last executing test programs:

20.864150499s ago: executing program 0 (id=623):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad888ca"], 0xffdd)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfffffdef)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000500)={<r2=>0x0, 0x0, 0x1, [0xfffffffffffffffd, 0xffff, 0x9, 0x100000000, 0x3], [0x1, 0xdd28, 0xc572, 0xa, 0x800, 0x10, 0x7, 0xffffffff, 0x46c4, 0x100000000, 0x0, 0x2, 0x100, 0xe9, 0xfffffffffffffff9, 0x8000000000000000, 0x4cab, 0x100, 0x9, 0xf7f9, 0x0, 0x3, 0x10000, 0x1, 0x7, 0x3, 0x6, 0x6, 0xa895, 0x6, 0x80000000, 0x9, 0x5489, 0x6a, 0x2, 0x8001, 0x3, 0x2, 0xfffffffffffffffa, 0x8, 0x9, 0x4, 0xec1d, 0x7, 0x8000000000000000, 0x401, 0x8, 0x4, 0x7, 0x76, 0x0, 0x6, 0x3, 0x8000000000000000, 0x3, 0x9, 0x8, 0xefa, 0x0, 0xd3c, 0x9, 0x6, 0x2447, 0x0, 0x7, 0x2, 0x101, 0x7, 0x7, 0x9, 0x200, 0x7ff, 0x1, 0x0, 0x6, 0x0, 0x2, 0xffffffff, 0x6, 0xffffffffffffffff, 0x51, 0x7, 0x1000, 0x6, 0xbadb, 0x38000000, 0x3, 0x5, 0x4, 0x0, 0xf35f, 0x3, 0x2, 0x8, 0x3, 0x4, 0x2, 0x2, 0x7, 0x5, 0x2, 0xffffffff, 0x1, 0x0, 0x100000001, 0xf6, 0x100000001, 0x200, 0x7, 0x1, 0x3, 0x56, 0x5, 0x10000, 0x6, 0x9, 0x1ca, 0x2, 0x3, 0x3, 0x5]})
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r2, @ANYBLOB='\x00\x00\x00\x00'])
read$FUSE(r1, &(0x7f0000001bc0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
read$FUSE(r1, &(0x7f0000003c00)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
read$FUSE(r1, &(0x7f0000005c40)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=<r6=>0x0)
read$FUSE(r1, &(0x7f0000007c80)={0x2020, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2046)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=<r8=>0x0)
prctl$PR_GET_KEEPCAPS(0x7)
read$FUSE(r1, &(0x7f0000009cc0)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000400)=<r11=>0x0)
read$FUSE(r1, &(0x7f000000bd00)={0x2020, 0x0, 0x0, 0x0, <r12=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000440)=<r13=>0x0)
read$FUSE(r1, &(0x7f0000010180)={0x2020, 0x0, 0x0, 0x0, <r14=>0x0}, 0x2020)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000009c0)=r10, 0x12)
write$tcp_mem(r1, &(0x7f0000000940)={0x6, 0x20, 0x7fffffffffffffff, 0x20, 0x4000000000}, 0x48)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000fd80)=ANY=[@ANYBLOB="d8ceccb91c0944a3", @ANYRES64=r3, @ANYBLOB="0100000000000000000000000000000000040000000000000f010000000000000600000005000000020000000000000001000000010000006500000000000000080000000000000002000000000000000100000000000000ff00000040004000f1ffffff00c0000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="b70000000600000000000000030000000000000043000000000000000e000000080000006d656d6f72792e6576656e747300000003000000000000000100000000000000ff7f00000000000000000000000000000200000004000000020000000000000009000000000000000300000000000000d0e900000000000007000000000000000008000000000000d507000000000000000000000070000003000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="feffffff0500000000000000010000000000000000000000000000c00100000002000000240000000000000000000000000000000200000000000000b60000000000000003000000000000000300000000000000060000000000000000800000000000000080000000000000b242000000000000470800000000000004000000000000000200000001ffffff070000000060000040090000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0080000001000100000000000500000000000000080000000000000000000000000000000200000000000000030000000000000007000000000000000002000000000000040000000b0300000600000000000000ff7f000000000000040000000000000008000000000000000000000000000000800000000000000009000000010000000400000000a0000014040000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="c9c2000002000000000000000300000000000000ff0f000000000000010000000600000029000000000000000600000000000000020000000000000003000000000000000300000000000000400000000080000005000000000000000100000000000080040000000000000001800000000000000600000000000000010000000000000003000000060000001c0e000000b0000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000080006000000000000000500000000000000020000000000000003000000040000002c312d000000000003000000000000000100000000000000050000000000000004000000000000000500000002000000010000000000000004000000000000000300000000000000080000000000000004000000000000000000000000000000090000005519ffff0300000000a0000006000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="06000000ec00000000000000050000000000000002000000000000000b000000070000002e2f62696e6465726673000000000000"], 0x3d8)
r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r15, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r15, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'nicvf0\x00', 0x200})
r16 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0)
ioctl$FS_IOC_RESVSP(r16, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x75, 0x2a40})
ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x1, 0x1a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x15}, @fda={0x66646185, 0x8, 0x0, 0x1b}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats='])

20.730447551s ago: executing program 0 (id=624):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x9, 0x8, 0x5}, 0x47, [0xffffffff, 0xd83b, 0x0, 0x7fff, 0x81d, 0x9, 0x7f, 0x8, 0x180000, 0x8, 0xe, 0x2, 0xffffffff, 0x7, 0x9, 0x10000, 0x7, 0x1, 0x5, 0x2, 0x9, 0x5, 0x0, 0x4, 0x7, 0xf06, 0x5, 0x7, 0xd, 0x80000000, 0x7fff, 0x2d879528, 0x200, 0x0, 0x5, 0x101, 0x6, 0x4, 0x200, 0x2, 0x3, 0x3, 0x3, 0x6, 0x4, 0xffff82ef, 0x3, 0xa76, 0x8001, 0x4, 0x7fff, 0x2, 0x1, 0x9, 0x7, 0x2d3, 0x2, 0x1, 0xca, 0x2, 0x4, 0x6, 0x9, 0xb], [0x3, 0x3, 0x1000, 0x0, 0x400, 0x1677, 0x6, 0x8, 0x4, 0x6, 0x10, 0x7, 0xffffffff, 0x2, 0xd, 0x1, 0xbe, 0xd2f, 0x2, 0x8, 0x3ff, 0x400, 0x0, 0x67b, 0x2, 0xe, 0x1, 0x3e9d, 0x7, 0x5, 0x0, 0x8, 0x1, 0xfffffff7, 0x100, 0x7, 0x5, 0xffffffff, 0x2, 0xf, 0x8, 0x3ff, 0x8, 0x400, 0x8, 0x0, 0x10000, 0x5, 0x7, 0xffff2b43, 0x2, 0x1, 0x8, 0xa4, 0x6ec, 0x8, 0x9f, 0xb, 0x5, 0x7, 0x5, 0x9, 0x44f6, 0x4], [0xc1, 0x2, 0x2, 0x6, 0x4, 0xe456, 0xab94, 0x8, 0xa5, 0x3, 0x7ff, 0x3, 0xb, 0x40, 0x27a, 0x1, 0x0, 0x10, 0x4, 0x6, 0x5, 0x0, 0x7, 0x2, 0x9, 0x3a6d, 0xffffffff, 0xfffffffb, 0x1, 0x33848e5e, 0x3, 0x7, 0xbc, 0xed, 0x1, 0x8, 0x7f, 0xba8, 0x5d15, 0x40, 0x1, 0x3, 0x5, 0x0, 0x2, 0x8, 0x3, 0x7, 0xfffffff7, 0x0, 0x3, 0x1000, 0x0, 0x6, 0x2, 0xe, 0x23b, 0x6, 0x6444, 0x9, 0x2, 0x80000000, 0x4, 0x8], [0x4, 0x2, 0x7, 0xfffffff2, 0x7fffffff, 0x5, 0x1000, 0x8, 0x4, 0x4, 0x0, 0x7fffffff, 0x81, 0x8, 0x4, 0x11, 0x4, 0x9, 0x5, 0x7fff, 0x2, 0x9, 0xfff00000, 0x1ff, 0x8, 0x6, 0x5, 0x7, 0x3, 0x7, 0xffffffc0, 0x8, 0xdf, 0x80000001, 0x3, 0x0, 0x8001, 0xfffffbff, 0x5, 0xa, 0x4, 0x8001, 0x3, 0x80, 0x3, 0x4, 0x7, 0xa, 0x0, 0xe82, 0x7, 0x1, 0x1, 0x80, 0x2, 0x6, 0x2, 0x80, 0x8, 0x6a5, 0xd52, 0xfffffffa, 0x3, 0xffffffff]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xe) (async)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2b) (async)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) (async)
write$uinput_user_dev(r0, &(0x7f00000004c0)={'syz0\x00', {0x4, 0x200, 0x4, 0xea3}, 0x20, [0x8, 0x1, 0x5, 0x200, 0x6, 0xff, 0x2, 0xffffffff, 0x6, 0x7ff, 0x17c1, 0x9, 0xb, 0x80, 0x4, 0x4, 0xb5, 0xa, 0x3, 0xb, 0x8, 0x4, 0x2, 0xf2, 0x6, 0x8, 0x313, 0x6, 0xbd, 0x7f, 0x9739, 0x64, 0x9, 0x6, 0x0, 0x2, 0x1, 0x5, 0x1, 0xa670, 0xc0, 0x1000, 0x7, 0x2, 0x29e4, 0x86cd, 0x9, 0x6, 0x6, 0x5, 0x0, 0x91, 0x5, 0xffffff60, 0xf6, 0x3, 0x5, 0x4, 0x3ff, 0x1, 0x87f, 0x9, 0x5, 0x3ff], [0x0, 0x5, 0x6, 0x10, 0x7730, 0x8, 0xd, 0x3, 0x1, 0x7, 0x2, 0x33, 0x2, 0x401, 0x1000, 0x9d9c, 0x4e7, 0x4, 0x1, 0x5, 0x6, 0x3, 0x9f3d, 0x3, 0x8000, 0x2, 0x8, 0x9, 0x9, 0x1000, 0x4, 0x1ca, 0x3, 0xfff, 0x4, 0x3, 0x5, 0x9, 0x3ff, 0x9, 0x1000, 0x5, 0xc, 0xd5, 0x9, 0xfff, 0x284, 0x1, 0x0, 0x9, 0x5, 0x9, 0x1, 0x6, 0x7fa, 0x38000000, 0x0, 0x7f, 0x1, 0x81, 0x0, 0x7, 0xfffffff7, 0x5], [0x2, 0x0, 0xfff, 0xfffffff8, 0x5, 0x7, 0x10, 0x3, 0xf506, 0x5, 0xffff, 0xa, 0xfb, 0x5, 0x3, 0x8, 0x4, 0x800000, 0x8, 0x9, 0x8, 0x2, 0x8, 0x2, 0x6, 0x7fffffff, 0x1, 0xffff, 0x100, 0x9, 0x0, 0x2, 0x8710, 0x67, 0x4, 0xfffffffe, 0x6, 0x0, 0x9, 0x9, 0x5, 0x6, 0x4, 0x5, 0xe8c2, 0x53d, 0x7, 0x4, 0x2, 0x8000, 0x8a1c, 0x3, 0x40, 0x1ff, 0x0, 0x2, 0x7fff, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0x7ff], [0x8001, 0x4, 0x9, 0x6, 0x6, 0x9, 0x4, 0x7, 0x3, 0x2, 0x6, 0x40, 0x1, 0x0, 0x2, 0x10001, 0x3, 0x9313, 0xf, 0xff, 0x508, 0x0, 0xffff, 0x7, 0x8, 0xc7, 0x80, 0x8, 0x1cf6, 0x9, 0x6, 0x7, 0x6f557618, 0x10, 0x3, 0x2, 0x3ff, 0x100, 0x9, 0x4, 0x0, 0x8000, 0x4, 0x5, 0x6, 0x2, 0x8, 0x8, 0xfffffffe, 0x1, 0x8, 0x0, 0x1, 0x6, 0xffff, 0x3, 0x4, 0x2, 0xf, 0x9, 0xc, 0x4, 0xb3, 0x9]}, 0x45c) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000940)={0x9, {0x2, 0x4, 0x3, 0x27f50000000, 0x5}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000009c0)={0x4, 0x8000})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {0x6, 0x8, 0x7, 0x5}, 0x3b, [0x1d, 0x1, 0x4, 0x9, 0x10, 0xf, 0x1, 0x9, 0x4, 0x4, 0x4b7, 0x972, 0xe5, 0x8, 0x7ff, 0x462, 0x5, 0x5, 0x0, 0xe6a, 0x80, 0x1, 0x22d, 0x1000, 0x7, 0x8, 0x4, 0x7, 0x8, 0x4, 0x7, 0x2, 0x7fb0, 0x1, 0x0, 0x7, 0x9, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x9, 0x6, 0xdc, 0x9, 0x160e0, 0x7f, 0x8, 0x2, 0x9, 0x475, 0xd4d, 0x30, 0x4, 0x8, 0xfffffff9, 0xc, 0x7fff, 0x9, 0x6, 0x73, 0x5, 0xffff], [0xfffffffc, 0x2, 0xc, 0x3, 0x0, 0x401, 0x0, 0xfffffffe, 0x5, 0xdd5, 0x9, 0x1, 0xc2, 0x7, 0x8001, 0x1, 0x0, 0x5, 0x1, 0x2, 0xcec, 0x9, 0xaad6, 0x6, 0x3ff, 0x9, 0xffffffb1, 0x1, 0x9, 0xfffffffd, 0x85fa, 0x2, 0x9, 0x4, 0xfffffffa, 0xf, 0x7, 0x9, 0xee, 0x8, 0x0, 0x0, 0x1, 0x9c, 0x7, 0x0, 0x10, 0x5, 0x4, 0x5, 0x800, 0x7, 0x1, 0x101, 0x6, 0x69, 0x1, 0x100, 0x0, 0x15c0, 0x4, 0x1, 0x9, 0xff], [0x1000, 0x8, 0x4, 0x5, 0x2, 0x0, 0x9, 0x10000, 0xffff, 0x8, 0x7, 0x3, 0xf0, 0x6, 0x8e, 0x8, 0x400, 0x7fff, 0x2, 0x3, 0xffffffff, 0x80, 0xfff, 0x81, 0x9, 0x80, 0x9, 0x9ce, 0x3, 0x2, 0xe6, 0x8, 0x4, 0x1, 0x1, 0x100, 0x3, 0x6, 0xfffffffe, 0x80, 0x8, 0x2, 0x9, 0xd394, 0x0, 0x8, 0xc3, 0x7, 0x1, 0x9, 0x6361a904, 0x872, 0x400, 0x200, 0x1, 0x1, 0x1, 0x1, 0x6, 0x1, 0xf0000000, 0x3, 0xc087, 0x800], [0x19b, 0x0, 0xff80, 0xf, 0x9, 0x1, 0xf, 0xfff, 0x5, 0x7, 0x3, 0xf, 0x14000000, 0xa7, 0x9, 0x81, 0x6, 0x5, 0x4, 0xffffffff, 0x80000001, 0x2, 0x20000000, 0x5, 0x8, 0x3, 0x9, 0x1, 0x5, 0x1, 0xffffffff, 0x8001, 0x47c5, 0x3, 0x3, 0x6, 0x10001, 0x5, 0x3, 0x0, 0x7, 0x5, 0x5, 0x7, 0xb688, 0x2, 0xfffffff8, 0xfffffff9, 0x7, 0x4, 0x5, 0x7fffffff, 0x40, 0xf3c, 0x9, 0x8001, 0x8, 0xcc87, 0x1, 0x4, 0x3515, 0x80000001, 0x6, 0x9]}, 0x45c)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000ec0)={0xa8, 0x0, 0x2}) (async)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501) (async)
ioctl$UI_DEV_DESTROY(r3, 0x5502) (async)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000f80)={0x1, 0x8})
ioctl$UI_DEV_DESTROY(r3, 0x5502) (async)
ioctl$KDDELIO(r1, 0x4b35, 0x5)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000fc0)) (async)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001000), 0x80000, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, r6, 0x300000c, 0x13, r7, 0x0) (async)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r7, 0x8008f512, &(0x7f0000001040)) (async)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)

20.723646371s ago: executing program 0 (id=626):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"])
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x720, 0x0, &(0x7f0000000580)="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"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async)

20.498667695s ago: executing program 0 (id=628):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x5, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

20.498200475s ago: executing program 0 (id=629):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x2015, 0x100000000000})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x10)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f00000002c0)={[{0x4, 0x200, 0x3e, 0x8, 0x8, 0x35, 0x9, 0x8, 0x0, 0xc0, 0x6b, 0x80, 0x1}, {0x1, 0xfff, 0x9, 0x11, 0x3, 0x3, 0x10, 0x7f, 0x8c, 0x6, 0x5, 0x8, 0x58}, {0x9a57, 0x8, 0x9, 0xf, 0x9, 0x8, 0x4, 0x3, 0x3, 0xb, 0xc, 0x10, 0x6}], 0x3})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x28042, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x18, 0x0, &(0x7f0000000180)=[@increfs, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})

20.343142947s ago: executing program 0 (id=630):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0xb, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4008af60, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})

4.202746275s ago: executing program 32 (id=630):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000098}]})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0x8, 0x6, 0x3, 0x0, [{0x1, 0x3, 0x3, '\x00', 0x2}, {0x0, 0x5, 0x1, '\x00', 0x8}, {0x7, 0x2b, 0xf3, '\x00', 0x2}, {0x7, 0x2, 0x1c, '\x00', 0x7}, {0x0, 0x3, 0x4, '\x00', 0x58}, {0x80, 0x2, 0xb, '\x00', 0x9}, {0x2, 0x7, 0x5, '\x00', 0x2}, {0x0, 0x81, 0x4, '\x00', 0x22}, {0x9, 0x9, 0x6, '\x00', 0x7}, {0x3, 0x58, 0x81, '\x00', 0x1}, {0x9, 0x8, 0x1, '\x00', 0xfa}, {0x1, 0x7f, 0x2, '\x00', 0x81}, {0x2, 0x4, 0xff, '\x00', 0xa}, {0x7b, 0x1, 0x2, '\x00', 0x5}, {0x7f, 0x4, 0x6, '\x00', 0x6}, {0x1, 0x0, 0x9}, {0xa, 0x1, 0x0, '\x00', 0x7}, {0x80, 0x2, 0x4, '\x00', 0x1}, {0x82, 0x5, 0x6, '\x00', 0x2f}, {0x2, 0x8, 0x0, '\x00', 0xb}, {0x8, 0x41, 0xfe, '\x00', 0x6}, {0x1, 0x4, 0x8, '\x00', 0x8}, {0x0, 0x5, 0x2, '\x00', 0x3}, {0x1, 0x9, 0x6, '\x00', 0xc}]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10001, 0xb, 0x8080000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4008af60, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0})
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]})

4.194535685s ago: executing program 3 (id=674):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308003c5c980128876360864668f82ffdeefa000000000000ffd2ac", @ANYRESOCT], 0xffdd)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1f)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x29)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc4, 0x0, &(0x7f0000000380)=[@register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/35, 0x23, 0x1, 0x2c}, @fda={0x66646185, 0x0, 0x0, 0x40}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x48}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @decrefs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1440}, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x3}], 0x1d, 0x0, &(0x7f0000000240)="781fb98da4f12fb7a69b544daeb3da039f2f7bc7e2e6a4ac414cc130e5"})
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000540)={0x5, 0x0, 0x100000, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000063debda59c01e2c0a7002885a7b0503992ff"])
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3})

3.994303118s ago: executing program 3 (id=675):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000340)=[@increfs, @exit_looper], 0x0, 0x0, 0x0})

3.987486418s ago: executing program 3 (id=676):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x70, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x3, 0x2, 0x12}, @fda={0x66646185, 0x7, 0x2, 0x27}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000140)={0x2, r3})

3.684015413s ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

3.561321135s ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

3.482461746s ago: executing program 2 (id=681):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101800, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000380)={0x0, 0x1, 0x200, 0x3, 0x4})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x0, 0x90}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0x7}, {0x77}, {0x0, 0x85, 0xbe}, {0x0, 0xc2}, {0x0, 0x2, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfa, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50, 0x0, '\x00', 0x1}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e, 0x0, '\x00', 0xd}, {0x2, 0x2, 0x4, '\x00', 0x9}, {}, {0x1, 0xfd, 0x4, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x10, 0x83, 0xe, '\x00', 0x3}]}})
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYRESDEC])

3.361063798s ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

3.359411938s ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

1.594534785s ago: executing program 2 (id=682):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}, @register_looper, @register_looper, @register_looper], 0x0, 0x0, &(0x7f00000002c0)}) (async)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x250800)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))

1.594008275s ago: executing program 3 (id=683):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1c)
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$selinux_user(r1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0x5, 0xf058, 0x3, 0xd240}, 0x51, [0x7, 0x3, 0x9, 0x2, 0x7, 0x0, 0x347, 0x7fffffff, 0x80000000, 0x2, 0xa042, 0xfffffffa, 0x0, 0x3, 0x7, 0xb, 0x8001, 0x10001, 0x1, 0x7, 0x9, 0x8, 0x3, 0xe7, 0xf, 0x63207bc9, 0x7f, 0x8000, 0x375, 0x0, 0x0, 0x9, 0xde1, 0x3, 0x7ff, 0x6, 0x6, 0x6b6f0000, 0x200, 0x7, 0x10000, 0xfff, 0xc6d4, 0x4, 0x0, 0x5, 0x4, 0x8, 0x6, 0x4d, 0x4, 0x80, 0x5, 0x1000, 0x616b, 0x4, 0x1, 0x4, 0x80000001, 0x20000004, 0x1, 0xe910, 0x2, 0x3], [0xfffffffa, 0x6, 0x8, 0x7, 0x4, 0x6, 0x1, 0x1, 0x8000, 0x2, 0x3, 0x401, 0x10000, 0x8000, 0x8000, 0x7, 0x9, 0x0, 0x6, 0x8000, 0x6, 0x4, 0x4, 0xd4, 0x7fff, 0x1, 0x8, 0x1, 0x6, 0x7, 0x63, 0x7, 0x4, 0x4, 0xf13, 0x7, 0x7, 0x5, 0x6, 0x7, 0x3, 0x1ff, 0x7, 0x7f, 0xfffffffb, 0x7, 0x8, 0x6, 0x5, 0x7, 0x5, 0x3ff, 0xffff, 0xcbf9, 0x8001, 0x5, 0x8, 0x0, 0x4, 0xd1, 0x4, 0x9, 0x10001, 0xfffffff8], [0x6, 0x9, 0x1, 0x4391, 0x40, 0x1000, 0x8, 0x1, 0x3, 0x8, 0x0, 0x7, 0xfb3, 0x3b4, 0xe1, 0xffffffff, 0x6, 0x1, 0x200, 0x4, 0x7d8, 0x6, 0x1, 0x81, 0x1, 0x22, 0x7ff, 0xffffffff, 0x1, 0x254e, 0xfffffffe, 0x0, 0x3, 0x7, 0x7, 0x2, 0x2170afe1, 0x5, 0x4, 0x40, 0x5, 0x100, 0x4, 0x1, 0x1, 0x3, 0x1, 0xffff01cf, 0x1, 0x9, 0xff, 0xc1, 0x0, 0x0, 0x4, 0x5, 0x80000001, 0xb, 0xffff, 0x8001, 0x3, 0x7fffffff, 0x7, 0x8000], [0x0, 0x7abd, 0x1, 0x5, 0x2, 0xdc, 0x16, 0x7ff, 0xffffff20, 0xfffffff0, 0x5, 0x7, 0x0, 0xffffffff, 0x91fc, 0x2, 0x6, 0x59, 0xffff489c, 0x1, 0x3, 0x3, 0x8, 0xfff, 0x9, 0x7, 0xae6, 0x1f, 0x5, 0xaf07, 0x8, 0x2, 0x1, 0xa7c, 0x5, 0xfffffffa, 0x40, 0xe25, 0x6, 0x8, 0x4, 0x0, 0x1, 0x2984, 0xfff, 0x9, 0x2, 0x7, 0xc791, 0xd05d, 0x400007, 0x6, 0xd, 0x4, 0xff, 0x82f, 0x0, 0x4, 0x3, 0xffffffff, 0x3, 0x8001, 0x7, 0x9]}, 0x45c)
read(r0, &(0x7f0000000740)=""/225, 0xe1)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r6, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0xa)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0x81007702, 0x10000000012)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$TUNDETACHFILTER(r7, 0x401054d6, 0x0)

1.485360317s ago: executing program 2 (id=684):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000c40)=0x1b) (async)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000c40)=0x1b)
write(r5, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000e00600000000000000000000000000001e18f9e110fb47cfbffe5c99ea93c9e84054e329f58de71a94026b"])
syz_clone3(&(0x7f0000000040)={0x820000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000008a00)={0x1fe, 0x0, &(0x7f0000ffd000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r9, 0x800455ca, 0x1)
ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0x4018aee2, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) (async)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5)

1.485121147s ago: executing program 3 (id=685):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
read(r1, &(0x7f0000000080)=""/93, 0xffffff6c)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000100))
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x7fffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000)

1.26542684s ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

1.120512433s ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

982.127504ms ago: executing program 2 (id=686):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, 0xffffffffffffffff, 0x0)

975.283675ms ago: executing program 3 (id=687):
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00') (async)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00')
prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async)
prctl$PR_MCE_KILL(0x35, 0x1, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder-control\x00', 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x20082, 0x0)
write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='trylock none'], 0xd)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000540)={'binder1\x00'})
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'})

974.195465ms ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

851.701067ms ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

709.724319ms ago: executing program 2 (id=688):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$TUNGETDEVNETNS(r4, 0xff05, 0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000024c0)={0x0, 0x6})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000008a0200000000000003000000000000ed"])
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000c0200000000000008e9000000000000"])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0)
r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x140, 0x0, 0x1}]})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)

709.042139ms ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

487.217132ms ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

270.416375ms ago: executing program 2 (id=689):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x8000})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1})
close(r2)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/255, 0xff, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x9, 0x18, 0x40}}, 0x10}], 0x52, 0x0, &(0x7f0000000380)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948"})

266.545616ms ago: executing program 4 (id=672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) (async)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) (async)
write$vga_arbiter(r3, 0x0, 0x13)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="cf00000000555c0000000000000000a79200000000080000ccf7ae7d55"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=sy\"te'])

0s ago: executing program 1 (id=627):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73797374656d5f75dd47d0b90b893a03ffdf"])
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae09, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0x2, 0x3, 0xeffffdff, 0x0, [{0xfe, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0xfd, 0xbe}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x2}, {0x0, 0x0, 0x9}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x4, 0x4e}, {0x2, 0x2, 0x4, '\x00', 0xfe}, {}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x8, 0xa, '\x00', 0x3}, {0x80, 0xfc, 0x0, '\x00', 0x40}, {0x0, 0x14}, {0x2, 0x0, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0xfc, 0x83, 0xe}]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000869000/0x2000)=nil, 0x2000, 0x2000006, 0x12, r5, 0x70800000)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f000086a000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x2)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000080)={0x5, 0xdb})
r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r10, 0x0, 0x0)
read(r8, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x8)
read(r10, &(0x7f0000000040)=""/15, 0xf)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts.
[   20.766121][   T36] audit: type=1400 audit(1750362951.420:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.767280][  T281] cgroup: Unknown subsys name 'net'
[   20.788939][   T36] audit: type=1400 audit(1750362951.420:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.816649][   T36] audit: type=1400 audit(1750362951.450:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   20.816839][  T281] cgroup: Unknown subsys name 'devices'
[   21.021280][  T281] cgroup: Unknown subsys name 'hugetlb'
[   21.027245][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.118282][   T36] audit: type=1400 audit(1750362951.770:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.141545][   T36] audit: type=1400 audit(1750362951.770:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.167460][   T36] audit: type=1400 audit(1750362951.770:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.175578][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   21.199968][   T36] audit: type=1400 audit(1750362951.860:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.227183][   T36] audit: type=1400 audit(1750362951.860:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.257769][   T36] audit: type=1400 audit(1750362951.910:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.258248][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   21.283547][   T36] audit: type=1400 audit(1750362951.910:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.005695][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.012836][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.019939][  T288] bridge_slave_0: entered allmulticast mode
[   22.026198][  T288] bridge_slave_0: entered promiscuous mode
[   22.032664][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.039725][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.046774][  T288] bridge_slave_1: entered allmulticast mode
[   22.053025][  T288] bridge_slave_1: entered promiscuous mode
[   22.146470][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.153632][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.160857][  T292] bridge_slave_0: entered allmulticast mode
[   22.167086][  T292] bridge_slave_0: entered promiscuous mode
[   22.182370][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.189462][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.196544][  T292] bridge_slave_1: entered allmulticast mode
[   22.203065][  T292] bridge_slave_1: entered promiscuous mode
[   22.226953][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.234073][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.241199][  T295] bridge_slave_0: entered allmulticast mode
[   22.247356][  T295] bridge_slave_0: entered promiscuous mode
[   22.253865][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.260912][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.268058][  T295] bridge_slave_1: entered allmulticast mode
[   22.274380][  T295] bridge_slave_1: entered promiscuous mode
[   22.305028][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.312509][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.319659][  T294] bridge_slave_0: entered allmulticast mode
[   22.325809][  T294] bridge_slave_0: entered promiscuous mode
[   22.332115][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.339159][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.346213][  T294] bridge_slave_1: entered allmulticast mode
[   22.352526][  T294] bridge_slave_1: entered promiscuous mode
[   22.434380][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.442053][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.449470][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.456586][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.507482][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.514628][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.522833][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.530236][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.544568][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.552091][  T295] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.560535][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.567662][  T295] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.583908][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.590989][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.598454][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.605511][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.623926][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.631837][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.639705][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.646941][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.655244][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.662511][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.669874][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.689876][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.696928][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.714641][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.721709][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.729589][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.736639][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.745561][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.752707][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.763225][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.770292][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.799748][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.806887][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.819607][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.826655][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.858798][  T295] veth0_vlan: entered promiscuous mode
[   22.867398][  T292] veth0_vlan: entered promiscuous mode
[   22.882605][  T288] veth0_vlan: entered promiscuous mode
[   22.892797][  T292] veth1_macvtap: entered promiscuous mode
[   22.904089][  T295] veth1_macvtap: entered promiscuous mode
[   22.912292][  T288] veth1_macvtap: entered promiscuous mode
[   22.948924][  T294] veth0_vlan: entered promiscuous mode
[   22.963068][  T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   22.975086][  T294] veth1_macvtap: entered promiscuous mode
[   23.063600][  T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.149220][  T331] rust_binder: Write failure EINVAL in pid:7
[   23.215935][  T332] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   23.222105][  T332] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[   23.230168][  T332] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[   23.405601][  T345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13
[   23.436828][  T347] binder: Bad value for 'max'
[   23.595316][  T354] input: syz1 as /devices/virtual/input/input4
[   23.963815][  T379] rust_binder: Write failure EFAULT in pid:11
[   24.460374][  T389] SELinux:  policydb string length 15532040 does not match expected length 8
[   24.475482][  T389] SELinux: failed to load policy
[   24.515535][  T392] rust_binder: Error while translating object.
[   24.515566][  T392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.523847][  T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   24.566070][  T396] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   24.575522][  T396] rust_binder: Error while translating object.
[   24.586632][  T396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.594961][  T396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21
[   24.632705][  T402] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   24.643679][  T402] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   24.817370][  T414] input: syz0 as /devices/virtual/input/input6
[   24.863015][  T414] binder: Bad value for 'max'
[   25.018836][  T431] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   25.028244][  T431] rust_binder: Write failure EINVAL in pid:26
[   25.131584][  T447] rust_binder: Error while translating object.
[   25.138355][  T447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.145737][  T447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[   25.181978][  T447] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   25.194088][  T453] =======================================================
[   25.194088][  T453] WARNING: The mand mount option has been deprecated and
[   25.194088][  T453]          and is ignored by this kernel. Remove the mand
[   25.194088][  T453]          option from the mount to silence this warning.
[   25.194088][  T453] =======================================================
[   25.242382][  T453] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   25.272864][  T459] binder: Unknown parameter '0x00000000000000001844674407370955161500000000000000000000;Z��U���H[>9o�m��Οb'
[   25.457762][  T479] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[   25.466755][  T477] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   25.483247][  T479] rust_binder: Write failure EINVAL in pid:42
[   25.494187][  T481] binder: Bad value for 'max'
[   25.539329][  T485] binder: Bad value for 'defcontext'
[   25.545314][  T485] binder: Bad value for 'defcontext'
[   25.590132][  T483] kvm: Disabled LAPIC found during irq injection
[   25.629422][  T489] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   25.639666][  T489] SELinux: failed to load policy
[   25.664093][  T491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.664121][  T491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46
[   25.668737][  T489] rust_binder: Write failure EINVAL in pid:41
[   25.699278][  T492] rust_binder: Error while translating object.
[   25.712801][  T492] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   25.721145][  T492] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62
[   25.842269][  T500] tun0: tun_chr_ioctl cmd 1074025675
[   25.861093][  T500] tun0: persist enabled
[   25.867189][  T500] tun0: tun_chr_ioctl cmd 1074025675
[   25.873548][  T500] tun0: persist enabled
[   25.880932][  T500] rust_binder: Write failure EINVAL in pid:65
[   25.908382][  T506] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   25.915950][  T506] rust_binder: Error while translating object.
[   25.923513][  T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   25.932328][  T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[   26.013283][   T36] kauditd_printk_skb: 87 callbacks suppressed
[   26.013300][   T36] audit: type=1400 audit(1750362956.670:161): avc:  denied  { map } for  pid=512 comm="syz.2.68" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   26.108235][   T36] audit: type=1400 audit(1750362956.720:162): avc:  denied  { execute } for  pid=512 comm="syz.2.68" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   26.138636][  T516] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   26.605446][  T531] rust_binder: Write failure EINVAL in pid:45
[   26.629126][  T532] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   26.658982][  T532] rust_binder: Write failure EINVAL in pid:45
[   26.686525][   T36] audit: type=1326 audit(1750362957.340:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.2.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33cf98e929 code=0x0
[   26.797305][  T535] rust_binder: Error in use_page_slow: ESRCH
[   26.797338][  T535] rust_binder: use_range failure ESRCH
[   26.804183][  T535] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   26.810268][  T535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   26.818215][  T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:48
[   26.845649][   T36] audit: type=1400 audit(1750362957.500:164): avc:  denied  { append } for  pid=539 comm="syz.3.76" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   26.929294][   T36] audit: type=1400 audit(1750362957.590:165): avc:  denied  { write } for  pid=544 comm="syz.3.78" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   26.955851][   T36] audit: type=1400 audit(1750362957.590:166): avc:  denied  { open } for  pid=544 comm="syz.3.78" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.006255][   T36] audit: type=1400 audit(1750362957.660:167): avc:  denied  { unmount } for  pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.068689][  T555] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.069947][  T555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82
[   27.228813][  T563] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.239036][   T36] audit: type=1400 audit(1750362957.890:168): avc:  denied  { read write } for  pid=562 comm="syz.3.84" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.272635][  T563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:67
[   27.272714][   T36] audit: type=1400 audit(1750362957.900:169): avc:  denied  { open } for  pid=562 comm="syz.3.84" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.305212][   T36] audit: type=1400 audit(1750362957.930:170): avc:  denied  { ioctl } for  pid=562 comm="syz.3.84" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   27.339518][  T565] rust_binder: Write failure EINVAL in pid:84
[   27.457692][  T576] rust_binder: Got transaction with invalid offset.
[   27.466284][  T576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.473704][  T576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59
[   27.538801][  T578] SELinux: security_context_str_to_sid (system_u�Gй�:��) failed with errno=-22
[   27.591434][  T583] random: crng reseeded on system resumption
[   27.600259][  T586] rust_binder: Write failure EFAULT in pid:75
[   27.606915][  T580] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87
[   27.618914][  T580] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.636495][  T580] rust_binder: Read failure Err(EFAULT) in pid:87
[   27.750258][  T597] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   27.756900][  T597] rust_binder: Read failure Err(EFAULT) in pid:89
[   27.819594][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.835606][  T606] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   27.835647][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.850542][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.857783][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.880653][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.896273][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.904540][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.914007][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.929009][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.944651][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.959492][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.975162][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.988134][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   27.997953][  T605] cgroup: fork rejected by pids controller in 
[   28.005169][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.012418][  T605] /syz3
[   28.019077][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.031144][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.038582][  T605] 
[   28.049565][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.050188][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.057169][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.066736][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.078944][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.137131][  T646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60
[   28.154240][  T645] rust_binder: Error while translating object.
[   28.165417][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.171895][  T645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   28.180074][  T645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:60
[   28.191182][  T649] binder: Bad value for 'stats'
[   28.199666][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.223972][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.235738][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.245589][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.265223][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.275309][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.283334][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.299018][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.316730][  T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[   28.319005][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.323820][  T664] rust_binder: Error while translating object.
[   28.338797][  T604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.339235][  T664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   28.352209][  T664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:70
[   28.400332][  T670] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.553835][  T679] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.668711][  T691] rust_binder: Write failure EINVAL in pid:66
[   28.734467][  T704] SELinux:  Context � is not valid (left unmapped).
[   28.753166][  T707] binder: Bad value for 'max'
[   28.775759][  T712] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   28.775782][  T712] rust_binder: Error while translating object.
[   28.789089][  T712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.801661][  T712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[   28.889213][  T716] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   28.903570][  T716] rust_binder: Error in use_page_slow: EBUSY
[   28.915517][  T716] rust_binder: use_range failure EBUSY
[   28.923583][  T716] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   28.923631][  T720] binder: Binderfs stats mode cannot be changed during a remount
[   28.929327][  T716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   28.945321][  T716] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   28.965564][  T716] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:131
[   29.109349][  T732] SELinux: security_context_str_to_sid (system_u�Gй�:��) failed with errno=-22
[   29.184776][  T744] rust_binder: Error while translating object.
[   29.184814][  T744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.198967][  T744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78
[   29.419169][  T772] binfmt_misc: register: failed to install interpreter file ./file0
[   29.436071][  T772] binder: Unknown parameter '00000000000000000000003'
[   29.456935][  T777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:87
[   29.457551][  T777] rust_binder: Read failure Err(EFAULT) in pid:87
[   29.500795][  T780] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.508585][  T780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   29.517067][  T780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:120
[   29.569285][  T789] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.725956][  T812] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   29.797315][  T826] rust_binder: Error while translating object.
[   29.809897][  T826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.817457][  T826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:96
[   29.847585][  T831] binder: Unknown parameter 'n 5262
[   29.847585][  T831] nr_zone_inactive_file 2172
[   29.847585][  T831] nr_zone_active_file 15711
[   29.847585][  T831] nr_zone_unevictable 0
[   29.847585][  T831] nr_zone_write_pending 1178
[   29.847585][  T831] nr_mlock 0
[   29.847585][  T831] nr_bounce 0
[   29.847585][  T831] nr_zspages 0
[   29.847585][  T831] nr_free_cma 0
[   29.847585][  T831] nr_inactive_anon 0
[   29.847585][  T831] nr_active_anon 5262
[   29.847585][  T831] nr_inactive_file 2172
[   29.847585][  T831] nr_active_file 15711
[   29.847585][  T831] nr_unevictable 0
[   29.847585][  T831] nr_slab_reclaimable 6190
[   29.847585][  T831] nr_slab_unreclaimable 70335
[   29.847585][  T831] nr_isolated_anon 0
[   29.847585][  T831] nr_isolated_file 0
[   29.847585][  T831] workingset_nodes 0
[   29.847585][  T831] workingset_refault_anon 0
[   29.847585][  T831] workingset_refault_file 0
[   29.847585][  T831] workingset_activate_anon 0
[   29.847585][  T831] workingset_activate_file 0
[   29.847585][  T831] workingset_restore_anon 0
[   29.847585][  T831] workingset_restore_file 0
[   29.847585][  T831] workingset_nodereclaim 0
[   29.847585][  T831] nr_anon_pages 5121
[   29.847585][  T831] nr_mapped 23827
[   29.847585][  T831] nr_file_pages 18042
[   29.847585][  T831] nr_dirty 1178
[   29.847585][  T831] nr_writeback 0
[   29.847585][  T831] nr_writeback_temp 0
[   29.847585][  T831] nr_shmem 163
[   29.847585][  T831] nr_shmem_hugepages 0
[   29.847585][  T831] nr_shmem_pmdmapped 0
[   29.847585][  T831] nr_file_hugepages 0
[   29.847585][  T831] nr_file_pmdmapped 0
[   29.847585][  T831] nr_anon_transparent_hugepages 0
[   29.847585][  T831] nr_vmscan_write 0
[   29.847585][  T831] nr_vmscan_immediate_reclaim 0
[   29.847585][  T831] nr_dirtied 1365
[   29.847585][  T831] nr_written 187
[   29.847585][  T831] nr_throttled_written 0
[   29.847585][  T831] nr_kernel_misc_reclaimable 0
[   29.847585][  T831] nr_foll_pin_acquired 0
[   29.847585][  T831] nr_foll_pin_released 0
[   29.883730][  T837] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.005755][  T841] binder: Unknown parameter '('
[   30.082117][  T838] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[   30.086778][  T838] rust_binder: Error while translating object.
[   30.107476][  T838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.114131][  T838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144
[   30.128660][  T851] rust_binder: Read failure Err(EAGAIN) in pid:103
[   30.391094][  T874] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   30.420063][  T874] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.420095][  T874] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107
[   30.464386][  T880] rust_binder: Error in use_page_slow: ESRCH
[   30.473640][  T880] rust_binder: use_range failure ESRCH
[   30.479999][  T880] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   30.485524][  T880] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   30.493633][  T880] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:192
[   30.576646][  T891] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.606994][  T892] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   30.640769][  T892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196
[   30.658495][  T894] SELinux: security_context_str_to_sid (system_u�Gй�:��) failed with errno=-22
[   30.662550][  T891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:154
[   30.811841][  T898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113
[   30.833091][  T900] can0: slcan on ptm0.
[   30.849394][  T900] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.849707][  T900] rust_binder: Write failure EINVAL in pid:157
[   30.926645][  T903] kvm: apic: phys broadcast and lowest prio
[   30.948212][  T899] can0 (unregistered): slcan off ptm0.
[   31.180032][   T36] kauditd_printk_skb: 22 callbacks suppressed
[   31.180046][   T36] audit: type=1400 audit(1750362961.840:193): avc:  denied  { map } for  pid=941 comm="syz.2.191" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   31.311125][  T953] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.311614][  T953] rust_binder: Error while translating object.
[   31.318283][  T953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.328474][  T953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[   31.375853][   T36] audit: type=1326 audit(1750362962.030:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=964 comm="syz.1.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b7b8e929 code=0x0
[   31.860806][   T36] audit: type=1326 audit(1750362962.520:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.0.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x0
[   31.975477][ T1032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227
[   31.986996][   T36] audit: type=1326 audit(1750362962.640:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1033 comm="syz.2.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33cf98e929 code=0x0
[   32.051747][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.060873][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.068386][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.076434][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.085916][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   32.094689][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   32.117737][ T1041] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 206)
[   32.117759][ T1041] rust_binder: Error while translating object.
[   32.131532][ T1041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.139965][ T1041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125
[   32.151615][ T1042] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   32.181524][ T1039] fido_id[1039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   32.227581][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.227617][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231
[   32.344927][ T1072] rust_binder: Error in use_page_slow: ESRCH
[   32.344951][ T1072] rust_binder: use_range failure ESRCH
[   32.357557][ T1074] input: syz1 as /devices/virtual/input/input11
[   32.367368][ T1072] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   32.367393][ T1072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   32.371425][ T1074] rust_binder: Error while translating object.
[   32.385182][   T36] audit: type=1400 audit(1750362963.030:197): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.391068][ T1072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:243
[   32.413604][ T1074] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   32.422967][ T1074] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:135
[   32.435107][   T36] audit: type=1400 audit(1750362963.030:198): avc:  denied  { open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=441 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.470456][   T36] audit: type=1400 audit(1750362963.030:199): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=441 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   32.589671][ T1076] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[   32.589694][ T1076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   32.599630][ T1076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:179
[   32.742330][   T36] audit: type=1400 audit(1750362963.400:200): avc:  denied  { execute } for  pid=1087 comm="syz.0.231" path="/43/cpu.stat" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   32.793502][ T1092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:145
[   32.858422][ T1094] rust_binder: Write failure EFAULT in pid:249
[   32.872902][ T1094] SELinux:  policydb version -845211227 does not match my version range 15-33
[   32.888740][ T1094] SELinux: failed to load policy
[   32.968854][   T36] audit: type=1400 audit(1750362963.620:201): avc:  denied  { map } for  pid=1100 comm="syz.3.236" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.015856][ T1104] input input12: cannot allocate more than FF_MAX_EFFECTS effects
[   33.028317][   T36] audit: type=1400 audit(1750362963.620:202): avc:  denied  { read } for  pid=1100 comm="syz.3.236" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.106767][ T1116] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[   33.119108][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   33.119400][ T1116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154
[   33.164580][ T1122] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.224861][ T1126] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   33.290460][ T1130] SELinux: security_context_str_to_sid () failed with errno=-22
[   33.326725][ T1134] serio: Serial port ttynull
[   33.427535][  T305] Bluetooth: hci1: Frame reassembly failed (-84)
[   33.461094][ T1139] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   33.468514][ T1139] rust_binder: Write failure EINVAL in pid:191
[   33.540343][ T1154] SELinux:  policydb version 905587468 does not match my version range 15-33
[   33.555622][ T1154] SELinux: failed to load policy
[   33.566608][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:268
[   33.567049][ T1154] rust_binder: Error while translating object.
[   33.576656][ T1154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   33.584719][ T1154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:268
[   33.875812][ T1170] deleting an unspecified loop device is not supported.
[   34.281372][ T1198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200
[   34.294100][ T1200] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[   34.328344][ T1200] kvm: user requested TSC rate below hardware speed
[   34.391098][ T1205] kvm: kvm [1199]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[   34.579868][ T1210] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   34.579885][ T1210] rust_binder: Error while translating object.
[   34.588674][ T1210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   34.594902][ T1210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313
[   34.604813][ T1211] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.622455][ T1215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:318
[   34.628984][ T1215] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   34.638098][ T1215] rust_binder: Read failure Err(EFAULT) in pid:318
[   34.670525][ T1215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (2048 ns) > initial count (1152 ns). Using initial count to start timer.
[   34.696169][ T1215] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   34.801292][ T1225] SELinux: security_context_str_to_sid () failed with errno=-22
[   34.818563][ T1228] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.818731][ T1227] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.832152][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.832199][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.838628][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.852020][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.852037][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.852049][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.865832][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.872080][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.878640][ T1227] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   34.885338][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.894442][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.901017][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.907542][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.914237][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.920879][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.927214][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.927227][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.940666][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.947190][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.954128][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.960515][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.968047][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.975624][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.982745][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.989817][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.997364][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.004847][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.011662][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.018302][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.025129][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.031598][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.038163][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.044994][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.052616][ T1229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.159006][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   35.159009][ T1148] Bluetooth: hci0: command 0x1003 tx timeout
[   35.256488][ T1249] rust_binder: Write failure EINVAL in pid:346
[   35.263996][ T1247] rust_binder: Read failure Err(EAGAIN) in pid:160
[   35.296153][ T1254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   35.309091][ T1254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:350
[   35.357816][ T1261] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.367668][ T1261] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:206
[   35.478983][   T52] Bluetooth: hci1: command 0x1003 tx timeout
[   35.495398][ T1117] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   35.559156][ T1266] rust_binder: Read failure Err(EAGAIN) in pid:163
[   36.008212][ T1305] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:360
[   36.184498][ T1319] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   36.196675][ T1319] rust_binder: Error while translating object.
[   36.208381][ T1319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.215254][ T1319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[   36.220029][ T1325] kvm: user requested TSC rate below hardware speed
[   36.241875][ T1325] kvm: user requested TSC rate below hardware speed
[   36.251078][ T1328] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   36.253080][ T1325] kvm: user requested TSC rate below hardware speed
[   36.271763][ T1325] kvm: user requested TSC rate below hardware speed
[   36.281200][ T1325] kvm: user requested TSC rate below hardware speed
[   36.287977][ T1325] kvm: user requested TSC rate below hardware speed
[   36.297574][ T1325] kvm: user requested TSC rate below hardware speed
[   36.304689][ T1325] kvm: user requested TSC rate below hardware speed
[   36.312173][ T1325] kvm: user requested TSC rate below hardware speed
[   36.312193][ T1327] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   36.378375][ T1328] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   36.548819][ T1346] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   36.567343][ T1346] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   36.684913][   T36] kauditd_printk_skb: 55 callbacks suppressed
[   36.684929][   T36] audit: type=1400 audit(1750362967.340:258): avc:  denied  { execute } for  pid=1364 comm="syz.1.312" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.743052][   T36] audit: type=1400 audit(1750362967.400:259): avc:  denied  { append } for  pid=1366 comm="syz.2.313" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   36.829601][   T36] audit: type=1400 audit(1750362967.490:260): avc:  denied  { setcheckreqprot } for  pid=1368 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   36.863804][   T36] audit: type=1326 audit(1750362967.520:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   36.887923][   T36] audit: type=1326 audit(1750362967.520:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   36.890448][ T1371] binder: Unknown parameter 'context'
[   36.911332][   T36] audit: type=1326 audit(1750362967.550:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   36.940834][   T36] audit: type=1326 audit(1750362967.550:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   36.965129][   T36] audit: type=1326 audit(1750362967.550:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   36.988432][   T36] audit: type=1326 audit(1750362967.550:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   37.013522][   T36] audit: type=1326 audit(1750362967.550:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1370 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f33d378e929 code=0x7ffc0000
[   37.043742][ T1378] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   37.049354][ T1379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:182
[   37.233254][ T1399] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   37.280346][ T1403] rust_binder: Write failure EFAULT in pid:189
[   37.331884][ T1406] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   37.388238][ T1406] rust_binder: Error in use_page_slow: ESRCH
[   37.388256][ T1406] rust_binder: use_range failure ESRCH
[   37.394632][ T1406] rust_binder: Failed to allocate buffer. len:64, is_oneway:false
[   37.400444][ T1406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   37.408415][ T1406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:371
[   37.431142][ T1409] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   37.440554][ T1409] rust_binder: Error in use_page_slow: EBUSY
[   37.457882][ T1409] rust_binder: use_range failure EBUSY
[   37.464315][ T1409] rust_binder: Failed to allocate buffer. len:112, is_oneway:false
[   37.473636][ T1409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   37.483054][ T1409] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   37.493487][ T1409] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:193
[   37.559286][ T1417] rust_binder: Write failure EFAULT in pid:196
[   37.562694][ T1415] syz.3.329 (1415) used obsolete PPPIOCDETACH ioctl
[   37.709457][ T1424] rtc_cmos 00:00: Alarms can be up to one day in the future
[   37.724426][ T1429] rust_binder: Write failure EINVAL in pid:377
[   37.739948][ T1432] binder: Unknown parameter 'ss'
[   37.804968][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[   37.812541][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[   37.820443][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[   37.827981][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[   37.835701][   T45] rtc rtc0: __rtc_set_alarm: err=-22
[   38.088967][ T1461] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   38.088989][ T1461] rust_binder: Read failure Err(EFAULT) in pid:210
[   38.177681][ T1463] input: syz0 as /devices/virtual/input/input13
[   38.238362][ T1465] SELinux: failed to load policy
[   38.270313][ T1465] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.270558][ T1465] rust_binder: Error while translating object.
[   38.277836][ T1465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   38.284226][ T1465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248
[   38.294199][ T1465] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   38.310950][ T1465] rust_binder: Write failure EINVAL in pid:248
[   38.351421][ T1467] rust_binder: Error while translating object.
[   38.361033][ T1467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   38.361707][ T1469] input: syz1 as /devices/virtual/input/input14
[   38.368386][ T1467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:389
[   38.428304][ T1474] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.472796][ T1478] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   38.472820][ T1478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   38.472871][ T1474] rust_binder: Failed copying remainder into alloc: EFAULT
[   38.488808][ T1478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:214
[   38.521151][ T1474] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   38.531705][ T1474] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   38.541276][ T1474] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:214
[   38.573696][ T1486] binder: Unknown parameter 'contextrfs/binder1'
[   38.665483][ T1488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217
[   38.716239][ T1495] rust_binder: Write failure EINVAL in pid:217
[   38.889762][ T1501] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.925070][ T1501] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:394
[   39.343923][ T1521] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   39.515630][ T1532] rust_binder: Write failure EFAULT in pid:400
[   39.633653][ T1549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:265
[   39.699563][ T1559] binder: Unknown parameter 'coyBLV�"i5������ntext'
[   39.776664][ T1565] random: crng reseeded on system resumption
[   39.936767][ T1575] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.179752][ T1596] rust_binder: Error in use_page_slow: ESRCH
[   40.179775][ T1596] rust_binder: use_range failure ESRCH
[   40.187221][ T1596] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[   40.195093][ T1596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   40.204594][ T1596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423
[   40.237415][ T1601] binder: Unknown parameter 'context'
[   40.269525][ T1603] binder: Bad value for 'max'
[   40.336089][ T1607] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   40.344692][ T1607] rust_binder: Write failure EINVAL in pid:427
[   40.346072][ T1609] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.469666][ T1617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:432
[   40.672832][ T1626] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.781528][ T1633] SELinux: security_context_str_to_sid (fyste_u�Gй�:��) failed with errno=-22
[   40.821790][ T1635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:278
[   40.821848][ T1635] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   40.839352][ T1635] rust_binder: Read failure Err(EFAULT) in pid:278
[   40.971870][ T1657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.978651][ T1657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236
[   41.117930][ T1663] set_tsc_khz: 24 callbacks suppressed
[   41.117960][ T1663] kvm: user requested TSC rate below hardware speed
[   41.150508][ T1661] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   41.567981][ T1696] rust_binder: Write failure EINVAL in pid:251
[   41.568416][ T1696] rust_binder: Error while translating object.
[   41.576472][ T1696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   41.599751][ T1696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251
[   41.612797][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.633711][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.644950][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.675228][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.684617][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.694244][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.706768][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.719650][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.734214][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.744086][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.755534][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.766297][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.776878][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.805353][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.816304][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.827273][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.837089][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.847137][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.866211][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.881193][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.892087][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.907695][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   41.918648][ T1738] binder: Unknown parameter 'processor	: 0
[   41.918648][ T1738] vendor_id	: GenuineIntel
[   41.918648][ T1738] cpu family	: 6
[   41.918648][ T1738] model		: 79
[   41.918648][ T1738] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[   41.918648][ T1738] stepping	: 0
[   41.918648][ T1738] microcode	: 0xffffffff
[   41.918648][ T1738] cpu MHz		: 2200.158
[   41.918648][ T1738] cache size	: 56320 KB
[   41.918648][ T1738] physical id	: 0
[   41.918648][ T1738] siblings	: 2
[   41.918648][ T1738] core id		: 0
[   41.918648][ T1738] cpu cores	: 1
[   41.918648][ T1738] apicid		: 0
[   41.918648][ T1738] initial apicid	: 0
[   41.918648][ T1738] fpu		: yes
[   41.918648][ T1738] fpu_exception	: yes
[   41.918648][ T1738] cpuid level	: 13
[   41.918648][ T1738] wp		: yes
[   41.918648][ T1738] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[   41.918648][ T1738] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[   41.941876][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.092301][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.106383][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[   42.106703][ T1752] binder: Bad value for 'max'
[   42.115619][ T1751] Bluetooth: hci0: Frame reassembly failed (-84)
[   42.123937][   T36] kauditd_printk_skb: 38 callbacks suppressed
[   42.123950][   T36] audit: type=1400 audit(1750362972.770:306): avc:  denied  { write } for  pid=1750 comm="syz.0.434" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   42.129948][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.164404][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.174423][ T1751] rust_binder: Error while translating object.
[   42.174449][ T1751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.179099][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.180961][ T1751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270
[   42.190714][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.218017][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.227725][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.246016][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.259494][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.271459][ T1701] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   42.474922][   T36] audit: type=1400 audit(1750362973.130:307): avc:  denied  { append } for  pid=1784 comm="syz.1.445" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   42.615087][ T1793] kvm: apic: phys broadcast and lowest prio
[   42.630180][ T1793] input: syz0 as /devices/virtual/input/input19
[   42.637338][ T1796] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   42.648368][ T1793] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   42.648387][ T1793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   42.657228][ T1793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:317
[   42.716584][ T1808] binder: Unknown parameter 'fscontext?}'
[   42.772670][ T1810] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[   42.781028][ T1810] rust_binder: Write failure EINVAL in pid:321
[   42.841106][ T1820] binder: Unknown parameter 'g��00000000000000000000003'
[   42.895173][ T1823] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.895517][ T1823] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   42.910098][ T1823] rust_binder: Write failure EINVAL in pid:326
[   42.977443][ T1832] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.984190][ T1832] rust_binder: Error while translating object.
[   42.990967][ T1832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.997222][ T1832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:329
[   43.015872][ T1835] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.026054][ T1835] rust_binder: Got transaction with invalid offset.
[   43.032665][ T1835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.039303][ T1835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332
[   43.212865][ T1851] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   43.284796][ T1861] kvm: kvm [1860]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x1
[   43.299317][ T1861] can0: slcan on ptm2.
[   43.304655][   T36] audit: type=1400 audit(1750362973.960:308): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   43.332008][   T36] audit: type=1400 audit(1750362973.960:309): avc:  denied  { search } for  pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.356455][   T36] audit: type=1400 audit(1750362973.960:310): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   43.362378][ T1859] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[   43.378060][ T1859] rust_binder: Error while translating object.
[   43.379480][   T36] audit: type=1400 audit(1750362973.960:311): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   43.399606][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.420109][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485
[   43.420154][ T1860] can0 (unregistered): slcan off ptm2.
[   43.431059][   T36] audit: type=1400 audit(1750362973.960:312): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=3122 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   43.479352][   T36] audit: type=1400 audit(1750362974.100:313): avc:  denied  { read } for  pid=1867 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.506049][   T36] audit: type=1400 audit(1750362974.100:314): avc:  denied  { open } for  pid=1867 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.537033][   T36] audit: type=1400 audit(1750362974.100:315): avc:  denied  { getattr } for  pid=1867 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   43.706663][ T1908] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.726798][ T1911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:494
[   43.833649][ T1926] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   43.847791][ T1933] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   43.851526][ T1926] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   43.868402][ T1926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:501
[   43.899944][ T1935] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   43.926967][ T1935] rust_binder: Write failure EINVAL in pid:345
[   43.989609][ T1942] rust_binder: Error while translating object.
[   43.995993][ T1942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   44.005668][ T1942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:503
[   44.099461][ T1946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:351
[   44.100414][ T1944] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   44.138917][ T1117] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   44.230638][ T1958] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.297174][ T1973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362
[   44.357014][ T1979] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[   44.371344][ T1979] rust_binder: Error while translating object.
[   44.390124][ T1979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.396895][ T1979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:276
[   44.403147][ T1983] binder: Unknown parameter '���J��P��H��01777777777777777777777����0000000000000000000600000000000000000000011'
[   44.456006][ T1987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279
[   44.471823][ T1990] input: syz0 as /devices/virtual/input/input23
[   44.508066][ T1992] rust_binder: Write failure EFAULT in pid:284
[   44.582101][ T1997] input: syz1 as /devices/virtual/input/input24
[   44.603266][ T2001] random: crng reseeded on system resumption
[   44.663494][ T2004] rust_binder: Write failure EFAULT in pid:289
[   44.679776][ T2007] binder: Unknown parameter 'defcontext01777777777777777777777'
[   44.739085][ T2015] rust_binder: Error while translating object.
[   44.739123][ T2015] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   44.754729][ T2015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:521
[   44.801848][ T2027] binder: Unknown parameter 'defcontext01777777777777777777777'
[   44.833077][ T2029] binder: Unknown parameter 'st�ts'
[   44.862615][ T2035] input: syz0 as /devices/virtual/input/input26
[   44.877526][ T2037] input: syz1 as /devices/virtual/input/input27
[   44.917772][ T2040] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   44.927142][ T2040] rust_binder: Write failure EINVAL in pid:294
[   44.984505][ T2046] rust_binder: Write failure EFAULT in pid:294
[   45.088153][ T2050] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.106396][ T2050] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:377
[   45.138068][ T2057] rust_binder: Write failure EFAULT in pid:531
[   45.326221][ T2063] binder: Binderfs stats mode cannot be changed during a remount
[   45.460869][ T2071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=6 (12 ns) > initial count (2 ns). Using initial count to start timer.
[   45.640173][ T2086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   45.640207][ T2086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:545
[   45.671546][ T2089] input: syz1 as /devices/virtual/input/input28
[   45.741747][ T2089] rust_binder: Failed copying remainder into alloc: EFAULT
[   45.741771][ T2089] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[   45.752812][ T2089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   45.764320][ T2089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:389
[   45.808032][ T2093] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298
[   45.868078][ T2095] SELinux: security_context_str_to_sid (sytem_u�Gй�:�߆�d��L�T���*��aA���oY�F�Z+�s�}�H^���D��|�m�&_��*��WU�	�02k�s��F9�Oi��H!�S�5�<�7�����gw篰3o$�I��S�ˮ�tw��d?Ċ1�H�	EC����ڂ����;��R,`��2+x�jRh�^) failed with errno=-22
[   45.873264][ T2096] rust_binder: Write failure EINVAL in pid:298
[   45.926042][ T2100] binder: Unknown parameter 'obj_user'
[   46.009810][ T2107] kvm_intel: kvm [2104]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xff
[   46.072159][ T2111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   46.135121][ T2113] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 247)
[   46.135149][ T2113] rust_binder: Error while translating object.
[   46.147082][ T2113] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.156058][ T2113] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:394
[   46.464574][ T2131] rust_binder: Write failure EFAULT in pid:559
[   46.490324][ T2129] SELinux: security_context_str_to_sid () failed with errno=-22
[   46.602532][ T2140] binder: Binderfs stats mode cannot be changed during a remount
[   46.611026][ T2140] binder: Binderfs stats mode cannot be changed during a remount
[   46.627570][ T2144] binder: Unknown parameter 'defcotext�?$D��e�|x �
[   46.627570][ T2144] Nu�7�r�s��cU��xC�j�}����>*��B����`c�p4䡃��Ѹe�;M
[   46.627570][ T2144] ��o'
[   46.653933][ T2137] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.653969][ T2137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:561
[   46.680088][ T2147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.694101][ T2147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:416
[   46.755721][ T2158] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.778354][ T2158] rust_binder: Write failure EINVAL in pid:501
[   46.819233][ T2166] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.890429][ T2175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   46.903701][ T2175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:569
[   46.906271][ T2180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419
[   46.914586][ T2175] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   46.925543][ T2178] rust_binder: Write failure EINVAL in pid:419
[   46.936158][ T2175] rust_binder: Read failure Err(EFAULT) in pid:569
[   46.945249][ T2180] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   46.951910][ T2181] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.958455][ T2178] rust_binder: Write failure EINVAL in pid:419
[   46.981746][ T2180] rust_binder: Write failure EINVAL in pid:419
[   46.988951][ T2178] rust_binder: Write failure EINVAL in pid:419
[   46.995275][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.005885][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.005912][ T2184] rust_binder: Write failure EINVAL in pid:572
[   47.012333][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.035987][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.036021][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.056433][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.064936][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.071243][ T2193] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.079530][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.098717][ T2193] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   47.105135][ T2193] rust_binder: Read failure Err(EFAULT) in pid:576
[   47.106260][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.120166][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.126400][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.132875][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.139440][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.146274][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.152274][ T2200] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   47.152757][ T2199] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.167504][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.174281][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.180972][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.182312][ T2194] rust_binder: Write failure EINVAL in pid:514
[   47.202733][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.209553][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.215769][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.223574][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.230467][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.237215][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.246944][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.257924][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.265619][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.272239][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.286454][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.295542][ T2205] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[   47.311191][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.311224][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.317952][ T2178] rust_binder: Write failure EINVAL in pid:419
[   47.331838][ T2208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.339194][ T2208] rust_binder: Write failure EINVAL in pid:519
[   47.339479][ T2209] rust_binder: Write failure EFAULT in pid:519
[   47.347334][ T2208] rust_binder: Write failure EINVAL in pid:519
[   47.355636][ T2209] rust_binder: Write failure EFAULT in pid:519
[   47.370314][ T2208] rust_binder: Write failure EINVAL in pid:519
[   47.372327][ T2209] rust_binder: Write failure EFAULT in pid:519
[   47.399581][ T2215] rust_binder: Read failure Err(EAGAIN) in pid:524
[   47.410480][ T2215] binder: Bad value for 'defcontext'
[   47.445893][ T2218] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[   47.456563][ T2218] SELinux: failed to load policy
[   47.537843][ T2225] binder: Bad value for 'max'
[   47.568977][ T2229] input: syz1 as /devices/virtual/input/input29
[   47.625225][ T2225] SELinux: failed to load policy
[   47.829147][ T2233] kvm: kvm [2231]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[   47.840919][ T2232] kvm: kvm [2231]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000
[   47.865506][ T2235] SELinux: security_context_str_to_sid () failed with errno=-22
[   47.878493][   T36] kauditd_printk_skb: 17 callbacks suppressed
[   47.878508][   T36] audit: type=1400 audit(1750362978.530:333): avc:  granted  { setsecparam } for  pid=2236 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   47.912105][ T2237] rust_binder: Error while translating object.
[   47.912146][ T2237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   47.925100][ T2237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:426
[   47.950177][   T36] audit: type=1400 audit(1750362978.610:334): avc:  denied  { ioctl } for  pid=2242 comm="syz.1.596" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.992283][   T36] audit: type=1400 audit(1750362978.650:335): avc:  denied  { read write } for  pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.058931][   T36] audit: type=1400 audit(1750362978.650:336): avc:  denied  { read write open } for  pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.088588][   T36] audit: type=1400 audit(1750362978.650:337): avc:  denied  { ioctl } for  pid=288 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.117448][   T36] audit: type=1400 audit(1750362978.680:338): avc:  denied  { read } for  pid=2246 comm="syz.1.598" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   48.184006][   T36] audit: type=1400 audit(1750362978.680:339): avc:  denied  { read open } for  pid=2246 comm="syz.1.598" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   48.214256][   T36] audit: type=1400 audit(1750362978.680:340): avc:  denied  { ioctl } for  pid=2246 comm="syz.1.598" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   48.246012][   T36] audit: type=1400 audit(1750362978.690:341): avc:  denied  { read write } for  pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.275843][   T36] audit: type=1400 audit(1750362978.690:342): avc:  denied  { read write open } for  pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   48.669671][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[   48.679933][ T2277] binder: Unknown parameter 'defcontext01777777777777777777777'
[   48.700400][ T2282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544
[   48.711484][ T2282] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   48.733394][ T2282] rust_binder: Read failure Err(EFAULT) in pid:544
[   48.778239][ T2282] Bluetooth: hci0: Frame reassembly failed (-90)
[   48.801515][ T2282] binder: Unknown parameter 'processor	: 0
[   48.801515][ T2282] vendor_id	: GenuineIntel
[   48.801515][ T2282] cpu family	: 6
[   48.801515][ T2282] model		: 79
[   48.801515][ T2282] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[   48.801515][ T2282] stepping	: 0
[   48.801515][ T2282] microcode	: 0xffffffff
[   48.801515][ T2282] cpu MHz		: 2200.158
[   48.801515][ T2282] cache size	: 56320 KB
[   48.801515][ T2282] physical id	: 0
[   48.801515][ T2282] siblings	: 2
[   48.801515][ T2282] core id		: 0
[   48.801515][ T2282] cpu cores	: 1
[   48.801515][ T2282] apicid		: 0
[   48.801515][ T2282] initial apicid	: 0
[   48.801515][ T2282] fpu		: yes
[   48.801515][ T2282] fpu_exception	: yes
[   48.801515][ T2282] cpuid level	: 13
[   48.801515][ T2282] wp		: yes
[   48.801515][ T2282] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[   48.801515][ T2282] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[   48.846350][ T2275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:324
[   49.093241][ T2291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:603
[   49.297734][ T2303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   49.423265][ T2312] binder: Bad value for 'stats'
[   49.484568][ T2314] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   49.484590][ T2314] rust_binder: Read failure Err(EFAULT) in pid:328
[   49.503357][ T2315] SELinux:  policydb string  does not match my string SE Linux
[   49.524791][ T2315] SELinux: failed to load policy
[   49.549977][ T2314] SELinux:  policydb string  does not match my string SE Linux
[   49.558018][ T2314] SELinux: failed to load policy
[   49.598530][ T2317] rust_binder: Write failure EINVAL in pid:613
[   49.598994][ T2317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:613
[   49.661651][ T2325] cgroup: fork rejected by pids controller in /syz1
[   49.769711][ T2433] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   49.769739][ T2433] rust_binder: Error while translating object.
[   49.781126][ T2433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   49.787477][ T2433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337
[   49.799783][ T2433] binder: Bad value for 'stats'
[   49.850832][ T2436] input: syz0 as /devices/virtual/input/input30
[   49.900827][ T2441] rust_binder: Read failure Err(EAGAIN) in pid:344
[   49.911198][  T289] bridge_slave_1: left allmulticast mode
[   49.924952][  T289] bridge_slave_1: left promiscuous mode
[   49.927278][ T2441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   49.931078][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.938672][ T2441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:344
[   49.953372][ T2442] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   49.959214][  T289] bridge_slave_0: left allmulticast mode
[   49.976641][  T289] bridge_slave_0: left promiscuous mode
[   49.984092][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.105946][  T289] veth1_macvtap: left promiscuous mode
[   50.112233][  T289] veth0_vlan: left promiscuous mode
[   50.170706][ T2450] rust_binder: Write failure EINVAL in pid:351
[   50.678930][ T1117] Bluetooth: hci0: command 0x1003 tx timeout
[   50.678930][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   51.249295][ T2468] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   51.255161][ T2468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:552
[   51.281348][ T2466] rust_binder: Got transaction with invalid offset.
[   51.299006][ T2466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   51.315743][ T2466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:618
[   52.019745][ T2473] rust_binder: Error while translating object.
[   52.050057][ T2473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   52.056776][ T2473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:620
[   52.173631][ T2476] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.214630][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:622
[   52.254353][ T2478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   52.266731][ T2478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:622
[   52.283035][ T2478] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   52.296640][ T2478] rust_binder: Read failure Err(EFAULT) in pid:622
[   52.300557][ T2479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:555
[   52.913856][   T36] kauditd_printk_skb: 728 callbacks suppressed
[   52.913874][   T36] audit: type=1400 audit(1750362983.570:1071): avc:  denied  { execmem } for  pid=2480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   52.975508][   T36] audit: type=1326 audit(1750362983.610:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2481 comm="syz.3.638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6f8f8e929 code=0x0
[   53.032898][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.038935][   T36] audit: type=1400 audit(1750362983.660:1073): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   53.076367][ T2484] rust_binder: Error in use_page_slow: ESRCH
[   53.076390][ T2484] rust_binder: use_range failure ESRCH
[   53.085455][ T2484] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   53.091994][   T36] audit: type=1400 audit(1750362983.660:1074): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   53.128698][ T2484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   53.128740][ T2484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:558
[   53.157219][ T2488] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   53.188950][   T36] audit: type=1400 audit(1750362983.660:1075): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   53.248942][   T36] audit: type=1400 audit(1750362983.680:1076): avc:  denied  { read } for  pid=2483 comm="syz.2.639" name="binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   53.272662][   T36] audit: type=1400 audit(1750362983.680:1077): avc:  denied  { read open } for  pid=2483 comm="syz.2.639" path="/dev/binderfs/binder0" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   53.301110][   T36] audit: type=1400 audit(1750362983.690:1078): avc:  denied  { ioctl } for  pid=2483 comm="syz.2.639" path="/dev/binderfs/binder0" dev="binder" ino=34 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   53.331849][   T36] audit: type=1400 audit(1750362983.690:1079): avc:  denied  { read } for  pid=2483 comm="syz.2.639" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   53.369038][   T36] audit: type=1400 audit(1750362983.690:1080): avc:  denied  { read open } for  pid=2483 comm="syz.2.639" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   53.979215][ T2494] SELinux:  policydb version -845211227 does not match my version range 15-33
[   54.002907][ T2494] SELinux: failed to load policy
[   54.293718][ T2503] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   54.293751][ T2503] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:631
[   55.219502][ T2508] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   55.290260][ T2507] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   56.419297][ T2520] rust_binder: Write failure EFAULT in pid:637
[   56.525135][ T2522] rust_binder: Write failure EINVAL in pid:639
[   56.537058][ T2524] SELinux:  policydb version -1659294265 does not match my version range 15-33
[   56.567948][ T2522] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   56.589920][ T2524] SELinux: failed to load policy
[   56.923153][ T2538] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.879451][ T2542] rust_binder: Write failure EFAULT in pid:585
[   57.915854][ T2543] rust_binder: Error while translating object.
[   57.938956][ T2543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   57.950822][   T36] kauditd_printk_skb: 234 callbacks suppressed
[   57.950840][   T36] audit: type=1400 audit(1750362988.610:1315): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   57.968907][ T2543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:647
[   58.036582][   T36] audit: type=1400 audit(1750362988.610:1316): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.112534][   T36] audit: type=1400 audit(1750362988.610:1317): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   58.181166][   T36] audit: type=1400 audit(1750362988.670:1318): avc:  denied  { read } for  pid=2547 comm="syz.2.655" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.207243][   T36] audit: type=1400 audit(1750362988.670:1319): avc:  denied  { read open } for  pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.237407][   T36] audit: type=1400 audit(1750362988.680:1320): avc:  denied  { ioctl } for  pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.266796][   T36] audit: type=1400 audit(1750362988.680:1321): avc:  denied  { ioctl } for  pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.295631][   T36] audit: type=1400 audit(1750362988.690:1322): avc:  denied  { map } for  pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.321338][   T36] audit: type=1400 audit(1750362988.690:1323): avc:  denied  { read } for  pid=2547 comm="syz.2.655" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   58.348148][   T36] audit: type=1400 audit(1750362988.690:1324): avc:  denied  { read } for  pid=2549 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   59.365779][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.368975][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.389325][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.413231][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.413484][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.439209][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.457216][ T2552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   59.487938][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.488241][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.530204][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.558994][ T2554] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.733163][ T2565] rust_binder: Write failure EINVAL in pid:597
[   59.754114][ T2566] rust_binder: Write failure EINVAL in pid:597
[   60.950087][ T2573] rust_binder: Write failure EFAULT in pid:600
[   62.631013][ T2584] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   62.668924][ T2584] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   62.968830][   T36] kauditd_printk_skb: 196 callbacks suppressed
[   63.011187][   T36] audit: type=1400 audit(1750362993.620:1521): avc:  denied  { read } for  pid=2593 comm="syz.2.666" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   63.065821][   T36] audit: type=1400 audit(1750362993.660:1522): avc:  denied  { read open } for  pid=2593 comm="syz.2.666" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   63.097312][   T36] audit: type=1400 audit(1750362993.660:1523): avc:  denied  { ioctl } for  pid=2593 comm="syz.2.666" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   63.137662][   T36] audit: type=1400 audit(1750362993.660:1524): avc:  denied  { read } for  pid=2593 comm="syz.2.666" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.165580][   T36] audit: type=1400 audit(1750362993.660:1525): avc:  denied  { read open } for  pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.176505][ T2584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:662
[   63.198417][   T36] audit: type=1400 audit(1750362993.670:1526): avc:  denied  { map } for  pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.241477][   T36] audit: type=1400 audit(1750362993.670:1527): avc:  denied  { read } for  pid=2593 comm="syz.2.666" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   63.279289][   T36] audit: type=1400 audit(1750362993.700:1528): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.318922][   T36] audit: type=1400 audit(1750362993.700:1529): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   63.359010][   T36] audit: type=1400 audit(1750362993.700:1530): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   64.581915][ T2607] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   64.581938][ T2607] rust_binder: Error while translating object.
[   64.639648][ T2607] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   64.647355][ T2607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:671
[   66.440854][ T2623] binder: Bad value for 'stats'
[   66.487127][ T2622] binder: Bad value for 'max'
[   66.526715][ T2621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:677
[   66.562466][   T13] bridge_slave_1: left allmulticast mode
[   66.606616][   T13] bridge_slave_1: left promiscuous mode
[   66.629003][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.637473][   T13] bridge_slave_0: left allmulticast mode
[   66.647872][   T13] bridge_slave_0: left promiscuous mode
[   66.659557][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.675330][  T289] Bluetooth: hci0: Frame reassembly failed (-84)
[   66.699602][ T2631] Bluetooth: hci0: Frame reassembly failed (-90)
[   66.718449][ T2631] rust_binder: Write failure EINVAL in pid:681
[   66.720209][ T2633] SELinux: security_context_str_to_sid () failed with errno=-22
[   66.779814][   T13] veth1_macvtap: left promiscuous mode
[   66.785726][   T13] veth0_vlan: left promiscuous mode
[   67.314593][ T2649] binder: Unknown parameter '18446744073709551615'
[   68.086136][   T36] kauditd_printk_skb: 186 callbacks suppressed
[   68.086152][   T36] audit: type=1400 audit(1750362998.740:1717): avc:  denied  { read write } for  pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   68.120441][   T36] audit: type=1400 audit(1750362998.740:1718): avc:  denied  { read write open } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   68.157908][   T36] audit: type=1400 audit(1750362998.740:1719): avc:  denied  { ioctl } for  pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   68.679019][   T52] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   68.697613][   T36] audit: type=1400 audit(1750362999.350:1720): avc:  denied  { read write } for  pid=292 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   68.742378][   T36] audit: type=1400 audit(1750362999.350:1721): avc:  denied  { read write open } for  pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   68.791220][   T36] audit: type=1400 audit(1750362999.350:1722): avc:  denied  { ioctl } for  pid=292 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   69.008894][   T36] audit: type=1400 audit(1750362999.660:1723): avc:  denied  { execmem } for  pid=2650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   69.078927][   T36] audit: type=1400 audit(1750362999.660:1724): avc:  denied  { execmem } for  pid=2651 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   69.131081][   T36] audit: type=1400 audit(1750362999.700:1725): avc:  denied  { read write } for  pid=2653 comm="syz.3.683" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   69.222163][   T36] audit: type=1400 audit(1750362999.700:1726): avc:  denied  { read write open } for  pid=2653 comm="syz.3.683" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   69.942209][ T2680] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.338619][ T2688] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.348706][ T2688] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: tun: ioctl(TUNSETIFF) failed
 (errno 22: Invalid argument)
loop exited with status 67
SYZFAIL: repeatedly failed to execute the program
proc=1 req=627 state=3 status=67 (errno 32: Broken pipe)
[   70.358492][ T2688] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:653
[   70.635469][ T2690] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   70.671973][ T2690] CPU: 0 UID: 0 PID: 2690 Comm: syz-executor Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[   70.672008][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   70.672026][ T2690] Call Trace:
[   70.672032][ T2690]  <TASK>
[   70.672039][ T2690]  __dump_stack+0x21/0x30
[   70.672064][ T2690]  dump_stack_lvl+0x10c/0x190
[   70.672083][ T2690]  ? __cfi_dump_stack_lvl+0x10/0x10
[   70.672098][ T2690]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[   70.672122][ T2690]  dump_stack+0x19/0x20
[   70.672139][ T2690]  warn_alloc+0x1bc/0x2a0
[   70.672156][ T2690]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   70.672179][ T2690]  ? __cfi_warn_alloc+0x10/0x10
[   70.672195][ T2690]  ? __get_vm_area_node+0x1dc/0x3a0
[   70.672212][ T2690]  ? kcov_ioctl+0x5d/0x5c0
[   70.672229][ T2690]  __vmalloc_node_range_noprof+0x68e/0x1420
[   70.672249][ T2690]  ? locks_remove_posix+0x38b/0x580
[   70.672271][ T2690]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[   70.672288][ T2690]  ? expand_files+0xd6/0x700
[   70.672311][ T2690]  vmalloc_user_noprof+0x77/0x90
[   70.672328][ T2690]  ? kcov_ioctl+0x5d/0x5c0
[   70.672344][ T2690]  kcov_ioctl+0x5d/0x5c0
[   70.672359][ T2690]  ? bpf_lsm_file_ioctl+0xd/0x20
[   70.672377][ T2690]  ? security_file_ioctl+0x34/0xd0
[   70.672399][ T2690]  ? __cfi_kcov_ioctl+0x10/0x10
[   70.672415][ T2690]  __se_sys_ioctl+0x132/0x1b0
[   70.672436][ T2690]  __x64_sys_ioctl+0x7f/0xa0
[   70.672457][ T2690]  x64_sys_call+0x1878/0x2ee0
[   70.672477][ T2690]  do_syscall_64+0x58/0xf0
[   70.672497][ T2690]  ? clear_bhb_loop+0x35/0x90
[   70.672519][ T2690]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   70.672541][ T2690] RIP: 0033:0x7fbfbd18e52b
[   70.672561][ T2690] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[   70.672576][ T2690] RSP: 002b:00007ffca75bda60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.672596][ T2690] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbfbd18e52b
[   70.672609][ T2690] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da
[   70.672622][ T2690] RBP: 00007fbfbd3b61f8 R08: 00000000000000d9 R09: 0000000000000000
[   70.672634][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   70.672645][ T2690] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[   70.672658][ T2690]  </TASK>
[   70.672669][ T2690] Mem-Info:
[   70.956519][ T2690] active_anon:3661 inactive_anon:0 isolated_anon:0
[   70.956519][ T2690]  active_file:13414 inactive_file:2222 isolated_file:0
[   70.956519][ T2690]  unevictable:0 dirty:33 writeback:0
[   70.956519][ T2690]  slab_reclaimable:4028 slab_unreclaimable:69668
[   70.956519][ T2690]  mapped:4276 shmem:162 pagetables:386
[   70.956519][ T2690]  sec_pagetables:0 bounce:0
[   70.956519][ T2690]  kernel_misc_reclaimable:0
[   70.956519][ T2690]  free:1588002 free_pcp:5355 free_cma:0
[   71.005946][ T2690] Node 0 active_anon:14644kB inactive_anon:0kB active_file:53656kB inactive_file:8888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:17104kB dirty:132kB writeback:0kB shmem:648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3588kB pagetables:1544kB sec_pagetables:0kB all_unreclaimable? no
[   71.042452][ T2690] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966004kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5792kB free_cma:0kB
[   71.075681][ T2690] lowmem_reserve[]: 0 3921 3921
[   71.081287][ T2690] Normal free:3391800kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14568kB inactive_anon:0kB active_file:53652kB inactive_file:8892kB unevictable:0kB writepending:132kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15644kB local_pcp:0kB free_cma:0kB
[   71.132724][   T13] bridge_slave_1: left allmulticast mode
[   71.138748][   T13] bridge_slave_1: left promiscuous mode
[   71.146918][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.154125][ T2690] lowmem_reserve[]: 0 0 0
[   71.158927][ T2690] DMA32: 7*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[   71.159267][   T13] bridge_slave_0: left allmulticast mode
[   71.175099][ T2690] Normal: 1861*4kB (UME) 2196*8kB (UME) 1784*16kB (UME) 990*32kB (UME) 783*64kB (UME) 284*128kB (UME) 128*256kB (UME) 61*512kB (UME) 52*1024kB (UME) 19*2048kB (UME) 752*4096kB (UM) = 3408052kB
[   71.184400][   T13] bridge_slave_0: left promiscuous mode
[   71.201387][ T2690] 15796 total pagecache pages
[   71.208265][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.212070][ T2690] 0 pages in swap cache
[   71.224847][ T2690] Free swap  = 124996kB
[   71.230401][ T2690] Total swap = 124996kB
[   71.234633][ T2690] 2097051 pages RAM
[   71.238719][ T2690] 0 pages HighMem/MovableOnly
[   71.243771][ T2690] 351520 pages reserved
[   71.248206][ T2690] 0 pages cma reserved
[   71.255476][ T2690] Memory allocations:
[   71.259714][ T2690]          0 B        0 init/main.c:1370 func:do_initcalls
[   71.267287][ T2690]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[   71.276269][ T2690]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[   71.284258][ T2690]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[   71.293209][ T2690]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[   71.303427][ T2690]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[   71.312995][ T2690]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[   71.321974][ T2690]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[   71.333159][ T2690]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[   71.342784][ T2690]          0 B        0 init/initramfs.c:101 func:find_link
[   71.393418][   T13] veth1_macvtap: left promiscuous mode
[   71.399364][   T13] veth0_vlan: left promiscuous mode
[   71.720245][   T13] bridge_slave_1: left allmulticast mode
[   71.726231][   T13] bridge_slave_1: left promiscuous mode
[   71.732942][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.741756][   T13] bridge_slave_0: left allmulticast mode
[   71.749118][   T13] bridge_slave_0: left promiscuous mode
[   71.755217][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.861975][   T13] veth1_macvtap: left promiscuous mode
[   71.867583][   T13] veth0_vlan: left promiscuous mode