last executing test programs:

5m37.162060527s ago: executing program 3 (id=28):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x620000, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100), 0x620000, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fffffffffffffff)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
close(r2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="3383250a551d"})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d05, 0x0, 0x390}]})
mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x8, 0x30, r2, 0x4000)

5m36.92384913s ago: executing program 3 (id=36):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x183081, 0x0)
write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='unlock i'], 0xa)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000ecffffff8202"])
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff7, 0xfffffffffffffd80, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

5m36.864653492s ago: executing program 3 (id=38):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"])
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB])
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))

5m36.702497354s ago: executing program 3 (id=41):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844294623"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "0ae63a602b4f9335484d9d6e7470b56e89b19b"}, 0x5) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32)

5m36.608956096s ago: executing program 3 (id=45):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
write$tcp_mem(r0, &(0x7f00000000c0)={0x0, 0x20, 0x5, 0x20, 0xfffffffffffffffc}, 0x48)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="6b81efeb266e746500a7c135a559782606000b01ad3e568d"])

5m36.608378076s ago: executing program 3 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x8, 0x6, 0x8, '\x00', 0x5})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x400}], 0x0, 0x1000000, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000100), 0xa000, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x7, &(0x7f0000000000)=[{0x8, 0x2a, 0x2e, 0x400}, {0x7, 0x3, 0x2, 0x7fff}, {0x1, 0x92, 0x6, 0x6}, {0xf, 0x1, 0x2, 0x9}, {0x1b, 0x9, 0x3, 0x7}, {0x9, 0x3, 0x4f, 0x4131}, {0x9, 0x74, 0x6, 0x8}]})
syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
write$selinux_load(r3, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "539b4d762210c7ab576d493e26983f3656f36355cdd2e43c8d8b29da7fb3ba5ade14a2735ec2fe1aa5c9ac5e592426e67be07b294256619608a2ea26"}, 0x4c)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000140)={0x4, 0x8080000, 0x80000000, 0x11f3f2f4ed9e892e, 0x8})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000002c0)={0x80a0000, 0x6000})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0xfffffffb, 0xa788, 0xc, 0x7, 0x8, 0x9, 0xf, 0x9b, 0x3, 0x6, 0x6, 0x4, 0xd}, {0x5, 0x0, 0x4, 0x63, 0xff, 0x5, 0xdb, 0x8, 0x4b, 0x40, 0x4, 0x6, 0xfff}, {0x3ff, 0x400, 0x8, 0x80, 0x0, 0x7, 0xb3, 0x7, 0xf9, 0xfe, 0x1, 0x9, 0x800}], 0x7f})

5m21.572677995s ago: executing program 32 (id=46):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x2)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x8, 0x6, 0x8, '\x00', 0x5})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x200, 0x20)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x400}], 0x0, 0x1000000, 0x0})
r4 = openat$kvm(0x0, &(0x7f0000000100), 0xa000, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x7, &(0x7f0000000000)=[{0x8, 0x2a, 0x2e, 0x400}, {0x7, 0x3, 0x2, 0x7fff}, {0x1, 0x92, 0x6, 0x6}, {0xf, 0x1, 0x2, 0x9}, {0x1b, 0x9, 0x3, 0x7}, {0x9, 0x3, 0x4f, 0x4131}, {0x9, 0x74, 0x6, 0x8}]})
syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000019}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa5)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
write$selinux_load(r3, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "539b4d762210c7ab576d493e26983f3656f36355cdd2e43c8d8b29da7fb3ba5ade14a2735ec2fe1aa5c9ac5e592426e67be07b294256619608a2ea26"}, 0x4c)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000140)={0x4, 0x8080000, 0x80000000, 0x11f3f2f4ed9e892e, 0x8})
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000002c0)={0x80a0000, 0x6000})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mount$binderfs(0x0, &(0x7f0000003e00)='./binderfs\x00', 0x0, 0x104000, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0xfffffffb, 0xa788, 0xc, 0x7, 0x8, 0x9, 0xf, 0x9b, 0x3, 0x6, 0x6, 0x4, 0xd}, {0x5, 0x0, 0x4, 0x63, 0xff, 0x5, 0xdb, 0x8, 0x4b, 0x40, 0x4, 0x6, 0xfff}, {0x3ff, 0x400, 0x8, 0x80, 0x0, 0x7, 0xb3, 0x7, 0xf9, 0xfe, 0x1, 0x9, 0x800}], 0x7f})

3m58.948499498s ago: executing program 4 (id=1422):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20440, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x9, 0x9c8, 0x5, 0xfff7, 0x12, "47e509d32d4f8001"})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000001180)={0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000000c0)=[@increfs_done={0x40106308, 0x1}, @exit_looper], 0xd7, 0x0, &(0x7f0000000100)="72950724fc23f95e16e8cbbb3be4141fd60e4ebd71f0c512a63cebb72864da3bde79aae3ce669ec0cb30b5c702f7cc8c6f4f59b65f3305ecc2044e8234626b474aaacb811a895bf659147bedb29b4b8070eb99f92c2af2959640a8ec1f01dbaa80169347b07e07340425ad859025a35d609405bd92c695c44eeeca7c10146b6972c9dbe835ac2642612ead73514344c7c5866bda02db423f9dd8bd30af900bcde3f154fde3abc73bb5efaa9a8f9dbfb4394db39ecf44c8d02d6af93df14deba6791407029c9f33df653939040fe16d693c6e4d1a25ded3"})

3m58.035717912s ago: executing program 4 (id=1429):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0xdc})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4008af60, &(0x7f0000000940))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$selinux_load(r6, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x8, 0x0, [{0xa7d}, {0x2d4}, {0x864}, {0xa7e, 0x0, 0x4}, {0x2da, 0x0, 0x10001}, {0x947, 0x0, 0x8}, {0xa67, 0x0, 0x24}, {0x317, 0x0, 0xffffffffffffff6d}]})
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000080)=0x16)
ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000100)={0x7fff, 0x7f, 0xfffffffe, 0xd52, 0x9, "0a0000341c00"})
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000240))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x30, 0x0, &(0x7f0000000000)=[@enter_looper, @dead_binder_done, @register_looper, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, 0x2}], 0xb0, 0x0, &(0x7f0000000240)="2217953adb7446920a2b87e282fa125503932c74dd89209ddd8a302c74e030bd34907c331b2d392676321c0293c2091dd477c2f497b8ec2c606d41e181e90d7c3414730bd17cbd7f55d7762d56cf8f1959c1d2c448dbfc374d49e3c08cdf09b90521a25a730cc381e6be02ee7b4df8b7154b2cd602214a1dbffb291f4ddbf4faa2b865c6ee5518baeb5c5ebe38456aea5c7ca6f65d5fc7360b3dffa1df594a8d280bc33abcc12b52f3dbf556c3a270d4"})
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x0, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})

3m57.123419336s ago: executing program 4 (id=1445):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x10201, 0x4, 0xeeee8000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x10001, 0x7, 0x1, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x6, 0x0, 0x81, 0x100000, 0x0, 0x2004c9, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4], 0xeeee8000, 0x42240}) (async, rerun: 32)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000004, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r5, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async, rerun: 32)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32)
r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 32)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000011, 0x4010, 0xffffffffffffffff, 0x7f092000) (async, rerun: 32)
mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12) (async)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x80) (async, rerun: 64)
write(0xffffffffffffffff, &(0x7f0000000080)="c29a210bc720ca488cfad2bb7ba4bcb037336991887da20990e698334e74b7c924859c74787902b6e889c16870d2d523f045", 0x32) (async, rerun: 64)
r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

3m56.899017679s ago: executing program 4 (id=1448):
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x9, 0x8})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000100))
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x7589, 0x8})
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x8)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x400800, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000200))
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000480)={0x5, <r4=>r3, 'id0\x00'})
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x100000001)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read(r3, &(0x7f0000000540)=""/62, 0x3e)
syz_clone(0x1000, &(0x7f0000000580)="988a39a0539c7d71d3a8c6a3ca261c954d", 0x11, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="a6df245edd06b57b4b44f02764b7835ab08ca5462917831d27b80eb7830b6f53b65373874822690764c8538494360619f000e82e0ccadeaa86bc")
read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000026c0)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0x204, 0x0, 0x5, 0xa5, 0x9, 0x0, 0x0, 0x10, 0x4}}, 0x50)
r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000002780)='memory.swap.current\x00', 0x0, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000027c0)={0x73622a85, 0x1001})
r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x3000)=nil, r9, 0x0, 0x8010, r5, 0x0)
close_range(r4, r3, 0x2)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000002840)={0x80000000, 0x40, '\x00', 0x1, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002880)={'gre0\x00', 0x2})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000028c0)={0x0, 0x7, 0x1ff, 0x6})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000002900), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, &(0x7f0000002980)={0x12})

3m56.703716162s ago: executing program 4 (id=1451):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x5, 0x10, 0xf1, 0x0, 0x970, 0x8, 0xffffffffffffffff, 0xb, 0x0, 0x5, 0x0, 0xbdb], 0xfffe1001, 0x3d4e00})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"])
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000480)={0xe, 0x1})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x4)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)=@x86={0x1, 0x13, 0x2, 0x0, 0xfffffff9, 0x4, 0x7, 0xc7, 0xac, 0x6, 0x10, 0x8, 0x0, 0x154, 0xc6f, 0x8, 0x0, 0x8, 0x3, '\x00', 0x31, 0xc41})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000000000007b01"])
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc00c6211, 0x0)

3m54.459443947s ago: executing program 4 (id=1474):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', 0x42, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
prctl$PR_GET_SECUREBITS(0x1b)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x0, 0xdaa9}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40103d0b, &(0x7f0000000040)={{0x0, 0x3}})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"])
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x1c)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x400})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x325)

3m50.363706039s ago: executing program 0 (id=1507):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x1c4, 0x0, 0x6}]})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00')

3m50.167928032s ago: executing program 0 (id=1510):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x20000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), 0xbc, 0x0, &(0x7f0000000140)="73023eb4e0408ac2cd3a9f51291feb2da178fe92f23478a1a9c708a7d2de1f13c7104d48ab0306fba5ecc6d49b8d251fd87ca07cbdbc381a3a05031e4565a9bc227ec9acf137e2d8a6e9a1feb70d702a8b6a835d5503b1533fa27d1b2256822030cdec1f2f24d84fcaaa2700000000000000000000000000000056d0ebba46630908a187fc2b77b84a8ae5f708ad333f14cf17cc166fd5fb7f6dba22c0f004326c09b3349026eb79f881f2e33ffee323c528c9a7c678b48246524dc2"})

3m49.835698187s ago: executing program 0 (id=1514):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x408)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x8)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x8, 0x30, r1, 0x98979000)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='\x00')
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)

3m47.70142855s ago: executing program 0 (id=1538):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x401, 0x155)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000001180)={'\x00', 0x7fff, 0x88, 0x18, 0x0, 0x3, 0x1000, 0x80a0000, '\x00', 0x5bd})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x1})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x5, 0x2})
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=[@release={0x40046306, 0x3}], 0xfffffffe, 0x0, 0x0})

3m47.571603822s ago: executing program 0 (id=1539):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000001c0)=0x4)
ioctl$KVM_GET_SREGS(r3, 0x8138ae83, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x80000000000000e) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000001780), 0x40200, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x622380, 0x0)
read$FUSE(r6, &(0x7f00000017c0)={0x2020}, 0x2020)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x80a0000}) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x72d, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0xb, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x6, 0x8000000000000000, 0xff], 0x0, 0x41845})
ioctl$KVM_RUN(r10, 0xae80, 0x0) (async)
ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000040))

3m47.387587255s ago: executing program 0 (id=1540):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb, 0x3})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d000040000000009003000000a9dd4a"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000003c0)=0x7)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)

3m39.353622667s ago: executing program 33 (id=1474):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs/file0\x00', 0x42, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
prctl$PR_GET_SECUREBITS(0x1b)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xa)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10004, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{0x0, 0xdaa9}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r1, 0x5501)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40103d0b, &(0x7f0000000040)={{0x0, 0x3}})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"])
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x1c)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x400})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x325)

3m32.421034073s ago: executing program 34 (id=1540):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x6)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb, 0x3})
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x1015, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d000040000000009003000000a9dd4a"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000003c0)=0x7)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)

1m28.599679724s ago: executing program 2 (id=3409):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x9)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2e, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x88, 0x0, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7ff, 0x8, 0x76, 0x8, 0x0, 0x81, 0x140, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x10000008, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x5, 0x800, 0x2, 0x87, 0x6, 0x1, 0x806], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7ffe, 0x9, 0x0, 0x5, 0x4, 0x7, 0x88, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xb32, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30002000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x3fc, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x3, 0x3ff, 0xff, 0x1, 0x40, 0x8c15, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x7ff, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x5, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x5, 0x7, 0x0, 0x7fffffff, 0x5, 0x11b, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x9, 0x1, 0x101, 0x8}, 0x22, [0x80, 0x6, 0x56, 0x80000001, 0x1922, 0x2, 0x67a8, 0x9, 0x0, 0x2, 0x9, 0x8, 0x5e5, 0x800, 0x2, 0x9, 0x3ff, 0x20, 0xddf, 0x1, 0x1ff, 0xfffffff8, 0x1, 0x5, 0x5, 0x23, 0x5, 0xffff, 0xffff8000, 0xfffffffd, 0x3, 0x6, 0xfffffff9, 0x1, 0x4, 0x7, 0x2, 0x401, 0x94, 0x9, 0x4, 0x8, 0x3, 0x9, 0x10001, 0x3, 0x5, 0x401, 0x10001, 0x7ff, 0x40, 0xd, 0x1000, 0x5, 0x1, 0x101, 0x4, 0x80000001, 0x8, 0x8e, 0x6, 0x5, 0x3bf9, 0x91], [0xbd5, 0x9, 0x7f, 0x0, 0xfffffffc, 0x4, 0x6, 0x10001, 0x3, 0x80000001, 0x6, 0xfffffff9, 0x8, 0xe, 0xc, 0x4, 0x28f5, 0xc, 0x5, 0x38a5, 0xdaec, 0xd4, 0x0, 0x8, 0x3ff, 0x1, 0x8, 0x1, 0x200, 0x7fff, 0xfffffff9, 0x0, 0x1, 0x2f, 0x3b53, 0x8001, 0xeee, 0x9, 0x7b, 0x943, 0x8, 0xd, 0x29e, 0x9, 0x9, 0x10001, 0x3a, 0x4, 0x0, 0xf137, 0x4, 0x9, 0x9, 0x7f, 0x5, 0x9, 0x800, 0x1350, 0x35a29e2d, 0x0, 0x82b, 0x3, 0x1, 0x2], [0x0, 0x8, 0x400, 0x1, 0x9, 0x800, 0x8, 0x10001, 0x9, 0x9, 0xfffff98d, 0x7, 0x75e2f897, 0x4, 0x6, 0x9, 0x5, 0x8001, 0x5, 0x918a, 0xdfc2, 0xffffffff, 0x5, 0xd, 0xb, 0x4, 0x10000, 0x7, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5, 0xa73f, 0x6, 0x7, 0x1, 0x2, 0xffffffff, 0x9, 0x200, 0x77, 0x401, 0x0, 0x0, 0x1ff, 0x9, 0xd, 0x9, 0x52, 0x3, 0x8, 0x7, 0x80, 0xffffffff, 0x4, 0x8, 0x7, 0x7, 0x5, 0x9, 0x0, 0x1ff], [0x8, 0xfff, 0xe73, 0x1, 0x3, 0x127, 0x0, 0x8, 0x1ff, 0x7f, 0x6, 0x6, 0x7, 0x9ca, 0x9, 0x2, 0x4, 0x4, 0x8, 0xb8d, 0xbf6, 0x6, 0x5, 0x9, 0xfffffffe, 0x2, 0x2, 0x2, 0xff, 0x1, 0xcf, 0x3ff, 0x4, 0x3, 0x2, 0x369, 0x6, 0x1, 0x5, 0x1, 0xffffff3b, 0x8, 0x2, 0x8, 0xb, 0x1, 0x1, 0x0, 0x2, 0x5, 0x8, 0x7, 0x2, 0x1, 0x4, 0x7, 0x7f, 0xa4447459, 0x8, 0xf, 0x9, 0x8000c, 0x10, 0xc]}, 0x45c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team_slave_1\x00', 0x5})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x252000, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000540)={0x3, 0x0, [{0xb, 0x7, 0x1, 0x1, 0x2}, {0x1, 0x0, 0x8, 0xd8c9}, {0x80000007, 0x34, 0x329a00ee, 0xf9ef, 0x32d3}]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.stat\x00', 0x300, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000005c0)=0x6)
prctl$PR_SCHED_CORE(0x23, 0x0, 0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r5, &(0x7f000001aa80)={0x2020}, 0x2020)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2})
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0x59, 0x2, 0x2}, @fd, @fda={0x66646185, 0x2, 0x1, 0x3f}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

1m28.363974988s ago: executing program 2 (id=3411):
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000040)={0x2, 0x1, 0x2})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz1\x00', {}, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xfde7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc658, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8161, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x7ff, 0xcf12, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x1, 0x40, 0x0, 0xffff0d42, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x5, 0x0, 0x2, 0x4e, 0x0, 0x0, 0xd84c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xb77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0417, 0x0, 0x3dd55859, 0x0, 0x0, 0x4b8, 0x0, 0x800, 0x0, 0x46, 0x0, 0x288, 0xd54b, 0x0, 0x0, 0x20, 0x9, 0x20000000, 0x7], [0x6, 0x0, 0x0, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x4, 0x3, 0x7, 0xb, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x99, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0xc, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x32ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffefff01, 0x0, 0x1000], [0x5, 0x0, 0xd7, 0x0, 0x1, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x800, 0x8, 0x0, 0x8, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff6168, 0x0, 0x9, 0x1a, 0x921, 0x0, 0x0, 0x0, 0x3ff, 0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57e, 0x37a9, 0x0, 0x3, 0x3]}, 0x45c)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ab00"])
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
read(r7, &(0x7f0000000080)=""/93, 0xffffff6c)

1m27.390056583s ago: executing program 2 (id=3421):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1806, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffc)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2000, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000140)='io.max\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x400000000000, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1806, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x100, 0x0) (async)
ioctl$TIOCGPTPEER(r1, 0x5441, 0xfffffffffffffffc) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x8002, 0x10) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2000, 0x0) (async)
write$cgroup_pid(r2, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_int(r3, &(0x7f0000000140)='io.max\x00', 0x2, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x400000000000, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async)

1m27.173753596s ago: executing program 2 (id=3423):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) (async)
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xf)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/116)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext='])

1m27.061742898s ago: executing program 2 (id=3424):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x802, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0x2, 0x0, 0x126})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x802, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)

1m26.971713769s ago: executing program 2 (id=3425):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB='\b'])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0)
read(r5, &(0x7f0000000240)=""/2, 0x2)
write(r0, &(0x7f0000000000)="cd8a6c101ea3f9c249dfd01b03ef738479aef8c0499859fe7935f0eced3071c17de4ed480a869919324ee27744f57d3fe9ed96b10143d2063663bfb6d9ce97378a96f2c75a287313eeebbb8daea0dfb02973458e75e8f77207a62f30dc35", 0x5e)

1m11.951054042s ago: executing program 35 (id=3425):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000100)=ANY=[@ANYBLOB='\b'])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0)
read(r5, &(0x7f0000000240)=""/2, 0x2)
write(r0, &(0x7f0000000000)="cd8a6c101ea3f9c249dfd01b03ef738479aef8c0499859fe7935f0eced3071c17de4ed480a869919324ee27744f57d3fe9ed96b10143d2063663bfb6d9ce97378a96f2c75a287313eeebbb8daea0dfb02973458e75e8f77207a62f30dc35", 0x5e)

1.198346941s ago: executing program 5 (id=4567):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000080)={0x3dd5, 0x3})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext='])

1.111666162s ago: executing program 5 (id=4570):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"])
r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'pids'}, {0x2b, 'net_prio'}, {0x2b, 'net'}, {0x2d, 'net'}]}, 0x23)

1.033414163s ago: executing program 5 (id=4573):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1e0408003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad88864"], 0xffdd)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

931.694765ms ago: executing program 6 (id=4574):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0xffffc000)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r0, 0x293f000)

930.914525ms ago: executing program 6 (id=4575):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x8, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1}}) (async)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) (async)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x8, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) (async)

889.918836ms ago: executing program 6 (id=4577):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3b, 0x0, 0x3}]})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x2000000, 0x1, 0x0, 0x1, "ff00f7000000af88008300"})
ioctl$TIOCGPTPEER(r5, 0x5441, 0x8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0xfdef)
close(0x3)
mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000)

857.502646ms ago: executing program 1 (id=4578):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000440)={0x1, 0x0, [{0x48e, 0x0, 0x94}]})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x78, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x1}], 0x5a, 0x0, &(0x7f0000000000)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac25dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"})

771.038658ms ago: executing program 6 (id=4580):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x242, 0x2a1)
write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8}}, 0x18)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x12a01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x622540, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161642, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000100, 0x0, 0x5}]})
ioctl$KVM_SET_CPUID2(r3, 0x8140aecc, &(0x7f0000000280))
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000002c0)={0xa, 0x0, [{0xc0000001, 0x3, 0x2, 0x1, 0x5, 0x1, 0x40}, {0x80000008, 0x2, 0x4, 0x4, 0x3, 0x6, 0x1}, {0x6, 0xffff, 0x5, 0xc, 0x2f4c, 0x4, 0x8}, {0x80000001, 0x3, 0x7, 0x6, 0x4, 0x6, 0x10}, {0x80000019, 0xfffffffa, 0x1, 0x101, 0x5f5f, 0x34b, 0x5}, {0x7, 0xca, 0x0, 0x5f1, 0x10000, 0xffff, 0x6a45}, {0x1, 0xe6dc, 0x0, 0x4, 0x8, 0x585, 0x5}, {0x1, 0x4, 0x78f5a63d585eecaf, 0xb, 0x44, 0x9, 0x7ff}, {0x40000000, 0x2, 0x6, 0xfffffffb, 0x3, 0x7ff, 0xfffffffb}, {0x4, 0x5, 0x0, 0x5, 0xa75, 0x8000, 0x4}]})
close(r1)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f00000001c0)=""/215)

721.653649ms ago: executing program 1 (id=4582):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async, rerun: 64)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (rerun: 64)
ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) (async)
prctl$PR_GET_NAME(0x10, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x53, 0x0, &(0x7f0000000400)="892a7863af87409b1b8fe4e183cc4e2c2eddca324f8c2a61fb078c81d7272d92b902bf051aacb6decd83ec368991a0d7599c3ce3f7bed9d8078ba649896475d964ddb0c6d4d498b0ef80a3f6170b75654851be"}) (async)
openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xbe, 0x0, 0x1})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004"]) (async)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (rerun: 32)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) (async, rerun: 64)
ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000100)=""/10) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) (rerun: 32)

655.569019ms ago: executing program 7 (id=4583):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0})

583.13884ms ago: executing program 7 (id=4584):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004e4, 0x62, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000, 0x2011c0})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007508000000000000030000000000000061f57c86d97816"])
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)

544.406711ms ago: executing program 1 (id=4585):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x2000}})
r3 = openat$cgroup_ro(r1, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
read$FUSE(r3, &(0x7f0000002080)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x32, 0x24, 0xb, 0x9, 0x9, 0xc, 0x0, 0x158, 0xffffffffffffffff}})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100)=<r6=>0x0)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000280)={0xa0, 0x0, r4, {{0x3, 0x1, 0xfffffffeffffffff, 0x4, 0x800, 0x57be, {0x3, 0x8, 0xfff8000000000000, 0xd, 0x80000001, 0x9, 0x10001, 0x80000001, 0x0, 0xc000, 0x8000000, r6, r5, 0x0, 0x3ff}}, {0x0, 0x2}}}, 0xa0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])

512.869532ms ago: executing program 6 (id=4586):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa2102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x6, 0x1000, 0x2000, &(0x7f0000ff9000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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")
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c9801288363"], 0xffdd) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000500ff00"/24]) (async)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f000057f000/0x2000)=nil, 0x2000, 0x1, 0x4000010, r9, 0x1d7a0000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) (async)
mkdirat$cgroup(r10, &(0x7f00000000c0)='syz1\x00', 0x1ff) (async)
ioctl$KVM_SET_CPUID2(r8, 0xc008aec1, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r12, 0xc008ae09, &(0x7f0000000000))
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0xfb7f, 0x0, 0x2, 0x2000, &(0x7f000000b000/0x2000)=nil}) (async)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r13, 0x9) (async)
ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000000540)={0xfffffffffffffdb1, 0x0, &(0x7f0000000400), 0x5, 0x0, &(0x7f0000000000)="6d6f8e4468"})

375.649784ms ago: executing program 1 (id=4587):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCCBRK(r0, 0x5428)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000300)=[@increfs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x101, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/163, 0xa3, 0x2, 0x3a}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x400}], 0x4, 0x0, 0x0}) (async)
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x0, 0x5, 0x10, 0xe, 0x8, "95c388d2524724273d83c88fd6ab06cbce66b5", 0x1, 0x9})

332.940885ms ago: executing program 7 (id=4588):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000032b000/0x3000)=nil, 0x3000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)

272.189666ms ago: executing program 1 (id=4589):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x80000000, 0xffffffff, 0x9, 0x9bc, 0x4}, {0x1, 0x0, 0x8, 0x1, 0x130}]})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000180)=@x86={0xc, 0xd, 0x10, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x4d, 0x7, 0x6, 0x2, '\x00', 0xfe, 0x100})
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0xe0001})
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x44f0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"})
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x5)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

233.967876ms ago: executing program 7 (id=4590):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r0, 0x0)
mmap$binder(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2)

167.461627ms ago: executing program 6 (id=4591):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc24480, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100f8000000000081050000000000000600000000000000"])
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000100)={0x0, 0x6, [@multicast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast]})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8282, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000d, 0x3032, 0xffffffffffffffff, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000703000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2, 0x10000, 0x1})
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x2546c000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$ASHMEM_GET_NAME(r8, 0x40047703, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
ioctl$ASHMEM_PURGE_ALL_CACHES(r8, 0x770a, 0x0)
close_range(r0, r0, 0x0)

165.343937ms ago: executing program 7 (id=4592):
mmap(&(0x7f00006c0000/0x2000)=nil, 0x2000, 0x800002, 0x40010, 0xffffffffffffffff, 0xf561f000) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async)
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r1=>0x0}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"3d652e4531015c9b6ced67159f587e56", <r2=>0x0, 0x0, {0x6, 0xf0000000}, {0x5, 0x5}, 0x8, [0x1ff, 0x100, 0x7, 0x1, 0xd, 0x5, 0x6, 0x8001, 0x9, 0xf1d4, 0x7fffffffffffffff, 0x6, 0x6, 0xfffffffffffff801, 0x9, 0xffff]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000280)={"1d5e6a1fa167181d7bd6ef64d581fb86", r1, r2, {0xb6d8, 0x10001}, {0x401, 0x9}, 0x9, [0x9, 0x2, 0x6, 0x7, 0x7fff, 0x8, 0x6, 0x80, 0xd, 0xa, 0x200, 0x7, 0x10, 0x3, 0xe65, 0x4]}) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
write$cgroup_devices(r5, &(0x7f0000000380)=ANY=[], 0xffdd)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async, rerun: 64)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) (async, rerun: 64)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r9, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r10, 0x0) (async)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa, 0x10, r10, 0x4000) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r11, 0xb4807000) (async, rerun: 64)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async, rerun: 64)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000)
mmap(&(0x7f00006f7000/0x3000)=nil, 0x3000, 0x1000007, 0x2010, 0xffffffffffffffff, 0xfffff000)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r3, 0x0)

115.363778ms ago: executing program 7 (id=4593):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000015c0)="2e872ecf9feef474253f5f8361fb437bb53b9b904de0dbbdbb5d04df0c089fb5576056b4d0dab2f029ed2e37765f6a0656665130f1deefc02ba1984f0ed5a3f68c6db7b7889ed9f103b66ac40eb3dad6"})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0)

105.202438ms ago: executing program 5 (id=4594):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)=""/69)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x259})
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0xdddd1000, 0x60, 0x6, 0x60a6, 0x0, [{0x6, 0x6, 0xe4, '\x00', 0x6}, {0xa0, 0x8, 0x9, '\x00', 0x76}, {0x40, 0x1, 0x2, '\x00', 0xff}, {0x1, 0x5a, 0x8, '\x00', 0x8}, {0x2, 0xfb, 0xa, '\x00', 0xc6}, {0x5, 0x9, 0x7, '\x00', 0x6}, {0xcd, 0x10, 0xff, '\x00', 0x9}, {0x8, 0x7, 0x9}, {0x8e, 0x4, 0x1, '\x00', 0xc}, {0x7, 0xe, 0x2, '\x00', 0xda}, {0x1, 0x8, 0x0, '\x00', 0x94}, {0x0, 0x14, 0x2, '\x00', 0x4}, {0xe, 0xc, 0x8, '\x00', 0xf}, {0x6, 0xe, 0x9, '\x00', 0x9}, {0x6, 0x2, 0x80, '\x00', 0x9}, {0x2, 0x3e, 0x2, '\x00', 0x7}, {0x51, 0x41, 0x1}, {0x6, 0xb, 0x81, '\x00', 0x9}, {0x7a, 0x2, 0x9, '\x00', 0xd}, {0x7a, 0x47, 0xf, '\x00', 0xb}, {0x1, 0x95, 0x2, '\x00', 0x8}, {0x4, 0x9, 0x40, '\x00', 0x2}, {0xed, 0x0, 0x0, '\x00', 0x9}, {0xe7, 0x3, 0x7, '\x00', 0x1}]}})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f00000003c0)=[@decrefs={0x40046307, 0x1}], 0x3e, 0x0, &(0x7f0000000400)="262052538b0d2b049ff823192a8012d7a564bf4fae030d9e340664045358d82827a802a7c3162315bb197ed5288a9153fe8e6d131a58beb956086a7c0fd0"})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder0\x00', 0x0, 0x0)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f00000004c0)='.pending_reads\x00', 0x0, 0x1)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000500)={{0x2, 0x0, 0x80, {0xdddd0000, 0xeeef0000}}, "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", "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"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000002580)=0x2)
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000025c0)={{0x80a0000, 0x0, 0xb, 0xf, 0x0, 0x2, 0x1, 0x9, 0x5, 0x8, 0x2, 0x10}, {0x3000, 0xeeee0000, 0x3, 0xa, 0x50, 0x9, 0x1, 0xff, 0x21, 0x5, 0x5, 0xd}, {0x6000, 0x2, 0xd, 0x2, 0x81, 0x6, 0x6, 0x8, 0xf3, 0x53, 0x0, 0x6}, {0x3000, 0xf000, 0xf, 0x2, 0xff, 0x9, 0x8, 0x8, 0x6, 0x10, 0x7, 0x5}, {0x4000, 0xeeee8000, 0xf, 0x1, 0x7, 0x64, 0x7, 0x17, 0xf9, 0xc, 0xa, 0xd}, {0x4, 0x1, 0x0, 0x4, 0xf9, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0x4}, {0x8000000, 0x80a0000, 0x8, 0x4, 0x1, 0x1, 0x81, 0xd1, 0x0, 0x5, 0x1, 0x6}, {0x4b5bc8736085ebe6, 0x4, 0xe, 0x8, 0x9, 0x5, 0x5, 0x6, 0x10, 0x7, 0xfe, 0x1b}, {0x1000, 0x49ed}, {0xeeefd000, 0x7}, 0x40020, 0x0, 0x3000, 0x40200, 0xe, 0x2901, 0x11116004, [0x2, 0x3, 0xb5, 0x2]})
ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000002b00)={0x1, 0x1, 0xe, 0xa, 0x1da, &(0x7f0000002700)})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000002b40)={0x0, 0x0, @ioapic})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002d80), 0x0, 0x0)
ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000002dc0))
r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002e00), 0x4800, 0x0)
ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000002e40))
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, r7, 0x2, 0x100010, r1, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000002e80)=0xffff)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000002ec0)={0xffff, 0x7ff, 0x1, 0x7fffffffffffffff, 0x9, 0xfff8})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002f00), 0x2, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000002f40)={0x1})

3.417959ms ago: executing program 5 (id=4595):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x0, 0x1, 0x1200}) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000300)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYBLOB=','], 0x6a) (async)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x3e, 0x0, 0x7, 0x2000000000044, 0x2000, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000100)={0x4, 0x0, [0x8, 0x1, 0x7, 0x82a6, 0x9, 0xe, 0x0, 0xe7c]}) (async)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x3000007, 0x2012, r6, 0x0)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000180)={0xc, 0x4, 0x50})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="55dd"})

2.11538ms ago: executing program 5 (id=4596):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

0s ago: executing program 1 (id=4597):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b)
close(r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, &(0x7f0000000180)=""/98, &(0x7f0000000380)=""/203, &(0x7f0000000200)=""/47, 0x1000})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}})
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffff9c, 0x40106614, &(0x7f0000000080))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000480)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0xf9, "357af3f8c0fb2a"})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001480)={{r3, 0xd04, 0xffffffffffffff4c, 0x3, 0xd655, 0x9, 0x8, 0x8, 0x3, 0xf, 0xa7, 0x0, 0x5, 0x5, 0x6}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x50, 0x0, &(0x7f00000002c0)="8a3e4b14485bef8901593175bfe04ac0baae7c5651ec6005649a06817a9203cff0f36f848684f4120d8c0faf025780d0819e642ae6cc84fec79002d8167fe3494aac7fd28e23c066793738f2fe6defcb"})

kernel console output (not intermixed with test programs):

CH
[  310.992699][T13128] rust_binder: use_range failure ESRCH
[  311.008224][T13128] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  311.027203][T13128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  311.055645][T13128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1712
[  311.191888][T13136] serio: Serial port ttynull
[  311.759789][T13154] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  311.801865][T13159] input: syz0 as /devices/virtual/input/input204
[  312.010510][T13166] rust_binder: Write failure EINVAL in pid:893
[  312.208442][T13174] rust_binder: Write failure EFAULT in pid:480
[  312.285568][T13183] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.359651][T13187] __vm_enough_memory: pid: 13187, comm: syz.7.3909, bytes: 281474976845824 not enough memory for the allocation
[  312.383413][T13188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1732
[  312.394082][T13186] __vm_enough_memory: pid: 13186, comm: syz.7.3909, bytes: 281474976845824 not enough memory for the allocation
[  312.624273][   T36] kauditd_printk_skb: 1146 callbacks suppressed
[  312.624289][   T36] audit: type=1400 audit(1750380619.980:88697): avc:  denied  { remount } for  pid=13195 comm="syz.6.3912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  312.677270][   T36] audit: type=1400 audit(1750380620.000:88698): avc:  denied  { read write } for  pid=12201 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.738501][T13208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.738567][   T36] audit: type=1400 audit(1750380620.000:88699): avc:  denied  { read write open } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.779587][   T36] audit: type=1400 audit(1750380620.000:88700): avc:  denied  { ioctl } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  312.824484][T13210] rust_binder: Error while translating object.
[  312.824508][T13210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  312.834749][   T36] audit: type=1400 audit(1750380620.020:88701): avc:  denied  { read write } for  pid=13200 comm="syz.5.3915" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  312.868230][T13210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1740
[  312.915463][   T36] audit: type=1400 audit(1750380620.020:88702): avc:  denied  { ioctl open } for  pid=13200 comm="syz.5.3915" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  312.992210][   T36] audit: type=1400 audit(1750380620.020:88703): avc:  denied  { ioctl } for  pid=13200 comm="syz.5.3915" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  313.018059][   T36] audit: type=1400 audit(1750380620.020:88704): avc:  denied  { write } for  pid=13200 comm="syz.5.3915" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  313.050677][   T36] audit: type=1400 audit(1750380620.020:88705): avc:  denied  { write open } for  pid=13200 comm="syz.5.3915" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  313.075913][   T36] audit: type=1400 audit(1750380620.020:88706): avc:  denied  { read write } for  pid=13200 comm="syz.5.3915" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  313.106233][T13212] rust_binder: Write failure EFAULT in pid:896
[  313.298705][T13225] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  313.417820][T13254] can0: slcan on ptm0.
[  313.455978][T13253] can0 (unregistered): slcan off ptm0.
[  313.564440][T13265] binfmt_misc: register: failed to install interpreter file ./cgroup
[  313.841701][T13280] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  313.842402][T13280] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  313.945362][T13286] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  313.962325][T13286] SELinux: failed to load policy
[  314.054423][T13293] __vm_enough_memory: pid: 13293, comm: syz.5.3939, bytes: 281474976845824 not enough memory for the allocation
[  314.060180][T13294] rust_binder: Error while translating object.
[  314.066348][T13294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  314.073807][T13294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:930
[  314.280955][T13307] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1751
[  314.300876][T13304] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  314.619771][T13326] rust_binder: Write failure EFAULT in pid:939
[  314.676439][T13329] __vm_enough_memory: pid: 13329, comm: syz.1.3951, bytes: 281474976845824 not enough memory for the allocation
[  314.841726][T13336] binder: Bad value for 'max'
[  314.957361][T13344] rust_binder: Write failure EINVAL in pid:954
[  315.170602][T13351] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  315.410209][T13364] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  315.428207][T13364] rust_binder: Write failure EINVAL in pid:1774
[  315.448736][T13364] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  315.498177][T13364] rust_binder: Write failure EINVAL in pid:1774
[  315.515344][T13370] rust_binder: Error while translating object.
[  315.524509][T13370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  315.531929][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.548215][T13370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:964
[  315.576961][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.619251][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.626709][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.643863][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.652942][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.660418][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.668083][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.675561][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.683254][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.698054][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.705630][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.726257][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.736008][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.745259][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.753475][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.760984][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.768666][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.776080][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.785993][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.793484][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.802054][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.809672][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.817228][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.825111][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.833601][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.841538][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.849033][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.854076][T13384] binder: Binderfs stats mode cannot be changed during a remount
[  315.856523][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.873964][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.882441][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.890455][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.904273][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.913730][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.922880][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.931568][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.940835][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.949023][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.956640][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.968052][T13386] KVM: debugfs: duplicate directory 13386-4
[  315.970233][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.984481][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  315.993029][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.001134][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.011986][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.031955][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.065703][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.073735][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.082679][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.093181][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.104736][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.112811][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.121682][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.129609][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.137191][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.148605][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.153853][T13403] __vm_enough_memory: pid: 13403, comm: syz.1.3975, bytes: 281474976845824 not enough memory for the allocation
[  316.156018][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.176835][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.184886][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.192599][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.201119][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.209209][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.216630][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.224575][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.232053][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.239778][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.247206][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.255727][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.264446][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.272497][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.280085][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.292801][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.301664][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.310222][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.322531][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.333806][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.341588][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.344845][T13418] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  316.349026][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.349052][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.364751][T13418] rust_binder: Write failure EINVAL in pid:1786
[  316.370389][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.390507][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.400943][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.408558][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.415958][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.421710][T13424] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  316.423605][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.437574][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.446331][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.453805][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.456385][T13424] rust_binder: Error in use_page_slow: ESRCH
[  316.461303][T13424] rust_binder: use_range failure ESRCH
[  316.462389][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.467510][T13424] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  316.473532][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.480483][T13424] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  316.489467][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.513739][T13424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1788
[  316.515777][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.533171][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.541272][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.550322][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.559289][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.566777][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.576088][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.608189][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.615611][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.638314][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.646070][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.653876][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.661677][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.669480][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.677456][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.685226][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.694075][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.701919][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.719326][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.726974][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.735168][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.743020][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.762881][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.770512][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.778640][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.786077][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.794246][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.802142][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.812751][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.820871][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.832410][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.840566][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.847993][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.864707][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.873499][T13453] input: syz1 as /devices/virtual/input/input206
[  316.879876][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.887447][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.895562][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.903500][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.912326][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.920460][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.929021][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.936464][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.944617][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.952886][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.960808][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.968844][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.976290][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.981623][T13453] binder: Unknown parameter 'dont_hash'
[  316.984690][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  316.997808][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.005736][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.013867][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.021778][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.029249][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.036629][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.045222][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.052755][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.060267][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.067686][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.076327][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.084795][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.092228][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.100319][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.107728][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.115351][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.122803][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.130998][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.138495][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.145886][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.153492][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.162525][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.171284][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.178794][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.186282][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.194880][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.202412][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.210130][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.217650][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.226273][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.233711][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.257855][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.265353][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.267128][T13466] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  317.272841][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.288179][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.295607][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.305427][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.312870][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.320315][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.327721][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.335203][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.342722][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.351156][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.359046][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.366441][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.373914][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.382452][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.390645][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.398738][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.406138][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.417726][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.430491][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.440193][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.447920][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.458179][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.466569][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.476225][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.488087][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.501026][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.510623][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.518041][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.525526][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.532944][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.540968][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.548493][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.555982][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.563852][T13487] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  317.563922][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.578642][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.586596][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.595298][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.603526][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.620993][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.630838][   T36] kauditd_printk_skb: 1460 callbacks suppressed
[  317.630851][   T36] audit: type=1400 audit(1750380624.990:90152): avc:  denied  { ioctl } for  pid=13483 comm="syz.6.3997" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  317.634696][T13487] rust_binder: Error while translating object.
[  317.637304][   T36] audit: type=1400 audit(1750380624.990:90153): avc:  denied  { ioctl } for  pid=13483 comm="syz.6.3997" path="/dev/binderfs/binder0" dev="binder" ino=84 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  317.662062][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.696006][T13487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  317.702514][T13487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1807
[  317.717157][   T36] audit: type=1400 audit(1750380624.990:90154): avc:  denied  { call } for  pid=13483 comm="syz.6.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  317.722709][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.730951][   T36] audit: type=1400 audit(1750380624.990:90155): avc:  denied  { transfer } for  pid=13483 comm="syz.6.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  317.751734][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.754102][   T36] audit: type=1400 audit(1750380625.030:90156): avc:  denied  { read write } for  pid=9412 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.772930][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.779677][   T36] audit: type=1400 audit(1750380625.030:90157): avc:  denied  { read write open } for  pid=9412 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.805012][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.812582][   T36] audit: type=1400 audit(1750380625.030:90158): avc:  denied  { ioctl } for  pid=9412 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.872754][   T36] audit: type=1400 audit(1750380625.030:90159): avc:  denied  { map } for  pid=13495 comm="syz.5.4001" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  317.898354][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.902073][   T36] audit: type=1400 audit(1750380625.030:90160): avc:  denied  { map } for  pid=13495 comm="syz.5.4001" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  317.906271][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.930670][   T36] audit: type=1400 audit(1750380625.070:90161): avc:  denied  { read write } for  pid=11399 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  317.937572][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.968261][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.975892][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.983458][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.991386][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  317.999036][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.006423][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.013969][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.021405][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.028821][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.036208][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.043619][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.051033][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.058516][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.065892][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.073465][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.080869][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.088283][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.095680][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.103083][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.110480][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.117937][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.125865][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.133367][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.140870][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.148301][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.155694][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.163837][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.166089][T13510] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  318.171953][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.179795][T13510] rust_binder: Write failure EINVAL in pid:1014
[  318.187674][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.201726][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.209333][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.216735][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.224645][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.233483][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.241370][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.249329][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.261720][ T1011] hid-generic 0FFF:0003:0003.0018: unknown main item tag 0x0
[  318.265332][T13516] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿß) failed with errno=-22
[  318.279394][ T1011] hid-generic 0FFF:0003:0003.0018: hidraw0: <UNKNOWN> HID v0.06 Device [syz1] on syz1
[  318.412284][T13520] binder: Unknown parameter 'non'
[  318.451131][T13531] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.487214][T13534] kvm: user requested TSC rate below hardware speed
[  318.595740][T13543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.637106][T13549] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.642917][T13548] rust_binder: Write failure EFAULT in pid:1813
[  318.650165][T13548] rust_binder: Write failure EINVAL in pid:1813
[  318.808999][T13561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1817
[  319.142219][T13584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1821
[  319.195663][T13584] rust_binder: Read failure Err(EFAULT) in pid:1821
[  319.247612][T13592] SELinux:  policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c
[  319.299804][T13592] SELinux: failed to load policy
[  319.996690][T13619] fido_id[13619]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  320.068973][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.086746][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.101456][T13630] binder: Bad value for 'defcontext'
[  320.126751][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.144589][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.177821][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.206726][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.236356][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.275829][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.301151][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.320838][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.358860][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.384343][T13639] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.386667][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.408884][T13639] Bluetooth: hci0: Frame reassembly failed (-90)
[  320.440609][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.454747][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.462691][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.463368][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[  320.472181][T13639] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  320.477270][T13639] rust_binder: Error while translating object.
[  320.508219][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.528248][T13639] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  320.528277][T13639] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1835
[  320.550271][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.598186][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.618315][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.626171][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.648678][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.656112][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.677662][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.685732][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.718256][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.725774][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.733408][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.740842][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.749141][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.756562][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.764801][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.772300][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.779759][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.787148][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.794586][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.802369][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.809796][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.817762][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.825272][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.832700][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.841023][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.858929][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.869813][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.877278][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.888628][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.896801][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.904925][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.912436][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.921208][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.928636][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.936079][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.943563][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.951867][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.960196][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.967685][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.975283][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.982768][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  320.983228][T13653] input: syz0 as /devices/virtual/input/input208
[  320.990236][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.004029][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.011784][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.019251][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.026641][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.035355][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.043252][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.050700][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.062492][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.070779][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.079157][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.088523][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.095955][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.103565][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.110990][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.118395][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.125769][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.133252][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.140779][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.148385][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.155961][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.163583][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.171013][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.180034][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.187415][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.194858][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.202484][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.209894][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.217299][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.224693][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.232303][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.239712][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.247210][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.254880][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.262281][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.269706][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.277094][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.284585][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.292104][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.299503][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.306881][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.314368][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.321761][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.329273][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.337097][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.345353][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.353252][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.360796][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.368752][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.376196][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.384707][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.393325][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.401303][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.417787][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.426585][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.427878][T13663] binder: Unknown parameter 'posixacl'
[  321.434790][ T5238] hid-generic FFFF:0009:0001.0019: unknown main item tag 0x0
[  321.457068][ T5238] hid-generic FFFF:0009:0001.0019: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  321.461047][T13668] __vm_enough_memory: pid: 13668, comm: syz.7.4057, bytes: 281474976845824 not enough memory for the allocation
[  321.555538][T13672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1038
[  321.582913][T13670] __vm_enough_memory: pid: 13670, comm: syz.5.4058, bytes: 281474976845824 not enough memory for the allocation
[  321.762462][T13681] binder: Binderfs stats mode cannot be changed during a remount
[  321.942496][T13687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1042
[  322.155565][   T60] Bluetooth: hci1: Frame reassembly failed (-84)
[  322.314835][T13697] fido_id[13697]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  322.418176][ T1526] Bluetooth: hci0: command 0x1003 tx timeout
[  322.424386][ T1525] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  322.537004][T13704] binder: Bad value for 'max'
[  322.605978][T13708] binfmt_misc: register: failed to install interpreter file ./file0
[  322.640944][   T36] kauditd_printk_skb: 839 callbacks suppressed
[  322.640960][   T36] audit: type=1400 audit(1750380630.000:91001): avc:  denied  { read append } for  pid=13705 comm="syz.7.4071" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  322.770259][   T36] audit: type=1400 audit(1750380630.000:91002): avc:  denied  { read append open } for  pid=13705 comm="syz.7.4071" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  322.796206][   T36] audit: type=1400 audit(1750380630.080:91003): avc:  denied  { read write } for  pid=12201 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.820750][   T36] audit: type=1400 audit(1750380630.080:91004): avc:  denied  { read write open } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.846434][   T36] audit: type=1400 audit(1750380630.080:91005): avc:  denied  { ioctl } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  322.921746][T13717] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  322.921766][T13717] rust_binder: Read failure Err(EFAULT) in pid:1046
[  322.947346][   T36] audit: type=1400 audit(1750380630.110:91006): avc:  denied  { read write } for  pid=5763 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  323.011330][T13718] rust_binder: Write failure EINVAL in pid:1046
[  323.079849][   T36] audit: type=1400 audit(1750380630.110:91007): avc:  denied  { read write open } for  pid=5763 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  323.174168][   T36] audit: type=1400 audit(1750380630.110:91008): avc:  denied  { ioctl } for  pid=5763 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  323.216117][   T36] audit: type=1400 audit(1750380630.120:91009): avc:  denied  { read } for  pid=13712 comm="syz.7.4073" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  323.240014][   T36] audit: type=1400 audit(1750380630.120:91010): avc:  denied  { read open } for  pid=13712 comm="syz.7.4073" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  323.399246][T13732] binder: Bad value for 'stats'
[  323.411045][T13732] rust_binder: Error while translating object.
[  323.411069][T13732] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  323.426836][T13732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1052
[  323.437412][   T60] bridge_slave_1: left allmulticast mode
[  323.464964][   T60] bridge_slave_1: left promiscuous mode
[  323.475139][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.490957][   T60] bridge_slave_0: left allmulticast mode
[  323.508242][   T60] bridge_slave_0: left promiscuous mode
[  323.527147][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.677111][T13744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  323.759738][   T60] veth1_macvtap: left promiscuous mode
[  323.765318][   T60] veth0_vlan: left promiscuous mode
[  323.834675][T13753] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  323.885936][T13725] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.893636][T13725] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.901374][T13725] bridge_slave_0: entered allmulticast mode
[  323.907713][T13725] bridge_slave_0: entered promiscuous mode
[  323.921807][T13725] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.928981][T13725] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.936231][T13725] bridge_slave_1: entered allmulticast mode
[  323.943830][T13725] bridge_slave_1: entered promiscuous mode
[  324.085449][T13757] rust_binder: Write failure EINVAL in pid:1056
[  324.129781][T13725] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.143195][T13725] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.150506][T13725] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.157540][T13725] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.178189][   T52] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  324.181111][ T1525] Bluetooth: hci1: command 0x1003 tx timeout
[  324.190599][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.208194][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.329301][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.336367][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.367675][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.374766][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.632903][T13725] veth0_vlan: entered promiscuous mode
[  324.671814][T13725] veth1_macvtap: entered promiscuous mode
[  324.720460][T13785] SELinux:  policydb magic number 0x6000000 does not match expected magic number 0xf97cff8c
[  324.738415][T13785] SELinux: failed to load policy
[  324.989665][T13800] binder: Unknown parameter ''
[  325.027481][T13804] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  325.038236][T13785] rust_binder: Read failure Err(EFAULT) in pid:394
[  325.117277][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  325.142226][T13809] Bluetooth: hci0: Frame reassembly failed (-84)
[  325.321964][T13818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  325.321993][T13818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:398
[  325.528869][T13827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  325.570122][T13827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:10
[  325.966122][T13844] kvm: kvm [13843]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[  326.183940][T13852] rust_binder: Error while translating object.
[  326.183974][T13852] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  326.190289][T13852] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:414
[  326.344664][T13854] SELinux:  policydb magic number 0x5 does not match expected magic number 0xf97cff8c
[  326.375810][T13854] SELinux: failed to load policy
[  326.501822][T13859] FAULT_INJECTION: forcing a failure.
[  326.501822][T13859] name failslab, interval 1, probability 0, space 0, times 1
[  326.521194][T13860] rust_binder: Error while translating object.
[  326.521219][T13860] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  326.527530][T13859] CPU: 0 UID: 0 PID: 13859 Comm: syz.5.4117 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[  326.527561][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  326.527577][T13859] Call Trace:
[  326.527583][T13859]  <TASK>
[  326.527591][T13859]  __dump_stack+0x21/0x30
[  326.527624][T13859]  dump_stack_lvl+0x10c/0x190
[  326.527642][T13859]  ? __cfi_dump_stack_lvl+0x10/0x10
[  326.527660][T13859]  ? unwind_get_return_address+0x51/0x90
[  326.527677][T13859]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  326.527697][T13859]  dump_stack+0x19/0x20
[  326.527715][T13859]  should_fail_ex+0x3d9/0x530
[  326.527732][T13859]  should_failslab+0xac/0x100
[  326.527752][T13859]  __kmalloc_node_noprof+0x6c/0x450
[  326.527768][T13859]  ? __kvmalloc_node_noprof+0x11d/0x300
[  326.527785][T13859]  __kvmalloc_node_noprof+0x11d/0x300
[  326.527801][T13859]  ? __cfi___kvmalloc_node_noprof+0x10/0x10
[  326.527818][T13859]  ? kstrtouint_from_user+0xfb/0x150
[  326.527834][T13859]  ? __x64_sys_openat+0x13a/0x170
[  326.527850][T13859]  ? x64_sys_call+0xe69/0x2ee0
[  326.527868][T13859]  seq_read_iter+0x21f/0xfe0
[  326.527892][T13859]  kernfs_fop_read_iter+0x149/0x520
[  326.527916][T13859]  vfs_read+0x53d/0xb60
[  326.527933][T13859]  ? __cfi_vfs_read+0x10/0x10
[  326.527951][T13859]  ? __cfi_mutex_lock+0x10/0x10
[  326.527969][T13859]  ksys_read+0x141/0x250
[  326.527987][T13859]  ? xfd_validate_state+0x68/0x150
[  326.528004][T13859]  ? __cfi_ksys_read+0x10/0x10
[  326.528023][T13859]  ? __kasan_check_read+0x15/0x20
[  326.528040][T13859]  __x64_sys_read+0x7f/0x90
[  326.528058][T13859]  x64_sys_call+0x2638/0x2ee0
[  326.528077][T13859]  do_syscall_64+0x58/0xf0
[  326.528097][T13859]  ? clear_bhb_loop+0x35/0x90
[  326.528120][T13859]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  326.528143][T13859] RIP: 0033:0x7f9e03f8e929
[  326.528162][T13859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.528177][T13859] RSP: 002b:00007f9e04e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  326.528199][T13859] RAX: ffffffffffffffda RBX: 00007f9e041b5fa0 RCX: 00007f9e03f8e929
[  326.528212][T13859] RDX: 0000000000000079 RSI: 0000200000000140 RDI: 0000000000000004
[  326.528224][T13859] RBP: 00007f9e04e87090 R08: 0000000000000000 R09: 0000000000000000
[  326.528235][T13859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.528246][T13859] R13: 0000000000000000 R14: 00007f9e041b5fa0 R15: 00007ffdcf9cc788
[  326.528260][T13859]  </TASK>
[  326.786655][T13860] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17
[  327.138204][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  327.145580][ T1525] Bluetooth: hci0: command 0x1003 tx timeout
[  327.258025][T13871] rust_binder: Write failure EINVAL in pid:419
[  327.376831][T13879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:422
[  327.443756][T13879] ipvlan1: tun_chr_ioctl cmd 1074025675
[  327.458966][T13879] ipvlan1: persist enabled
[  327.463882][T13879] ipvlan1: tun_chr_ioctl cmd 1074025675
[  327.471740][T13879] ipvlan1: persist enabled
[  327.737098][   T36] kauditd_printk_skb: 735 callbacks suppressed
[  327.737115][   T36] audit: type=1400 audit(1750380635.090:91746): avc:  denied  { read write } for  pid=13725 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.796078][   T36] audit: type=1400 audit(1750380635.090:91747): avc:  denied  { read write open } for  pid=13725 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.855322][T13886] FAULT_INJECTION: forcing a failure.
[  327.855322][T13886] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  327.863911][   T36] audit: type=1400 audit(1750380635.100:91748): avc:  denied  { ioctl } for  pid=13725 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  327.899519][T13886] CPU: 0 UID: 0 PID: 13886 Comm: syz.6.4126 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[  327.899545][T13886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  327.899554][T13886] Call Trace:
[  327.899558][T13886]  <TASK>
[  327.899565][T13886]  __dump_stack+0x21/0x30
[  327.899587][T13886]  dump_stack_lvl+0x10c/0x190
[  327.899602][T13886]  ? __cfi_dump_stack_lvl+0x10/0x10
[  327.899618][T13886]  dump_stack+0x19/0x20
[  327.899634][T13886]  should_fail_ex+0x3d9/0x530
[  327.899652][T13886]  should_fail+0xf/0x20
[  327.899667][T13886]  should_fail_usercopy+0x1e/0x30
[  327.899685][T13886]  _copy_to_user+0x24/0xa0
[  327.899706][T13886]  simple_read_from_buffer+0xed/0x160
[  327.899728][T13886]  proc_fail_nth_read+0x19e/0x210
[  327.899746][T13886]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  327.899760][T13886]  ? bpf_lsm_file_permission+0xd/0x20
[  327.899777][T13886]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  327.899793][T13886]  vfs_read+0x278/0xb60
[  327.899812][T13886]  ? __cfi_vfs_read+0x10/0x10
[  327.899829][T13886]  ? __kasan_check_write+0x18/0x20
[  327.899847][T13886]  ? mutex_lock+0x92/0x1c0
[  327.899864][T13886]  ? __cfi_mutex_lock+0x10/0x10
[  327.899879][T13886]  ? __fget_files+0x2c5/0x340
[  327.899902][T13886]  ksys_read+0x141/0x250
[  327.899920][T13886]  ? __cfi_ksys_read+0x10/0x10
[  327.899939][T13886]  ? __kasan_check_read+0x15/0x20
[  327.899956][T13886]  __x64_sys_read+0x7f/0x90
[  327.899974][T13886]  x64_sys_call+0x2638/0x2ee0
[  327.899994][T13886]  do_syscall_64+0x58/0xf0
[  327.900013][T13886]  ? clear_bhb_loop+0x35/0x90
[  327.900035][T13886]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  327.900057][T13886] RIP: 0033:0x7fe71698d33c
[  327.900071][T13886] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  327.900085][T13886] RSP: 002b:00007fe717867030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  327.900104][T13886] RAX: ffffffffffffffda RBX: 00007fe716bb5fa0 RCX: 00007fe71698d33c
[  327.900118][T13886] RDX: 000000000000000f RSI: 00007fe7178670a0 RDI: 0000000000000005
[  327.900129][T13886] RBP: 00007fe717867090 R08: 0000000000000000 R09: 0000000000000000
[  327.900141][T13886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.900152][T13886] R13: 0000000000000000 R14: 00007fe716bb5fa0 R15: 00007fffa0472558
[  327.900165][T13886]  </TASK>
[  327.905422][   T36] audit: type=1400 audit(1750380635.200:91749): avc:  denied  { read write } for  pid=11399 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  328.202456][T13899] audit: audit_backlog=65 > audit_backlog_limit=64
[  328.208713][T13895] audit: audit_backlog=65 > audit_backlog_limit=64
[  328.209062][T13899] audit: audit_lost=340 audit_rate_limit=0 audit_backlog_limit=64
[  328.223558][T13899] audit: backlog limit exceeded
[  328.224795][T13895] audit: audit_lost=341 audit_rate_limit=0 audit_backlog_limit=64
[  328.233844][T13899] audit: audit_backlog=65 > audit_backlog_limit=64
[  328.389689][T13914] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  328.399785][T13915] binder: Unknown parameter 'non'
[  328.532565][T13925] rust_binder: Got transaction with invalid offset.
[  328.532606][T13925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  328.551213][T13925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1089
[  328.786922][T13935] binder: Unknown parameter '00000000000000000000'
[  328.808536][T13944] rust_binder: Error while translating object.
[  328.808561][T13944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  328.814751][T13944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44
[  329.127303][T13950] binder: Bad value for 'max'
[  329.141053][T13956] random: crng reseeded on system resumption
[  329.316061][T13958] binder: Unknown parameter 'fscontext?}'
[  329.429579][T13966] SELinux:  policydb string length 10 does not match expected length 8
[  329.451618][T13966] SELinux: failed to load policy
[  329.485766][T13966] rust_binder: Write failure EFAULT in pid:1104
[  329.486395][T13966] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  329.559458][T13977] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[  329.611818][T13978] rust_binder: Error while translating object.
[  329.611847][T13978] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  329.618043][T13978] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:441
[  329.744616][T13985] rust_binder: Write failure EINVAL in pid:1109
[  329.839374][T13986] rust_binder: Write failure EINVAL in pid:53
[  329.965308][T13999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:448
[  329.978033][T13999] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  330.008380][T13999] rust_binder: Read failure Err(EFAULT) in pid:448
[  330.427126][T14018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:59
[  330.683829][T14034] input: syz0 as /devices/virtual/input/input209
[  330.743299][T14033] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  330.747928][T14032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  330.770541][T14032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1111
[  330.885901][T14043] rust_binder: Write failure EFAULT in pid:63
[  330.918218][T14046] rust_binder: Write failure EFAULT in pid:63
[  330.951833][T14046] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  330.969576][T14043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  330.976060][T14043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63
[  330.976892][T14044] binder: Unknown parameter '/dev/kvm'
[  330.997400][T14046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  331.000678][T14046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:63
[  331.084250][T14051] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  331.112354][T14051] SELinux: failed to load policy
[  331.157862][T14051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1117
[  331.191482][T14053] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[  331.257639][T14055] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.266491][T14057] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  331.297444][T14054] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.424185][T14067] binder: Unknown parameter 'defcontext01777777777777777777777'
[  331.551474][T14072] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.551738][T14072] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.587354][T14074] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.743002][ T1035] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.796458][ T1035] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.818819][ T1035] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.838444][ T1035] rtc_cmos 00:00: Alarms can be up to one day in the future
[  331.850606][T14093] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.862878][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  331.862890][ T1035] rtc rtc0: __rtc_set_alarm: err=-22
[  331.912850][T14093] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2
[  331.939947][T14093] rust_binder: Error while translating object.
[  331.939971][T14093] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  331.946337][T14093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1125
[  331.999576][T14102] rust_binder: Write failure EINVAL in pid:80
[  332.470433][T14123] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  332.625243][T14130] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  332.632857][T14130] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  332.650231][T14130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  332.688587][T14130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:754
[  332.842247][   T36] kauditd_printk_skb: 1312 callbacks suppressed
[  332.842264][   T36] audit: type=1400 audit(1750380640.200:92858): avc:  denied  { read write } for  pid=11399 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.847538][T14138] SELinux: failed to load policy
[  332.851576][   T36] audit: type=1400 audit(1750380640.200:92859): avc:  denied  { load_policy } for  pid=14136 comm="syz.6.4206" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  332.918613][   T36] audit: type=1400 audit(1750380640.220:92860): avc:  denied  { read write } for  pid=14136 comm="syz.6.4206" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.942790][   T36] audit: type=1400 audit(1750380640.220:92861): avc:  denied  { read write open } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  332.976148][   T36] audit: type=1400 audit(1750380640.220:92862): avc:  denied  { ioctl } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.003866][   T36] audit: type=1400 audit(1750380640.220:92863): avc:  denied  { map } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.027758][   T36] audit: type=1400 audit(1750380640.220:92864): avc:  denied  { read } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.070544][   T36] audit: type=1400 audit(1750380640.220:92865): avc:  denied  { map } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.094267][   T36] audit: type=1400 audit(1750380640.220:92866): avc:  denied  { read } for  pid=14136 comm="syz.6.4206" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  333.113161][T14144] rust_binder: Write failure EFAULT in pid:762
[  333.118231][   T36] audit: type=1400 audit(1750380640.270:92867): avc:  denied  { read write open } for  pid=11399 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  333.359174][T14163] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  333.398262][T14155] rust_binder: Write failure EFAULT in pid:769
[  333.532289][T14168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496
[  333.535923][T14171] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.544084][T14167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:496
[  333.636396][T14175] binder: Unknown parameter 'maxr0000000000001779w777777'
[  333.821967][T14184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.883048][T14184] rust_binder: Write failure EINVAL in pid:774
[  333.938181][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  333.951180][ T1525] Bluetooth: hci0: command 0x1003 tx timeout
[  334.155439][T14191] input: syz1 as /devices/virtual/input/input212
[  334.194549][T14194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  334.194581][T14194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1130
[  334.443427][T14207] rust_binder: Error while translating object.
[  334.454589][T14207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  334.460910][T14207] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1134
[  334.480241][T14209] SELinux: failed to load policy
[  334.553427][T14213] cgroup: fork rejected by pids controller in /syz6
[  334.635750][T14211] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  334.635782][T14211] rust_binder: Error in use_page_slow: EBUSY
[  334.678172][T14211] rust_binder: use_range failure EBUSY
[  334.684258][T14211] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  334.700953][T14211] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  334.742220][T14211] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  334.788191][T14211] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:107
[  334.825913][T14225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:509
[  334.845485][T14225] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  334.864071][T14225] rust_binder: Read failure Err(EFAULT) in pid:509
[  334.866516][T14226] rust_binder: Error while translating object.
[  334.879931][T14229] rust_binder: Write failure EINVAL in pid:509
[  334.906390][T14226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  334.922088][T14226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:786
[  335.063438][T14236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  335.232809][T14246] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  335.232832][T14246] rust_binder: Error while translating object.
[  335.267800][T14246] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.282813][   T12] bridge_slave_1: left allmulticast mode
[  335.311029][T14246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:794
[  335.325667][   T12] bridge_slave_1: left promiscuous mode
[  335.354349][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.368755][   T12] bridge_slave_0: left allmulticast mode
[  335.374413][   T12] bridge_slave_0: left promiscuous mode
[  335.382464][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.487852][T14259] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  335.508992][T14259] SELinux: failed to load policy
[  335.548291][   T12] veth1_macvtap: left promiscuous mode
[  335.562262][   T12] veth0_vlan: left promiscuous mode
[  335.733767][T14266] random: crng reseeded on system resumption
[  335.908440][T14252] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.939931][T14252] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.974126][T14252] bridge_slave_0: entered allmulticast mode
[  335.995670][T14252] bridge_slave_0: entered promiscuous mode
[  336.026128][T14252] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.049544][T14252] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.072726][T14252] bridge_slave_1: entered allmulticast mode
[  336.098557][T14252] bridge_slave_1: entered promiscuous mode
[  336.140653][T14271] kvm: kvm [14270]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4
[  336.164253][T14271] kvm: user requested TSC rate below hardware speed
[  336.344087][T14252] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.352175][T14252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.359585][T14252] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.366656][T14252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.460387][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.490639][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.522386][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.529481][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.564831][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.571925][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.652866][T14295] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:544
[  336.680812][T14252] veth0_vlan: entered promiscuous mode
[  336.747189][T14252] veth1_macvtap: entered promiscuous mode
[  336.870231][T14301] rust_binder: validate_parent_fixup: fixup_min_offset=60, parent_offset=27
[  336.870253][T14301] rust_binder: Error while translating object.
[  336.884143][T14301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  336.890713][T14301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:804
[  336.976243][T14306] SELinux: security_context_str_to_sid () failed with errno=-22
[  337.409397][T14326] kvm: Disabled LAPIC found during irq injection
[  337.506135][T14334] rust_binder: Error while translating object.
[  337.506162][T14334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  337.526232][T14334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:814
[  337.534252][T14326] rust_binder: Error while translating object.
[  337.558200][T14326] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  337.570492][T14326] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1153
[  337.826605][T14345] input: syz1 as /devices/virtual/input/input213
[  337.854797][   T36] kauditd_printk_skb: 848 callbacks suppressed
[  337.854812][   T36] audit: type=1400 audit(1750380645.210:93716): avc:  denied  { ioctl } for  pid=14346 comm="syz.1.4277" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  337.934818][   T36] audit: type=1400 audit(1750380645.220:93717): avc:  denied  { read write open } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  337.996363][   T36] audit: type=1400 audit(1750380645.220:93718): avc:  denied  { ioctl } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  338.024030][   T36] audit: type=1400 audit(1750380645.240:93719): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.046812][   T36] audit: type=1400 audit(1750380645.240:93720): avc:  denied  { read open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.070990][   T36] audit: type=1400 audit(1750380645.240:93721): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.096028][   T36] audit: type=1400 audit(1750380645.240:93722): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 ioctlcmd=0x4531 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  338.122141][   T36] audit: type=1400 audit(1750380645.250:93723): avc:  denied  { ioctl } for  pid=14344 comm="syz.6.4276" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  338.147632][   T36] audit: type=1400 audit(1750380645.250:93724): avc:  denied  { read } for  pid=14350 comm="syz.7.4278" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  338.170901][   T36] audit: type=1400 audit(1750380645.250:93725): avc:  denied  { read open } for  pid=14350 comm="syz.7.4278" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  338.385293][T14369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1159
[  338.477158][T14378] input: syz1 as /devices/virtual/input/input214
[  338.656413][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.657999][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.687916][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.704628][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.723196][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.741060][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.768786][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.798449][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.821981][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.836530][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.851705][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.865507][T14384] rust_binder: Write failure EFAULT in pid:577
[  338.875034][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.897612][T14390] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  338.903499][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.912488][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.922846][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.931608][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.938275][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.945186][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.959049][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.975642][T14382] rust_binder: Write failure EINVAL in pid:1165
[  338.982667][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.017051][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.041278][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.060336][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.072757][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.089430][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.106214][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.127726][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.157780][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.169360][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.189513][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.205251][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.237713][T14382] rust_binder: Write failure EINVAL in pid:1165
[  339.316399][T14411] binder: Unknown parameter ''
[  339.366796][T14415] kvm: kvm [14414]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xe331
[  339.640890][T14428] rust_binder: Error while translating object.
[  339.640923][T14428] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  339.653410][T14428] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1171
[  339.664430][T14433] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  339.711227][T14438] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  340.136837][T14455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:598
[  340.307352][T14462] rust_binder: Error while translating object.
[  340.353411][T14462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  340.370655][T14462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1176
[  340.584938][T14479] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  340.765923][T14490] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  340.818650][T14495] SELinux:  policydb version -435494892 does not match my version range 15-33
[  340.838036][T14492] kvm: apic: phys broadcast and lowest prio
[  340.852667][T14495] SELinux: failed to load policy
[  340.867974][T14496] SELinux:  policydb version -435494892 does not match my version range 15-33
[  340.891516][T14496] SELinux: failed to load policy
[  340.947937][T14498] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿß) failed with errno=-22
[  341.121292][T14502] binder: Unknown parameter 'nXI'
[  341.239811][T14507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:863
[  341.239850][T14507] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  341.271427][T14507] rust_binder: Read failure Err(EFAULT) in pid:863
[  341.313591][T14513] __vm_enough_memory: pid: 14513, comm: syz.5.4324, bytes: 281474976845824 not enough memory for the allocation
[  341.332394][T14514] __vm_enough_memory: pid: 14514, comm: syz.5.4324, bytes: 281474976845824 not enough memory for the allocation
[  341.473736][T14523] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  341.558149][T14523] rust_binder: Error while translating object.
[  341.577314][T14523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  341.594653][T14523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1199
[  342.419350][T14566] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer.
[  342.664169][T14571] binder: Bad value for 'stats'
[  342.664169][T14570] binder: Bad value for 'stats'
[  342.858771][   T36] kauditd_printk_skb: 1076 callbacks suppressed
[  342.858786][   T36] audit: type=1326 audit(1750380650.220:94802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14572 comm="syz.7.4343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0920d8e929 code=0x0
[  342.960446][   T36] audit: type=1400 audit(1750380650.320:94803): avc:  denied  { read } for  pid=14572 comm="syz.7.4343" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  342.984440][   T36] audit: type=1400 audit(1750380650.320:94804): avc:  denied  { read open } for  pid=14572 comm="syz.7.4343" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  343.017166][   T36] audit: type=1400 audit(1750380650.320:94805): avc:  denied  { read } for  pid=14572 comm="syz.7.4343" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  343.040976][   T36] audit: type=1400 audit(1750380650.320:94806): avc:  denied  { read open } for  pid=14572 comm="syz.7.4343" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  343.046613][T14574] rust_binder: Write failure EINVAL in pid:644
[  343.066401][   T36] audit: type=1400 audit(1750380650.320:94807): avc:  denied  { ioctl } for  pid=14572 comm="syz.7.4343" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  343.134575][T14577] kvm: user requested TSC rate below hardware speed
[  343.142904][   T36] audit: type=1400 audit(1750380650.410:94808): avc:  denied  { ioctl } for  pid=14572 comm="syz.7.4343" path="/dev/binderfs/binder0" dev="binder" ino=108 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.176522][   T36] audit: type=1400 audit(1750380650.440:94809): avc:  denied  { ioctl } for  pid=14572 comm="syz.7.4343" path="/dev/binderfs/binder0" dev="binder" ino=108 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  343.204501][   T36] audit: type=1400 audit(1750380650.460:94810): avc:  denied  { read write } for  pid=11399 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.252273][   T36] audit: type=1400 audit(1750380650.460:94811): avc:  denied  { read write open } for  pid=11399 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.295772][T14587] binder: Unknown parameter '01777777777777777777777'
[  343.761065][T14606] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  343.851258][T14608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:650
[  343.969273][T14611] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  344.001526][T14611] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:886
[  344.012142][T14611] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  344.021429][T14611] rust_binder: Read failure Err(EFAULT) in pid:886
[  344.030259][T14612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:886
[  344.162043][T14609] rust_binder: Write failure EINVAL in pid:650
[  344.267436][T14620] rust_binder: Write failure EINVAL in pid:892
[  344.462236][T14628] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.480583][T14628] rust_binder: Error while translating object.
[  344.492126][T14628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  344.504074][T14628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:895
[  344.511071][T14631] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  344.530946][T14631] rust_binder: Write failure EINVAL in pid:1231
[  344.607838][T14636] SELinux: failed to load policy
[  344.832182][T14651] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  345.167443][T14665] input: syz0 as /devices/virtual/input/input216
[  345.336509][T14673] rust_binder: Write failure EFAULT in pid:1249
[  345.337158][T14673] input input218: cannot allocate more than FF_MAX_EFFECTS effects
[  345.491162][T14677] rust_binder: Write failure EINVAL in pid:1251
[  345.638080][T14684] binder: Bad value for 'stats'
[  345.805602][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.805847][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.813865][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.827080][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.848354][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.869359][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.889747][T14692] input: syz0 as /devices/virtual/input/input219
[  345.906760][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.906986][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.919051][T14694] rust_binder: Error while translating object.
[  345.925508][T14694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  345.930373][T14691] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  345.957005][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.957282][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.973545][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.983650][T14694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:665
[  345.991221][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.022536][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.040410][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.052449][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.062521][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.075819][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.090113][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.103006][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.115132][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.142300][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.155757][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.167015][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.179673][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.186785][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.195939][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.205408][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.212115][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.228385][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.237602][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.245252][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.253594][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.260503][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.267223][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.277870][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.285275][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.292025][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.300865][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.307551][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.314297][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.321055][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.327672][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.334365][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.341073][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.347784][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.354482][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.361236][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.367988][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.380698][T14707] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  346.396015][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.396348][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.403146][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.412250][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.426681][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.446029][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.463810][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.485468][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.492775][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.501049][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.508243][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.532412][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.546022][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.566603][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.584037][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.600376][T14687] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.621820][T14716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:677
[  346.634012][T14716] rust_binder: Write failure EINVAL in pid:677
[  346.686586][T14718] binder: Unknown parameter 'non'
[  346.753100][T14720] rust_binder: Write failure EINVAL in pid:56
[  346.881972][T14731] binder: Unknown parameter 'smackfshat'
[  346.999482][T14734] input: syz0 as /devices/virtual/input/input221
[  347.030207][T14738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:64
[  347.196868][T14743] input: syz0 as /devices/virtual/input/input223
[  347.542638][T14755] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  347.542661][T14755] rust_binder: Error while translating object.
[  347.574225][T14755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  347.584326][T14755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:935
[  347.599416][T14756] rust_binder: Write failure EINVAL in pid:1275
[  347.664225][T14756] kvm: user requested TSC rate below hardware speed
[  347.678198][T14764] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[  347.678221][T14764] rust_binder: Error while translating object.
[  347.728277][T14764] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  347.743410][T14764] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:682
[  347.761216][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x6
[  347.792359][T14770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:937
[  347.813973][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.845247][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.857931][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.869293][   T36] kauditd_printk_skb: 1091 callbacks suppressed
[  347.869307][   T36] audit: type=1400 audit(1750380655.230:95903): avc:  denied  { ioctl } for  pid=14773 comm="syz.5.4413" path="/dev/binderfs/binder0" dev="binder" ino=120 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  347.908182][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.926212][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.938229][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.948160][   T36] audit: type=1400 audit(1750380655.230:95904): avc:  denied  { set_context_mgr } for  pid=14773 comm="syz.5.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  347.973035][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  347.987565][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.004203][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.007302][T14772] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.011690][   T36] audit: type=1400 audit(1750380655.230:95905): avc:  denied  { read write } for  pid=14775 comm="syz.7.4412" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  348.023811][T14783] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.043251][T14780] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.053104][ T9412] audit: audit_backlog=65 > audit_backlog_limit=64
[  348.055684][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.061495][T14772] audit: audit_lost=410 audit_rate_limit=0 audit_backlog_limit=64
[  348.068796][T14780] audit: audit_lost=411 audit_rate_limit=0 audit_backlog_limit=64
[  348.084454][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.086754][T14772] audit: backlog limit exceeded
[  348.091875][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.112299][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.134545][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.148200][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.157271][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.164853][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.172356][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.181317][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.198360][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.206355][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.213995][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.219940][T14787] binder: Bad value for 'stats'
[  348.226867][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.235416][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[  348.242023][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.256393][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.264485][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.284979][T14789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  348.285010][T14789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:946
[  348.298215][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.317462][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.325219][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.337308][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.345542][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.353513][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.361030][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.368699][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.376131][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.389113][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.397492][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.405312][T14795] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1281
[  348.405486][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.423785][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.431824][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.439800][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.447457][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.455334][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.462851][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.466757][T14797] rust_binder: Write failure EFAULT in pid:694
[  348.474725][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.489396][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.495848][T14799] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.497246][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.511450][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.518896][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.526284][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.533924][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.542757][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.556878][T14800] rust_binder: Error in use_page_slow: ESRCH
[  348.556901][T14800] rust_binder: use_range failure ESRCH
[  348.563077][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.576444][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.583958][T14800] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  348.584016][T14800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  348.591929][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.592594][T14800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1283
[  348.601447][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.613540][T14800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1283
[  348.618030][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.642023][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.649498][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x6
[  348.656884][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x3
[  348.664295][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.671733][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.679181][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.686596][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.694095][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.701564][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.709241][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.716765][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.724319][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.731739][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.739325][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.747662][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.755473][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.762939][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.771325][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.779333][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.786765][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.794366][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.802403][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.809894][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.817415][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.824883][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.832504][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.840543][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.848499][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.855926][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.863366][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.870900][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.878404][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.885789][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.893256][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.908325][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.915920][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.923487][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.930956][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.938658][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.946049][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.953578][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.961187][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.968611][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.976444][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.983950][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  348.991415][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.000465][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.007862][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.015280][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.022690][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.030202][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.037581][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.044984][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.052400][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.060327][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.067739][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.075198][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.083584][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.091084][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.098503][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.105888][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.113353][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.120761][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.128280][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.135667][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.143138][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.150600][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.158037][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.165496][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.172984][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.180504][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.187885][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.195340][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.202793][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.210206][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.217611][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.225040][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.232454][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.239857][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.247236][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.254737][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.262237][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.269652][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.277139][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.284646][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.292082][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.299531][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.307179][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.315849][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.324051][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.331627][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.343476][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.345019][T14807] rust_binder: Write failure EFAULT in pid:1286
[  349.351603][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.375194][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.383166][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.391106][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.398822][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.407180][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.414643][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.422064][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.429487][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.437751][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.446547][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.454531][T14810] rust_binder: Read failure Err(EAGAIN) in pid:1289
[  349.459694][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.474908][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.483782][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.491609][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.496805][T14818] input: syz0 as /devices/virtual/input/input224
[  349.499307][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.515301][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.523270][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.531526][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.533156][T14818] rust_binder: Write failure EFAULT in pid:1293
[  349.539933][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.554007][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.562095][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.571611][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.579072][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.586472][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.593888][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.601309][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.609068][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.616476][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.623995][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.631479][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.638955][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.646401][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.653838][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.661252][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.668818][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.676197][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.683698][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.691102][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.699061][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.706454][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.714143][ T4481] hid-generic 01FF:0004:0400.001A: unknown main item tag 0x0
[  349.722608][ T4481] hid-generic 01FF:0004:0400.001A: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[  350.258184][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  350.290084][T14836] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  350.343888][T14838] rust_binder: Read failure Err(EAGAIN) in pid:948
[  350.558212][T14845] rust_binder: Error while translating object.
[  350.566478][T14845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  350.587066][T14845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:715
[  350.789910][T14861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  350.816925][T14861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:717
[  350.884867][ T4481] hid-generic C98F:0003:0000.001B: unknown main item tag 0x0
[  350.909912][ T4481] hid-generic C98F:0003:0000.001B: unknown main item tag 0x0
[  350.929770][T14868] rust_binder: Write failure EINVAL in pid:961
[  350.931826][ T4481] hid-generic C98F:0003:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  351.163313][T14876] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[  351.172026][T14877] random: crng reseeded on system resumption
[  351.179624][T14876] SELinux: failed to load policy
[  351.234454][T14879] rust_binder: Write failure EFAULT in pid:1317
[  351.317898][T14877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1317
[  351.318286][T14882] kvm: kvm [14881]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9
[  351.406447][T14882] binder: Unknown parameter 'context'
[  351.580442][T14889] kvm: Disabled LAPIC found during irq injection
[  351.587366][T14889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1320
[  351.837008][T14895] rust_binder: Write failure EFAULT in pid:1324
[  351.848192][T14896] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  351.854518][T14896] rust_binder: Read failure Err(EFAULT) in pid:729
[  351.962501][T14896] rust_binder: Write failure EINVAL in pid:729
[  352.034441][T14906] rust_binder: Error while translating object.
[  352.043229][T14906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  352.051732][T14906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:967
[  352.133400][T14911] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  352.199614][T14911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.210785][T14912] SELinux: failed to load policy
[  352.237387][T14916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.286011][T14920] binder: Bad value for 'max'
[  352.446705][T14931] SELinux: failed to load policy
[  352.454877][T14930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  352.773994][T14945] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  352.815731][T14947] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.891458][   T36] kauditd_printk_skb: 1044 callbacks suppressed
[  352.891476][   T36] audit: type=1400 audit(1750380660.250:96945): avc:  denied  { map } for  pid=14946 comm="syz.1.4465" path="/dev/binderfs/binder0" dev="binder" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  352.955746][T14947] rust_binder: Error in use_page_slow: ESRCH
[  352.955768][T14947] rust_binder: use_range failure ESRCH
[  352.964932][T14947] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  352.970337][   T36] audit: type=1400 audit(1750380660.290:96946): avc:  denied  { read } for  pid=14946 comm="syz.1.4465" path="/dev/binderfs/binder0" dev="binder" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  352.983780][T14947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  353.028216][T14947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1353
[  353.062661][   T36] audit: type=1400 audit(1750380660.310:96947): avc:  denied  { ioctl } for  pid=14946 comm="syz.1.4465" path="/dev/binderfs/binder0" dev="binder" ino=117 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  353.098358][T14955] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  353.146288][   T36] audit: type=1400 audit(1750380660.310:96948): avc:  denied  { call } for  pid=14946 comm="syz.1.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  353.208206][   T36] audit: type=1400 audit(1750380660.370:96949): avc:  denied  { read write } for  pid=14252 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  353.271813][   T36] audit: type=1400 audit(1750380660.370:96950): avc:  denied  { read write open } for  pid=14252 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  353.276870][T14963] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.320570][T14966] SELinux: security_context_str_to_sid () failed with errno=-22
[  353.337728][   T36] audit: type=1400 audit(1750380660.370:96951): avc:  denied  { ioctl } for  pid=14252 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  353.351243][T14962] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.385455][   T36] audit: type=1400 audit(1750380660.410:96952): avc:  denied  { read } for  pid=14951 comm="syz.5.4466" name="binder1" dev="binder" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  353.416486][T14963] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  353.441480][T14962] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  353.462714][T14963] rust_binder: Write failure EINVAL in pid:1356
[  353.462823][T14962] rust_binder: Write failure EINVAL in pid:1356
[  353.472047][   T36] audit: type=1400 audit(1750380660.410:96953): avc:  denied  { read open } for  pid=14951 comm="syz.5.4466" path="/dev/binderfs/binder1" dev="binder" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  353.505725][   T36] audit: type=1400 audit(1750380660.420:96954): avc:  denied  { remount } for  pid=14954 comm="syz.6.4467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  353.619829][T14972] rust_binder: Error in use_page_slow: ESRCH
[  353.619848][T14972] rust_binder: use_range failure ESRCH
[  353.626111][T14972] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  353.632982][T14972] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  353.641917][T14972] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:986
[  353.681779][T14972] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.869725][T14983] SELinux:  policydb magic number 0x69622f2e does not match expected magic number 0xf97cff8c
[  353.929013][T14983] SELinux: failed to load policy
[  353.939193][T14990] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.940230][T14987] binder: Bad value for 'max'
[  353.943211][T14990] rust_binder: Write failure EINVAL in pid:1364
[  354.084360][T14993] input: syz0 as /devices/virtual/input/input227
[  354.272835][T14999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  354.282432][T14999] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[  354.405561][T15012] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.422097][T15012] rust_binder: Write failure EINVAL in pid:997
[  354.529354][T15019] binder: Bad value for 'max'
[  354.565772][T15023] rust_binder: Write failure EFAULT in pid:100
[  354.583515][T15021] rust_binder: Got transaction with invalid offset.
[  354.606179][T15021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  354.617679][T15021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:753
[  354.678897][T15028] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[  354.679124][T15025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  354.728197][T15028] SELinux: failed to load policy
[  354.736221][T15028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1001
[  355.187847][T15056] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.216257][T15056] rust_binder: Write failure EINVAL in pid:1012
[  355.264105][T15058] random: crng reseeded on system resumption
[  355.380337][T15063] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.445861][T15066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1381
[  355.501861][T15067] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.527684][T15062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1014
[  355.935459][T15089] random: crng reseeded on system resumption
Stopping sshd: stopped /usr/sbin/sshd (pid 202)
OK
[  355.998208][T15095] rust_binder: Write failure EINVAL in pid:1023
[  356.179126][   T12] Bluetooth: hci0: Frame reassembly failed (-90)
[  356.203185][  T304] Bluetooth: hci1: Frame reassembly failed (-84)
[  356.214531][T15100] Bluetooth: hci1: Frame reassembly failed (-84)
[  356.218697][T15110] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  356.233758][T15110] rust_binder: Read failure Err(EFAULT) in pid:762
[  356.243882][T15107] Bluetooth: hci0: Frame reassembly failed (-84)
Stopping crond: stopped /usr/sbin/crond (pid 193)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 147)
[  356.913755][T15125] input: syz1 as /devices/virtual/input/input229
[  356.946743][T15125] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.952621][T15125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1388
[  356.989828][T15125] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  357.018337][T15125] rust_binder: Error while translating object.
Stopping network: [  357.027090][T15125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  357.071670][T15125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1388
OK
Stopping iptables: [  357.506450][T15152] rust_binder: BINDER_SET_CONTEXT_MGR already set
OK
[  357.801206][T15165] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  357.842891][T15165] rust_binder: Error in use_page_slow: ESRCH
[  357.858326][T15165] rust_binder: use_range failure ESRCH
[  357.864352][T15165] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  357.883063][T15165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  357.901987][   T36] kauditd_printk_skb: 800 callbacks suppressed
[  357.902001][   T36] audit: type=1400 audit(1750380665.260:97755): avc:  denied  { ioctl } for  pid=15167 comm="syz.7.4524" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
Stopping system message bus: [  357.903369][T15165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1400
[  357.936627][   T36] audit: type=1400 audit(1750380665.300:97756): avc:  denied  { read write } for  pid=15162 comm="syz.1.4523" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  357.974088][   T36] audit: type=1400 audit(1750380665.330:97757): avc:  denied  { read open } for  pid=15162 comm="syz.1.4523" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  358.008484][T15165] rust_binder: Write failure EFAULT in pid:1400
[  358.015709][   T36] audit: type=1400 audit(1750380665.330:97758): avc:  denied  { read write } for  pid=12201 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.047309][   T36] audit: type=1400 audit(1750380665.330:97759): avc:  denied  { read write open } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.075289][   T36] audit: type=1400 audit(1750380665.330:97760): avc:  denied  { ioctl } for  pid=12201 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  358.101845][   T36] audit: type=1400 audit(1750380665.330:97761): avc:  denied  { ioctl } for  pid=15162 comm="syz.1.4523" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  358.154492][   T36] audit: type=1400 audit(1750380665.370:97762): avc:  denied  { ioctl } for  pid=15162 comm="syz.1.4523" path="/dev/binderfs/binder1" dev="binder" ino=118 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.182109][   T36] audit: type=1400 audit(1750380665.370:97763): avc:  denied  { read } for  pid=15174 comm="syz.7.4525" name="binder0" dev="binder" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.238845][   T36] audit: type=1400 audit(1750380665.370:97764): avc:  denied  { read open } for  pid=15174 comm="syz.7.4525" path="/dev/binderfs/binder0" dev="binder" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  358.264217][   T52] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  358.268243][ T1525] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  358.271322][   T52] Bluetooth: hci0: command 0x1003 tx timeout
[  358.343879][T15183] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.398674][T15183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  358.463817][T15191] rust_binder: Write failure EINVAL in pid:1032
[  358.613302][T15196] binder: Unknown parameter ''
[  358.618504][T15198] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  358.641115][T15196] binder: Unknown parameter ''
[  358.673644][T15198] SELinux: failed to load policy
[  358.818021][T15208] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[  358.818044][T15208] rust_binder: Error while translating object.
[  358.839908][T15198] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.852204][T15208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
done
[  358.862794][T15208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:795
[  359.212531][T15229] binder: Bad value for 'max'
[  359.290465][T15234] rust_binder: Write failure EFAULT in pid:139
[  359.381228][T15237] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  359.731421][T15257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1059
[  359.817674][T15268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  359.848240][T15268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  359.975511][T15274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1066
[  359.984132][T15274] rust_binder: BINDER_SET_CONTEXT_MGR already set
Stopping klogd: [  359.994890][T15274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1066
[  360.116202][T15281] can0: slcan on ptm0.
[  360.134290][T15283] can1: slcan on ttyS3.
[  360.145599][T15283] binder: Unknown parameter 'defcontext01777777777777777777777'
OK
[  360.163670][T15284] binder: Bad value for 'defcontext'
Stopping acpid: [  360.356103][T15305] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.492161][T15250] can1 (unregistered): slcan off ttyS3.
[  360.697439][T15326] SELinux: security_context_str_to_sid () failed with errno=-22
[  360.722467][ T5238] hid-generic C98F:0003:0000.001C: unknown main item tag 0x0
[  360.735655][ T5238] hid-generic C98F:0003:0000.001C: unknown main item tag 0x0
[  360.747119][ T5238] hid-generic C98F:0003:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  360.772341][T15333] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.774136][T15333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1438
[  360.789148][T15332] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  360.857397][T15337] SELinux:  policydb magic number 0x3 does not match expected magic number 0xf97cff8c
[  360.878315][T15337] SELinux: failed to load policy
[  360.901682][T15340] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.919930][T15276] can0 (unregistered): slcan off ptm0.
[  360.987035][T15343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1090
[  361.056408][T15353] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.092225][T15353] rust_binder: Write failure EINVAL in pid:1442
[  361.192237][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.210927][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.222146][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.236899][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.244189][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.244207][T15367] rust_binder: Write failure EINVAL in pid:824
[  361.251284][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.258203][T15365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1444
OK
[  361.266908][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.284246][T15364] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  361.345352][T15372] random: crng reseeded on system resumption
Stopping syslogd: stopped /sbin/syslogd (pid 91)
OK
[  361.430837][T15375] binder: Bad value for 'stats'
[  361.529238][T15386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1451
[  361.529272][T15386] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  361.556266][T15386] rust_binder: Read failure Err(EFAULT) in pid:1451
[  361.702606][T15392] SELinux: ebitmap: truncated map
[  361.726018][T15392] SELinux: failed to load policy
umount: can't remount debugfs read-only
Connection to 10.128.0.210 closed by remote host.
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  361.749760][T15392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1454
[  362.288725][   T12] bridge_slave_1: left allmulticast mode
[  362.303597][   T12] bridge_slave_1: left promiscuous mode
[  362.309399][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.317015][   T12] bridge_slave_0: left allmulticast mode
[  362.322723][   T12] bridge_slave_0: left promiscuous mode
[  362.328340][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.569081][   T12] veth1_macvtap: left promiscuous mode
[  362.574749][   T12] veth0_vlan: left promiscuous mode
Sent SIGKILL to all processes
Requesting system poweroff
[  363.609476][   T12] bridge_slave_1: left allmulticast mode
[  363.615128][   T12] bridge_slave_1: left promiscuous mode
[  363.620840][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.628405][   T12] bridge_slave_0: left allmulticast mode
[  363.634122][   T12] bridge_slave_0: left promiscuous mode
[  363.639761][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.647402][   T12] bridge_slave_1: left allmulticast mode
[  363.653130][   T12] bridge_slave_1: left promiscuous mode
[  363.658730][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.666093][   T12] bridge_slave_0: left allmulticast mode
[  363.671822][   T12] bridge_slave_0: left promiscuous mode
[  363.677401][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.685033][   T12] bridge_slave_1: left allmulticast mode
[  363.690761][   T12] bridge_slave_1: left promiscuous mode
[  363.696330][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.703710][   T12] bridge_slave_0: left allmulticast mode
[  363.709406][   T12] bridge_slave_0: left promiscuous mode
[  363.714973][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.994613][T15416] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  364.001918][T15416] ACPI: PM: Preparing to enter system sleep state S5
[  364.008887][T15416] kvm: exiting hardware virtualization
[  364.014474][T15416] reboot: Power down
serialport: VM disconnected.