz.3.2122" name="binder0" dev="binder" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  126.225607][ T7413] SELinux: failed to load policy
[  126.316580][ T7433] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  126.337845][ T7436] rust_binder: Error in use_page_slow: ESRCH
[  126.337863][ T7436] rust_binder: use_range failure ESRCH
[  126.340245][   T36] audit: type=1326 audit(1750329077.900:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.3.2133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311318e929 code=0x0
[  126.372270][ T7436] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  126.372331][ T7436] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  126.380401][ T7436] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1728
[  126.443357][ T7447] rust_binder: Write failure EFAULT in pid:1735
[  126.455937][ T7447] kvm: kvm [7446]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[  126.633463][   T36] audit: type=1400 audit(1750329078.200:821): avc:  denied  { write } for  pid=7453 comm="syz.1.2138" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  126.672510][ T7456] input: syz1 as /devices/virtual/input/input135
[  126.679172][   T36] audit: type=1400 audit(1750329078.230:822): avc:  denied  { associate } for  pid=7455 comm="syz.1.2139" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  126.730237][ T7458] rust_binder: Write failure EINVAL in pid:1746
[  126.732618][  T424] Bluetooth: hci0: command 0x1003 tx timeout
[  126.733303][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  126.773800][ T7458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1746
[  127.042218][ T7467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:229
[  127.257950][ T7486] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  127.267201][ T7486] rust_binder: Read failure Err(EFAULT) in pid:1756
[  127.282942][ T7486] rust_binder: Error while translating object.
[  127.289634][ T7486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  127.293153][ T7488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  127.296314][ T7486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1756
[  127.305442][ T7488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170
[  127.513483][ T7494] SELinux:  policydb version -492396454 does not match my version range 15-33
[  127.546505][ T7494] SELinux: failed to load policy
[  127.560084][ T7496] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  127.578776][ T7496] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  127.587110][ T7498] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  127.605505][ T7498] SELinux: failed to load policy
[  127.616886][   T36] audit: type=1326 audit(1750329079.180:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.3.2158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311318e929 code=0x0
[  127.655580][ T7503] binder: Bad value for 'max'
[  127.702193][ T7508] rust_binder: Error while translating object.
[  127.702228][ T7508] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  127.712691][ T7508] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1763
[  127.741026][ T7512] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  128.084697][ T7539] input: syz1 as /devices/virtual/input/input136
[  128.354681][ T7562] input: syz1 as /devices/virtual/input/input137
[  128.415957][ T7565] input: syz1 as /devices/virtual/input/input138
[  128.463240][ T7574] binder: Unknown parameter '����'
[  128.757539][ T7589] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  128.757806][ T7589] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION duplicate cookie
[  128.798826][ T7589] rust_binder: Write failure EINVAL in pid:271
[  128.830535][ T7600] kvm: kvm [7599]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1
[  128.853039][ T7601] random: crng reseeded on system resumption
[  128.982402][ T7608] binder: Bad value for 'stats'
[  129.076072][ T7612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:273
[  129.177572][ T7620] SELinux: security_context_str_to_sid () failed with errno=-22
[  129.231207][ T7620] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  129.423078][  T306] bridge_slave_1: left allmulticast mode
[  129.433743][  T306] bridge_slave_1: left promiscuous mode
[  129.463121][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.487553][  T306] bridge_slave_0: left allmulticast mode
[  129.517611][  T306] bridge_slave_0: left promiscuous mode
[  129.541790][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.749993][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.762628][ T7623] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.770753][ T7623] bridge_slave_0: entered allmulticast mode
[  129.779043][ T7623] bridge_slave_0: entered promiscuous mode
[  129.793263][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.802483][ T7623] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.810183][ T7623] bridge_slave_1: entered allmulticast mode
[  129.816400][ T7623] bridge_slave_1: entered promiscuous mode
[  129.832792][  T306] veth1_macvtap: left promiscuous mode
[  129.838339][  T306] veth0_vlan: left promiscuous mode
[  129.940930][ T7623] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.947987][ T7623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.955247][ T7623] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.962278][ T7623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.989990][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.999124][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.008314][  T305] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.015496][  T305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.025279][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.032341][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.070485][ T7623] veth0_vlan: entered promiscuous mode
[  130.084612][ T7623] veth1_macvtap: entered promiscuous mode
[  130.134294][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  130.144449][ T7653] Bluetooth: hci0: Frame reassembly failed (-90)
[  130.210262][ T7658] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  130.413944][ T7664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:289
[  130.428854][ T7666] SELinux:  policydb magic number 0xffff0004 does not match expected magic number 0xf97cff8c
[  130.448222][ T7666] SELinux: failed to load policy
[  130.532641][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  130.532658][   T36] audit: type=1326 audit(1750329082.090:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7674 comm="syz.3.2213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311318e929 code=0x0
[  130.578254][   T36] audit: type=1326 audit(1750329082.140:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7677 comm="syz.5.2214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fdaf398e929 code=0x0
[  130.656329][ T7681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:207
[  130.745062][ T7687] kvm: user requested TSC rate below hardware speed
[  130.838959][ T7699] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:310
[  130.858069][ T7705] random: crng reseeded on system resumption
[  130.903149][ T7705] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  131.047717][ T7715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1462
[  131.059840][ T7722] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  131.076119][ T7722] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  131.088152][ T7722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:322
[  131.088709][ T7727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1468
[  131.349321][ T7737] binder: Bad value for 'defcontext'
[  131.664695][   T36] audit: type=1400 audit(1750329083.230:831): avc:  denied  { unmount } for  pid=3356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  131.692300][ T7757] binder: Unknown parameter '��6)�X����hȕ&i8ؤ@Vs�"��;8	 �ҧ���7�Z#�'
[  131.995379][ T7801] kvm: apic: phys broadcast and lowest prio
[  131.999630][ T7804] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  132.103716][ T7812] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1511
[  132.131149][ T7815] tun0: tun_chr_ioctl cmd 21731
[  132.145434][ T7818] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.145589][ T7818] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  132.153911][ T7815] tun0: tun_chr_ioctl cmd 1074025675
[  132.167277][ T7815] tun0: persist enabled
[  132.171736][ T7815] tun0: tun_chr_ioctl cmd 1074025675
[  132.172597][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  132.177354][  T424] Bluetooth: hci0: command 0x1003 tx timeout
[  132.190092][ T7815] tun0: persist enabled
[  132.204209][ T7819] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1513
[  132.222255][ T7822] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  132.234625][ T7823] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.338572][ T7828] rust_binder: Error while translating object.
[  132.345261][ T7828] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  132.351445][ T7828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333
[  132.421562][ T7845] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  132.440623][ T7846] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  132.479866][ T7851] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  132.494188][ T7853] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  132.504503][ T7851] SELinux: failed to load policy
[  132.544300][ T7849] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  132.551907][ T7849] SELinux: failed to load policy
[  132.577830][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.577857][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.591347][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.591365][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.602609][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.604310][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.610815][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.617492][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.624866][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.633758][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.638066][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.645633][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.651399][ T7866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  132.686990][ T7875] rust_binder: Write failure EFAULT in pid:31
[  132.695815][ T7875] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  132.792103][   T36] audit: type=1326 audit(1750329084.350:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.2285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f244f58e929 code=0x0
[  132.845919][ T7900] binder: Bad value for 'stats'
[  132.861168][ T7902] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  132.871213][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  132.960490][ T7910] rust_binder: Write failure EINVAL in pid:353
[  132.980061][ T7916] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  133.071192][   T36] audit: type=1400 audit(1750329084.630:833): avc:  denied  { setattr } for  pid=7922 comm="syz.1.2295" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  133.279253][ T7935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[  133.338634][ T7939] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  133.397827][ T7946] rust_binder: Error while translating object.
[  133.397856][ T7946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  133.404280][ T7946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1526
[  133.461937][ T7958] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  133.500026][ T7961] SELinux: failed to load policy
[  133.515134][ T7961] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  133.819270][ T7985] random: crng reseeded on system resumption
[  133.856273][ T7987] SELinux: security policydb version 17 (MLS) not backwards compatible
[  133.864667][ T7987] SELinux: failed to load policy
[  134.213074][ T8006] binder: Unknown parameter 'Tڅ�j�]g��Qc�%��_�x�T�$�T/ı{�܀>x��{��AEy��@�v��yˮ�i����.d
6���>������n������O��p�\�x|��֓�{���ӎ�����8�8�Jh<l�z��r��-SHG@[N��u�eHd'
[  134.373278][ T7144] hid (null): unknown global tag 0xc
[  134.381134][ T7144] hid-generic 0080:0006:0036.0015: unknown main item tag 0xe
[  134.391957][ T7144] hid-generic 0080:0006:0036.0015: unknown main item tag 0x0
[  134.401614][ T7144] hid-generic 0080:0006:0036.0015: unknown main item tag 0x4
[  134.413010][ T7144] hid-generic 0080:0006:0036.0015: unknown main item tag 0x1
[  134.422788][ T7144] hid-generic 0080:0006:0036.0015: unknown global tag 0xc
[  134.432743][ T7144] hid-generic 0080:0006:0036.0015: item 0 0 1 12 parsing failed
[  134.440873][ T7144] hid-generic 0080:0006:0036.0015: probe with driver hid-generic failed with error -22
[  134.513551][ T8020] binder: Unknown parameter 'd?(�hash'
[  134.671355][ T8032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67
[  134.783752][ T8048] rust_binder: Write failure EINVAL in pid:83
[  134.793515][ T8050] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  134.806989][ T8049] rust_binder: Write failure EINVAL in pid:83
[  134.864993][ T8062] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  134.873837][ T8062] rust_binder: Error while translating object.
[  134.892619][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  134.892758][  T424] Bluetooth: hci0: command 0x1003 tx timeout
[  134.917485][ T8062] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  134.917520][ T8062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:398
[  134.956082][   T36] audit: type=1326 audit(1750329086.520:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8065 comm="syz.3.2343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f311318e929 code=0x0
[  135.002307][ T8072] SELinux:  truncated policydb string identifier
[  135.009366][ T8072] SELinux: failed to load policy
[  135.033488][ T8074] binder: Unknown parameter 'coO_u�Gй'
[  135.054649][ T8076] rust_binder: Write failure EINVAL in pid:402
[  135.075073][ T8077] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  135.103761][ T8086] SELinux: failed to load policy
[  135.245709][ T8101] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  135.294586][ T8106] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  135.361521][   T36] audit: type=1326 audit(1750329086.920:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc9d8e929 code=0x7ffc0000
[  135.385968][ T8117] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  135.389993][   T36] audit: type=1326 audit(1750329086.920:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc9d8e929 code=0x7ffc0000
[  135.421348][   T36] audit: type=1326 audit(1750329086.920:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4bc9d8e929 code=0x7ffc0000
[  135.445963][   T36] audit: type=1326 audit(1750329086.920:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8114 comm="syz.1.2359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bc9d8e929 code=0x0
[  135.487206][ T8119] rust_binder: Error in use_page_slow: ESRCH
[  135.487225][ T8119] rust_binder: use_range failure ESRCH
[  135.499513][ T8119] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  135.499530][ T8119] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  135.512607][ T8119] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:415
[  135.594313][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  135.594331][   T36] audit: type=1400 audit(1750329087.160:854): avc:  denied  { setcurrent } for  pid=8124 comm="syz.6.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  135.780311][ T8146] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  135.795797][ T8149] binder: Unknown parameter 'euid'
[  135.966675][ T8157] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  135.997463][ T8165] input: syz1 as /devices/virtual/input/input142
[  136.007052][ T8165] input: syz0 as /devices/virtual/input/input143
[  136.131949][ T8174] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  136.185417][ T8174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294
[  136.185421][ T8175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294
[  136.235245][ T8179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.455994][ T8200] kvm: kvm [8199]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3072
[  136.607168][ T8207] rust_binder: Write failure EFAULT in pid:446
[  136.790744][ T8216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  136.822862][ T8205] rust_binder: Write failure EINVAL in pid:1630
[  137.006932][ T8224] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  137.070227][   T36] audit: type=1326 audit(1750329088.630:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.073434][ T8221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115
[  137.083124][   T36] audit: type=1326 audit(1750329088.630:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.137654][   T36] audit: type=1326 audit(1750329088.630:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.161591][   T36] audit: type=1326 audit(1750329088.630:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.185140][   T36] audit: type=1326 audit(1750329088.630:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.208588][   T36] audit: type=1326 audit(1750329088.630:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f244f58e929 code=0x7ffc0000
[  137.233811][   T36] audit: type=1326 audit(1750329088.630:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8237 comm="syz.6.2396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f244f58e929 code=0x0
[  137.533054][ T8269] rust_binder: Error while translating object.
[  137.533086][ T8269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  137.539329][ T8269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:309
[  137.689528][   T13] bridge_slave_1: left allmulticast mode
[  137.712847][   T13] bridge_slave_1: left promiscuous mode
[  137.718527][ T8275] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  137.727017][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.737157][   T13] bridge_slave_0: left allmulticast mode
[  137.743175][   T13] bridge_slave_0: left promiscuous mode
[  137.748962][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.757051][ T8275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1656
[  137.848806][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.865233][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.872378][ T8277] bridge_slave_0: entered allmulticast mode
[  137.878719][ T8277] bridge_slave_0: entered promiscuous mode
[  137.885325][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.892389][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.899543][ T8277] bridge_slave_1: entered allmulticast mode
[  137.906057][ T8277] bridge_slave_1: entered promiscuous mode
[  137.916135][   T13] veth1_macvtap: left promiscuous mode
[  137.921680][   T13] veth0_vlan: left promiscuous mode
[  137.980188][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.987250][ T8277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.994534][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.001559][ T8277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.030630][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.040663][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.054488][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.061567][ T7642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.071077][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.078168][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.086271][ T8282] SELinux: ebitmap: truncated map
[  138.095591][ T8282] SELinux: failed to load policy
[  138.116568][ T8277] veth0_vlan: entered promiscuous mode
[  138.127059][ T8277] veth1_macvtap: entered promiscuous mode
[  138.329120][  T306] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.337522][ T8299] Bluetooth: hci0: Frame reassembly failed (-84)
[  138.416997][ T8303] random: crng reseeded on system resumption
[  138.699294][ T8309] random: crng reseeded on system resumption
[  138.717290][ T8309] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  138.752329][ T8313] input: syz0 as /devices/virtual/input/input147
[  138.960059][   T36] audit: type=1400 audit(1750329090.520:862): avc:  denied  { view } for  pid=8324 comm="syz.5.2421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  139.443421][ T8351] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  139.519922][ T8354] random: crng reseeded on system resumption
[  139.708680][ T8380] rust_binder: Write failure EINVAL in pid:519
[  140.075473][ T8404] rust_binder: Error in use_page_slow: ESRCH
[  140.081709][ T8404] rust_binder: use_range failure ESRCH
[  140.087725][ T8404] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  140.093446][ T8404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  140.101426][ T8404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:536
[  140.196273][ T8412] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  140.264640][ T8422] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  140.332597][  T424] Bluetooth: hci0: command 0x1003 tx timeout
[  140.332608][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  140.424668][ T8434] can0: slcan on ptm0.
[  140.424957][   T36] audit: type=1400 audit(1750329091.990:863): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  140.430525][ T8435] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  140.469370][ T8437] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  140.476368][ T8433] can0 (unregistered): slcan off ptm0.
[  140.513771][ T8438] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  140.514183][ T8438] rust_binder: got new transaction with bad transaction stack
[  140.521951][ T8438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147
[  140.547652][ T8442] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  140.556922][ T8442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1696
[  140.566333][ T8442] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  140.576063][ T8442] rust_binder: Read failure Err(EFAULT) in pid:1696
[  140.605596][   T36] audit: type=1400 audit(1750329092.170:864): avc:  denied  { map } for  pid=8443 comm="syz.5.2467" path="/dev/ttynull" dev="devtmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[  140.656777][ T8452] rust_binder: Write failure EINVAL in pid:1706
[  140.657038][ T8452] rust_binder: Write failure EINVAL in pid:1706
[  140.675948][ T8454] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  140.682357][ T8454] rust_binder: Error while translating object.
[  140.693365][ T8454] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  140.699834][ T8454] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1708
[  140.715951][ T8454] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  140.910296][ T8463] rust_binder: Write failure EINVAL in pid:1711
[  141.041461][ T8484] random: crng reseeded on system resumption
[  141.045351][ T8486] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  141.061804][   T36] audit: type=1400 audit(1750329092.620:865): avc:  denied  { map } for  pid=8482 comm="syz.6.2483" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  141.075026][ T8489] binder: Bad value for 'defcontext'
[  141.118459][ T8496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[  141.125606][ T8493] kvm: kvm [8491]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4
[  141.146129][ T8494] binder: Unknown parameter ''
[  141.230008][ T8509] random: crng reseeded on system resumption
[  141.251800][ T8509] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  141.346532][ T8513] rust_binder: Error while translating object.
[  141.346562][ T8513] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  141.357208][ T8513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:54
[  141.357330][   T36] audit: type=1326 audit(1750329092.920:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8530 comm="syz.6.2501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f244f58e929 code=0x0
[  141.398632][ T8529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157
[  141.398856][ T8529] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  141.414602][ T8529] rust_binder: Read failure Err(EFAULT) in pid:157
[  141.521316][ T8548] binder: Unknown parameter 'dont_hash'
[  141.543248][ T8550] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1727
[  141.563261][   T36] audit: type=1400 audit(1750329093.130:867): avc:  denied  { attach_queue } for  pid=8555 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  141.593680][ T8556] rust_binder: Error in use_page_slow: ESRCH
[  141.593694][ T8556] rust_binder: use_range failure ESRCH
[  141.602299][ T8557] rust_binder: Error in use_page_slow: ESRCH
[  141.605295][ T8556] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  141.607800][ T8557] rust_binder: use_range failure ESRCH
[  141.607819][ T8557] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  141.607830][ T8557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  141.607853][ T8557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1733
[  141.614113][ T8556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  141.655890][ T8560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159
[  141.664372][ T8556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1733
[  141.686889][ T8565] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  141.703720][ T8565] rust_binder: Write failure EINVAL in pid:162
[  141.722088][ T8569] kvm: kvm [8568]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[  141.738336][ T8569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166
[  141.923821][ T8579] rust_binder: Write failure EINVAL in pid:1737
[  142.054894][ T8591] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  142.350823][ T8606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1746
[  142.462283][ T8614] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  142.599990][ T8625] SELinux:  policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c
[  142.618248][ T8625] SELinux: failed to load policy
[  142.751799][ T8632] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  142.762732][ T8633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  142.771709][ T8632] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  142.778823][ T8633] rust_binder: Error in use_page_slow: ESRCH
[  142.778840][ T8633] rust_binder: use_range failure ESRCH
[  142.784963][ T8633] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  142.790471][ T8633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  142.798429][ T8633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:195
[  142.838231][ T8640] SELinux:  policydb magic number 0x616e6572 does not match expected magic number 0xf97cff8c
[  142.852393][ T8643] rust_binder: Read failure Err(EAGAIN) in pid:77
[  142.860149][ T8640] SELinux: failed to load policy
[  142.932497][ T8649] kvm: user requested TSC rate below hardware speed
[  142.978923][   T36] audit: type=1400 audit(1750329094.540:868): avc:  denied  { ioctl } for  pid=8652 comm="syz.3.2544" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  143.025247][ T8655] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  143.040591][ T8662] binder: Bad value for 'max'
[  143.065234][ T8664] rust_binder: Write failure EINVAL in pid:203
[  143.120058][ T8675] binder: Bad value for 'stats'
[  143.148052][ T8677] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  143.181066][ T8687] random: crng reseeded on system resumption
[  143.195693][ T8686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  143.195720][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102
[  143.205813][ T8687] rust_binder: Write failure EINVAL in pid:102
[  143.228836][ T8693] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  143.297121][ T8696] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.305362][ T8696] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  143.316089][ T8696] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  143.426227][ T8700] SELinux: security_context_str_to_sid () failed with errno=-22
[  143.442992][ T8700] rust_binder: Error while translating object.
[  143.443017][ T8700] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  143.449186][ T8700] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:113
[  143.460024][ T8700] SELinux: security_context_str_to_sid () failed with errno=-22
[  143.581002][ T8711] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  143.619860][ T8723] SELinux:  policydb magic number 0xffff does not match expected magic number 0xf97cff8c
[  143.629896][ T8723] SELinux: failed to load policy
[  143.644039][ T7642] Bluetooth: hci0: Frame reassembly failed (-84)
[  143.650589][ T7642] Bluetooth: hci0: Frame reassembly failed (-84)
[  143.657303][ T7642] Bluetooth: hci0: Frame reassembly failed (-84)
[  143.663926][   T36] audit: type=1400 audit(1750329095.230:869): avc:  denied  { map } for  pid=8725 comm="syz.3.2567" path="/proc/139/attr/sockcreate" dev="proc" ino=144509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  144.179152][ T8758] rust_binder: Write failure EINVAL in pid:1761
[  144.195824][ T8761] binder: Bad value for 'defcontext'
[  144.232906][   T36] audit: type=1326 audit(1750329095.800:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.5.2580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x0
[  144.283750][ T8768] rust_binder: Error while translating object.
[  144.283778][ T8768] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  144.290026][ T8768] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:598
[  144.308077][ T8769] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  144.317553][ T8763] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  144.317614][ T8769] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  144.366528][ T8777] deleting an unspecified loop device is not supported.
[  144.538823][ T8794] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[  144.542351][ T8794] can0: slcan on ptm2.
[  144.544142][   T36] audit: type=1400 audit(1750329096.110:871): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  144.589723][   T36] audit: type=1400 audit(1750329096.110:872): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n24" dev="tmpfs" ino=10903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  144.611710][   T36] audit: type=1400 audit(1750329096.110:873): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n24" dev="tmpfs" ino=10903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  144.676585][ T8793] can0 (unregistered): slcan off ptm2.
[  144.740921][ T8816] cgroup: fork rejected by pids controller in /syz1
[  144.780222][ T8816] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  144.780349][ T8816] rust_binder: Write failure EINVAL in pid:227
[  144.842383][ T8830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:621
[  145.279737][ T8859] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  145.288979][ T8859] rust_binder: Error in use_page_slow: EBUSY
[  145.299386][ T8859] rust_binder: use_range failure EBUSY
[  145.309084][ T8859] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  145.320360][ T8859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  145.328032][ T8859] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  145.337391][ T8859] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1783
[  145.617167][ T8885] input: syz1 as /devices/virtual/input/input155
[  145.674249][ T7642] bridge_slave_1: left allmulticast mode
[  145.680122][ T7642] bridge_slave_1: left promiscuous mode
[  145.686104][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.693154][   T52] Bluetooth: hci0: command 0x1003 tx timeout
[  145.699371][ T7642] bridge_slave_0: left allmulticast mode
[  145.700390][  T424] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  145.705386][ T7642] bridge_slave_0: left promiscuous mode
[  145.717157][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.787668][ T8895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  145.881070][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.881131][ T8905] random: crng reseeded on system resumption
[  145.888224][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.901489][ T8898] bridge_slave_0: entered allmulticast mode
[  145.908056][ T8898] bridge_slave_0: entered promiscuous mode
[  145.918466][ T7642] veth1_macvtap: left promiscuous mode
[  145.931129][ T7642] veth0_vlan: left promiscuous mode
[  145.994967][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.002047][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.009150][ T8898] bridge_slave_1: entered allmulticast mode
[  146.015309][ T8898] bridge_slave_1: entered promiscuous mode
[  146.066677][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.073774][ T8898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.081104][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.088138][ T8898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.108978][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.116572][ T8915] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  146.126840][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.127323][ T8915] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  146.147924][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.154992][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.170282][ T8918] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  146.173279][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.186786][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.209520][ T8898] veth0_vlan: entered promiscuous mode
[  146.219509][ T8898] veth1_macvtap: entered promiscuous mode
[  146.269742][ T8924] SELinux: security_context_str_to_sid (sytem_u�G�����������) failed with errno=-22
[  146.341061][ T8931] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  146.341085][ T8931] rust_binder: Error in use_page_slow: EBUSY
[  146.352111][ T8932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[  146.358374][ T8931] rust_binder: use_range failure EBUSY
[  146.367548][ T8931] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  146.373071][ T8931] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  146.386547][ T8931] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  146.396128][ T8931] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:2
[  146.407151][ T8939] rust_binder: Failed to allocate buffer. len:65568, is_oneway:false
[  146.714674][ T8963] rust_binder: Error in use_page_slow: ESRCH
[  146.714688][ T8963] rust_binder: use_range failure ESRCH
[  146.720664][ T8963] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  146.726286][ T8963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  146.743635][ T8963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:666
[  146.773709][ T8965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1827
[  146.814003][ T8976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[  146.948811][ T8994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166
[  146.995835][ T9000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22
[  147.010472][ T8995] rust_binder: Write failure EFAULT in pid:166
[  147.020141][ T8994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166
[  147.220149][ T9005] random: crng reseeded on system resumption
[  147.284243][ T9012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.297158][ T9012] input: syz1 as /devices/virtual/input/input157
[  147.312887][ T9012] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  147.322680][ T9012] SELinux: failed to load policy
[  147.329679][ T9017] binder: Unknown parameter '00000000000000000003'
[  147.336729][ T9012] binder: Unknown parameter '�eclabel'
[  147.346168][ T9019] binder: Unknown parameter '00000000000000000003'
[  147.479840][ T9032] rust_binder: Write failure EINVAL in pid:1843
[  147.551268][ T9035] binder: Unknown parameter 'mah'
[  147.899075][ T9082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:185
[  147.906296][ T9082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.924831][ T9082] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  147.963116][   T36] kauditd_printk_skb: 12 callbacks suppressed
[  147.963135][   T36] audit: type=1326 audit(1750329099.530:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.002635][   T36] audit: type=1326 audit(1750329099.530:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.028270][   T36] audit: type=1326 audit(1750329099.560:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.051979][   T36] audit: type=1326 audit(1750329099.560:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.075406][   T36] audit: type=1326 audit(1750329099.560:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.099675][   T36] audit: type=1326 audit(1750329099.560:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.123172][   T36] audit: type=1326 audit(1750329099.560:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.146858][   T36] audit: type=1326 audit(1750329099.560:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.185431][   T36] audit: type=1326 audit(1750329099.560:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.186142][ T9098] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.209193][   T36] audit: type=1326 audit(1750329099.560:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9086 comm="syz.5.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf398e929 code=0x7ffc0000
[  148.244841][ T9108] input: syz0 as /devices/virtual/input/input160
[  148.272298][ T9110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1873
[  148.273428][ T9113] SELinux:  policydb string length 800 does not match expected length 8
[  148.291391][ T9113] SELinux: failed to load policy
[  148.294714][ T9110] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  148.328086][ T9115] rust_binder: Write failure EFAULT in pid:695
[  148.343493][ T9115] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  148.349760][ T9113] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  148.357266][ T9113] rust_binder: Read failure Err(EFAULT) in pid:52
[  148.583478][ T9124] rust_binder: Error while translating object.
[  148.591395][ T9124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  148.597577][ T9124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:194
[  148.644532][ T9130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  148.668995][  T556] hid (null): unknown global tag 0xc
[  148.679818][  T556] hid-generic 0008:0006:0080.0016: unknown global tag 0xc
[  148.688119][  T556] hid-generic 0008:0006:0080.0016: item 0 0 1 12 parsing failed
[  148.695985][  T556] hid-generic 0008:0006:0080.0016: probe with driver hid-generic failed with error -22
[  148.845178][ T9148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1878
[  148.914269][ T7642] bridge_slave_1: left allmulticast mode
[  148.929204][ T7642] bridge_slave_1: left promiscuous mode
[  148.934888][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.942261][ T7642] bridge_slave_0: left allmulticast mode
[  148.947963][ T7642] bridge_slave_0: left promiscuous mode
[  148.953840][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.068284][ T9160] binder: Unknown parameter '����'
[  149.099104][ T7642] veth1_macvtap: left promiscuous mode
[  149.104663][ T7642] veth0_vlan: left promiscuous mode
[  149.150112][ T9165] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  149.161090][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.163543][ T9170] SELinux: security_context_str_to_sid () failed with errno=-22
[  149.169102][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.195544][ T9161] bridge_slave_0: entered allmulticast mode
[  149.201983][ T9161] bridge_slave_0: entered promiscuous mode
[  149.213499][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.220561][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.234099][ T9161] bridge_slave_1: entered allmulticast mode
[  149.240303][ T9161] bridge_slave_1: entered promiscuous mode
[  149.280034][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.287081][ T9161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.294346][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.301355][ T9161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.323125][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.330444][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.339100][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.346143][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.355871][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.362929][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.385215][ T9185] rust_kernel: panicked at /syzkaller/managers/ci2-android-6-12-rust/kernel/rust/kernel/page_size_compat.rs:60:5:
[  149.385215][ T9185] attempt to add with overflow
[  149.398106][ T9161] veth0_vlan: entered promiscuous mode
[  149.402696][ T9185] ------------[ cut here ]------------
[  149.412982][ T9185] kernel BUG at rust/helpers/bug.c:7!
[  149.415756][ T9161] veth1_macvtap: entered promiscuous mode
[  149.419377][ T9185] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  149.431041][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.6.2710 Not tainted 6.12.23-syzkaller-g30b14cdad458 #0 c708c6bafa1314b3e84c64b9f03b67766970ebbd
[  149.444489][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  149.454587][ T9185] RIP: 0010:rust_helper_BUG+0x8/0x10
[  149.459933][ T9185] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 61 65 9d f7 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 2b a1 d4 7b 90 90 90 90 90 90 90 90 90
[  149.479586][ T9185] RSP: 0018:ffffc9000122f3f0 EFLAGS: 00010246
[  149.485690][ T9185] RAX: 000000000000008c RBX: 1ffff92000245e80 RCX: 96020025f93c1500
[  149.493680][ T9185] RDX: ffffc9000e151000 RSI: 0000000000003878 RDI: 0000000000003879
[  149.501730][ T9185] RBP: ffffc9000122f3f0 R08: ffffc9000122f0e7 R09: 1ffff92000245e1c
[  149.509776][ T9185] R10: dffffc0000000000 R11: fffff52000245e1d R12: 0000000000000000
[  149.517727][ T9185] R13: dffffc0000000000 R14: ffffc9000122f420 R15: ffffc9000122f450
[  149.525689][ T9185] FS:  00007f244dbf76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  149.534601][ T9185] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  149.541162][ T9185] CR2: 0000001b3231fffc CR3: 000000013a298000 CR4: 00000000003526b0
[  149.549119][ T9185] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff
[  149.557165][ T9185] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  149.565126][ T9185] Call Trace:
[  149.568389][ T9185]  <TASK>
[  149.571300][ T9185]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  149.578851][ T9185]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  149.586818][ T9185]  ? kernel_text_address+0xa9/0xe0
[  149.591918][ T9185]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  149.605452][ T9185]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  149.611635][ T9185]  ? arch_stack_walk+0x10b/0x170
[  149.616551][ T9185]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  149.623741][ T9185]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  149.631658][ T9185]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0xb2/0xc0
[  149.641546][ T9185]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_add_overflow+0x10/0x10
[  149.652649][ T9185]  _RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0xe44/0xfb0
[  149.664900][ T9185]  ? mas_wr_store_type+0x8eb/0x1ad0
[  149.670094][ T9185]  ? __cfi__RNvXs1_CscPPBqWtAqum_11ashmem_rustNtB5_6AshmemNtNtCs43vyB533jt3_6kernel10miscdevice10MiscDevice4mmap+0x10/0x10
[  149.682846][ T9185]  ? mas_preallocate+0x56e/0xc60
[  149.687774][ T9185]  ? __cfi_mas_preallocate+0x10/0x10
[  149.693041][ T9185]  ? kasan_save_alloc_info+0x40/0x50
[  149.698316][ T9185]  ? __asan_memset+0x39/0x50
[  149.702892][ T9185]  mmap_region+0x1371/0x1bd0
[  149.707479][ T9185]  ? __cfi_mmap_region+0x10/0x10
[  149.712407][ T9185]  ? __futex_queue+0x19a/0x340
[  149.717164][ T9185]  ? __kasan_check_read+0x15/0x20
[  149.722184][ T9185]  ? arch_get_unmapped_area_topdown+0x232/0x8d0
[  149.728417][ T9185]  ? file_mmap_ok+0x147/0x1a0
[  149.733086][ T9185]  do_mmap+0xb6d/0x13c0
[  149.737237][ T9185]  ? __cfi_do_mmap+0x10/0x10
[  149.741820][ T9185]  ? down_write_killable+0xe9/0x2d0
[  149.746999][ T9185]  ? __cfi_down_write_killable+0x10/0x10
[  149.752609][ T9185]  vm_mmap_pgoff+0x38f/0x4e0
[  149.757201][ T9185]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  149.762292][ T9185]  ? __fget_files+0x2c5/0x340
[  149.766945][ T9185]  ksys_mmap_pgoff+0x166/0x1e0
[  149.771687][ T9185]  __x64_sys_mmap+0x121/0x140
[  149.776337][ T9185]  x64_sys_call+0x13bf/0x2ee0
[  149.780991][ T9185]  do_syscall_64+0x58/0xf0
[  149.785385][ T9185]  ? clear_bhb_loop+0x35/0x90
[  149.790036][ T9185]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  149.795913][ T9185] RIP: 0033:0x7f244f58e929
[  149.800303][ T9185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  149.819984][ T9185] RSP: 002b:00007f244dbf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  149.828640][ T9185] RAX: ffffffffffffffda RBX: 00007f244f7b5fa0 RCX: 00007f244f58e929
[  149.836629][ T9185] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000
[  149.844608][ T9185] RBP: 00007f244f610b39 R08: 0000000000000003 R09: 0000000000000000
[  149.852553][ T9185] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  149.860499][ T9185] R13: 0000000000000000 R14: 00007f244f7b5fa0 R15: 00007fffff4ca0a8
[  149.868448][ T9185]  </TASK>
[  149.871444][ T9185] Modules linked in:
[  149.875755][ T9185] ---[ end trace 0000000000000000 ]---
[  149.884260][ T9185] RIP: 0010:rust_helper_BUG+0x8/0x10
[  149.889607][ T9185] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 61 65 9d f7 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 2b a1 d4 7b 90 90 90 90 90 90 90 90 90
[  149.930499][ T9185] RSP: 0018:ffffc9000122f3f0 EFLAGS: 00010246
[  149.960119][ T9185] RAX: 000000000000008c RBX: 1ffff92000245e80 RCX: 96020025f93c1500
[  149.982874][ T9185] RDX: ffffc9000e151000 RSI: 0000000000003878 RDI: 0000000000003879
[  149.990912][ T9185] RBP: ffffc9000122f3f0 R08: ffffc9000122f0e7 R09: 1ffff92000245e1c
[  150.009894][ T9185] R10: dffffc0000000000 R11: fffff52000245e1d R12: 0000000000000000
[  150.021282][ T9185] R13: dffffc0000000000 R14: ffffc9000122f420 R15: ffffc9000122f450
[  150.029358][ T9185] FS:  00007f244dbf76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  150.038438][ T9185] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  150.045601][ T9185] CR2: 000055c4d05d0b98 CR3: 000000013a298000 CR4: 00000000003526b0
[  150.054141][ T9185] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff
[  150.062161][ T9185] DR3: 0000000000000009 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  150.071892][ T9185] Kernel panic - not syncing: Fatal exception
[  150.078275][ T9185] Kernel Offset: disabled
[  150.082584][ T9185] Rebooting in 86400 seconds..