last executing test programs:

2m18.887176261s ago: executing program 0 (id=3014):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0xfe, 0x8, 0x3, 0x6, 0x20, 0x40, 0x1, 0x0, 0x8, 0x0, 0xfd, 0xc0, 0x40, 0x4, 0x3}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x1, 0x3, 0x0, 0x5, 0x0, 0x0, 0x6b, 0x0, 0x80000001, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff], 0x1, 0x345210})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x102000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0xa0001, 0x0, [0x8, 0x8, 0x6, 0x4, 0x5, 0x7ff, 0xffffffffffff0000, 0x8]})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623)

2m18.573363386s ago: executing program 0 (id=3016):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0xc02, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1000})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

2m18.507007827s ago: executing program 0 (id=3017):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000813800"])
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$UHID_CREATE2(r6, 0x0, 0x2)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xffff1000, 0x2011c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0)
ioctl$BLKRRPART(r7, 0x125f, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) (async)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000813800"]) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async)
write$UHID_CREATE2(r6, 0x0, 0x2) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xffff1000, 0x2011c0}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80401, 0x0) (async)
ioctl$BLKRRPART(r7, 0x125f, 0x0) (async)

2m18.226301301s ago: executing program 0 (id=3020):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000200), 0x22c00, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r4=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000140)={0x0, 0x92f, &(0x7f0000000080)="5531ae6531dc1df44fb35befb30105d288ac62a91789db29c5b399e3ae29be19cd126f112bcbd060586f6ac1d53e99b363d3edd0938af375e4d2a7e8443000cccff5b7d46599c25901599a9acbf1c636defb581bf80201b3", &(0x7f0000000240)="3debd3cdb6ef27ab268aef4abab437d06190627f234ce49c7b91cea485dacb888eae4e2aceb84995dd159bb544747b1a12ef51be9285cca7714a10cee1645992601aa956a8ef887f33e9203109039cdb5f2ac9384cd11cc03e55d512e79755dd4a80cd09b922bb225b058c8fe77918cfaddd37de", 0x58, 0x74})
r6 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$selinux_access(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="7379737465ed49d56cbce51aa5b52e23d9fe3c386d5f753a6f626a6563745f723a6661696c6c6f675f743a7330202f7573722f7362686e2f6e7470642030"], 0x43)
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000000)=0x9})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x2, &(0x7f0000000e00)=[{0x80, 0x80, 0x4, 0x1}, {0x6, 0xfb}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

2m16.529715557s ago: executing program 0 (id=3039):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x171)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x1}) (async)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d3, 0xffffffffffffffff)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_PIT2(r6, 0x4010ae67, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r2, 0x0)

2m16.033261415s ago: executing program 0 (id=3045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"})
close(r0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13)
write(r2, &(0x7f0000001600)="d93f", 0x2)
read$FUSE(r2, &(0x7f0000001640)={0x2020}, 0x2082)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001})
write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz1\x00', {0xa2b, 0xd, 0x8}, 0x1f, [0x7ff, 0x4b16798a, 0x4000, 0x8000, 0x0, 0x3, 0xfffffff8, 0xbb18, 0x400, 0x8, 0x5, 0xa, 0x2, 0xfffffe7c, 0x5, 0x4, 0xfffffff0, 0x9, 0x7fff, 0x9, 0xfffffff9, 0xb358, 0x4, 0x0, 0x8, 0x8, 0xffffffff, 0x1, 0x1, 0x0, 0x9, 0x8, 0x6, 0x9, 0x3, 0x0, 0x0, 0x2, 0x5c, 0x7, 0x9, 0xa5, 0x4, 0x5, 0x4, 0x8001, 0x6, 0x15, 0x1, 0x7, 0x4, 0x8001, 0x0, 0x6, 0x8, 0x80000001, 0xfa, 0x110d, 0x9, 0x7, 0x10001, 0x7, 0x4, 0x81], [0x7, 0x8, 0xdaf, 0x4, 0x4, 0x9, 0x3, 0x5, 0x9, 0x2, 0xf7d, 0xe, 0x3, 0x4, 0x7d4f, 0x9, 0x6, 0x1, 0x1ff, 0x2, 0x7, 0xffffffff, 0x4, 0x8, 0xfffeffff, 0x3, 0x5, 0xfff, 0x4e, 0x40000000, 0xe2, 0x5, 0xe5c, 0x1, 0xb, 0x7, 0x8, 0x9, 0x3, 0xfffffffa, 0x1, 0x6, 0x6, 0x7, 0xeff9, 0x4, 0x1, 0x10000, 0x10001, 0x7, 0x7, 0xf36, 0xfffffffc, 0x1, 0x9, 0x90f, 0x598, 0x642a, 0xc, 0x4, 0x8, 0x6, 0x5, 0xa4], [0x800, 0x3, 0x0, 0x7ff, 0x8, 0x5e01, 0x8, 0x1, 0x18000000, 0x40, 0x7, 0x200, 0xe, 0xdb7, 0x830, 0x29, 0x8, 0x3, 0xfffffff0, 0xa18, 0x2, 0x7, 0x4, 0xffffff81, 0x2, 0x0, 0x7, 0xe8, 0x1, 0x0, 0xa, 0x7, 0x8001, 0x5, 0x7, 0x0, 0x8001, 0x223, 0x4, 0x7, 0x100, 0x7fff, 0x2, 0x0, 0x1, 0x401, 0xa0, 0xfffffffa, 0x4, 0xee, 0x7f2, 0xff, 0x966b, 0x25, 0x8, 0x5, 0xfffffffc, 0x4, 0x8000, 0xfffffffb, 0x2, 0x0, 0x4e5b, 0x700], [0x6, 0xffffffff, 0x2849, 0xfffffffc, 0x6, 0x8, 0x7f, 0x9, 0x66d, 0xfffc0000, 0xfffffff2, 0x1ff, 0x1, 0x8, 0x9, 0x3, 0xa, 0x10, 0xfffffc85, 0x3, 0x9, 0x7, 0x8000, 0x0, 0x2, 0x9, 0x3ff, 0x9, 0x350f, 0x43, 0xc5c, 0xe, 0x7, 0x40, 0x3ff, 0x0, 0x7f, 0x2, 0xfffffffd, 0x7, 0x3, 0xfff, 0x968, 0x7, 0x6, 0x6, 0xc08, 0x3, 0x4, 0x10, 0x1, 0x7676c89, 0x1, 0xffffffff, 0x65f, 0x2, 0x4, 0x1, 0x7, 0x0, 0x1ff, 0x6, 0x4, 0x1]}, 0x45c)

2m0.964098796s ago: executing program 32 (id=3045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7, 0x6832, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"})
close(r0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x141a82, 0x13)
write(r2, &(0x7f0000001600)="d93f", 0x2)
read$FUSE(r2, &(0x7f0000001640)={0x2020}, 0x2082)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001})
write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz1\x00', {0xa2b, 0xd, 0x8}, 0x1f, [0x7ff, 0x4b16798a, 0x4000, 0x8000, 0x0, 0x3, 0xfffffff8, 0xbb18, 0x400, 0x8, 0x5, 0xa, 0x2, 0xfffffe7c, 0x5, 0x4, 0xfffffff0, 0x9, 0x7fff, 0x9, 0xfffffff9, 0xb358, 0x4, 0x0, 0x8, 0x8, 0xffffffff, 0x1, 0x1, 0x0, 0x9, 0x8, 0x6, 0x9, 0x3, 0x0, 0x0, 0x2, 0x5c, 0x7, 0x9, 0xa5, 0x4, 0x5, 0x4, 0x8001, 0x6, 0x15, 0x1, 0x7, 0x4, 0x8001, 0x0, 0x6, 0x8, 0x80000001, 0xfa, 0x110d, 0x9, 0x7, 0x10001, 0x7, 0x4, 0x81], [0x7, 0x8, 0xdaf, 0x4, 0x4, 0x9, 0x3, 0x5, 0x9, 0x2, 0xf7d, 0xe, 0x3, 0x4, 0x7d4f, 0x9, 0x6, 0x1, 0x1ff, 0x2, 0x7, 0xffffffff, 0x4, 0x8, 0xfffeffff, 0x3, 0x5, 0xfff, 0x4e, 0x40000000, 0xe2, 0x5, 0xe5c, 0x1, 0xb, 0x7, 0x8, 0x9, 0x3, 0xfffffffa, 0x1, 0x6, 0x6, 0x7, 0xeff9, 0x4, 0x1, 0x10000, 0x10001, 0x7, 0x7, 0xf36, 0xfffffffc, 0x1, 0x9, 0x90f, 0x598, 0x642a, 0xc, 0x4, 0x8, 0x6, 0x5, 0xa4], [0x800, 0x3, 0x0, 0x7ff, 0x8, 0x5e01, 0x8, 0x1, 0x18000000, 0x40, 0x7, 0x200, 0xe, 0xdb7, 0x830, 0x29, 0x8, 0x3, 0xfffffff0, 0xa18, 0x2, 0x7, 0x4, 0xffffff81, 0x2, 0x0, 0x7, 0xe8, 0x1, 0x0, 0xa, 0x7, 0x8001, 0x5, 0x7, 0x0, 0x8001, 0x223, 0x4, 0x7, 0x100, 0x7fff, 0x2, 0x0, 0x1, 0x401, 0xa0, 0xfffffffa, 0x4, 0xee, 0x7f2, 0xff, 0x966b, 0x25, 0x8, 0x5, 0xfffffffc, 0x4, 0x8000, 0xfffffffb, 0x2, 0x0, 0x4e5b, 0x700], [0x6, 0xffffffff, 0x2849, 0xfffffffc, 0x6, 0x8, 0x7f, 0x9, 0x66d, 0xfffc0000, 0xfffffff2, 0x1ff, 0x1, 0x8, 0x9, 0x3, 0xa, 0x10, 0xfffffc85, 0x3, 0x9, 0x7, 0x8000, 0x0, 0x2, 0x9, 0x3ff, 0x9, 0x350f, 0x43, 0xc5c, 0xe, 0x7, 0x40, 0x3ff, 0x0, 0x7f, 0x2, 0xfffffffd, 0x7, 0x3, 0xfff, 0x968, 0x7, 0x6, 0x6, 0xc08, 0x3, 0x4, 0x10, 0x1, 0x7676c89, 0x1, 0xffffffff, 0x65f, 0x2, 0x4, 0x1, 0x7, 0x0, 0x1ff, 0x6, 0x4, 0x1]}, 0x45c)

1m8.637176728s ago: executing program 2 (id=3902):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0xac}, {0xfffffffffffffffc}, 0x1, 0x6})
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xc9001, 0x0)
write$khugepaged_scan(r1, &(0x7f00000023c0), 0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x58, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844"})
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
read$FUSE(r3, 0x0, 0x9)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$TUNGETDEVNETNS(r4, 0xff09, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000280))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) (async)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0xac}, {0xfffffffffffffffc}, 0x1, 0x6}) (async)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0xc9001, 0x0) (async)
write$khugepaged_scan(r1, &(0x7f00000023c0), 0x8) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x58, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a440b418709844"}) (async)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) (async)
read$FUSE(r3, 0x0, 0x9) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
close(r4) (async)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$TUNGETDEVNETNS(r4, 0xff09, 0x0) (async)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000280)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)

1m8.47719952s ago: executing program 2 (id=3905):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300000, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x80a0000})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240}) (async, rerun: 32)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async, rerun: 32)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 32)
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x80, 0x0, 0x101}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r8, 0x4068aea3, &(0x7f0000000000)={0xc7}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000180)=@x86={0xc, 0xd, 0x10, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10, 0x2, 0x0, 0x0, 0x2, 0x4d, 0x7, 0x6, 0x2, '\x00', 0xfe, 0x100}) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x6]}) (async, rerun: 64)
r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0})

1m8.376556702s ago: executing program 2 (id=3907):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x1}, 0x42, [0x3, 0x3, 0x3ff, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x1, 0xfffffffe, 0x40000005, 0x2, 0x0, 0x0, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x0, 0x80000003, 0x0, 0x6, 0x3], [0x0, 0x5, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0xa0000000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xc4, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x800, 0x0, 0x2, 0x0, 0x401, 0x0, 0xfc, 0x0, 0xfffffffc, 0x4, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x394, 0x0, 0x0, 0x9]}, 0x45c) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64)
close(r2) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) (async)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r5, 0xa48a2000) (async, rerun: 32)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, 0x0) (async, rerun: 32)
r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) (async)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, 0x0)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f0000000540)={0xddd41004, 0x105000})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3f)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x5}]})
r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x260402, 0x0) (async)
r13 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r13, 0x4030ae7b, &(0x7f0000000580)={0x1, 0x0, 0x4, 0x5, 0x7}) (async, rerun: 32)
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') (async, rerun: 32)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r12, 0x0) (async)
write$FUSE_GETXATTR(r7, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x8}}, 0x18) (async)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r12, 0x0)

1m8.134028245s ago: executing program 2 (id=3910):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x51, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={<r4=>r0, 0x400, 0x200, 0x400000000000})
read$FUSE(r4, &(0x7f0000000600)={0x2020}, 0x2020)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
syz_clone3(&(0x7f0000000280)={0x243012400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m7.87520787s ago: executing program 2 (id=3916):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000000000), 0x2002)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000008, 0x50, r1, 0xe22e2000)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x7, 0x0, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x400000001}}, &(0x7f00000004c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})

1m7.772359911s ago: executing program 2 (id=3917):
ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
ioctl$BLKSSZGET(r0, 0x1268, &(0x7f00000000c0))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000180)={0x4, 0x7})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x4, 0x40, 0x6, 0x3}]})
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000240), 0x2, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000280)=0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000004c0)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x2, "7b38c6651a331b"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000014c0)={{<r5=>0x0, 0x6, 0x0, 0x8, 0x6, 0x1, 0x1, 0x0, 0xbfb3, 0x6, 0x545, 0x4, 0x8, 0x2, 0xddf}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001580)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x7, "9588e007b7741a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002580)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x7, "f7a25fd081146c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000003580)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x8, "7904499ccf6286"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000004580)={{<r9=>0x0, 0x200000, 0x5, 0x40, 0x101, 0x6, 0x4, 0x2bf, 0xa86, 0x100, 0x7, 0x7, 0x8001, 0x7ff, 0x3ff}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004640)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000004840)={0x0, <r11=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x12, "0b971c571d536c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000006840)={{<r13=>0x0, 0x8, 0x8, 0x3, 0x81, 0x1, 0x9, 0x0, 0x6, 0x100, 0x9, 0x0, 0x0, 0x5, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000006900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x40, "f1c975fbf00bc5"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000007900)={<r15=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000007b00)={<r16=>0x0, 0x0, "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", "75b940a08334696cc0041f6fbd94aa4f0338dbf98ef5b57d23b3a0b47dde784a36e1fd0650b119de68973305754e5f94e568cb6597a99ba718b5e73415c827f2b85859a8f47cad471ff8ef9910419a963d47ce62e4c197d67ca4cb52abfecdf82b849dfe2923f21dfc0af3d2a4b935779d2f5e6f7ccdc868433c20d213102dc7f29cb5071c9af2e4a2fb9544e14b81d86b87e7fd5b3bca00ad6842d44d2dea327a144081064429bea785c3576ac93c8fcf32b9827b1ef58bcb822d832e398a2469f44fb17e4902a0df94ff88021c731676bdf1092bf626e063e8f9c774ebedb8a958ebce3ae2fb16c0e67da353a136cbfc20af4b1fbc49978eebfbf77dd83839185fdb10fa6edd53286453c708ae9fbdbbd117e41a41602fa885bc3b3966a467b78a26ccc303f1a589e9b7b0551318ea776a89a9f1f54a78073c3c7996d0aa7132d5c9e291ca938b366b7a513d5d9129e191598107e441be36ffc7cf2980c6b4a20816a33e3ac656e1f7edf43e97d3b7ba6b70cc7d68ec177cc3efb1287eb00ea1874dc75277b9f62747c78e9f7a2d1049019f65255c8f74f04170de45b46a809b520034c9335cd55d41df7cbda866138ea5a568f684040638da2937b4aeb1dc8d9fee0c7457c39817de82511d1bc78f25bbc53aec0d105cb55acbf6610830592a70b5ab22273ca2a70f464736c055f3bd06c4794b429f204d9b25b2304f4fcec58aeedf3d5c8668bc788aad8a883b4d9af54a55998c668e3ed4b333cc1fbd3d366058d8fe4735240a07f2720e7cc65dad459ffb00db9e479e3d10eae072b9337f67c69ebc7aeb70f9e16767c40fdf02d200806531f7afd4fc4a641dce331306e22131dcb6705101c2556f8563d4d0c9ed7d01a499f3b8e90a82ab6ad2b7e20999b771c17d974654aeafc86400881396776cede570ee1ed2ab0e7bdd57c66ce669a2a994e2d3a3ae6ddfdb8020e04ba8c769b4e4f5610ad87928938b7b8aa192972ba4cf8be9a100102baccdf0e9254e0beb0e6ada3cbf07d437b196624ae2ba2bdac3e2d5dff1b2584b9fac42e2e19be0126e10e7ec28ea0ae9e3947420f2d008fd88cabd740047a510f2907b6dde1f007e0c6afd33e852eae9fcb8e614aca442eaa6c99e9c2c45223d5db54f3f3634fa286983ce2527980c03cf665dfc3570b59913d9ddfbf15e2d1ce0648c173eb6532eb3e55a06117a5cf5d9e440fd49f761ae107bd30e4ad7384f116ccb6df1cfd8fa054c1e17a0f9877f91a9ec083b8753134ac5a88b9842d3c132017eeaa15974236163b7c80f4e90ea285e35aafa456b414e7eaf0379543d2660b83ae8ef4d77c224b0792391daae34ae0501e694edb0dd0df31fbbb7ebcf661cd2224f415bfd08f7213777001dc300ddd54ca1f8c7d659b361e19432e64e9cc650118f5b2bbbcb40e93e6453e2f4c829e460ac627dede146384443c1862ce966a03cdb348175ae667f4ec27a3921ce47a63e2d496bbeee8b81c1c1cb00306d3a19d3aea4d260082593d6aff9e2a0ee33bebd7f9960a4afd38cab0bc7cea8534b0527b3f0f2777a125f1c7d1b3ef953ce10b3dce50341420ef142e06ecdf2e6a2636d7b4ae4edab03a907399d89abeb83dd8b89aa272f30d20494533baa017af1a025b265e8ccf20f4aa047d2377fe3ab1374381e20c13bc11ddda2390930f851ed6e14accc46eba67f765ed7759ea1432eec4eefd26fa99fda21ca2554301eb912d9d1b0816ab282a7e6d7a5c16d7bd1ef8a0459da136fc975b87eccaecd8c64dd5e5f376f33c33e234f0066def5c9791d177e75c4ce655f23bce213c0c1cf494ac5ab542ae6a2c53b994f1b3bafc074e12bdd6dccac197df268f0c38b64ce9c3890647b5557cd5965be80c8a037e1049c64b668cfad24eafa72c862512d3f9a75a19f1a7a7213c0ba79d3f6d2b88ce8c0261983f8f00045d0d31dc4c14fece44a7e91fbe6814dac0b242b3359b7ef9f887819208dce9374a246347fc0c609a0d21dc1bda54f99b3a12abbec48aed1e14f9c5b231b82e0cced4692a500535f47372ab2ee724f74201c23ef1c95fe09dc91eab70c0d7a56667a8ec03510c5b00d0f9cdd1dc7cc75f5bef1c1c3acd3c2c7a51a14590495b5772b327f197882a07d4fd92c5ecdfd74d2813dc8cd5d99f6eb998758a5a3b08242ed27c855a3045582b40507cbec87f215d8474ebdc1f570d44b315a980508f495e4f7513aeba2cc9397306c396ad4a43bb56a690e878b41a3e8d9882c51ae0b2e3bf9f167173dfd32152cbfe1249aed0d295fc6aa56195724fa22031c085bb94b05fe3a5a22bc1f2c249b5b9bf8a6577f93924e56e58f97922377c7fdb9d50ccf6ecdf02b63c6f20872371cec8195f4274b513f161faefac75e52b722625523255eacf18a949cf9d608028c4e9b96943fe86a61d19f532270fa1410b62fb45d6662fd91bc0f7ba16d490d359cf9b97e006eb32c4ae1fb488d989847054df89f7989122d6cc527c462ed5880fd26f6a5ff187204b6985c2eb4f287f74d1f08bf91b02376d1fd55ebe459ae3425eb8e5702b84cff3ef44448846f02f4d93b9627cd37a36ca2eedfaf82ae1de1dc03b78b9b7cbc9d13a86773bb1d9c89474cda9e1af3333617dc13f01f014811f86015ed2e7d3b5fcf5ce1b71b4993a284b08afa11ca0c72876b2663a1e9a6772e03ab21f5e554197609e231005802082747122349e78456d9bbb32bd02287f21c54872e718dee96916245cb8e6d28a0ec99a580ee9913b490445e487068fd6d31957515dd9e32a3c4432084b9fd2285853f9bdb6413062f23208b386cee8c0ff6377d61698a8d30eb74fe1b29e5632ec26b8d2e2046a233ec10ea9c1bab5a56ec55e6ab40a345fe761a960813ff487b9b7f07c39245aa18050af8a366dea476699c9429dbb49f400bd007327cce11bb42a041f5d19078820f03a45157204d20bca6b08be5bff9671975b0a7549dc276e571b82fb6cefbd5169649e4c39449fa5745c1ad1f57bc0093b1d2fe8aa65aedb4a8e257db56469102d3b2636b21505f8f0ba2a0d35818c9337cdbfbaed2443e7d36f74006ed368f0518d576c831c43b73fcec4dd9b45092dd65fd5714a9abb444cb5fb5696b7f56adce6077e0bb2c0ac48687b2a94d5fbd0baa9b8343926c1a758d4ec01bdbd98cc680624da95559bd7e2b961a6ef7615d14b2b81d5be3b689c9cb444ccf377bb893b166078d61024faf585fb47a7286b9529b0ab2fa6d627db841780c0aed95d09312146d11168c9716311347acfda77bb7592c699e7aef5aa51efafa8bd9465c508771747b8a04adb4fb1e426485bcc3630a4c32eaf068526db4452a15f7ec652c403a1394ad1dbf9ddc17b84729d2b26e72c4fed64b8c961a6004525d43cd8dfee99cb65838da7fd84300e40f27558485471c36d36e152a9a253270d777c4bbb7132b5ea9cbb4204234c193bcc28a49386c8c909365bb0c884d9b06410ceb686ff1551c595cbba31459b88e33a5ca4eb28e867bc1745db0ba4e81987db5bfe629320d3d6ce90a9a1d20ae44a56ff55095a8b163a5ac5d8005904fe001f34d3b18c8de8840e3d6d2de50f9b6dabecd0d1bd97df574b601eee954d84d4d8d2616feb0e47b1af8da93122d5756ab3d915913b497ce6b339b11d6b20d785bb22cca9c429199572a89e59223806485190931d04fa29b5adfb8c719422a3e8907b8a9d34ea667dd454654a8546086ce5bf6637fc2494d12dd28b93ea49fa9fef241d7bc67162bdd7bc1f633af89e007fd84d95e051b19856af31d1f1a39d17588a9648729997357208ed2d04ab1182fd0dedd3068bb80fb6b429a92fb647861b898a1df82514f25dc60125249faba5efd0d7f1941f0dfc3b3496f4cf7b093e47936cd2264f2f19c11d4ecbc5dee55f0957ff362052dbc10b02887d11561b431dcfefb686b1f7a956ae8d07df2dd289452862ba01620f332eb971b9e3d06632159157bdc7c505eb0a1c1c6757007829bad4b32c19a34280d8712502161ee733285ca57da76024123c4f11a3c6dcc7b6fbd0f417d5460ec7c0db353b0d770509b01d29de3365730fc5c2f671f78f6a4b00fc10a45de00a1d440c2fe9621616b74632c8975942f5a639e743feb52ec4ca7a66df930e8d0b4a5ccd667152da915b94e5ad461cf7997a38918a8183d5c9d56324b0d6ed45b8464bf73fc861674c7101c350a1e6a7b4f2d182be077a9b4aca1346a0714a480289bb1737a73579c58fe2b8b0b68b5f848179e3222b24cdcbfbb3afdbb143e9bc55fb23b6e12efcdc6ccb45036078e63d688c5d16bbc92a91e77bc253768f4fbb2df5077711e18f81f357fbaf51df633794fed8fac7556cc3909eca8c70962f811d20e527c14f70884375b937564cfd7a01118223070cfa593e228d560008cdaa8ed8044f7ab8c4dce6fbdf8280a5cdca1cf53e091a3aa8d4a0f690eee76602bcbe7fd4b18bbf8c64432d726bfbb29591b99afd4d52cee780da805bd403e0d629a8effb04af2f8ca47fed4710a3bc18228df2fb1698a96922f2ec3802b23036ad4765b5031ea437ce6a40fdc1e5c153b39c9aa131b50e69d4322067fb5cc67b88e2c56d269841753b29ee30c266e2acf5da45da8a629fc37a4568205e91083ce7db30bbb523ceb1d5248659e85e5aeb2f2e5ee850bb9c307fd96aa92819ec20e5f42ca5f6366200a0ad60f5d05b9ba44208f3f63c9bb19d3561c42ffd4370dd5f72d995cdba325eab1b240b9cb2cfc549523a6fb0ed9034cf81ab64ff67a918be8513a9ff345d284d76fe1243ecb1f066f12d651c2e989b5e220f5e9993f2a4f0f8d666f7fcfa90eafa424e4ea6ac7bfdc6da9c3c089c37a61f27e09e759ef5167a2acfff5371a61ab92735c98b6404e855e801aedb8be743a040e15ee5e9caeff3692836240fae62d30006164617a346731a6c370a9e1e82cf5661921fd5cb610798ca9aa3db25211a64e90f549fbc11c2da196bdbb7163fa590bdc3d0f3fdf75297bc4bed4d311f1f3b15766b98a1a7207cbb3d48f9989748593730d59413216b159ea0b222e8a1819ccb5b0ec1a123c786daad70c1acdac3e411672aa39e2dfd202bad6205772d182a74e67892f56ed9660bb0f277fe5a6ebb0fcce0ac7c2b4475e150dfea7ca19ad6bed5785de6813ad22a55c85eef0fb9395188c32c7d1e6c08a4770dae2a8ea62daea068f72a39efc1c12e4d59ce3189c4decee4d62d991eac025d8b79147b2bd85f36db631906380c5dc70c4ddad43d368d35d2491e83c06a377c579058ce3f7fd361f4b3b3d7d521624260dce45f6973fefd7c58d461b647cbf7f686f251a041c25d54b57784fc04d62d598b5bffb17648ece02ac96501bddec88b685b862ceca1618ff9267bea5dbe44f5466"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000008b00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r17=>0x0}], 0xe, "92edd83651b2c2"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009b00)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}], 0x0, "b6f10efa764326"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000000ab00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}], 0x5, "2c10610381c0a3"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000010fe00)={0x7ec, [{0x0, r3}, {r4}, {r5, r6}, {r7, r8}, {r9, r10}, {r11, r12}, {r13, r14}, {r15, r16}, {0x0, r17}, {r18, r19}], 0xb3, "4b50a283ae8d44"})

52.779400021s ago: executing program 33 (id=3917):
ioctl$BLKFRAGET(0xffffffffffffffff, 0x1265, &(0x7f0000000000))
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080))
ioctl$BLKSSZGET(r0, 0x1268, &(0x7f00000000c0))
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000140))
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000180)={0x4, 0x7})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x4, 0x40, 0x6, 0x3}]})
r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000240), 0x2, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000280)=0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000004c0)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x2, "7b38c6651a331b"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000014c0)={{<r5=>0x0, 0x6, 0x0, 0x8, 0x6, 0x1, 0x1, 0x0, 0xbfb3, 0x6, 0x545, 0x4, 0x8, 0x2, 0xddf}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001580)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r6=>0x0}], 0x7, "9588e007b7741a"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002580)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}], 0x7, "f7a25fd081146c"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000003580)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r8=>0x0}], 0x8, "7904499ccf6286"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000004580)={{<r9=>0x0, 0x200000, 0x5, 0x40, 0x101, 0x6, 0x4, 0x2bf, 0xa86, 0x100, 0x7, 0x7, 0x8001, 0x7ff, 0x3ff}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004640)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000004840)={0x0, <r11=>0x0, "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", "d12edf3b0e6f5fc89237b59971201dea6fbc7be9be55ee42e284c1be8e64035415e9755de4b26660123a879304014f920fc3e17d1e8dabf0e098555829bc5c8ba11a44d3185b5f19e7267b90db8ff67ef5a186634cda7468650350aa1170637ad869496c69e382b3a9930159d9c44422ea6bb502e90077082a1b84c551a2cf89e6081d0394ea88392eb490f75c52b86c4ee0edc976a1b4a81ea9072ae9de39f56bd1b4b84e21661b9f6cf7fa9aa2c1fbcea4edc1b952c8f10f5c31c56b206f2ddd4ff07206c2a5c3a1c93384b652a362fccfc0f9ef843f694141e44743aa64aaf20da124edf073c5543388028726f1ed8eb594189845fa52a48f0d2508d1b854b46e0f74c985ecd56a989c5430ad59cf2caf7672cfc7721588d97ffec6cda6f1254a7aa0fd63cb3ced5a02a24aea11c32c9be4f5947afe3846c90118376fd2dc6d133ff99501591ce3948acfd2bb0d8c317a52b42608c86baca186235c788cb2ebc60159f9dc5e9f02a2aedf3995e77b19a3796b5c77d10b8cac07b5ba8928d19209eab038bf41b5a392057c53d6aecb5155ac8fa96b386a7c3ec776b3c403a5bec83050c245334d741a6e4d4778e9fa32802c61878c9d04381654776145bad15d9f2bab94663276090048927627b5c9f7ae43c79f5ef7ef7f566a0f9a279a767a00d722cfb801d17388f6b88eb87915b1eb524bdd9f26917718864ebb1f24809f7e5120fd349328fb4485afc6be03a752b6105814438ae6a66950cf377618d4ccace90b89eebd699f7008208bf5120e81a4a805e273e95954af7bb7e6621621066e469c0e6e0bd89a7d2d2089614e47e61b78b6db83383a9c93e86605f9abdeba10b6612386d05aa3623bf8437a62fb6e66afc0aee71f4024c3613c443ceafc648f005e1ec2d8e44614400bb60a1b37957387083ee3b0214ef9ea2e38b06150e69628c4eb08841f91f7cea205aa42f846452b7c2a36ae9850c5c480bdaaf2c1637bed9644093f469739702e3ca568a53d13a214ac0b6e5d918dc59a3546b09bd115b1d8b2279726a40f4dc6625393e85768c94ec48361207b7ab3e097c7aee4e766a4a16c43bbc5fe6f1220f17d1af2248d400a73c626a3842d09f0cf35ebe0f64328161bba062bb0d9ed0621dad914a38ca5d990c858feaa83b74ccbf0a0051c23c895f555383e8ddcb203ddd74fa4d79b87dee108c1af67a7a335f141b502b5f590413bc759a3d339e818145fc9d88d30838529969b5934226001c5ea6c8845e906ad2379240d9a2665ab2656ff1798488495d81cfb1fae472c787b88e6884bd46d1c0a97ff93b6d8c8bdea453c93ca384a4fcdb37431c0171b2b1b915c2dbe489e245988d6b03bfea5fe16a5250c65dde6490d1615ccf29eee2ab76577faaf27c4dad4edc011ef960a1970e31102f17da45b43ea9213646b85018b65f952b087b88b93f8d0d53ae9c7fb5880c1e06514c72b2d0947f3db52e77366ac4f78924f38d571a63c30a4cdbf801885ffe38f3a0ac87512a986821be9882ebb5153157baf7492919acb87a13c4504440651f06e6ea6351be7af56132b6e220258ee2328bc84137531bdf3ed5769f4f5e908b9c64ea485c5aeff0c23081f8e2c339584773c0c74e6ff3aca3d43ecf7d8f8ed2cedeee8200dd379bc16de4c0d3d780685dfe59303e4f4959ddb67b5d9c9d0cca4c38a48a043d29c269e3fcdb79624f7a381996dd59e0e1793fc105ea57d8dcb946e094c0c79c8fb749c3be93b00a18a9b663b040ce6fb5be032aaa534d29c0c6d363002be840f0e0bdac543c9d233f89819429064c80a230b330e8aacce5d4097dc03e3c24190219bff6a84a54b42255b52aa0c356d4fdf2c4b802419ce518d8b3464e5e0df04cebe6967f4c6c921d0f84013bcf00c394d95cfe24bdbc1a4a8bcdec974f8f3b115453a81d30cb229edb79510dbe9f0e1e51e69341cec3df47c7b64332f4b3a19b6eafdde279fe0d5e04be2dd695f8cf15fd9f92a29f96841d7222a50ccd5cce4a9be81890edd97dd1511f583e43e594c60566f19bc245de250a20cbdc69cc5935c3d401159f78ecc86c23405c610f9e6a5d50fb6532d806eb1282707c20370f84339f4fdd5491206d2b59a1c2cc630866321da4762403b1839d320fb14210805a9a20caa262d1b5be7e1db533b99be18c5e7d397b0890665fe31e3690f44d8f9cb3b265e291b09fb1c8836005d6c99f2cc2040fe8029cb57a802429cb7234a39427d1a76388991c900b54f0f38d3a1f1f465c883d8d8d8cc124e9d9c57a683209db91ad16db0d513542f746a5d6cc9c9ecfe0c35da53cd938f017fc13ee531e3bd3706dd9bc83bb687ccb439a4d6886abd83aa7df6ac9ec3651a55aa527c0812737ac28258e54bbc5652d29ee25e6f986b4afac68d53e3e8cd847f9bb8ff2508a37481dd3cbe7c4c05785e91d13ccd83874994a9054ee097864c10d98a8cbef9f3c8de2e45806016f22964347ba803abc2807de1f4ad42ff32c0a4833c3a99aa437a0026559fb8429d18b8b4fff8159ea2850ac184effee7ffab6c23f37e6c5b3f6326a14e46adfd097fca513ead52ef8dc74b8504a7a8d5908b91820dd6359466685c2a3981cb56f30e3e47a89d1ea6197528bfab0a259e3737e651cdbce2b0fcce2a0b4daa0cd1642c902d001fb0a62bd0c7a47d3b0e15aa3033572d9efdea64ec6891db2596f3efe1ab8bf6ab35100f09b82af66a1ac941bc309a1a84da562827eb9f44c0cd6fbba62e119b5fb556a7435c0e5e1989f378351c4796d61084dda6cccdd2407dd0a063945b85a9e10b270ca89eca7ab3f9c86aac8edd0c55846d8527bb49e524c0e2682a7a38177d1dd2edf30728adc138391d79310a488dac6943098cbf8c8a5710284388c29586fa00b293bc4ab28208e4aad67e50c58c71dbe29664b813bc84aa33b03234ed6411314e1a7acecfb45f2531868d55afa5962982c521cf16ad7b8a2ba7be493e5c98b640b0be6b74990529140a5368b1a3c74825204eedc6660d7f128b21eb8cd4a898cf66da9453100a0248959f71d8197ce2522ff1c086372a9de03190c4c691c90ba5eae9bba77d3ef5317d63ae41e5778e2a7ff0b388331a7e91cb696dbc75cebbf1abc4771c8ce0bd594285b81e7f530fc214cabe332ddd23ec9f79b3609ffd83eadca621a0d30dd21f24d340b68c9e422dea436605303ac67ca450646576120718031e68e7a889db37137cf6402af198956f4bed736a178b0cbb5c9079e0f9f7630a97e0a27458db90c3fc87e89e296e8290d07bc7ff8881423ca8ba1e4814ba708c9cb398aa42d0ba0c3bbef2e658da0f7c60fa2fe6a7888a650235585a6817a764bace1116e03c2eaee3f9e3e8a013b667055e23b7361ee1c90a4c7d4f454c53e7a43eebae65b8eb367f9f57e7140bbe70b52142511a89cc99d44dc4c8a7432ed83499695cc7b52f633e67f95af73167d0246a87fd714d34782601cce7feecb6e92bfbd8266a5264e39925506d729de6fcf86f83edf10c4d8642a569c5ab23d7669206cd48d70e5744cd18b04a04eaec7cb8ccb793c2ee7daa1a7e75c79ca7fb57e0ad80ce72f6f717bfd43ebc9f39f3b747de355664300949aedcac96d134f5a3cd657666e24ca7535232a1febd9fc431ddd85e7315bb70ec49a568f3c63617205a4a2ec1c7f22ed019b40fa2b69ae22cd581d7598caafa3545533c10b945cd17a40ebc671fc401bc6f4ac304c3ab213323465969270880b770797fdde952a672b1b8e02c9be1f5601acfd8ef2b28e3b7a0b7fa6f5899691e6a6c0469186226393f84d6a1764b1059ee83f35af22a084fa74b46e5e6f25deead7cc4921138e1263b99038c26855787e1d7a49430240d05d6f261e6a57cdd86ce25faf8054203c1914c7f8eef39a1edf71bbfe5a7fd53c927193ef7e6b83fe70893a97956a9d4d5375f49f589f46ce0595c63ed55c627ec0a68e19b4d03c260847b4a0d7890e4b72f646a1614bd728f02cd5bffa69349c0620092538acfec2106b2d19e82a87c6b527dab6b4534df432c00320735f4205a87607b698744977e357f2b22aacf9d0094bd2a6134c4be772c857d2da84eb419041878d3f22c805e4de92abcfc26b5b813c5bbb144b8cc7c3f5818a94c6be377ed79b768aedd1e9d1a3818edaa9bb47f6a39613d4013a5a5dc5c535c4427df86336e6a7e2901b0128f46dd5b72998ec21db962262115a141e7906564a5c79fe7845f503aaa084f61d35e27eae1840cb143c2a1c79f91b25c26260d0f04c3b3b8e2d39d9918bcd2753abce46629d5d68862907505ad151c7e4f01eea1abbe79f93fbf5dbb42be6c92e2264462da0caf53e8e38f4beeb2e65b86d5e8bdaa5e8cdd26b3525c226144b5346b9207237dfadbc62f486962e113b93ab7fdd6886f2534370a116e59c3dffac2a2c7ceae314c0108082fed607f5b5653743bca5c9d86e5deca148f913e0e6c53d81c4e629ef1817e7a7e5a20997fd391eee8e85cc05892907139d06cb5a41522a84cdfe0638c3ec21c3b7f5bdcae37512adbcf878cc78a014292eee83b48ebf8196d0ca2113e8394efd58a432bbe205c524ba10693ccb1097622892fa1cc12ba676e4eb74b3a51a0658ceb1b9f686931ac4e5312c43bac693e32fa6009b01dc92b9025712bfdf23db97414e52816c0f92d17d69031257dd4a8765bf80b04c9fa1393ffd98ce4b592424b84419a464d6a86ba7486e711864549ca35c8cb38b58181cdedffae1f1e29a6414295c34e3cd0f3513a05774622f404272f22a1c91c4de330537f5d445c9481009b62c6a4385625901d94d51d576ae9a47df122e0dfd29e81b35a4054b64949e0284d04ce103aafd7c2e2ab5e538210ce08290dbb8685638d6a91d82cab103cdc7e044cf8d11655af81d300be149f3d85c3c3f25be3b77d4c859e258d5c472ba4c7b2a6b274707546155a562a429b0cc3c7b6c3890b09870e47c8bc4ce077c4286742fb1e0b6bd311bbb99ac328ca57cd3ac9393d83a14a9af8eec743a6e5ca7b720d06ae8c7a1c88d44d50b13061a8379e16953ba607d78989701ff4423636cf9771994ceb5a5f7738c778746914e27cf68c90fc19ac92709bf893985549e7116ac77b285edc8e90d2b1b26702f2c73f59fe683989f8b45a7a10dbffa8b36a0ad5453e1f181e3c85db11f956841bf23c4359ce59865f9b886a2a4429053bf935922fd77e66b4bb5b2c12e71e7b699ba6028a91b9027cccb7fb40dd872483cb7a30ea3dc6f53d833916d9b60d63b522aa3642e347ba73de235db31f02c61cce2be5421e48af57f247a923250a6b265bbb3606c013064d8dc3a9b34bd8a8bd1a67e36136971afaf16f6a08204fdd52b094951ce61141b3b7b2f11e46d9854405d7291778"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000005840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x12, "0b971c571d536c"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000006840)={{<r13=>0x0, 0x8, 0x8, 0x3, 0x81, 0x1, 0x9, 0x0, 0x6, 0x100, 0x9, 0x0, 0x0, 0x5, 0x2}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000006900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x40, "f1c975fbf00bc5"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000007900)={<r15=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000007b00)={<r16=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000008b00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r17=>0x0}], 0xe, "92edd83651b2c2"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000009b00)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}], 0x0, "b6f10efa764326"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000000ab00)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}], 0x5, "2c10610381c0a3"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000010fe00)={0x7ec, [{0x0, r3}, {r4}, {r5, r6}, {r7, r8}, {r9, r10}, {r11, r12}, {r13, r14}, {r15, r16}, {0x0, r17}, {r18, r19}], 0xb3, "4b50a283ae8d44"})

1.91725269s ago: executing program 4 (id=4828):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wakeup_count', 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wakeup_count', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200) (async)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x200)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r1, 0x4004ae86, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r2, &(0x7f0000000540)={0x2020}, 0x2020)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7) (async)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000040)=0xfffffff7)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x50, 0x0, &(0x7f0000000140)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x4, 0x0, &(0x7f00000001c0)="5e0f626a"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x806}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x806})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000340)={0x2, &(0x7f0000000000)=[{0xb1, 0x0, 0x0, 0xffffff80}, {0x6}]})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001100)='/sys/power/pm_print_times', 0x200, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f00000000c0))
read$FUSE(r5, &(0x7f0000001140)={0x2020}, 0x2020)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r5, 0xc008af7b, &(0x7f0000000080)={0x3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d00)="f249c144"})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

1.850723411s ago: executing program 4 (id=4830):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x200, 0xab, 0x3ff, 0x100, 0x3, "ecfc1b3ee4b4a5d8be0bf0e004d0df48570e0a"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"])

1.768750973s ago: executing program 3 (id=4832):
openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
read$FUSE(r1, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa0880, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000d000000ff"])
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$vga_arbiter(r10, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa)
ioctl$BLKROSET(r9, 0x125d, &(0x7f0000000540)=0x10001)
ioctl$BLKRRPART(r8, 0x125f, 0x0)

1.702154374s ago: executing program 4 (id=4834):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5c601, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x100010, r0, 0x843b5000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
write$uinput_user_dev(r2, &(0x7f00000025c0)={'syz0\x00', {}, 0x40}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080))
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}]})
ioctl$BLKRRPART(r0, 0x125f, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5c601, 0x0) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x100010, r0, 0x843b5000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) (async)
write$uinput_user_dev(r2, &(0x7f00000025c0)={'syz0\x00', {}, 0x40}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r2, 0x5501) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) (async)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) (async)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)) (async)
ioctl$PPPIOCSDEBUG(r6, 0x40047440, 0x0) (async)
ioctl$KVM_SET_IRQCHIP(r5, 0xae64, 0x0) (async)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000680)={[{0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3}, {0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc}]}) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)

1.538101416s ago: executing program 3 (id=4835):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000040)=""/150, &(0x7f0000000100)=""/80, &(0x7f0000000180)=""/30, 0xe6ee8000})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x1, 0x1, &(0x7f0000000240)=""/2, &(0x7f0000000280)=""/5, &(0x7f00000002c0)=""/117, 0xffff1000})
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000380))
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x563002, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0)
ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x7)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000480))
ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000004c0))
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000500)={{0x1, 0x8001}, 0x100, './file0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000640)={<r5=>0x0, 0x5, 0x50000000000})
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000a40)={<r6=>0x0, 0x100000000, 0x0, [0x15e4, 0x8, 0x100000000, 0xee, 0x7], [0x4, 0xffffffff, 0x200, 0x4, 0x0, 0x2, 0x2, 0x2, 0x2, 0x1000, 0x1ff, 0x80000000, 0x5, 0xffff, 0x9, 0x5, 0x6, 0x2, 0x9, 0xfffffffffffffff9, 0x86d7, 0x800, 0x2, 0xe, 0x2, 0x7, 0x40, 0x4, 0x7, 0xff, 0x0, 0x9, 0x6, 0x9, 0xb6, 0x8, 0xa, 0x1, 0xffffffff, 0xe8f1, 0xef5, 0x0, 0x1, 0x6, 0xa, 0x2, 0x9, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0x1, 0x10000, 0x80000000, 0x33f, 0x0, 0x4, 0x10001, 0x6ca, 0x7, 0x35dc, 0x5, 0x0, 0xa, 0x8, 0x4, 0x1, 0x6, 0x8, 0x9, 0x1, 0x7fff, 0x7ff, 0x2, 0x10001, 0x8, 0x80000001, 0x2, 0x4, 0x29d87dd2, 0xe60, 0x7, 0x1, 0x0, 0x6, 0x7b, 0x6, 0x8, 0x8, 0x872, 0x3, 0x10000, 0x727, 0x40, 0x6, 0x8, 0x0, 0x6, 0x7, 0x40, 0x1, 0x7fffffff, 0x7, 0x9, 0x10, 0x6, 0x0, 0xd, 0x9, 0x0, 0x695f, 0x0, 0x9, 0x7, 0xf, 0x0, 0x8, 0x6c3f, 0x5]})
ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000e80)={<r7=>0x0, "5193531905483d77f555fcf538785250"})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001e80)={0xa, 0x0, {0x7, @usage=0xffffffffffffffff, r5, 0x9, 0xffff, 0x4, 0xd4, 0x101, 0x50, @usage=0x6, 0xe, 0xb, [0x5e, 0x101, 0x9, 0x8, 0x3, 0x9]}, {0xeb7, @usage=0x6, r6, 0x2, 0x3, 0x8, 0xc, 0x7fffffffffffffff, 0x31, @struct={0x3, 0x8}, 0x7fff, 0x9, [0x789f, 0x1d08, 0x7, 0x2, 0xffffffffffff43bf, 0x3]}, {0x4, @usage=0x8, r7, 0x9, 0xd50, 0x101, 0x7, 0x35, 0x90, @struct={0xffffffff, 0x7ff}, 0x300000, 0x5, [0x2, 0x2, 0xa7, 0x9, 0x8000000000000001, 0xff]}, {0x4, 0x1, 0x4}})
ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000002280)={{0x0, 0x0, 0x80}})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004600)={0x88, 0x0, &(0x7f0000004440)=[@enter_looper, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000004380)={@flat=@handle={0x73682a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000004300)=""/114, 0x72, 0x0, 0x15}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000004400)={0x0, 0x18, 0x40}}, 0x400}, @dead_binder_done, @request_death, @enter_looper, @increfs={0x40046304, 0x1}, @increfs], 0xc1, 0x0, &(0x7f0000004500)="70a2e51c133912f93d6aa9a54ab2d2385b8a2ceea109e23d64d0a226283c1622cd79738676c34eb472bd83d7d18f0f59a9dec93b11f38ae2452d1cfb4245890627370514244aa70805563e9e85946756540d379a5ff5a686dd9072b9d272dd0ba7cdd020ddb98867c2e9ecbbedff4d77cce69ab47a613ece65bfdab27974edde89300c24df55cbed9cbc819c5e4dcac0f1ea2d26d3cd48195a93ee5bf66710533d0ae3b3b924a1cb8c5d064e669fc8bd1f121b6295dcbf2da8a2249db8fee668ac"})
r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, r8, 0x200000a, 0x13, r9, 0x0)
read$FUSE(r3, &(0x7f0000004640)={0x2020}, 0x2020)
close(r4)
openat$uinput(0xffffffffffffff9c, &(0x7f0000006680), 0x802, 0x0)
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000006700))

1.355210009s ago: executing program 3 (id=4838):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="c021"], 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)

1.26944741s ago: executing program 5 (id=4839):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x4010, 0xffffffffffffffff, 0x7fa8c000) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x1100, 0x2}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000001340)=""/4103, 0x1007, 0x2, 0x4}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040))

1.153505022s ago: executing program 4 (id=4840):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
syz_clone(0x803480, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620b, 0xfffffffffffffffe)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001d80), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xd, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0xfd, 0x4, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x18100000, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0x2000, 0x401}, {}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2]})
ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
write$selinux_load(r1, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010)

1.137215492s ago: executing program 5 (id=4841):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000), 0xffffffef)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT])

935.104985ms ago: executing program 4 (id=4843):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x20, 0x6}, {0x6}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'pids'}, {0x2d, 'cpuset'}, {0x2b, 'hugetlb'}, {0x2d, 'pids'}]}, 0x1d)

817.345257ms ago: executing program 5 (id=4845):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000011c0)={0xa, 0x5, 0xfd})
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xbc00000000000000})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x80ffffff}, {0x6}]})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r7, 0xff0a, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r10])
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r10])
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/74, 0x4a, 0x0, 0x8}, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

640.26025ms ago: executing program 1 (id=4846):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000010000000ff0000f7a42bdff99d2bbc86fa2e0d1e"])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 64)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x6) (rerun: 64)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3e}) (async)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) (async)
write$uinput_user_dev(r4, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) (async)
ioctl$UI_DEV_CREATE(r4, 0x5501) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0xa0, 0x5, 0x6, 0x0, 0x3, 0x4, 0x9, 0x8f, 0x5, 0x0, 0xc2, 0x9, 0x0, 0x7, 0x6, 0x0, 0x5, 0x89, 0x8, '\x00', 0x4a, 0x8})

529.472702ms ago: executing program 5 (id=4847):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000040000000010001000400000000"])
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000004, 0x0, 0x81, 0x100000, 0xffffffffffffff32, 0x2004c9, 0x8000000, 0xfffffffffffefffb, 0x1, 0xf, 0x0, 0x0, 0xffffffffffffffff, 0x2], 0xeeee8000, 0x46240})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x7fffffffffffffff, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x9, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x400000000)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}})
r11 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f0000000080)={{r11}, 0xff, 0x6, 0x9})
r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000840)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000600)={0x58, 0x0, &(0x7f0000000700)=[@exit_looper, @enter_looper, @exit_looper, @enter_looper, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x9, 0x0, 0xe}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/97, 0x61, 0x1, 0x15}, @fda={0x66646185, 0x7, 0x3, 0x17}}, &(0x7f00000004c0)={0x0, 0x20, 0x48}}}], 0x72, 0x0, &(0x7f00000007c0)="46614de8e08965e1d1454fa2f02cecbfcf9894a2703a9bee3299bfb25e9b84e19b62b9d051166ce772e0ad39a9d8e3b71f90b2e54785343ce36eb938b0f428f95b7595bcb2c33022a73ecf5833fc27e61adcfceb1c3f35509483b4290350688eac94f223039dab15308f0dfed03b04f441e4"})

528.617322ms ago: executing program 1 (id=4848):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0)
write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000002100179649f50cdd325dca9e1654adb4342952bfb3b2ab5250b1d76c8cca9701dcc585a36dead4e6ee01626a13dbee48cc52da0e95e6f86321dec0335218aad9724f791aed6451ec73536194ca5c81732d119a81dda394ed4e35dc751247ded7a20804d75b0b4ea0817b043e8bd07e6c124e797c7f259749e384706e2c9dd9e97987cc827f8cdb72c73c0771ad1abe65099c0356b4948a212486843223c8ed3c6b04bb7269ebe9aa6216f1aa40b3"], 0x9)
write$vga_arbiter(r1, &(0x7f00000006c0)=@other={'unlock', ' ', 'io'}, 0xa)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) (async)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) (async)
write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000002100179649f50cdd325dca9e1654adb4342952bfb3b2ab5250b1d76c8cca9701dcc585a36dead4e6ee01626a13dbee48cc52da0e95e6f86321dec0335218aad9724f791aed6451ec73536194ca5c81732d119a81dda394ed4e35dc751247ded7a20804d75b0b4ea0817b043e8bd07e6c124e797c7f259749e384706e2c9dd9e97987cc827f8cdb72c73c0771ad1abe65099c0356b4948a212486843223c8ed3c6b04bb7269ebe9aa6216f1aa40b3"], 0x9) (async)
write$vga_arbiter(r1, &(0x7f00000006c0)=@other={'unlock', ' ', 'io'}, 0xa) (async)
write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) (async)

449.104692ms ago: executing program 3 (id=4849):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) (async)
close(r1) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x1d9, 0x0, 0x3}]}) (async)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000000c0)) (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) (async)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0)
close_range(0xffffffffffffffff, r5, 0x2) (async)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async)
ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') (async)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0xcba, 0x5})

418.734193ms ago: executing program 1 (id=4850):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c000, 0x0)
close(r1)
syz_clone(0x80a01000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r2, 0xff04, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x13, r0, 0xfffff000)

286.544056ms ago: executing program 1 (id=4851):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x200080, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0)

237.385126ms ago: executing program 3 (id=4852):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000b46f0000d500000000c0050000000000000014344cd47937fd6781204b8fc029431df0b59fdae8ee0e64714b19394492b7628fa70bde7e8c029a38baae1d76873deb49"])
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) (async)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000b46f0000d500000000c0050000000000000014344cd47937fd6781204b8fc029431df0b59fdae8ee0e64714b19394492b7628fa70bde7e8c029a38baae1d76873deb49"]) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) (async)

235.613736ms ago: executing program 1 (id=4853):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x400, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002480), 0x40000, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x100000002000c)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000024c0)={0x10001, 0x99, 0x1, 0x81, 0x2, "36f4f67709075ab4ef0d05000000000000001d"})
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x3)
prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0xfffffffffffffffd)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="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"})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x41, 0x20)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[0x7, 0xbd, 0x2, 0x0, 0x9662, 0x8000000000000001, 0x1, 0x2, 0x3, 0x3, 0x8, 0x4, 0x900000000000000, 0xfc5, 0x1, 0xfffffffffffffffe], 0xc0fd000, 0x400})

184.400567ms ago: executing program 5 (id=4854):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x6, 0x0, [{0x3b0, 0x0, 0xcef}, {0x8eb, 0x0, 0x5}, {0xc2d, 0x0, 0x5}, {0x3b4, 0x0, 0x2}, {0x2c0, 0x0, 0x5}, {0x210, 0x0, 0x7f}]})

132.313468ms ago: executing program 1 (id=4855):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0xc3b6, 0xad5, &(0x7f0000000440)="92676e", 0x0, 0x3})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000d2c6100b33159be00000000000000000002612"])
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0xb, 0x401, 0x8000000, 0x10000007, 0x0, 0xfffffffffffffffe, 0x203, 0x2], 0x0, 0x82c2})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000040)={r6})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x341800, 0x10c)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x800000000005, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
close(r1)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0)
read(r10, &(0x7f0000000080)=""/93, 0xffffff6c)

81.316628ms ago: executing program 5 (id=4856):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2183, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x412, 0x0, 0x8c7}]}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0) (async)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='\x00') (async)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x7) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r4, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
close(r6)
ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

81.007659ms ago: executing program 3 (id=4857):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000580)={0x2, 0x5, 0xe})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620b, 0xfffffffffffffffe)

0s ago: executing program 4 (id=4859):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSBRK(r1, 0x5427)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x3})
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0xa}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/192, 0xc0, 0x1, 0x1b}}, &(0x7f00000003c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0xa}, @fda={0x66646185, 0x9, 0xffffffffffffffff, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/192, 0xc0, 0x1, 0x1b}}, &(0x7f00000003c0)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

kernel console output (not intermixed with test programs):

1.904205][T13200] SELinux: syz.2.3902 (13200) set checkreqprot to 1. This is no longer supported.
[  291.927434][T13200] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  291.971390][T13204] rust_binder: Error while translating object.
[  291.994711][T13204] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  292.003704][T13200] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  292.015563][T13204] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:956
[  292.023931][T13200] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  292.034398][T13200] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  292.180631][T13219] binder: Unknown parameter 'defcontext01777777777777777777777'
[  292.447774][T13242] rust_binder: Error while translating object.
[  292.447801][T13242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  292.454044][T13242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:965
[  292.487280][T13246] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[  292.523503][T13231] rust_binder: Read failure Err(EFAULT) in pid:461
[  292.680560][T13251] rust_binder: Error while translating object.
[  292.687192][T13251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  292.693476][T13251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:465
[  292.845242][T13253] __vm_enough_memory: pid: 13253, comm: syz.4.3918, bytes: 281474976845824 not enough memory for the allocation
[  293.071896][T13262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1160
[  293.221395][T13266] input: syz0 as /devices/virtual/input/input196
[  293.350890][T13270] rust_binder: Failed to allocate buffer. len:128, is_oneway:true
[  293.400531][  T892] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  293.453606][  T892] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  293.468901][  T892] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  293.484245][  T892] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  293.509790][  T892] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  293.518379][  T892] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  293.528476][T13281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:971
[  293.681410][T13282] fido_id[13282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  294.118819][T13291] rust_binder: Error while translating object.
[  294.118863][T13291] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  294.138504][T13289] rust_binder: Error while translating object.
[  294.142488][T13291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:614
[  294.168125][T13289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  294.180939][T13289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1172
[  294.229471][T13294] rust_binder: Error while translating object.
[  294.257179][T13294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  294.269315][T13294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:616
[  294.397422][T13302] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  294.423054][T13302] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1174
[  294.466391][T13304] input: syz1 as /devices/virtual/input/input197
[  294.731061][T13313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1176
[  294.767617][T13318] binder: Unknown parameter '00000000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000000ÿÿ'
[  295.050666][T13324] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.050939][T13324] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.089006][T13324] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.167669][T13330] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.450251][   T36] kauditd_printk_skb: 2699 callbacks suppressed
[  295.450269][   T36] audit: type=1400 audit(1750408361.169:63636): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  295.496116][   T36] audit: type=1400 audit(1750408361.169:63637): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  295.531354][T13342] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  295.540026][T13342] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  295.540742][T11160] audit: audit_backlog=65 > audit_backlog_limit=64
[  295.557316][ T8416] audit: audit_backlog=65 > audit_backlog_limit=64
[  295.567296][ T8416] audit: audit_lost=329 audit_rate_limit=0 audit_backlog_limit=64
[  295.575193][ T8416] audit: backlog limit exceeded
[  295.580067][T13342] audit: audit_backlog=65 > audit_backlog_limit=64
[  295.581040][ T8416] audit: audit_backlog=65 > audit_backlog_limit=64
[  295.588989][T11160] audit: audit_lost=330 audit_rate_limit=0 audit_backlog_limit=64
[  295.594005][   T36] audit: type=1400 audit(1750408361.169:63638): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  295.611106][T13342] rust_binder: Failed to allocate buffer. len:120, is_oneway:false
[  295.850987][T13361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:999
[  295.889572][T13364] binder: Unknown parameter 'mað'
[  296.273846][T13378] input: syz0 as /devices/virtual/input/input198
[  296.559013][T13382] input: syz0 as /devices/virtual/input/input199
[  296.764842][T13381] rust_binder: Read failure Err(EFAULT) in pid:1014
[  297.212757][T13401] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  297.235846][T13401] rust_binder: Error in use_page_slow: EBUSY
[  297.278958][T13401] rust_binder: use_range failure EBUSY
[  297.326824][T13401] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  297.349799][T13401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  297.357206][T13411] binder: Bad value for 'max'
[  297.377733][T13401] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  297.377769][T13401] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:651
[  297.871485][   T12] bridge_slave_1: left allmulticast mode
[  297.889080][T13527] SELinux: failed to load policy
[  297.889759][   T12] bridge_slave_1: left promiscuous mode
[  297.911539][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.941597][   T12] bridge_slave_0: left allmulticast mode
[  297.942673][T13527] rust_binder: Write failure EFAULT in pid:658
[  297.959719][   T12] bridge_slave_0: left promiscuous mode
[  298.003349][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.019020][T13530] __vm_enough_memory: pid: 13530, comm: syz.3.3975, bytes: 281474976845824 not enough memory for the allocation
[  298.199922][   T12] veth1_macvtap: left promiscuous mode
[  298.222541][   T12] veth0_vlan: left promiscuous mode
[  298.502853][T13531] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.509936][T13531] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.517048][T13531] bridge_slave_0: entered allmulticast mode
[  298.524189][T13531] bridge_slave_0: entered promiscuous mode
[  298.531756][T13531] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.538788][T13531] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.551136][T13531] bridge_slave_1: entered allmulticast mode
[  298.558831][T13531] bridge_slave_1: entered promiscuous mode
[  298.771889][T13561] rust_binder: Write failure EFAULT in pid:673
[  298.798930][T13531] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.812171][T13531] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.819445][T13531] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.826513][T13531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.894515][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.901960][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.924434][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.931522][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.953964][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.961039][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.115024][T13570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:678
[  299.133525][T13566] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  299.140722][T13531] veth0_vlan: entered promiscuous mode
[  299.152212][T13566] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  299.155750][T13566] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender.
[  299.238101][T13531] veth1_macvtap: entered promiscuous mode
[  299.640560][T13583] kvm_intel: kvm [13582]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3
[  299.719957][T13581] rust_binder: Write failure EINVAL in pid:1230
[  300.085604][T13591] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  300.102978][T13591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:12
[  300.124422][T13591] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  300.143703][T13591] rust_binder: Read failure Err(EFAULT) in pid:12
[  300.168824][T13596] rust_binder: Write failure EINVAL in pid:683
[  300.349502][T13599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14
[  300.465974][   T36] kauditd_printk_skb: 3914 callbacks suppressed
[  300.465992][   T36] audit: type=1400 audit(1750408366.179:67485): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  300.519845][   T36] audit: type=1400 audit(1750408366.179:67486): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  300.545651][T13602] audit: audit_backlog=65 > audit_backlog_limit=64
[  300.549982][T11160] audit: audit_backlog=65 > audit_backlog_limit=64
[  300.558708][T11160] audit: audit_lost=354 audit_rate_limit=0 audit_backlog_limit=64
[  300.575159][T13602] audit: audit_lost=355 audit_rate_limit=0 audit_backlog_limit=64
[  300.577261][T11160] audit: backlog limit exceeded
[  300.593407][T13602] audit: backlog limit exceeded
[  300.602426][T11160] audit: audit_backlog=65 > audit_backlog_limit=64
[  300.603564][T13607] audit: audit_backlog=65 > audit_backlog_limit=64
[  300.637304][T13602] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0
[  300.637326][T13602] rust_binder: Error while translating object.
[  300.650979][T13602] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  300.672416][T13602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1239
[  300.716358][T13608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  300.799871][T13608] SELinux: security_context_str_to_sid () failed with errno=-22
[  301.974252][T13639] rust_binder: Write failure EFAULT in pid:26
[  302.243293][T13649] SELinux: security_context_str_to_sid () failed with errno=-22
[  302.274127][T13650] rust_binder: Error in use_page_slow: ESRCH
[  302.274148][T13650] rust_binder: use_range failure ESRCH
[  302.286855][T13651] SELinux: security_context_str_to_sid () failed with errno=-22
[  302.300115][T13650] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  302.300140][T13650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  302.311984][T13650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:701
[  302.389149][T13655] rust_binder: Error while translating object.
[  302.399542][T13654] rust_binder: Write failure EFAULT in pid:1255
[  302.424588][T13655] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  302.448179][T13655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:34
[  302.492630][T13658] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  302.539730][T13658] rust_binder: Read failure Err(EFAULT) in pid:703
[  302.651507][T13666] SELinux: security_context_str_to_sid () failed with errno=-22
[  302.676336][T13663] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  302.676368][T13663] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1258
[  302.917084][T13678] rust_binder: Error while translating object.
[  302.929859][T13678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  302.936060][T13678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:713
[  303.546848][T13693] rust_binder: Write failure EFAULT in pid:723
[  303.659785][T13697] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  303.714253][T13701] binder: Bad value for 'max'
[  303.719616][T13701] binder: Bad value for 'max'
[  303.735445][T13701] binder: Bad value for 'max'
[  303.745216][T13701] binder: Bad value for 'max'
[  303.756403][T13701] binder: Bad value for 'max'
[  303.782851][T13701] binder: Bad value for 'max'
[  303.805124][T13701] binder: Bad value for 'max'
[  303.812685][T13703] rust_binder: Error while translating object.
[  303.812717][T13703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  303.818978][T13703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263
[  303.819820][T13701] binder: Bad value for 'max'
[  303.860483][T13708] rust_binder: Error while translating object.
[  303.860517][T13708] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  303.860607][T13701] binder: Bad value for 'max'
[  303.866686][T13708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1263
[  303.890070][T13706] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  303.990667][T13701] binder: Bad value for 'max'
[  303.996319][T13701] binder: Bad value for 'max'
[  304.030519][T13701] binder: Bad value for 'max'
[  304.036164][T13701] binder: Bad value for 'max'
[  304.059427][T13701] binder: Bad value for 'max'
[  304.071774][T13701] binder: Bad value for 'max'
[  304.090709][T13701] binder: Bad value for 'max'
[  304.096495][T13701] binder: Bad value for 'max'
[  304.103143][T13701] binder: Bad value for 'max'
[  304.108974][T13701] binder: Bad value for 'max'
[  304.115681][T13701] binder: Bad value for 'max'
[  304.129344][T13701] binder: Bad value for 'max'
[  304.135679][T13701] binder: Bad value for 'max'
[  304.142035][T13701] binder: Bad value for 'max'
[  304.147788][T13701] binder: Bad value for 'max'
[  304.154325][T13701] binder: Bad value for 'max'
[  304.177522][T13701] binder: Bad value for 'max'
[  304.188801][T13701] binder: Bad value for 'max'
[  304.210853][T13701] binder: Bad value for 'max'
[  304.230773][T13701] binder: Bad value for 'max'
[  304.250731][T13701] binder: Bad value for 'max'
[  304.261926][T13701] binder: Bad value for 'max'
[  304.269713][T13727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:736
[  304.272615][T13727] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  304.294381][T13701] binder: Bad value for 'max'
[  304.300268][T13701] binder: Bad value for 'max'
[  304.307177][T13701] binder: Bad value for 'max'
[  304.312630][T13727] rust_binder: Write failure EINVAL in pid:736
[  304.320092][T13701] binder: Bad value for 'max'
[  304.342305][T13701] binder: Bad value for 'max'
[  304.356817][T13701] binder: Bad value for 'max'
[  304.370891][T13701] binder: Bad value for 'max'
[  304.384179][T13701] binder: Bad value for 'max'
[  304.390769][T13732] rust_binder: Write failure EINVAL in pid:739
[  304.401174][T13701] binder: Bad value for 'max'
[  304.447714][T13701] binder: Bad value for 'max'
[  304.461009][T13701] binder: Bad value for 'max'
[  304.470278][T13734] binder: Bad value for 'stats'
[  304.489582][T13701] binder: Bad value for 'max'
[  304.522302][T13701] binder: Bad value for 'max'
[  304.546370][T13701] binder: Bad value for 'max'
[  304.564599][T13701] binder: Bad value for 'max'
[  304.576029][T13701] binder: Bad value for 'max'
[  304.583545][T13701] binder: Bad value for 'max'
[  304.589229][T13701] binder: Bad value for 'max'
[  304.595862][T13701] binder: Bad value for 'max'
[  304.619528][T13701] binder: Bad value for 'max'
[  304.632224][T13701] binder: Bad value for 'max'
[  304.637917][T13701] binder: Bad value for 'max'
[  304.646979][T13701] binder: Bad value for 'max'
[  304.658292][T13701] binder: Bad value for 'max'
[  304.671391][T13701] binder: Bad value for 'max'
[  304.723871][T13743] rust_binder: Error while translating object.
[  304.723897][T13743] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  304.730755][T13743] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1284
[  305.166274][T13763] binder: Unknown parameter 'fscontext?}'
[  305.469992][   T36] kauditd_printk_skb: 4141 callbacks suppressed
[  305.470009][   T36] audit: type=1400 audit(1750408371.189:71621): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.521953][   T36] audit: type=1400 audit(1750408371.189:71622): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.553349][T13776] binder: Binderfs stats mode cannot be changed during a remount
[  305.562429][T13775] audit: audit_backlog=65 > audit_backlog_limit=64
[  305.564573][T11160] audit: audit_backlog=65 > audit_backlog_limit=64
[  305.568966][T13775] audit: audit_lost=359 audit_rate_limit=0 audit_backlog_limit=64
[  305.568980][T13775] audit: backlog limit exceeded
[  305.569017][T13775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:62
[  305.576103][   T36] audit: type=1400 audit(1750408371.189:71623): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.576133][   T36] audit: type=1400 audit(1750408371.189:71624): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.576155][   T36] audit: type=1400 audit(1750408371.189:71625): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.576174][   T36] audit: type=1400 audit(1750408371.189:71626): avc:  denied  { setattr } for  pid=11160 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  305.827572][T13783] SELinux: failed to load policy
[  306.224158][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  306.418230][T13807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1298
[  306.554485][T13810] binder: Bad value for 'max'
[  306.564361][T13813] rust_binder: Error while translating object.
[  306.568550][T13813] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  306.583956][T13814] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  306.591972][T13813] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1300
[  306.851547][T13826] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  306.889784][T13826] rust_binder: Write failure EINVAL in pid:1302
[  307.008116][T13834] rust_binder: Write failure EINVAL in pid:1304
[  307.153088][T13838] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1531215282 (3062430564 ns) > initial count (1473793136 ns). Using initial count to start timer.
[  307.509701][T13844] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786
[  308.006310][T13876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100
[  308.135757][T13884] rust_binder: Error while translating object.
[  308.152848][T13884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  308.159578][   T59] bridge_slave_1: left allmulticast mode
[  308.174761][T13884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:105
[  308.175923][   T59] bridge_slave_1: left promiscuous mode
[  308.191542][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.200004][   T59] bridge_slave_0: left allmulticast mode
[  308.208880][   T59] bridge_slave_0: left promiscuous mode
[  308.214593][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.298595][T13894] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  308.356324][T13892] SELinux: security policydb version 17 (MLS) not backwards compatible
[  308.389733][T13892] SELinux: failed to load policy
[  308.396855][   T59] veth1_macvtap: left promiscuous mode
[  308.410187][   T59] veth0_vlan: left promiscuous mode
[  308.432216][T13896] binder: Bad value for 'stats'
[  308.465178][T13898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  308.465210][T13898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:108
[  308.514092][T13874] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.530296][T13874] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.537340][T13874] bridge_slave_0: entered allmulticast mode
[  308.543631][T13874] bridge_slave_0: entered promiscuous mode
[  308.553026][T13874] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.561203][T13874] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.568363][T13874] bridge_slave_1: entered allmulticast mode
[  308.575339][T13874] bridge_slave_1: entered promiscuous mode
[  308.649946][T13874] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.657007][T13874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.664271][T13874] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.671309][T13874] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.730282][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.739177][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.783644][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.790722][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.830430][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.837504][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.878076][T13914] binder: Unknown parameter 'w'
[  309.009711][T13874] veth0_vlan: entered promiscuous mode
[  309.073471][T13916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  309.074502][T13916] rust_binder: Write failure EINVAL in pid:793
[  309.091637][T13916] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  309.095137][T13874] veth1_macvtap: entered promiscuous mode
[  309.312270][T13932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  309.312300][T13932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:2
[  309.378300][T13934] kvm: kvm [13933]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[  309.401477][T13934] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  309.401504][T13934] rust_binder: Read failure Err(EFAULT) in pid:124
[  309.438411][T13936] binder: Unknown parameter 'defcontext01777777777777777777777'
[  310.044788][T13959] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  310.045402][T13960] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  310.146567][T13962] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  310.311936][T13974] input: syz0 as /devices/virtual/input/input201
[  310.433053][T13981] rust_binder: Error while translating object.
[  310.433081][T13981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  310.439275][T13981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139
[  310.481761][   T36] kauditd_printk_skb: 2298 callbacks suppressed
[  310.481778][   T36] audit: type=1400 audit(1750408376.199:73923): avc:  denied  { read } for  pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=599 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  310.558097][   T36] audit: type=1400 audit(1750408376.199:73924): avc:  denied  { read open } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=599 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  310.605745][T13984] rust_binder: Write failure EINVAL in pid:24
[  310.607329][T13984] rust_binder: Read failure Err(EAGAIN) in pid:24
[  310.620053][   T36] audit: type=1400 audit(1750408376.199:73925): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=599 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  310.660510][T13991] binder: Bad value for 'defcontext'
[  310.690136][   T36] audit: type=1400 audit(1750408376.199:73926): avc:  denied  { ioctl } for  pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=599 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  310.756769][   T36] audit: type=1400 audit(1750408376.259:73927): avc:  denied  { read write } for  pid=10908 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  310.818256][T13995] audit: audit_backlog=65 > audit_backlog_limit=64
[  310.825837][   T36] audit: type=1400 audit(1750408376.259:73928): avc:  denied  { read write open } for  pid=10908 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  310.831208][T13874] audit: audit_backlog=65 > audit_backlog_limit=64
[  310.852033][T13995] audit: audit_lost=361 audit_rate_limit=0 audit_backlog_limit=64
[  310.866004][T14000] audit: audit_backlog=65 > audit_backlog_limit=64
[  311.047529][T14008] input: syz1 as /devices/virtual/input/input203
[  311.111153][T14014] input: syz1 as /devices/virtual/input/input204
[  311.130020][T14020] SELinux: security_context_str_to_sid () failed with errno=-22
[  311.258731][T14008] rust_binder: Write failure EINVAL in pid:26
[  311.350897][T14030] SELinux:  policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c
[  311.385268][T14033] rust_binder: Error in use_page_slow: ESRCH
[  311.385290][T14033] rust_binder: use_range failure ESRCH
[  311.405858][T14030] SELinux: failed to load policy
[  311.405893][T14033] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  311.430832][T14033] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  311.460089][T14033] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:818
[  311.466131][T14037] input: syz0 as /devices/virtual/input/input205
[  311.493695][T14039] binder: Bad value for 'max'
[  311.587216][T14037] binder: Unknown parameter 'co®§K.¹g”ntext'
[  311.654070][T14043] rust_binder: Error while translating object.
[  311.654112][T14043] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  311.673066][T14043] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1362
[  311.758944][T14049] rust_binder: Write failure EFAULT in pid:163
[  311.804591][T14061] input: syz0 as /devices/virtual/input/input206
[  311.982659][T14066] rust_binder: Error in use_page_slow: ESRCH
[  311.982683][T14066] rust_binder: use_range failure ESRCH
[  312.007446][T14066] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  312.031415][T14066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  312.054658][T14068] binder: Unknown parameter 'secŸûêzÚ�'
[  312.071677][T14066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1369
[  312.072728][T14071] rust_binder: Write failure EINVAL in pid:1369
[  312.250894][T14076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  312.370272][T14086] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found
[  312.378517][T14086] rust_binder: Write failure EINVAL in pid:36
[  312.684602][T14100] rust_binder: Error while translating object.
[  312.706563][T14100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  312.734574][T14100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:840
[  312.785508][T14103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1378
[  312.810318][T14106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175
[  312.838170][T14106] rust_binder: Write failure EINVAL in pid:175
[  312.864469][T14106] rust_binder: Error while translating object.
[  312.870769][T14106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  312.876995][T14106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175
[  312.913348][T14109] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.940203][T14110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  312.946661][T14110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:844
[  312.978319][T14113] rust_binder: Write failure EINVAL in pid:1380
[  313.079524][T14118] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  313.318779][T14127] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  313.318813][T14127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1386
[  313.319433][T14133] rust_binder: Error in use_page_slow: ESRCH
[  313.341882][T14134] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  313.352815][T14134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  313.369709][T14134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:182
[  313.389262][T14133] rust_binder: use_range failure ESRCH
[  313.403145][T14133] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  313.408725][T14133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  313.435844][T14133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:182
[  313.458082][T14137] SELinux:  policydb table sizes (0,7) do not match mine (8,7)
[  313.477147][T14137] SELinux: failed to load policy
[  313.494737][T14137] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  313.504460][T14137] rust_binder: Write failure EINVAL in pid:852
[  313.504955][T14137] rust_binder: Write failure EINVAL in pid:852
[  313.724535][T14148] rust_binder: Write failure EINVAL in pid:43
[  313.735953][T14148] syzkaller0: tun_chr_ioctl cmd 2147767506
[  313.772222][T14151] rust_binder: Error while translating object.
[  313.772249][T14151] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  313.778438][T14151] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:186
[  313.982552][T14169] rust_binder: Write failure EFAULT in pid:50
[  314.013591][T14168] binder: Unknown parameter 'func'
[  314.174693][T14176] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  314.174715][T14176] rust_binder: Read failure Err(EFAULT) in pid:1399
[  314.321160][T14181] rust_binder: Error in use_page_slow: ESRCH
[  314.321185][T14181] rust_binder: use_range failure ESRCH
[  314.327182][T14181] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  314.369578][T14181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  314.399757][T14181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:54
[  314.424814][T14184] kvm: kvm [14183]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3
[  314.426452][T14187] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  314.459761][T14187] rust_binder: Write failure EINVAL in pid:54
[  314.535559][T14189] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  314.557946][T14189] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  314.672098][T14196] kvm: kvm [14194]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[  314.718022][T14196] rust_binder: Write failure EFAULT in pid:1406
[  314.902184][T14205] rust_binder: Write failure EINVAL in pid:868
[  315.081008][T14209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65
[  315.197092][T14218] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  315.228187][T14217] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  315.246139][T14217] rust_binder: Write failure EINVAL in pid:198
[  315.256256][T14218] rust_binder: Write failure EINVAL in pid:1410
[  315.353876][T14224] SELinux: security_context_str_to_sid () failed with errno=-22
[  315.526088][   T36] kauditd_printk_skb: 1172 callbacks suppressed
[  315.526103][   T36] audit: type=1400 audit(1750408381.239:75090): avc:  denied  { read write } for  pid=13531 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.628730][   T36] audit: type=1400 audit(1750408381.239:75091): avc:  denied  { read write open } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.658167][   T36] audit: type=1400 audit(1750408381.239:75092): avc:  denied  { ioctl } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.716408][   T36] audit: type=1400 audit(1750408381.289:75093): avc:  denied  { read write } for  pid=13874 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.731407][T14235] binder: Unknown parameter 'non
À'
[  315.794053][   T36] audit: type=1400 audit(1750408381.289:75094): avc:  denied  { read write open } for  pid=13874 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.869708][   T36] audit: type=1400 audit(1750408381.289:75095): avc:  denied  { ioctl } for  pid=13874 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  315.900531][   T36] audit: type=1400 audit(1750408381.299:75096): avc:  denied  { read } for  pid=14232 comm="syz.1.4194" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.926904][   T36] audit: type=1400 audit(1750408381.299:75097): avc:  denied  { read open } for  pid=14232 comm="syz.1.4194" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.967927][   T36] audit: type=1400 audit(1750408381.309:75098): avc:  denied  { ioctl } for  pid=14232 comm="syz.1.4194" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  315.995633][T14247] audit: audit_backlog=65 > audit_backlog_limit=64
[  316.043051][T14247] rust_binder: Write failure EFAULT in pid:208
[  316.155173][T14258] SELinux:  policydb version 381097392 does not match my version range 15-33
[  316.219318][T14258] SELinux: failed to load policy
[  316.263475][T14264] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  316.360926][T14272] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active
[  316.400580][T14272] rust_binder: Write failure EINVAL in pid:881
[  316.411016][T14274] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:90
[  316.470125][T14274] rust_binder: Write failure EFAULT in pid:90
[  316.559257][T14280] rust_binder: Write failure EINVAL in pid:215
[  316.572870][T14280] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  316.586553][T14280] rust_binder: Read failure Err(EFAULT) in pid:215
[  316.830534][T14288] random: crng reseeded on system resumption
[  316.912121][T14288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (16 ns). Using initial count to start timer.
[  317.058956][T14301] binder: Unknown parameter 'nonv/kvm'
[  317.236758][T14303] rust_binder: Read failure Err(EFAULT) in pid:223
[  317.302986][T14317] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  317.309627][T14317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1430
[  317.543117][T14329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:110
[  317.640071][T14331] rust_binder: Error while translating object.
[  317.659412][T14331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  317.685825][T14331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:889
[  318.125830][T14363] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.190446][T14364] rust_binder: Write failure EFAULT in pid:1447
[  318.349970][T14373] kvm: user requested TSC rate below hardware speed
[  318.444343][T14379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=220138064 (3522209024 ns) > initial count (200000 ns). Using initial count to start timer.
[  318.480921][T14383] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.486017][T14383] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 144, limit: 160, size: 164)
[  318.494000][T14383] rust_binder: Error while translating object.
[  318.560787][T14383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  318.567078][T14383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:901
[  318.636660][T14387] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  318.717844][T14391] rust_binder: Write failure EINVAL in pid:903
[  318.731719][T14387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1451
[  318.887199][T14399] random: crng reseeded on system resumption
[  318.951018][T14400] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.958163][T14399] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[  318.986384][T14399] rust_binder: Write failure EINVAL in pid:125
[  319.005392][T14402] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.148200][T14408] rust_binder: Write failure EINVAL in pid:128
[  319.171975][T14409] rust_binder: Write failure EINVAL in pid:128
[  319.287651][T14412] rust_binder: Write failure EFAULT in pid:249
[  319.363261][T14420] rust_binder: Write failure EFAULT in pid:908
[  319.548872][T14436] binder: Unknown parameter 'nXI'
[  319.587606][T14438] rust_binder: Write failure EINVAL in pid:140
[  319.869713][T14451] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  319.910869][T14455] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.182479][T14463] SELinux: security_context_str_to_sid () failed with errno=-22
[  320.343285][T14470] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.534764][   T36] kauditd_printk_skb: 1143 callbacks suppressed
[  320.534783][   T36] audit: type=1400 audit(1750408386.249:76240): avc:  denied  { read } for  pid=14474 comm="syz.5.4278" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.579775][T14476] rust_binder: Write failure EFAULT in pid:144
[  320.582208][   T36] audit: type=1400 audit(1750408386.269:76241): avc:  denied  { read write } for  pid=14473 comm="syz.4.4276" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.681942][T14480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.683424][T14480] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  320.693244][T14482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  320.709002][   T36] audit: type=1400 audit(1750408386.269:76242): avc:  denied  { read write open } for  pid=14473 comm="syz.4.4276" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  320.742742][T14482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:146
[  320.802451][   T36] audit: type=1400 audit(1750408386.289:76243): avc:  denied  { read open } for  pid=14474 comm="syz.5.4278" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.850316][   T36] audit: type=1400 audit(1750408386.289:76244): avc:  denied  { ioctl } for  pid=14474 comm="syz.5.4278" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  320.875182][   T36] audit: type=1400 audit(1750408386.299:76245): avc:  denied  { ioctl } for  pid=14474 comm="syz.5.4278" path="/dev/binderfs/binder0" dev="binder" ino=90 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  320.936722][   T36] audit: type=1400 audit(1750408386.299:76246): avc:  denied  { read write } for  pid=14477 comm="syz.1.4277" name="binder1" dev="binder" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  320.970447][T13531] audit: audit_backlog=65 > audit_backlog_limit=64
[  320.988008][T14496] audit: audit_backlog=65 > audit_backlog_limit=64
[  321.000936][T14496] audit: audit_lost=367 audit_rate_limit=0 audit_backlog_limit=64
[  321.067850][T14499] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  321.072404][T14499] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  321.400015][T14524] __vm_enough_memory: pid: 14524, comm: syz.3.4293, bytes: 144115188075896832 not enough memory for the allocation
[  321.532406][T14526] rust_binder: Error while translating object.
[  321.532439][T14526] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  321.544293][T14526] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:270
[  321.724528][T14539] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  321.752313][T14541] rust_binder: Write failure EINVAL in pid:1494
[  321.802238][T14541] rust_binder: Write failure EINVAL in pid:1494
[  321.811029][T14539] rust_binder: Got transaction with invalid offset.
[  321.817318][T14539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  321.847149][T14539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273
[  322.010024][T14544] kvm: kvm [14543]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[  322.070538][T14544] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  322.071134][T14556] rust_binder: Error in use_page_slow: ESRCH
[  322.077575][T14556] rust_binder: use_range failure ESRCH
[  322.102490][T14556] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  322.107994][T14556] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  322.139766][T14556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:169
[  322.172620][T14561] binder: Unknown parameter 'fscontext?}'
[  322.491049][T14572] binder: Unknown parameter 'I: Bus'
[  322.593331][T14581] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  322.612215][T14578] rust_binder: Read failure Err(EAGAIN) in pid:945
[  322.652600][T14581] rust_binder: Write failure EINVAL in pid:278
[  322.758491][T14586] SELinux: failed to load policy
[  322.889740][T14594] binder: Bad value for 'stats'
[  322.910946][T14593] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  322.910996][T14596] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  323.185533][T14604] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  323.210490][T14610] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  323.233382][T14610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  323.368586][T14617] binder: Unknown parameter 'non'
[  323.589052][T14625] rust_binder: Write failure EINVAL in pid:181
[  323.589427][T14625] rust_binder: Write failure EINVAL in pid:181
[  323.610543][T14628] kvm: kvm [14627]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[  323.627497][T14630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1535
[  323.766364][T14635] input: syz1 as /devices/virtual/input/input213
[  323.848953][T14637] __vm_enough_memory: pid: 14637, comm: syz.5.4333, bytes: 281474976845824 not enough memory for the allocation
[  324.333401][T14653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1539
[  324.333769][T14653] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1539
[  324.345274][T14652] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  324.362760][T14652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:187
[  324.477453][T14668] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  324.529460][T14673] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  324.551070][T14673] rust_binder: Read failure Err(EFAULT) in pid:303
[  324.568936][T14675] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  324.704760][T14678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:971
[  324.735271][T14682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  324.744581][T14682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:191
[  324.759742][T14682] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  324.770627][T14682] rust_binder: Read failure Err(EFAULT) in pid:191
[  324.940031][T14686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195
[  324.975578][T14686] rust_binder: Error while translating object.
[  324.999842][T14686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  325.006117][T14686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195
[  325.048853][T14689] rust_binder: Failed to allocate buffer. len:40, is_oneway:true
[  325.181243][T14694] input: syz0 as /devices/virtual/input/input215
[  325.223270][T14691] rust_binder: Write failure EINVAL in pid:197
[  325.539503][T14707] KVM: debugfs: duplicate directory 14707-5
[  325.547905][   T36] kauditd_printk_skb: 1116 callbacks suppressed
[  325.547923][   T36] audit: type=1400 audit(1750408391.259:77345): avc:  denied  { read } for  pid=14709 comm="syz.4.4358" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.563474][T14710] binder: Unknown parameter 'nonv/kvm'
[  325.619272][   T36] audit: type=1400 audit(1750408391.259:77346): avc:  denied  { read open } for  pid=14709 comm="syz.4.4358" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.671934][   T36] audit: type=1400 audit(1750408391.259:77347): avc:  denied  { ioctl } for  pid=14709 comm="syz.4.4358" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  325.703082][   T36] audit: type=1400 audit(1750408391.269:77348): avc:  denied  { read write } for  pid=14709 comm="syz.4.4358" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  325.727172][   T36] audit: type=1400 audit(1750408391.269:77349): avc:  denied  { read open } for  pid=14709 comm="syz.4.4358" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  325.730099][T14718] rtc_cmos 00:00: Alarms can be up to one day in the future
[  325.759028][   T36] audit: type=1400 audit(1750408391.269:77350): avc:  denied  { mounton } for  pid=14709 comm="syz.4.4358" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  325.801755][   T36] audit: type=1400 audit(1750408391.319:77351): avc:  denied  { read write } for  pid=8416 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.838324][   T36] audit: type=1400 audit(1750408391.319:77352): avc:  denied  { ioctl } for  pid=14706 comm="syz.5.4357" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  325.864567][   T36] audit: type=1400 audit(1750408391.319:77353): avc:  denied  { read write open } for  pid=8416 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  325.889902][   T36] audit: type=1400 audit(1750408391.319:77354): avc:  denied  { ioctl } for  pid=8416 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  326.112233][T14723] rust_binder: Error while translating object.
[  326.112263][T14723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  326.118575][T14723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1556
[  326.375708][T14740] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.409805][T14738] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.526079][T14742] rust_binder: Failed copying remainder into alloc: EFAULT
[  326.544518][T14742] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  326.559776][T14742] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  326.566162][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.568221][T14742] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1561
[  326.593813][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.594057][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.601750][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.618621][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.618817][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.634337][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.634584][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.650244][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.650520][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.657398][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.674442][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.674695][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.690697][T14749] rust_binder: Error while translating object.
[  326.690742][T14749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  326.698095][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.708638][T14749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:990
[  326.732102][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.732367][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.732413][T14748] binder: Unknown parameter 'ÿdev/kvm'
[  326.759551][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.768755][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.848581][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.848860][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.867168][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.867801][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.877274][T14760] rust_binder: Error in use_page_slow: ESRCH
[  326.894439][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.894755][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.910185][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.910661][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.927144][T14760] rust_binder: use_range failure ESRCH
[  326.939728][T14760] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  326.940295][T14760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  326.946186][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.969292][T14762] rust_binder: Error while translating object.
[  326.969324][T14762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  326.986879][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.993773][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.994555][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  326.995356][T14762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:210
[  327.001780][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  327.014606][T14760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1567
[  327.033485][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  327.034033][T14746] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  327.176103][T14767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212
[  327.197175][T14767] rust_binder: Error while translating object.
[  327.207919][T14767] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  327.214146][T14767] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:212
[  327.331036][T14777] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  327.458128][T14785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214
[  327.474823][T14789] rust_binder: Write failure EINVAL in pid:320
[  327.482080][T14779] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  327.489743][T14788] rust_binder: Write failure EINVAL in pid:320
[  327.499759][T14779] rust_binder: Error in use_page_slow: EBUSY
[  327.510726][T14779] rust_binder: use_range failure EBUSY
[  327.516738][T14779] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  327.533983][T14790] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  327.541526][T14779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  327.549452][T14779] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  327.560153][T14790] rust_binder: Write failure EINVAL in pid:320
[  327.623427][T14779] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:214
[  327.711133][T14796] SELinux: syz.3.4384 (14796) set checkreqprot to 1. This is no longer supported.
[  327.850903][T14809] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  327.887020][T14809] rust_binder: Write failure EINVAL in pid:331
[  327.900829][T14803] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  328.001646][T14820] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  328.025910][T14820] rust_binder: Write failure EINVAL in pid:1011
[  328.294236][T14833] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  328.907809][T14855] rust_binder: Failed to allocate buffer. len:88, is_oneway:false
[  329.040021][T14869] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  329.059778][T14871] input: syz1 as /devices/virtual/input/input217
[  329.449053][T14886] rust_binder: Read failure Err(EAGAIN) in pid:1594
[  329.847468][T14907] rust_binder: Write failure EINVAL in pid:1606
[  329.969413][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.006195][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.032147][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.052832][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.066899][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.089460][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.109873][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.116254][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.141679][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.148160][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.162968][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.169360][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.199971][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.211963][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.218474][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.240010][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.246433][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.260462][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.266924][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.289959][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.296422][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.302851][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.309267][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.315733][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.323234][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.332333][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.338808][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.345678][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.353027][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.362446][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.377611][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.384083][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.390645][T14917] rust_binder: Write failure EFAULT in pid:355
[  330.510161][T14930] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  330.523789][T14930] rust_binder: Write failure EINVAL in pid:358
[  330.524138][T14930] rust_binder: Write failure EINVAL in pid:358
[  330.555662][   T36] kauditd_printk_skb: 1391 callbacks suppressed
[  330.555680][   T36] audit: type=1400 audit(1750408396.269:78746): avc:  denied  { read write } for  pid=13531 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.573831][T14934] SELinux: syz.1.4425 (14934) set checkreqprot to 1. This is no longer supported.
[  330.608088][T14934] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[  330.611002][   T36] audit: type=1400 audit(1750408396.269:78747): avc:  denied  { read write open } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.644359][   T36] audit: type=1400 audit(1750408396.269:78748): avc:  denied  { ioctl } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.725247][   T36] audit: type=1400 audit(1750408396.289:78749): avc:  denied  { setcheckreqprot } for  pid=14933 comm="syz.1.4425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  330.778980][   T36] audit: type=1400 audit(1750408396.319:78750): avc:  denied  { remount } for  pid=14933 comm="syz.1.4425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  330.820665][   T36] audit: type=1400 audit(1750408396.349:78751): avc:  denied  { setcheckreqprot } for  pid=14933 comm="syz.1.4425" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  330.846737][T14940] rust_binder: Error while translating object.
[  330.846763][T14940] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  330.861611][T14940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:368
[  330.867381][   T36] audit: type=1400 audit(1750408396.359:78752): avc:  denied  { read write } for  pid=13531 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.913753][   T36] audit: type=1400 audit(1750408396.359:78753): avc:  denied  { read write open } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.948845][   T36] audit: type=1400 audit(1750408396.359:78754): avc:  denied  { ioctl } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  330.990025][   T36] audit: type=1400 audit(1750408396.379:78755): avc:  denied  { read write } for  pid=14935 comm="syz.1.4426" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  330.992043][T14942] binder: Unknown parameter '*¹ß—‡cats'
[  331.173282][T14948] block device autoloading is deprecated and will be removed.
[  331.182872][T14948] syz.3.4431: attempt to access beyond end of device
[  331.182872][T14948] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  331.372158][T14959] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.385099][T14957] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 89)
[  331.385674][T14962] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  331.410414][T14957] rust_binder: Error while translating object.
[  331.420459][T14957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  331.426639][T14957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1050
[  331.440220][T14962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  331.478261][T14962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:372
[  331.796337][T14980] binder: Unknown parameter 'defcontext01777777777777777777777'
[  331.825864][T14981] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  331.865723][T14981] rust_binder: Write failure EINVAL in pid:378
[  331.885040][T14972] rust_binder: Write failure EFAULT in pid:1625
[  331.887099][T14981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:378
[  332.026212][T14989] SELinux: security_context_str_to_sid () failed with errno=-22
[  332.054026][T14991] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  332.240124][T14993] input: syz1 as /devices/virtual/input/input220
[  332.288021][T14993] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  332.600695][T15008] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  332.622868][T15008] rust_binder: Error while translating object.
[  332.629388][T15008] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  332.635736][T15008] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1063
[  333.121119][T15028] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.151658][T15027] rust_binder: Error in use_page_slow: ESRCH
[  333.158109][T15027] rust_binder: use_range failure ESRCH
[  333.173418][T15024] SELinux: failed to load policy
[  333.183914][T15027] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  333.183935][T15027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  333.192116][T15027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1072
[  333.245417][T15032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385
[  333.264215][T15032] rust_binder: Read failure Err(EFAULT) in pid:385
[  333.339600][T15035] binder: Bad value for 'max'
[  333.372387][T15038] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  333.472928][T15048] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.481190][T15053] rust_binder: Error while translating object.
[  333.527009][T15053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  333.553880][T15060] binder: Unknown parameter ''
[  333.566860][T15053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1078
[  333.836746][T15067] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  333.872916][T15067] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  333.874367][T15076] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  333.891938][T15067] rust_binder: Read failure Err(EFAULT) in pid:403
[  333.893513][T15077] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.906798][T15078] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  333.924249][T15076] rust_binder: Read failure Err(EFAULT) in pid:1644
[  334.041815][T15077] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096)
[  334.059752][T15077] rust_binder: Error while translating object.
[  334.073331][T15077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  334.082226][T15077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1084
[  334.100170][T15091] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.228516][T15099] rust_binder: Error while translating object.
[  334.255333][T15099] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  334.265705][T15103] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.270449][T15106] __vm_enough_memory: pid: 15106, comm: syz.3.4483, bytes: 576460756598390784 not enough memory for the allocation
[  334.301538][T15099] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281
[  334.327110][T15103] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.406609][T15120] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.470598][T15120] syzkaller0: tun_chr_ioctl cmd 2147767506
[  334.499388][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.523123][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.551880][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.565642][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.573727][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.582798][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.599368][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.603587][T15137] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1094
[  334.611954][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.635173][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.646980][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.660202][T15141] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.661258][T15141] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  334.662881][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.684079][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.692134][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.699596][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.707851][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.720611][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.729111][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.729362][T15143] rust_binder: Write failure EFAULT in pid:297
[  334.737448][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.754635][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.762661][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.770699][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.778160][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.786651][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.794694][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.807351][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.814847][T15145] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:425
[  334.820678][   T48] hid-generic C98F:0003:0000.0014: unknown main item tag 0x0
[  334.822863][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.839724][   T48] hid-generic C98F:0003:0000.0014: unknown main item tag 0x0
[  334.845899][T15149] __vm_enough_memory: pid: 15149, comm: syz.5.4496, bytes: 17179873280 not enough memory for the allocation
[  334.863599][   T48] hid-generic C98F:0003:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  334.865292][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.880315][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.897197][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.911148][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.921218][T15145] binder: Unknown parameter 'ÿÿ'
[  334.937496][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.949920][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.958727][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.966201][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.973848][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.982668][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.991648][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  334.999283][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.009979][T15153] rust_binder: Error while translating object.
[  335.010005][T15153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  335.016172][T15153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:301
[  335.028915][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.033080][T15155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  335.038974][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.060795][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.068300][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.068436][T15156] rust_binder: Write failure EINVAL in pid:1101
[  335.081104][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.095505][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.103399][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.111326][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.119197][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.128425][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.150096][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.167279][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.175921][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.183894][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.191833][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.199263][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.208009][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.219186][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.230627][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.240760][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.248166][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.256272][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.264377][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.268348][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.274032][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.282178][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.294074][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.306379][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.306638][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.321567][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.328968][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.337109][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.337384][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.351568][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.358958][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.359938][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.367055][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.369817][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.380949][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.402977][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.403276][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.410372][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.433328][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.439736][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.440977][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.441864][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.447371][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.465091][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.479463][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.479493][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.495074][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.496937][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.508896][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.523485][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.524829][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.531756][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.547470][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.561518][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.561791][   T36] kauditd_printk_skb: 1202 callbacks suppressed
[  335.561804][   T36] audit: type=1400 audit(1750408401.279:79958): avc:  denied  { ioctl } for  pid=15167 comm="syz.5.4503" path="/dev/binderfs/binder0" dev="binder" ino=99 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.570782][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.574284][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.615311][   T36] audit: type=1400 audit(1750408401.279:79959): avc:  denied  { read } for  pid=15179 comm="syz.4.4508" name="binder0" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.626930][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.638315][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.645613][   T36] audit: type=1400 audit(1750408401.279:79960): avc:  denied  { read open } for  pid=15179 comm="syz.4.4508" path="/dev/binderfs/binder0" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.676378][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.678607][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.684993][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.691201][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.691498][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.704893][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.712225][   T36] audit: type=1400 audit(1750408401.319:79961): avc:  denied  { read } for  pid=15177 comm="syz.1.4507" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  335.732991][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.748004][T15182] rust_binder: Error while translating object.
[  335.749838][T15182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  335.756087][T15182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1111
[  335.765444][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.774609][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.774895][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.793436][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.796469][   T36] audit: type=1400 audit(1750408401.319:79962): avc:  denied  { read open } for  pid=15177 comm="syz.1.4507" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  335.807788][T15183] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  335.826652][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.826938][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.833273][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.839331][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.839639][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.848739][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.854079][   T36] audit: type=1400 audit(1750408401.319:79963): avc:  denied  { ioctl } for  pid=15177 comm="syz.1.4507" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  335.854107][   T36] audit: type=1400 audit(1750408401.359:79964): avc:  denied  { execmem } for  pid=15177 comm="syz.1.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  335.866972][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.868351][T15169] rust_binder: Write failure EINVAL in pid:305
[  335.876755][T15178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  335.902110][   T36] audit: type=1400 audit(1750408401.389:79965): avc:  denied  { ioctl } for  pid=15167 comm="syz.5.4503" path="/dev/binderfs/binder0" dev="binder" ino=99 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.920750][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.927022][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  335.934162][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.941746][   T36] audit: type=1400 audit(1750408401.409:79966): avc:  denied  { ioctl } for  pid=15167 comm="syz.5.4503" path="/dev/binderfs/binder0" dev="binder" ino=99 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  335.967485][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  335.989791][T15169] rust_binder: Write failure EINVAL in pid:305
[  336.015594][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.028523][   T36] audit: type=1400 audit(1750408401.459:79967): avc:  denied  { map } for  pid=15179 comm="syz.4.4508" path="/dev/binderfs/binder0" dev="binder" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  336.029358][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.045377][T15169] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[  336.061430][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.079118][T15169] rust_binder: Write failure EINVAL in pid:305
[  336.083442][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.085384][T15178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  336.089779][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.115435][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.122996][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.130806][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.135759][T15178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:435
[  336.138378][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.155447][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.162998][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.170784][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.178319][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.186458][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.194053][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.195919][T15187] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  336.201675][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.216453][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.219362][T15187] rust_binder: Write failure EINVAL in pid:308
[  336.224042][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.240042][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.247568][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.255204][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.262994][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.270592][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.278260][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.285959][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.298452][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.306025][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.313785][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.321728][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.329285][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.336876][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.344828][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.352499][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.360343][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.367908][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.375692][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.383283][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.391081][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.398639][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.422214][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.429787][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.438631][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.447650][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.455501][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.464046][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.479709][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.489159][T15197] input: syz1 as /devices/virtual/input/input222
[  336.509723][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.517137][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.529913][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.537333][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.545016][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.552710][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.560989][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.568799][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.576433][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.584098][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.591714][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.599525][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.607189][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.614794][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.622279][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.629903][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.637296][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.644739][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.654773][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.662266][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.669882][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.670344][T15204] rust_binder: Write failure EFAULT in pid:441
[  336.677301][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.691083][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.698506][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.705953][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.718594][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.726031][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.734580][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.747174][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.757355][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.759396][T15211] rust_binder: Write failure EINVAL in pid:319
[  336.766062][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.792139][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.804758][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.813374][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.822030][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.822188][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  336.829641][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.844265][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.852214][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.859615][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.867164][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.874567][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.890049][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.897449][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.906251][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.915427][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.923526][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.944383][T15227] binder: Unknown parameter 'defcontext01777777777777777777777'
[  336.952191][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.958066][T15229] rust_binder: Write failure EINVAL in pid:1130
[  336.960182][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.974898][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.983494][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.990972][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  336.998525][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.007463][T15231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.007518][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.022864][T15231] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  337.022881][T15231] rust_binder: Read failure Err(EFAULT) in pid:1132
[  337.038540][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.052636][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.060665][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.068103][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.075511][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.082951][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.089464][T15231] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.109748][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.127296][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.134805][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.142212][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.149596][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.157034][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.164435][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.171847][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.179268][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.187218][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.194708][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.202123][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.209631][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.227477][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.246247][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.257046][  T228] hid-generic 01FF:0004:0400.0013: unknown main item tag 0x0
[  337.265869][  T228] hid-generic 01FF:0004:0400.0013: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[  337.322908][T15247] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.332457][T15247] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  337.364755][T15247] rust_binder: Write failure EINVAL in pid:1137
[  337.449556][T15260] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.521449][T15267] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[  337.524992][T15268] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  337.539747][T15267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  337.546194][T15267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:458
[  337.669740][T15274] binder: Unknown parameter 'seclabe|'
[  338.089794][T15282] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  338.118053][T15282] SELinux: failed to load policy
[  338.135708][T15288] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[  338.149717][T15288] SELinux: failed to load policy
[  338.396921][T15296] fido_id[15296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  338.405762][T15300] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  338.498761][T15302] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[  338.530938][T15304] random: crng reseeded on system resumption
[  338.563049][T15305] Restarting kernel threads ... done.
[  338.875306][T15315] fido_id[15315]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  339.036275][T15327] rust_binder: Write failure EINVAL in pid:471
[  339.036323][T15328] rust_binder: Write failure EINVAL in pid:471
[  339.069959][T15333] rust_binder: Write failure EFAULT in pid:1164
[  339.102536][T15335] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  339.141154][T15335] rust_binder: Error while translating object.
[  339.179799][T15335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  339.196655][T15335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:352
[  339.209515][T15338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer.
[  339.279327][T15344] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  339.302800][T15344] SELinux: failed to load policy
[  339.547721][T15354] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  339.667482][T15362] rust_binder: Error while translating object.
[  339.667835][T15354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:479
[  339.738184][T15362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  339.801529][T15362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1677
[  339.842064][T15367] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[  340.040000][T15374] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  340.295302][T15390] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[  340.433024][T15395] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[  340.577808][   T36] kauditd_printk_skb: 937 callbacks suppressed
[  340.577824][   T36] audit: type=1400 audit(1750408406.289:80905): avc:  denied  { read write } for  pid=13874 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  340.641327][   T36] audit: type=1400 audit(1750408406.329:80906): avc:  denied  { read write open } for  pid=13874 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  340.685355][T15401] binder: Unknown parameter 'processor	: 0
[  340.685355][T15401] vendor_id	: GenuineIntel
[  340.685355][T15401] cpu family	: 6
[  340.685355][T15401] model		: 79
[  340.685355][T15401] model name	: Intel(R) Xeon(R) CPU @ 2.20GHz
[  340.685355][T15401] stepping	: 0
[  340.685355][T15401] microcode	: 0xffffffff
[  340.685355][T15401] cpu MHz		: 2200.174
[  340.685355][T15401] cache size	: 56320 KB
[  340.685355][T15401] physical id	: 0
[  340.685355][T15401] siblings	: 2
[  340.685355][T15401] core id		: 0
[  340.685355][T15401] cpu cores	: 1
[  340.685355][T15401] apicid		: 0
[  340.685355][T15401] initial apicid	: 0
[  340.685355][T15401] fpu		: yes
[  340.685355][T15401] fpu_exception	: yes
[  340.685355][T15401] cpuid level	: 13
[  340.685355][T15401] wp		: yes
[  340.685355][T15401] flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities
[  340.685355][T15401] vmx flags	: vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi
[  340.695148][   T36] audit: type=1400 audit(1750408406.329:80907): avc:  denied  { ioctl } for  pid=13874 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  340.880528][   T36] audit: type=1400 audit(1750408406.339:80908): avc:  denied  { read write } for  pid=15398 comm="syz.1.4575" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  340.929721][   T36] audit: type=1400 audit(1750408406.339:80909): avc:  denied  { read open } for  pid=15398 comm="syz.1.4575" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.027192][   T36] audit: type=1400 audit(1750408406.399:80910): avc:  denied  { mounton } for  pid=15400 comm="syz.5.4576" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  341.042983][T15422] binder: Unknown parameter ''
[  341.070769][T15425] binder: Unknown parameter ''
[  341.075941][T15420] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  341.092728][T13874] audit: audit_backlog=66 > audit_backlog_limit=64
[  341.099860][T15420] audit: audit_backlog=66 > audit_backlog_limit=64
[  341.105922][T13874] audit: audit_lost=374 audit_rate_limit=0 audit_backlog_limit=64
[  341.112341][   T36] audit: type=1400 audit(1750408406.409:80911): avc:  denied  { read write } for  pid=15400 comm="syz.5.4576" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  341.297130][T15441] binder: Unknown parameter 'permit_directio'
[  341.434407][T15447] input: syz1 as /devices/virtual/input/input226
[  341.467670][T15445] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  341.468377][T15445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  341.478353][T15439] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  341.507456][T15445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:503
[  341.580630][T15439] rust_binder: Error in use_page_slow: ESRCH
[  341.602694][T15439] rust_binder: use_range failure ESRCH
[  341.615047][T15439] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  341.649775][T15439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  341.657811][T15439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1187
[  341.854969][T15463] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.007756][T15460] rust_binder: Read failure Err(EFAULT) in pid:393
[  342.193498][  T892] hid-generic C98F:0003:0000.0015: unknown main item tag 0x0
[  342.209352][  T892] hid-generic C98F:0003:0000.0015: unknown main item tag 0x0
[  342.221114][T15481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:517
[  342.221149][T15481] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  342.222497][T15480] KVM: debugfs: duplicate directory 15480-5
[  342.230560][  T892] hid-generic C98F:0003:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  342.254285][T15481] rust_binder: Read failure Err(EFAULT) in pid:517
[  342.294656][T15480] binder: Bad value for 'context'
[  342.361133][T15482] fido_id[15482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  342.431996][T15484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  342.608014][T15496] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  342.608038][T15496] rust_binder: Error while translating object.
[  342.647375][T15496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  342.654282][T15496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1698
[  342.798031][T15505] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1222729745 (39127351840 ns) > initial count (25964891200 ns). Using initial count to start timer.
[  343.093312][T15519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  343.159134][T15522] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533
[  343.282185][T15533] rust_binder: Write failure EFAULT in pid:1707
[  343.517541][T15546] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 56)
[  343.528693][T15546] rust_binder: Error while translating object.
[  343.569231][T15546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  343.579911][T15548] binder: Unknown parameter 'non'
[  343.582031][T15546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1209
[  343.890502][T15570] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  343.913439][T15569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1725
[  344.010592][T15576] rust_binder: Write failure EINVAL in pid:1725
[  344.025999][T15573] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  344.143484][T15579] binder: Bad value for 'defcontext'
[  344.171162][T15581] cgroup: fork rejected by pids controller in /syz5
[  344.348731][T15602] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1219
[  344.552432][   T59] bridge_slave_1: left allmulticast mode
[  344.567339][   T59] bridge_slave_1: left promiscuous mode
[  344.577538][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.600466][   T59] bridge_slave_0: left allmulticast mode
[  344.629713][   T59] bridge_slave_0: left promiscuous mode
[  344.635375][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.867159][   T59] veth1_macvtap: left promiscuous mode
[  344.876651][T15701] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[  344.887543][T15707] rust_binder: Write failure EINVAL in pid:1729
[  344.888958][   T59] veth0_vlan: left promiscuous mode
[  345.090015][T15715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1734
[  345.224849][T15705] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.279731][T15705] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.298115][T15705] bridge_slave_0: entered allmulticast mode
[  345.320116][T15705] bridge_slave_0: entered promiscuous mode
[  345.327301][T15705] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.354453][T15705] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.370426][T15705] bridge_slave_1: entered allmulticast mode
[  345.376739][T15705] bridge_slave_1: entered promiscuous mode
[  345.587525][   T36] kauditd_printk_skb: 1006 callbacks suppressed
[  345.587544][   T36] audit: type=1400 audit(1750408411.299:81843): avc:  denied  { read write } for  pid=15731 comm="syz.3.4646" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  345.660857][   T36] audit: type=1400 audit(1750408411.299:81844): avc:  denied  { read write open } for  pid=15731 comm="syz.3.4646" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  345.716654][T15705] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.723729][T15705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.731015][T15705] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.738037][T15705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.757610][   T36] audit: type=1400 audit(1750408411.299:81845): avc:  denied  { ioctl } for  pid=15731 comm="syz.3.4646" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  345.798653][   T36] audit: type=1400 audit(1750408411.369:81846): avc:  denied  { create } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  345.859862][T15737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1227
[  345.862784][   T36] audit: type=1400 audit(1750408411.369:81847): avc:  denied  { write } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  345.960064][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.967199][   T36] audit: type=1400 audit(1750408411.369:81848): avc:  denied  { read } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  345.988045][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.002273][   T36] audit: type=1400 audit(1750408411.369:81849): avc:  denied  { read } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  346.060453][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.067511][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.079693][   T36] audit: type=1400 audit(1750408411.369:81850): avc:  denied  { write } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  346.101070][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.108135][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.125852][T15743] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  346.143412][   T36] audit: type=1400 audit(1750408411.399:81851): avc:  denied  { read } for  pid=15705 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  346.190393][T15744] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  346.190423][T15744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1230
[  346.203457][T15705] audit: audit_backlog=65 > audit_backlog_limit=64
[  346.316451][T15705] veth0_vlan: entered promiscuous mode
[  346.372153][T15705] veth1_macvtap: entered promiscuous mode
[  346.391002][T15746] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89)
[  346.391023][T15746] rust_binder: Error while translating object.
[  346.403957][T15746] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  346.410809][T15746] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1748
[  346.809387][T15763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  346.939469][T15771] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  346.939499][T15771] rust_binder: Error in use_page_slow: EBUSY
[  346.950729][T15771] rust_binder: use_range failure EBUSY
[  346.962241][T15771] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  346.967717][T15771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  346.989764][T15771] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  347.008158][T15771] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1754
[  347.022943][T15777] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  347.362176][T15788] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13
[  347.383795][T15785] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  347.386662][T15790] binder: Unknown parameter '00000000000000000000003'
[  347.412873][T15785] rust_binder: Error in use_page_slow: EBUSY
[  347.412892][T15785] rust_binder: use_range failure EBUSY
[  347.419148][T15785] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  347.425562][T15785] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  347.445951][T15785] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[  347.482233][T15791] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[  347.505069][T15785] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:13
[  347.895580][T15808] rust_binder: Write failure EFAULT in pid:1770
[  348.347961][T15822] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.429642][T15830] rust_binder: Write failure EINVAL in pid:1244
[  348.467273][T15830] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.494269][T15830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1244
[  348.553703][T15836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  348.563031][T15836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1784
[  348.572448][T15836] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  348.581730][T15836] rust_binder: Read failure Err(EFAULT) in pid:1784
[  348.601841][T15836] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.609014][T15836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  348.615530][T15836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1784
[  348.734863][T15843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  348.745089][T15843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:22
[  348.755767][T15843] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  348.766148][T15843] rust_binder: Read failure Err(EFAULT) in pid:22
[  348.837583][T15843] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  348.864466][T15849] rust_binder: Failed copying remainder into alloc: EFAULT
[  348.881817][T15849] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  348.894947][T15849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  348.903924][T15849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1789
[  349.471620][T15873] input: syz0 as /devices/virtual/input/input233
[  349.759088][T15885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1254
[  349.966854][T15896] input: syz0 as /devices/virtual/input/input234
[  350.011379][T15896] input: failed to attach handler leds to device input234, error: -6
[  350.210449][T15908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1800
[  350.600424][   T36] kauditd_printk_skb: 1097 callbacks suppressed
[  350.600442][   T36] audit: type=1400 audit(1750408416.319:82938): avc:  denied  { read } for  pid=15931 comm="syz.5.4714" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  350.714115][   T36] audit: type=1400 audit(1750408416.339:82939): avc:  denied  { read write } for  pid=10908 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  350.775335][   T36] audit: type=1400 audit(1750408416.339:82940): avc:  denied  { read write open } for  pid=10908 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  350.831364][   T36] audit: type=1400 audit(1750408416.339:82941): avc:  denied  { ioctl } for  pid=10908 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  350.949725][   T36] audit: type=1400 audit(1750408416.349:82942): avc:  denied  { read open } for  pid=15931 comm="syz.5.4714" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  351.005214][   T36] audit: type=1400 audit(1750408416.359:82943): avc:  denied  { ioctl } for  pid=15931 comm="syz.5.4714" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  351.099727][   T36] audit: type=1400 audit(1750408416.379:82944): avc:  denied  { read append } for  pid=15933 comm="syz.1.4715" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.173716][   T36] audit: type=1400 audit(1750408416.379:82945): avc:  denied  { read append open } for  pid=15933 comm="syz.1.4715" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  351.265230][   T36] audit: type=1400 audit(1750408416.379:82946): avc:  denied  { read write } for  pid=15933 comm="syz.1.4715" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  351.346203][   T36] audit: type=1400 audit(1750408416.379:82947): avc:  denied  { read write open } for  pid=15933 comm="syz.1.4715" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  351.684470][T15973] SELinux:  truncated policydb string identifier
[  351.719704][T15973] SELinux: failed to load policy
[  351.908186][T15980] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.008636][T15982] rust_binder: Error in use_page_slow: ESRCH
[  352.020899][T15982] rust_binder: use_range failure ESRCH
[  352.033134][T15982] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[  352.038620][T15982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  352.059716][T15982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1284
[  352.461213][T16000] random: crng reseeded on system resumption
[  352.831677][T16024] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.843474][T16023] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.870496][T16024] rust_binder: Write failure EINVAL in pid:1297
[  352.906863][T16028] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[  352.960112][T16031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  352.963000][T16028] rust_binder: Error while translating object.
[  352.977648][T16033] syz.1.4745: attempt to access beyond end of device
[  352.977648][T16033] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  353.020436][T16028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  353.020468][T16028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66
[  353.190557][T16044] rust_binder: Error while translating object.
[  353.240046][T16044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  353.246251][T16044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[  353.254742][T16046] rust_binder: Error while translating object.
[  353.288718][T16046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  353.309440][T16046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1831
[  353.496953][T16057] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1306
[  353.640587][T16065] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  353.685185][T16071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  353.724690][T16071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1835
[  353.759747][T16071] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  353.779002][T16071] rust_binder: Read failure Err(EFAULT) in pid:1835
[  354.022834][T16090] can0: slcan on ttyS3.
[  354.075582][T16090] rust_binder: Write failure EINVAL in pid:1314
[  354.133661][T16089] can0 (unregistered): slcan off ttyS3.
[  354.311925][T16103] kvm: kvm [16101]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400
[  354.350185][T16103] rust_binder: Write failure EINVAL in pid:1848
[  354.386040][T16105] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.390681][T16096] rust_binder: Error in use_page_slow: ESRCH
[  354.404112][T16096] rust_binder: use_range failure ESRCH
[  354.434978][T16096] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[  354.458848][T16096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  354.505548][T16096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:80
[  354.620345][T16115] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.652127][T16121] rust_binder: Error in use_page_slow: ESRCH
[  354.678025][T16121] rust_binder: use_range failure ESRCH
[  354.699747][T16121] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  354.719695][T16121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  354.739724][T16121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1326
[  354.761589][T16123] rust_binder: Failed to allocate buffer. len:160, is_oneway:false
[  354.969899][T16140] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.118973][T16150] rust_binder: ENOSPC from range_alloc.reserve_new - size: 18446744073709551432
[  355.145740][T16150] rust_binder: Failed to allocate buffer. len:18446744073709551432, is_oneway:false
[  355.189702][T16150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  355.240511][T16150] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1333
[  355.412445][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.446119][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.463576][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.479403][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.509746][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.517226][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.519353][T16169] rust_binder: Got transaction with invalid offset.
[  355.534784][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.539730][T16169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.546640][T16171] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.549510][T16169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91
[  355.565434][ T5593] hid-generic 009C:0008:0003.0016: unknown main item tag 0x0
[  355.593098][ T5593] hid-generic 009C:0008:0003.0016: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  355.604757][T16171] rust_binder: Write failure EINVAL in pid:1338
[  355.612132][   T36] kauditd_printk_skb: 833 callbacks suppressed
[  355.612142][   T36] audit: type=1400 audit(1750408421.329:83781): avc:  denied  { read write } for  pid=13531 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  355.649264][   T36] audit: type=1400 audit(1750408421.339:83782): avc:  denied  { read write open } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  355.711413][   T36] audit: type=1400 audit(1750408421.339:83783): avc:  denied  { ioctl } for  pid=13531 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  355.743432][   T36] audit: type=1400 audit(1750408421.399:83784): avc:  denied  { read } for  pid=16165 comm="syz.3.4788" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  355.770973][   T36] audit: type=1400 audit(1750408421.399:83785): avc:  denied  { read open } for  pid=16165 comm="syz.3.4788" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  355.795678][T16183] SELinux:  policydb version 1445021381 does not match my version range 15-33
[  355.803885][T16184] rust_binder: Write failure EFAULT in pid:1341
[  355.809854][   T36] audit: type=1400 audit(1750408421.399:83786): avc:  denied  { ioctl } for  pid=16165 comm="syz.3.4788" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  355.839026][T16183] SELinux: failed to load policy
[  355.869686][   T36] audit: type=1400 audit(1750408421.409:83787): avc:  denied  { read write } for  pid=16175 comm="syz.1.4791" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  355.924480][   T36] audit: type=1400 audit(1750408421.409:83788): avc:  denied  { read write open } for  pid=16175 comm="syz.1.4791" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  355.961509][T16192] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.994764][   T36] audit: type=1400 audit(1750408421.419:83789): avc:  denied  { read write } for  pid=15705 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  356.041686][T16197] __vm_enough_memory: pid: 16197, comm: syz.1.4796, bytes: 281474976845824 not enough memory for the allocation
[  356.053052][T16199] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.057258][T16199] audit: audit_backlog=65 > audit_backlog_limit=64
[  356.086791][T16199] rust_binder: Error while translating object.
[  356.086843][T16199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  356.098238][T16200] __vm_enough_memory: pid: 16200, comm: syz.1.4796, bytes: 281474976845824 not enough memory for the allocation
[  356.133497][T16199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1346
[  356.255335][T16202] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.301490][T16202] rust_binder: Error in use_page_slow: ESRCH
[  356.307944][T16202] rust_binder: use_range failure ESRCH
[  356.348550][T16202] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  356.379743][T16202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  356.398456][T16202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1348
[  356.492441][T16209] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  356.619136][T16209] rust_binder: Error in use_page_slow: ESRCH
[  356.689709][T16209] rust_binder: use_range failure ESRCH
[  356.695734][T16209] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false
[  356.739736][T16209] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  356.786831][T16209] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:102
[  356.837404][T16222] random: crng reseeded on system resumption
[  356.967409][T16219] input: syz1 as /devices/virtual/input/input236
[  357.319742][T16239] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  357.843708][T16258] Restarting kernel threads ... done.
[  357.907315][T16257] binder: Unknown parameter 'õŠ÷Ífȶ@ª3‹´ÀÒ+1H‹þ¡n7DÊñþ“yŽ­·X ‚?Èu:°9ëùÏ'
[  358.340959][T16276] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.349247][T16276] rust_binder: Failed to allocate buffer. len:136, is_oneway:true
[  358.428920][T16280] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.462427][T16280] rust_binder: Error in use_page_slow: ESRCH
[  358.515931][T16280] rust_binder: use_range failure ESRCH
[  358.564725][T16280] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  358.649760][T16280] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  358.685070][T16280] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:112
[  358.755651][T16305] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[  358.911856][T16309] input: syz0 as /devices/virtual/input/input239
[  359.528689][T16337] input: syz0 as /devices/virtual/input/input243
[  359.554515][T16336] binder: Unknown parameter 'defcontext01777777777777777777777'
[  359.863716][T16343] rust_binder: Error while translating object.
[  359.863743][T16343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  359.881111][T16343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:124
[  360.095054][T16356] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.121193][T16356] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  360.167732][T16356] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[  360.349924][T16378] __vm_enough_memory: pid: 16378, comm: syz.1.4853, bytes: 281474976845824 not enough memory for the allocation
[  360.376088][T16380] rust_binder: Write failure EFAULT in pid:131
[  360.517796][ T2950] ==================================================================
[  360.532022][ T2950] BUG: KASAN: null-ptr-deref in down_write+0x83/0x2a0
[  360.538796][ T2950] Write of size 8 at addr 0000000000000098 by task kworker/0:4/2950
[  360.544369][T16392] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  360.546775][ T2950] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  360.546791][ T2950] CPU: 0 UID: 0 PID: 2950 Comm: kworker/0:4 Not tainted 6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  360.546815][ T2950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  360.546829][ T2950] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  360.546885][ T2950] Call Trace:
[  360.546891][ T2950]  <TASK>
[  360.546899][ T2950]  __dump_stack+0x21/0x30
[  360.546921][ T2950]  dump_stack_lvl+0x10c/0x190
[  360.546938][ T2950]  ? __cfi_dump_stack_lvl+0x10/0x10
[  360.546959][ T2950]  print_report+0x3d/0x70
[  360.546975][ T2950]  kasan_report+0x163/0x1a0
[  360.546997][ T2950]  ? down_write+0x83/0x2a0
[  360.547014][ T2950]  ? down_write+0x83/0x2a0
[  360.547031][ T2950]  kasan_check_range+0x299/0x2a0
[  360.547053][ T2950]  __kasan_check_write+0x18/0x20
[  360.547071][ T2950]  down_write+0x83/0x2a0
[  360.547087][ T2950]  ? __cfi_down_write+0x10/0x10
[  360.547104][ T2950]  ? _raw_spin_lock+0x8c/0x120
[  360.547123][ T2950]  ? __cfi__raw_spin_lock+0x10/0x10
[  360.547142][ T2950]  ? mutex_unlock+0x8b/0x240
[  360.547157][ T2950]  ? __cfi_mutex_unlock+0x10/0x10
[  360.547173][ T2950]  rust_binderfs_remove_file+0x6c/0x110
[  360.547190][ T2950]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  360.547216][ T2950]  ? update_curr_dl_se+0x10c/0xb20
[  360.547237][ T2950]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  360.547253][ T2950]  ? update_curr+0x60d/0xc60
[  360.547274][ T2950]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  360.547299][ T2950]  ? update_load_avg+0x506/0x19a0
[  360.547315][ T2950]  ? detach_entity_load_avg+0x7b0/0x7b0
[  360.547334][ T2950]  ? __kasan_check_read+0x15/0x20
[  360.547353][ T2950]  ? dequeue_entity+0xa9c/0x1750
[  360.547371][ T2950]  ? tg_unthrottle_up+0x980/0x980
[  360.547387][ T2950]  ? detach_entity_load_avg+0x7b0/0x7b0
[  360.547408][ T2950]  ? kvm_sched_clock_read+0x15/0x30
[  360.547425][ T2950]  ? sched_clock_noinstr+0xd/0x30
[  360.547440][ T2950]  ? sched_clock+0x44/0x60
[  360.547456][ T2950]  ? sched_clock_cpu+0x75/0x400
[  360.547473][ T2950]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  360.547491][ T2950]  ? sched_clock+0x44/0x60
[  360.547506][ T2950]  ? xfd_validate_state+0x68/0x150
[  360.547524][ T2950]  ? save_fpregs_to_fpstate+0x196/0x230
[  360.547546][ T2950]  ? __kasan_check_write+0x18/0x20
[  360.547564][ T2950]  ? __switch_to+0xc7b/0x1310
[  360.547581][ T2950]  ? psi_group_change+0xb44/0x1130
[  360.547604][ T2950]  ? __cfi___switch_to+0x10/0x10
[  360.547623][ T2950]  ? _raw_spin_unlock+0x45/0x60
[  360.547643][ T2950]  ? __switch_to_asm+0x3d/0x70
[  360.547662][ T2950]  ? __schedule+0x1463/0x1f10
[  360.547684][ T2950]  ? kick_pool+0xad/0x550
[  360.547707][ T2950]  process_scheduled_works+0x7d2/0x1020
[  360.547730][ T2950]  worker_thread+0xc58/0x1250
[  360.547752][ T2950]  kthread+0x2c7/0x370
[  360.547773][ T2950]  ? __cfi_worker_thread+0x10/0x10
[  360.547793][ T2950]  ? __cfi_kthread+0x10/0x10
[  360.547813][ T2950]  ret_from_fork+0x64/0xa0
[  360.547830][ T2950]  ? __cfi_kthread+0x10/0x10
[  360.547852][ T2950]  ret_from_fork_asm+0x1a/0x30
[  360.547873][ T2950]  </TASK>
[  360.547880][ T2950] ==================================================================
[  360.878972][ T2950] Disabling lock debugging due to kernel taint
[  360.885195][ T2950] BUG: kernel NULL pointer dereference, address: 0000000000000098
[  360.892995][ T2950] #PF: supervisor write access in kernel mode
[  360.899050][ T2950] #PF: error_code(0x0002) - not-present page
[  360.905030][ T2950] PGD 80000001271f5067 P4D 80000001271f5067 PUD 0 
[  360.908122][   T36] kauditd_printk_skb: 748 callbacks suppressed
[  360.908136][   T36] audit: type=1400 audit(1750408426.619:84536): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  360.911534][ T2950] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[  360.911562][ T2950] CPU: 0 UID: 0 PID: 2950 Comm: kworker/0:4 Tainted: G    B              6.12.23-syzkaller-g6c1c18fcb8b7 #0 ba78288b1e32eb9f88d3f8d8da6b79a037cd8362
[  360.911586][ T2950] Tainted: [B]=BAD_PAGE
[  360.911591][ T2950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  360.911602][ T2950] Workqueue: events _RNvXs6_NtCs43vyB533jt3_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCshgDM7dBCdno_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_
[  360.919579][   T36] audit: type=1400 audit(1750408426.619:84537): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  360.939576][ T2950] 
[  360.939597][ T2950] RIP: 0010:down_write+0x9a/0x2a0
[  360.939622][ T2950] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  361.039781][ T2950] RSP: 0018:ffffc9000105f500 EFLAGS: 00010256
[  361.045835][ T2950] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  361.053787][ T2950] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000105f520
[  361.061748][ T2950] RBP: ffffc9000105f598 R08: ffffc9000105f527 R09: 1ffff9200020bea4
[  361.069711][ T2950] R10: dffffc0000000000 R11: fffff5200020bea5 R12: dffffc0000000000
[  361.077672][ T2950] R13: 1ffff9200020bea0 R14: ffffc9000105f520 R15: 0000000000000000
[  361.085635][ T2950] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  361.094549][ T2950] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.101111][ T2950] CR2: 0000000000000098 CR3: 00000001336f6000 CR4: 00000000003526b0
[  361.109065][ T2950] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000
[  361.117014][ T2950] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  361.124966][ T2950] Call Trace:
[  361.128225][ T2950]  <TASK>
[  361.131140][ T2950]  ? __cfi_down_write+0x10/0x10
[  361.135975][ T2950]  ? _raw_spin_lock+0x8c/0x120
[  361.140724][ T2950]  ? __cfi__raw_spin_lock+0x10/0x10
[  361.145911][ T2950]  ? mutex_unlock+0x8b/0x240
[  361.150477][ T2950]  ? __cfi_mutex_unlock+0x10/0x10
[  361.155480][ T2950]  rust_binderfs_remove_file+0x6c/0x110
[  361.161006][ T2950]  _RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x9d4/0x2860
[  361.173747][ T2950]  ? update_curr_dl_se+0x10c/0xb20
[  361.178845][ T2950]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  361.184890][ T2950]  ? update_curr+0x60d/0xc60
[  361.189471][ T2950]  ? __cfi__RNvXs2_NtCshgDM7dBCdno_11rust_binder7processNtB5_7ProcessNtNtCs43vyB533jt3_6kernel9workqueue8WorkItem3run+0x10/0x10
[  361.202647][ T2950]  ? update_load_avg+0x506/0x19a0
[  361.207657][ T2950]  ? detach_entity_load_avg+0x7b0/0x7b0
[  361.213185][ T2950]  ? __kasan_check_read+0x15/0x20
[  361.218191][ T2950]  ? dequeue_entity+0xa9c/0x1750
[  361.223108][ T2950]  ? tg_unthrottle_up+0x980/0x980
[  361.228113][ T2950]  ? detach_entity_load_avg+0x7b0/0x7b0
[  361.233639][ T2950]  ? kvm_sched_clock_read+0x15/0x30
[  361.238816][ T2950]  ? sched_clock_noinstr+0xd/0x30
[  361.243817][ T2950]  ? sched_clock+0x44/0x60
[  361.248214][ T2950]  ? sched_clock_cpu+0x75/0x400
[  361.253056][ T2950]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  361.259123][ T2950]  ? sched_clock+0x44/0x60
[  361.263532][ T2950]  ? xfd_validate_state+0x68/0x150
[  361.268635][ T2950]  ? save_fpregs_to_fpstate+0x196/0x230
[  361.274173][ T2950]  ? __kasan_check_write+0x18/0x20
[  361.279271][ T2950]  ? __switch_to+0xc7b/0x1310
[  361.283934][ T2950]  ? psi_group_change+0xb44/0x1130
[  361.289028][ T2950]  ? __cfi___switch_to+0x10/0x10
[  361.293952][ T2950]  ? _raw_spin_unlock+0x45/0x60
[  361.298790][ T2950]  ? __switch_to_asm+0x3d/0x70
[  361.303541][ T2950]  ? __schedule+0x1463/0x1f10
[  361.308206][ T2950]  ? kick_pool+0xad/0x550
[  361.312527][ T2950]  process_scheduled_works+0x7d2/0x1020
[  361.318060][ T2950]  worker_thread+0xc58/0x1250
[  361.322725][ T2950]  kthread+0x2c7/0x370
[  361.326777][ T2950]  ? __cfi_worker_thread+0x10/0x10
[  361.331873][ T2950]  ? __cfi_kthread+0x10/0x10
[  361.336449][ T2950]  ret_from_fork+0x64/0xa0
[  361.340851][ T2950]  ? __cfi_kthread+0x10/0x10
[  361.345426][ T2950]  ret_from_fork_asm+0x1a/0x30
[  361.350185][ T2950]  </TASK>
[  361.353204][ T2950] Modules linked in:
[  361.357094][ T2950] CR2: 0000000000000098
[  361.361236][ T2950] ---[ end trace 0000000000000000 ]---
[  361.366675][ T2950] RIP: 0010:down_write+0x9a/0x2a0
[  361.371688][ T2950] Code: 48 c7 44 24 20 00 00 00 00 be 08 00 00 00 e8 2d 34 55 fc 4c 89 f7 be 08 00 00 00 e8 20 34 55 fc 48 8b 44 24 20 b9 01 00 00 00 <f0> 48 0f b1 0b 0f 85 a0 00 00 00 48 c7 c0 c0 b9 20 87 48 c1 e8 03
[  361.391275][ T2950] RSP: 0018:ffffc9000105f500 EFLAGS: 00010256
[  361.397326][ T2950] RAX: 0000000000000000 RBX: 0000000000000098 RCX: 0000000000000001
[  361.405275][ T2950] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000105f520
[  361.413230][ T2950] RBP: ffffc9000105f598 R08: ffffc9000105f527 R09: 1ffff9200020bea4
[  361.421184][ T2950] R10: dffffc0000000000 R11: fffff5200020bea5 R12: dffffc0000000000
[  361.429136][ T2950] R13: 1ffff9200020bea0 R14: ffffc9000105f520 R15: 0000000000000000
[  361.437086][ T2950] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  361.445993][ T2950] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  361.452556][ T2950] CR2: 0000000000000098 CR3: 00000001336f6000 CR4: 00000000003526b0
[  361.460509][ T2950] DR0: fffffffffffffff8 DR1: 0000000000000006 DR2: 0200000000000000
[  361.468463][ T2950] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  361.476424][ T2950] Kernel panic - not syncing: Fatal exception
[  361.482726][ T2950] Kernel Offset: disabled
[  361.487030][ T2950] Rebooting in 86400 seconds..