last executing test programs: 5m32.869059438s ago: executing program 3 (id=399): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x4018aee3, &(0x7f0000000180)=""/216) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) ioctl$UI_SET_RELBIT(r0, 0x8000552c, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r2, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000000), 0x4, &(0x7f0000000080)=ANY=[@ANYRES32]) 5m32.733568801s ago: executing program 3 (id=401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) 5m32.694677142s ago: executing program 3 (id=403): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00', @broadcast}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'net_prio'}]}, 0xa) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000240)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000080)=[0x0]}) write(r1, &(0x7f0000001c80)="b12a42ebda0a", 0x6) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000280)) mount$binderfs(0x0, &(0x7f0000000580)='./binderfs\x00', 0x0, 0x4008024, &(0x7f0000000040)={[{@stats}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0xa1, 0x0, &(0x7f0000000140)="ec0a6d00117504cd22b9125afac35bcf5dbc5530c428f0145da7120c1acbf6d80ecbb44f4f92dfc8f43092f4a074fee2a42bde33ea8dbec7dffc0cb92354284e974af3cde30280100725fa510584507b73b2ebbcb6ba7fb4f411693cce91eaeba9e0f2de424feb56a602a808a3d3646f754f502ea6773ed419ba46098ecf623ecaf3f26b3de2766d31fc2e3a6414521b8275827498889f7a2ea6a1c85fc5e66e27"}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x7d273000) 5m32.640330862s ago: executing program 3 (id=406): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xeb) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x60000000) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001e80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x800, &(0x7f0000000140)={[{@max={'max', 0x3d, 0x7}}, {@stats}], [{@fowner_lt={'fowner<', r2}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x63, 0x33, 0x30, 0x65, 0x63, 0x36, 0xa], 0x2d, [0x62, 0x31, 0x35, 0x31], 0x2d, [0x59, 0x38, 0x61, 0x64], 0x2d, [0x38, 0x30, 0x66, 0x33], 0x2d, [0x66, 0x30, 0x34, 0x30, 0x61, 0x65, 0x30, 0x39]}}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@fowner_gt={'fowner>', r3}}, {@obj_user={'obj_user', 0x3d, '[^'}}, {@obj_user={'obj_user', 0x3d, '[}\''}}]}) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="736f6b74936b28bdf9030425c5e52c00"/28]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r7, 0x4018aee3, &(0x7f0000000040)=@attr_irq_timer={0x0, 0x1, 0x1, 0x0}) write$FUSE_LSEEK(r4, 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x50800, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4030ae7b, &(0x7f0000000000)={0xf97, 0x8, 0x4, 0x94f, 0x8}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000240)={r11, 0xfffffffffffffdac, 0x2, 0x8fb}) openat$cgroup_ro(r12, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'wlan0\x00', 0x400}) 5m32.483424185s ago: executing program 3 (id=407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x10, r4, 0x8ae9e000) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x31, r4, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008c0000000000000000000000000000081b82afdd1606d3"]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000200)=0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x51, 0x0, &(0x7f0000000700)="93ca2efc9445b68c079d41dcfff066e61c4d8f1021949c8c75c29113ed78c691e4a88534e71804ab594c9c0cea97e979adb05f81276775d60f54e903eb87a57f7cbe1f97039cb9d611ffa16ca4582a68cd"}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4010, r1, 0x164a8000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) ioctl$BLKROSET(r10, 0x125d, 0x0) 5m32.051248801s ago: executing program 3 (id=410): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x5) r1 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) ioctl$BLKRRPART(r0, 0x125f, 0x0) read(r0, &(0x7f0000000080)=""/101, 0x65) 5m16.920697682s ago: executing program 32 (id=410): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x5) r1 = openat$kvm(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000014000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) ioctl$BLKRRPART(r0, 0x125f, 0x0) read(r0, &(0x7f0000000080)=""/101, 0x65) 4m20.471319674s ago: executing program 2 (id=1552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 4m20.349364066s ago: executing program 2 (id=1554): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "96010000000000000000000000000000000008"}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r1, &(0x7f00000000c0)=""/252, 0xfc) read(r1, &(0x7f00000004c0)=""/92, 0x1001) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x3fce322) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x11, 0x7, 0x9, 0x1, 0x10, "bca77c911cc2948da7b7d257a4eb6c0b063230"}) 4m20.185556328s ago: executing program 2 (id=1557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008aec1, 0x0) close_range(r0, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000b1b70090020000000000000700000000000000"]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x90280, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x50, r6, 0xe1d67000) write(r6, &(0x7f0000000200)="bbdb99c61248df71810108f767558c13b44b5ad388fb9010bf5e6c172ba23e9923d36e85a61562641967f07350c5106cef2f5f7521480ed9bb21e3aad8044a0229fe79b5ebce0ec53ff51b7bb71c7ef63354a141a1175a5d73838de92212b50415851acc8cffa6d14d4982b957e8021f5eb8afd1a57f8fd33be3a7829ac14e2d19e069c73f6ff392d38c0174e2891c6c0ae8df5338d8", 0x96) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x28f}]}) read$FUSE(r7, 0x0, 0x0) r11 = openat$cgroup_ro(r7, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20a82, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r12, 0x400454c9, 0x9) 4m19.813584284s ago: executing program 2 (id=1561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7b) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001']) (rerun: 64) 4m19.739421125s ago: executing program 2 (id=1564): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000080)={[{0x2, 0xe, 0x9, 0x80, 0x2, 0x8, 0x5, 0x4, 0xc5, 0x7f, 0xb4, 0xff, 0x5}, {0x3, 0x40, 0xbd, 0x7, 0xf7, 0x5, 0x9, 0x0, 0xc, 0x1f, 0x8, 0x5, 0xfff}, {0x7fffffff, 0x7, 0x40, 0x5, 0x5, 0x3, 0x5, 0x53, 0x0, 0x3, 0xa, 0xd, 0x6}], 0x1}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r4, 0xaed08000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x8008770b, 0x1) 4m19.583647777s ago: executing program 2 (id=1566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r12, 0x4080aea2, &(0x7f0000000180)={[0x1000, 0x6000, 0x0, 0xffff1000], 0x3}) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4m19.021590146s ago: executing program 4 (id=1571): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40102, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r0, 0x2000) syz_clone3(&(0x7f0000002380)={0x120000000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x37}, &(0x7f0000001280)=""/154, 0x9a, &(0x7f0000001340)=""/4096, &(0x7f0000002340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) syz_clone3(&(0x7f00000024c0)={0x10000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f00000000c0), {0x5}, &(0x7f0000002540)=""/198, 0xc6, &(0x7f0000002640)=""/4106, &(0x7f0000002400)}, 0x58) 4m18.920572217s ago: executing program 4 (id=1573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000007401"]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) close(r4) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000240)=@arm64={0x7b, 0x7, 0x98, '\x00', 0x9}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) read$FUSE(r6, &(0x7f0000001180)={0x2020}, 0x2020) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x4000, 0x10, 0x3, 0x12, 0x3, 0x2, 0x1, 0xce, 0xfb, 0x40}, {0xd000, 0x2000, 0xc, 0x3, 0x7, 0x6, 0x4, 0x8, 0x20, 0xf, 0x0, 0x81}, {0x1000, 0x10000, 0x8, 0x10, 0x8, 0x3, 0xc, 0xf, 0x81, 0x4, 0x8, 0xa8}, {0x100000, 0xd000, 0xb, 0x9, 0x4, 0x3, 0x7, 0x4, 0x67, 0x4, 0x6, 0x8}, {0x100000, 0x5000, 0xa, 0xa5, 0x0, 0x4, 0xa, 0x3, 0x29}, {0x3000, 0x10000, 0xf, 0x5, 0x30, 0xc, 0xf, 0xc5, 0x0, 0x6b, 0x1b, 0x1}, {0xf000, 0x10000, 0xb, 0x3, 0x3, 0x3, 0x3, 0x7, 0x6, 0x2, 0x3, 0xa}, {0x2, 0x10f000, 0x10, 0x2, 0x4, 0x14, 0x2, 0x56, 0x23, 0x3, 0xf7, 0x5}, {0x100000, 0x401}, {0x4000, 0x1477}, 0x90000010, 0x0, 0x3000, 0x4002, 0x1, 0x901, 0x0, [0x7, 0x9, 0x5]}) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) close_range(0xffffffffffffffff, r12, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r11, 0x2000) 4m17.959984712s ago: executing program 4 (id=1582): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0) read(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) 4m17.833566924s ago: executing program 4 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000e40)={0x1, &(0x7f0000000e00)=[{0x6, 0xfb}]}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) 4m16.958802718s ago: executing program 4 (id=1596): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x52, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70b7a4"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) close(r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x5d, 0x6, 0x5, 0x57}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 4m16.840806849s ago: executing program 4 (id=1597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x8c8ddd2}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) (async) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000480000/0x9000)=nil, 0x9000, 0x3000008, 0x810, r2, 0x3950d000) (async) write$UHID_CREATE(r11, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/134, 0x86, 0x1, 0x5, 0x40, 0x4, 0x5}}, 0x120) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4m4.520401697s ago: executing program 33 (id=1566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r12, 0x4080aea2, &(0x7f0000000180)={[0x1000, 0x6000, 0x0, 0xffff1000], 0x3}) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4m1.74276007s ago: executing program 34 (id=1597): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0) (async) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x8c8ddd2}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$BLKSECTGET(r6, 0x1267, &(0x7f0000000140)) ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) (async) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000480000/0x9000)=nil, 0x9000, 0x3000008, 0x810, r2, 0x3950d000) (async) write$UHID_CREATE(r11, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/134, 0x86, 0x1, 0x5, 0x40, 0x4, 0x5}}, 0x120) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) (async) r12 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r12, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m32.044228435s ago: executing program 5 (id=3884): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x50, r0, 0xfffff000) 1m31.949650146s ago: executing program 5 (id=3886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x5, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x19, 0x0, 0x0}) 1m31.793180529s ago: executing program 5 (id=3890): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB=',\n'], 0x6a) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m31.73201265s ago: executing program 5 (id=3891): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="a02777b21ef1bffcbbd93fcb6b8b92270d0c2fc904c65d73f21a9f1cb78d5d249d841436969cac75637fcc1db70d1a7ddc5c39eec9a953d18e1b3e28e6f3e3c55216126dafeb4d3f700af1a250e1c0e8ecc1f76ad40baef336cc675b7608c23dc19419255f8d02bab1a8d56d82952192927f27eeaa372ca5d8191db02920012c22f87b33cbe46d96f611478bfaab2c5a4edbbe21c3c2cdae90f5a032e8399e91e559ffdbbd907735a00e2a5a5cce34f43071038d3e832ed62d74a02d92b7b0759b6e89e4b28b3a7256aa536fba90ff28c7bf39d85400f5040338f2", 0xdb) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[], 0xb0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@dont_hash}]}) 1m31.605678702s ago: executing program 5 (id=3894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 1m31.539513572s ago: executing program 5 (id=3895): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80104, 0x31) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600000, 0xb1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x4) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x34) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r4 = openat(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x432200, 0x0) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000001c0)={0xf7d, 0xe1e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000175c0)='./file0/../file0\x00', 0x41, 0x99) openat$kvm(0xffffffffffffff9c, &(0x7f0000017600), 0x80, 0x0) r6 = openat(r4, &(0x7f0000017640)='./file0\x00', 0x4000, 0x40) openat(r4, &(0x7f0000017680)='./file0/../file0\x00', 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000176c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000017ac0)={r8, 0x100000000, 0x1, [0x0, 0x567b9dd, 0x9, 0x4, 0x7], [0x0, 0x7, 0xd562, 0x2, 0x2, 0x8, 0xab2, 0x7, 0x4, 0x8, 0x4, 0xe0e0, 0x61, 0x2, 0x51324c84, 0x7ff, 0x3, 0x7, 0xff27, 0xffffffffffffffff, 0xa, 0x6, 0xffffffffdab031ad, 0x4, 0x9, 0x0, 0xa51a, 0x4, 0xc, 0x8000000000000000, 0x1e, 0x8, 0x7, 0xbb4c, 0x6, 0x5, 0x5, 0x8, 0x4, 0x6, 0x7, 0x6, 0x4, 0x7ff, 0x9, 0x4, 0x101, 0x80, 0xffffffff, 0x9, 0x6, 0x9, 0x6, 0xf3, 0x2, 0x7ff, 0x3, 0x10, 0x2, 0x101, 0x6, 0xf8, 0x7, 0x2, 0x40, 0x5, 0x9, 0x6, 0x9, 0x8, 0xecc5, 0x3, 0x0, 0x0, 0x2, 0x4, 0x5, 0x6, 0x6, 0xc, 0x400, 0x7, 0x4, 0xffffffffffffff7f, 0x6, 0x5, 0x0, 0x3, 0x10000, 0x7, 0x2, 0x7f, 0xffffffffffffffff, 0x8, 0x2, 0x2, 0x0, 0xd891, 0xed, 0xffffffffffffbbd2, 0x9, 0x7, 0x6, 0x9, 0x9, 0x1b5665e3, 0xb1d, 0x7f, 0x76b, 0x8, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0xfffffffffffffffc, 0xe, 0xa7ec, 0x9bb, 0x1, 0x0, 0x7]}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000017f00)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000017f40)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000017f80)={0xb6f9, 0x4, 0x5, 0x0, 0x0, [{{r6}, 0x8000000000000000}, {{r5}, 0x7f}, {{r4}, 0x101}, {{r1}, 0x7}, {{r6}, 0x4}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) unlinkat(r6, &(0x7f0000018040)='./file0/../file0\x00', 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000018080)={0x7fffffff, 0x68}) r11 = openat$cgroup_int(r6, &(0x7f00000180c0)='cpu.max.burst\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r12 = openat(r6, &(0x7f0000018100)='./file0\x00', 0x80420, 0x10) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000018140)={0x74, 0x0, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r11, 0x801c581f, &(0x7f00000181c0)={0x3, 0x8, 0xb, 0x4, 0x5}) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000018200)={r7, 0x8001, 0xff, 0x1}) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0xabb33675f9a9ddd4) write(r4, &(0x7f0000018600)="c356826202255c3b2f67dcc1eddba5224c44b974fb5441113266c448c9dcb10490f65324aa3d3747fb75c063a03883aa2b7d0e35f880051e58af5ea459cf09f161003bd43700015b614d0c079de5c63f1f3af14039f7527fd0e788504e1a60", 0x5f) unlinkat(r12, &(0x7f0000018680)='./file0\x00', 0x200) 1m16.420457203s ago: executing program 35 (id=3895): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80104, 0x31) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x600000, 0xb1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x4) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x34) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) r4 = openat(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x432200, 0x0) unlinkat(r3, &(0x7f0000000180)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f00000001c0)={0xf7d, 0xe1e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000175c0)='./file0/../file0\x00', 0x41, 0x99) openat$kvm(0xffffffffffffff9c, &(0x7f0000017600), 0x80, 0x0) r6 = openat(r4, &(0x7f0000017640)='./file0\x00', 0x4000, 0x40) openat(r4, &(0x7f0000017680)='./file0/../file0\x00', 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000176c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000017ac0)={r8, 0x100000000, 0x1, [0x0, 0x567b9dd, 0x9, 0x4, 0x7], [0x0, 0x7, 0xd562, 0x2, 0x2, 0x8, 0xab2, 0x7, 0x4, 0x8, 0x4, 0xe0e0, 0x61, 0x2, 0x51324c84, 0x7ff, 0x3, 0x7, 0xff27, 0xffffffffffffffff, 0xa, 0x6, 0xffffffffdab031ad, 0x4, 0x9, 0x0, 0xa51a, 0x4, 0xc, 0x8000000000000000, 0x1e, 0x8, 0x7, 0xbb4c, 0x6, 0x5, 0x5, 0x8, 0x4, 0x6, 0x7, 0x6, 0x4, 0x7ff, 0x9, 0x4, 0x101, 0x80, 0xffffffff, 0x9, 0x6, 0x9, 0x6, 0xf3, 0x2, 0x7ff, 0x3, 0x10, 0x2, 0x101, 0x6, 0xf8, 0x7, 0x2, 0x40, 0x5, 0x9, 0x6, 0x9, 0x8, 0xecc5, 0x3, 0x0, 0x0, 0x2, 0x4, 0x5, 0x6, 0x6, 0xc, 0x400, 0x7, 0x4, 0xffffffffffffff7f, 0x6, 0x5, 0x0, 0x3, 0x10000, 0x7, 0x2, 0x7f, 0xffffffffffffffff, 0x8, 0x2, 0x2, 0x0, 0xd891, 0xed, 0xffffffffffffbbd2, 0x9, 0x7, 0x6, 0x9, 0x9, 0x1b5665e3, 0xb1d, 0x7f, 0x76b, 0x8, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0xfffffffffffffffc, 0xe, 0xa7ec, 0x9bb, 0x1, 0x0, 0x7]}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000017f00)='./cgroup/syz1\x00', 0x200002, 0x0) r10 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000017f40)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r10, 0xc0189436, &(0x7f0000017f80)={0xb6f9, 0x4, 0x5, 0x0, 0x0, [{{r6}, 0x8000000000000000}, {{r5}, 0x7f}, {{r4}, 0x101}, {{r1}, 0x7}, {{r6}, 0x4}]}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) unlinkat(r6, &(0x7f0000018040)='./file0/../file0\x00', 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000018080)={0x7fffffff, 0x68}) r11 = openat$cgroup_int(r6, &(0x7f00000180c0)='cpu.max.burst\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r12 = openat(r6, &(0x7f0000018100)='./file0\x00', 0x80420, 0x10) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000018140)={0x74, 0x0, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r11, 0x801c581f, &(0x7f00000181c0)={0x3, 0x8, 0xb, 0x4, 0x5}) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000018200)={r7, 0x8001, 0xff, 0x1}) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0xabb33675f9a9ddd4) write(r4, &(0x7f0000018600)="c356826202255c3b2f67dcc1eddba5224c44b974fb5441113266c448c9dcb10490f65324aa3d3747fb75c063a03883aa2b7d0e35f880051e58af5ea459cf09f161003bd43700015b614d0c079de5c63f1f3af14039f7527fd0e788504e1a60", 0x5f) unlinkat(r12, &(0x7f0000018680)='./file0\x00', 0x200) 10.771891706s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 8.853581955s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 6.712949868s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 4.853874786s ago: executing program 0 (id=4892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000072, 0x0, 0x7f}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000480)={0x5, &(0x7f00000004c0)=[{}, {0x20}, {}, {}, {0x6}]}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'wlan0\x00', @broadcast}) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/210, 0xd2, 0x2, 0x25}, @flat=@weak_handle={0x77682a85, 0x201}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}, 0x40}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x100, 0x2}, @fd, @flat=@handle={0x73682a85, 0xb, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 4.852968526s ago: executing program 7 (id=4894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6e802, 0x0) read(r1, &(0x7f0000000040)=""/4096, 0x1000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x9d6d6000) ioctl$ASHMEM_GET_NAME(r0, 0x40087708, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001040)={0x9, 0x0, [{0x35b, 0x0, 0x7fffffffffffffff}, {0xbca}, {0xb4b, 0x0, 0x9}, {0x772, 0x0, 0x7}, {0xaad, 0x0, 0x1}, {0xa73, 0x0, 0x5}, {0xb52, 0x0, 0x8001}, {0x1de, 0x0, 0xffffffffffff0000}, {0x404, 0x0, 0x401}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6e802, 0x0) (async) read(r1, &(0x7f0000000040)=""/4096, 0x1000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x9d6d6000) (async) ioctl$ASHMEM_GET_NAME(r0, 0x40087708, 0x0) (async) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000001040)={0x9, 0x0, [{0x35b, 0x0, 0x7fffffffffffffff}, {0xbca}, {0xb4b, 0x0, 0x9}, {0x772, 0x0, 0x7}, {0xaad, 0x0, 0x1}, {0xa73, 0x0, 0x5}, {0xb52, 0x0, 0x8001}, {0x1de, 0x0, 0xffffffffffff0000}, {0x404, 0x0, 0x401}]}) (async) 4.811368197s ago: executing program 7 (id=4895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000009b00004000000000000000000000000058722244815a27cbc12a681c86b2ef9bdd307187670c9eaea1048cd06288c65c940a187addc5f2f9902f08b189b727337e6acb20ede1c0a48489c6863cc1fcebed9f8dbe4b299417f5f91e40b3a8de44eee92c25d78746aed37ee648d4d69adc15a9d973bb5e776ad1f7bc8e479a3f9c147ec0eb4d0ee1a6366d41a9db16040e56721ef9e8a6a4cd8b17b90908576c513067bad36654867a67d5b34b7358ef8f1e418dc0f2667bbe7417f3c3918f92b85a8c405d9eb440080518ab5effc1156bf75805c45c829131bec2a00a060c72c5db990a434840af5e232076"]) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0xffffffffffffffff, 0xbb, 0x1ff, 0x6d1, 0x400, 0x7, 0xffffffffffffffcc, 0x3, 0x6145, 0x100, 0x2, 0x100000001, 0xd24, 0xffffffff00000000, 0x5, 0x4], 0xddcc9000, 0x20200}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r10, 0xc018620b, 0xfffffffffffffffe) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) syz_clone3(&(0x7f00000013c0)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0, 0x0, {r11}}, 0x58) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x0) 4.748509578s ago: executing program 1 (id=4896): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000082, 0x0, 0x90000000}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb) (async) prctl$PR_SET_MM_EXE_FILE(0x37, 0xd, 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000082, 0x0, 0x90000000}]}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}}], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"}) (async) 4.689676479s ago: executing program 0 (id=4897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1e, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 4.61030392s ago: executing program 0 (id=4898): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0xf, 0x0, [{0x4b564d02, 0x0, 0x7f}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)=')#@\x00') ioctl$TCSBRKP(r5, 0x5425, 0x100000000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) read(r0, &(0x7f0000000000)=""/188, 0xbc) 4.57126671s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 2.60851792s ago: executing program 0 (id=4899): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x8000, 0x210000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x2, 0x40}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 2.60770321s ago: executing program 1 (id=4900): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\'\x00') 2.60691504s ago: executing program 7 (id=4901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) close_range(r0, r0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000002c0)={0x0, 0x0, 0x6}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x3b, 0x0, 0x3}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01001000000000009800004000"/24]) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xcd, 0x0, 0xfffffffffffffffe}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000040)=0x93f) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000024"]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.525635981s ago: executing program 1 (id=4902): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3a9a01, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, 0x0) prctl$PR_MCE_KILL(0x26, 0x0, 0x0) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) ioctl$SNAPSHOT_FREE(r0, 0x3305) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="636f6e740004000000000000656d5f752c00"]) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28001, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3a9a01, 0x0) (async) ioctl$BLKSECDISCARD(r2, 0x127d, 0x0) (async) prctl$PR_MCE_KILL(0x26, 0x0, 0x0) (async) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) ioctl$SNAPSHOT_FREE(r0, 0x3305) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="636f6e740004000000000000656d5f752c00"]) (async) 2.412641853s ago: executing program 1 (id=4903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x8000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=[@increfs], 0x1e, 0x0, 0x0}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.392264363s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 313.569415ms ago: executing program 0 (id=4904): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x3000001, 0x22052, r1, 0x2000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfaE\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1056) close(r3) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$vga_arbiter(r7, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000540)=0x10001) (async) write$cgroup_int(r5, &(0x7f0000000140)=0x400900, 0x12) (async) write$UHID_INPUT(r5, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xffffffffffffffe1, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @release={0x40046306, 0x3}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"}) 299.410126ms ago: executing program 1 (id=4905): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20000000000001a9, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000080)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0xffffffff, 0x808000000, 0x3e, 0x0, 0xffffffffffffffff, 0x2004cc, 0x2, 0x2, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x8000009, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000001300)=""/92, 0x80a0000}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x4d, 0xfffffffffffffffa, 0x80, 0x100000, 0x0, 0x2004c8, 0x56ca, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x9], 0xdddd1000, 0x402}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x7, 0x8000, 0x6, 0x2, 0x5, 0xefffffffffffffff, 0xb, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x3, 0x1, 0x8000000000000000, 0xff], 0x0, 0x41845}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) mmap$binder(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0xfffffffffffffffe) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x77) (async) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000700)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, '\xbc\x85\xaf\xb5\xd0\xfde\x03\x87\xc3\xa0\xfe\xa2\xaa\x8c\xf6\x99R/*;\xc2y\xfc\xc5\xce\xfc\x05\xb3h\xde>\x91/C\x12\'S\x18+\xba\xd5T\xbb;\xbd^\xce`\xa4\xb8l*\xfcN\xce2Z>\r\x9f\a\x0f+\xabS;\x87]\x9c\r&\x93-\x7f\xa5G\xd3\x93\xd6I\x88W\xebNq\xccU\x18\x1d8\xcb\xf3\xe4:\xc8\xdeV\xa85\xf4>\xe8#\x0f\xb3\xa6\x1a\xe3Mr\x92!G\xcb\x87)\xb1Hg\x9e\x88S-\v\x93[D9\x1b\xc5\xd4\x87\x82V\xcb\xc1\t\x8c\xe9\t4D\x01_ \xed\n\xa7\xabi5\x05t2\xd6\xd9\xa8\xc9x\x16\xffr\xecT\xb5\xfe\x02\xa2\x13os\xf7\xa7\x97\xefS*\x13\xf1R>\xa007I\xae\x12Y\x01\xa7\xf986\xcaq\r(\xc7\xd4', 0x3a, 'K\x0f\x1c\xf0\x80\xdc\x9c\xb3B\r\xd1\f\xe4\x05\x8aDO\x00\x00\x00\x00\x00\x00\x0e#\x17\xd1\xd9\x88r\x8eY6\xeb\xc87\x1f\x92ts\xbe\xcb9\x91J\v\xff\xe7\x00\x00\x00\x00\x98Q%\xa8\"\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x8c\xadk\xd5\x7fd9\x9e6\x9d+\x15P\xda_w\xb4\xc36\xe9', 0x3a, './file0'}, 0x14b) (async) close(r0) 288.244956ms ago: executing program 7 (id=4906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x400c6314, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x700000000000000, 0x0}) 145.536168ms ago: executing program 0 (id=4907): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) read$FUSE(r1, 0x0, 0x9) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x47}}, 0x1000}], 0x50, 0x0, 0x0}) 144.904688ms ago: executing program 7 (id=4908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0xae03, 0x16) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-'], 0x28) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xffffffff00000000) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x400c0be, &(0x7f0000000080)={[{@stats}, {@stats}]}) 91.054278ms ago: executing program 1 (id=4909): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x3, 0x0, &(0x7f0000000080)="fbdf7d"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x3, 0x0, &(0x7f0000000080)="fbdf7d"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$binder(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8001) (async) mmap$binder(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8001) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0xddcd1000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007980), 0xe0040, 0x0) read(r3, 0x0, 0x12) (async) read(r3, 0x0, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) 23.02107ms ago: executing program 7 (id=4910): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) close(r1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=4799): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9250) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x161000, 0x0) ioctl$BLKFLSBUF(r4, 0x1261, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000096}]}) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) kernel console output (not intermixed with test programs): left allmulticast mode [ 295.509354][T13411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 295.520371][T13411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 295.530011][ T60] bridge_slave_1: left promiscuous mode [ 295.561559][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.580664][ T60] bridge_slave_0: left allmulticast mode [ 295.589669][ T60] bridge_slave_0: left promiscuous mode [ 295.599823][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.733077][ T60] veth1_macvtap: left promiscuous mode [ 295.745186][ T60] veth0_vlan: left promiscuous mode [ 295.910206][T13412] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.917324][T13412] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.925420][T13412] bridge_slave_0: entered allmulticast mode [ 295.932440][T13412] bridge_slave_0: entered promiscuous mode [ 295.940701][T13412] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.947783][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.965255][T13412] bridge_slave_1: entered allmulticast mode [ 295.973979][T13412] bridge_slave_1: entered promiscuous mode [ 295.988813][T13419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1297 [ 296.017826][T13421] rust_binder: Write failure EFAULT in pid:1300 [ 296.170690][T13428] binder: Bad value for 'defcontext' [ 296.174577][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.189286][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.207673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.214774][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.241965][T13432] rust_binder: Write failure EINVAL in pid:371 [ 296.359049][T13439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 296.379789][T13435] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.400429][T13412] veth0_vlan: entered promiscuous mode [ 296.440961][T13444] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.467531][T13412] veth1_macvtap: entered promiscuous mode [ 296.574125][T13451] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.830392][T13467] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.870142][T13467] rust_binder: Error while translating object. [ 296.886974][T13467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 296.916615][T13467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1320 [ 296.943909][T13476] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.953752][T13474] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.961079][T13477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.980131][T13477] rust_binder: Write failure EINVAL in pid:383 [ 297.035079][T13472] can0: slcan on ptm0. [ 297.174554][T13471] can0 (unregistered): slcan off ptm0. [ 297.200771][T13482] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 297.200802][T13482] rust_binder: Error while translating object. [ 297.234526][T13482] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 297.251880][T13482] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:385 [ 297.279408][T13495] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 297.301175][T13495] rust_binder: Error in use_page_slow: ESRCH [ 297.311658][T13495] rust_binder: use_range failure ESRCH [ 297.317763][T13495] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 297.361241][T13495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 297.362389][T13499] SELinux: security_context_str_to_sid (sytewCp9<`49 m;Elj &C)HuF/) failed with errno=-22 [ 297.369275][T13495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:134 [ 297.590107][T13515] binder: Unknown parameter 'fscontext?}' [ 297.619794][T13519] rust_binder: Write failure EFAULT in pid:139 [ 297.749042][T13524] SELinux: policydb string length 536870920 does not match expected length 8 [ 297.813653][T13524] SELinux: failed to load policy [ 297.846842][T13536] rust_binder: Write failure EINVAL in pid:15 [ 297.849253][T13536] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 297.854014][T13533] binder: Unknown parameter 'processor : 0 [ 297.854014][T13533] vendor_id : GenuineIntel [ 297.854014][T13533] cpu family : 6 [ 297.854014][T13533] model : 79 [ 297.854014][T13533] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 297.854014][T13533] stepping : 0 [ 297.854014][T13533] microcode : 0xffffffff [ 297.854014][T13533] cpu MHz : 2200.220 [ 297.854014][T13533] cache size : 56320 KB [ 297.854014][T13533] physical id : 0 [ 297.854014][T13533] siblings : 2 [ 297.854014][T13533] core id : 0 [ 297.854014][T13533] cpu cores : 1 [ 297.854014][T13533] apicid : 0 [ 297.854014][T13533] initial apicid : 0 [ 297.854014][T13533] fpu : yes [ 297.854014][T13533] fpu_exception : yes [ 297.854014][T13533] cpuid level : 13 [ 297.854014][T13533] wp : yes [ 297.854014][T13533] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 297.854014][T13533] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 297.863398][ T36] kauditd_printk_skb: 3457 callbacks suppressed [ 297.863415][ T36] audit: type=1400 audit(1750369793.499:74860): avc: denied { search } for pid=13530 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.874034][T13536] rust_binder: Read failure Err(EFAULT) in pid:15 [ 297.999339][ T36] audit: type=1400 audit(1750369793.499:74861): avc: denied { search } for pid=13530 comm="rm" name="dhcpcd" dev="tmpfs" ino=420 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.055596][ T36] audit: type=1400 audit(1750369793.499:74862): avc: denied { search } for pid=13530 comm="rm" name="hook-state" dev="tmpfs" ino=424 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.078278][ T36] audit: type=1400 audit(1750369793.509:74863): avc: denied { search } for pid=13487 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.103020][ T36] audit: type=1400 audit(1750369793.679:74864): avc: denied { ioctl } for pid=13535 comm="syz.7.4072" path="/dev/binderfs/binder0" dev="binder" ino=50 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 298.128997][T13536] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 298.169274][T13540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.185518][T13542] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.199215][ T36] audit: type=1400 audit(1750369793.749:74865): avc: denied { ioctl } for pid=13535 comm="syz.7.4072" path="/dev/binderfs/binder0" dev="binder" ino=50 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 298.212783][T13540] audit: audit_lost=258 audit_rate_limit=0 audit_backlog_limit=64 [ 298.226470][T13544] audit: audit_backlog=65 > audit_backlog_limit=64 [ 298.460071][T13553] rust_binder: Write failure EINVAL in pid:397 [ 298.486612][T13553] binder: Bad value for 'max' [ 298.530411][T13560] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 298.739816][T13566] rust_binder: Write failure EFAULT in pid:399 [ 298.887862][T13578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:401 [ 298.907501][T13572] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 298.929544][T13572] rust_binder: Error in use_page_slow: EBUSY [ 298.951958][T13572] rust_binder: use_range failure EBUSY [ 298.969783][T13572] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 298.975293][T13572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 298.985425][T13581] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 299.018961][T13572] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 299.050344][T13572] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:401 [ 299.320614][T13602] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 299.605627][T13614] rust_binder: Error while translating object. [ 299.605666][T13614] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 299.621451][T13614] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 299.805628][T13623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 299.806314][T13622] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 299.834210][T13623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 299.886543][T13627] rust_binder: Write failure EINVAL in pid:41 [ 299.920674][T13629] binder: Bad value for 'max' [ 299.954479][T13631] binder: Unknown parameter 'nXI' [ 300.290324][T13650] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true [ 300.290353][T13650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 300.298445][T13650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1342 [ 300.319794][T13650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.340600][T13650] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 300.347824][T13650] rust_binder: Error while translating object. [ 300.356622][T13650] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.363036][T13650] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1342 [ 300.415587][T13652] kvm: kvm [13651]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 300.528857][T13654] rust_binder: Write failure EFAULT in pid:1344 [ 300.657923][T13664] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 89) [ 300.665238][T13664] rust_binder: Error while translating object. [ 300.687041][T13664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 300.701093][T13667] rust_binder: Write failure EFAULT in pid:1350 [ 300.709546][T13664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:442 [ 300.866140][T13675] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 300.939152][T13680] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 300.966515][T13677] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 300.966538][T13677] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 300.985926][T13677] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 301.101668][T13691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 301.128567][T13691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 301.206063][T13695] binder: Bad value for 'stats' [ 301.275091][T13698] input: syz1 as /devices/virtual/input/input208 [ 301.295632][T13698] input: syz0 as /devices/virtual/input/input209 [ 301.457879][T13700] rust_binder: Write failure EFAULT in pid:57 [ 301.457934][T13701] rust_binder: Write failure EFAULT in pid:57 [ 301.611836][T13715] can0: slcan on ptm0. [ 301.667673][T13715] can0 (unregistered): slcan off ptm0. [ 301.699942][T13720] rust_binder: Write failure EINVAL in pid:69 [ 301.942408][T13731] rust_binder: Error while translating object. [ 301.960135][T13731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 301.966420][T13731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:173 [ 302.280082][T13745] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 302.317422][T13745] SELinux: failed to load policy [ 302.437274][T13751] rust_binder: Got transaction with invalid offset. [ 302.437309][T13751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.444017][T13751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1364 [ 302.464815][T13749] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 302.464963][T13751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 302.474613][T13749] rust_binder: Error in use_page_slow: EBUSY [ 302.492199][T13751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1364 [ 302.497230][T13749] rust_binder: use_range failure EBUSY [ 302.501295][T13751] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 302.511018][T13749] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 302.515031][T13751] rust_binder: Read failure Err(EFAULT) in pid:1364 [ 302.523936][T13749] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 302.546371][T13749] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 302.556053][T13752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 302.556981][T13749] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:182 [ 302.847831][T13767] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 302.878691][ T36] kauditd_printk_skb: 1239 callbacks suppressed [ 302.878705][ T36] audit: type=1400 audit(1750369798.519:76046): avc: denied { mounton } for pid=13766 comm="syz.6.4145" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.892579][T13769] binder: Unknown parameter 'coyBLV"i5ntext' [ 302.915955][T13767] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 302.955604][ T36] audit: type=1400 audit(1750369798.529:76047): avc: denied { remount } for pid=13768 comm="syz.1.4146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 302.992590][T13773] rust_binder: Read failure Err(EAGAIN) in pid:185 [ 303.009744][ T36] audit: type=1400 audit(1750369798.559:76048): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.059625][ T36] audit: type=1400 audit(1750369798.559:76049): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.112621][T13781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1371 [ 303.113428][T13781] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 303.125184][T13779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.149548][ T36] audit: type=1400 audit(1750369798.559:76050): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.161808][T13783] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.177732][T13779] audit: audit_lost=279 audit_rate_limit=0 audit_backlog_limit=64 [ 303.191625][T13784] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.195517][T13412] audit: audit_backlog=65 > audit_backlog_limit=64 [ 303.219769][T13784] input: syz0 as /devices/virtual/input/input210 [ 303.295362][T13783] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.319220][T13783] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 303.319253][T13783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 303.559729][T13802] rust_binder: Read failure Err(EAGAIN) in pid:190 [ 303.600477][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.614697][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.614940][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.630995][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.631239][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.638231][T13804] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 303.760433][T13815] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:486 [ 303.875136][T13820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.110036][T13831] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 304.123876][T13831] rust_binder: Write failure EINVAL in pid:202 [ 304.527179][T13852] binfmt_misc: register: failed to install interpreter file ./file0 [ 304.549262][T13850] can0: slcan on ptm0. [ 304.576930][T13850] binder: Unknown parameter '0x000000000000000a' [ 304.594138][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.594412][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.596079][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.608382][T13852] binder: Unknown parameter '0x000000000000000a' [ 304.631792][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.632027][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.649292][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.654312][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.670710][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.675195][ T64] hid (null): invalid report_count 47227 [ 304.688987][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.689277][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.693142][ T64] hid (null): report_id 27532 is invalid [ 304.705850][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.714523][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.730043][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.740230][ T64] hid-generic 01FF:0004:0400.0015: unknown main item tag 0x1 [ 304.749825][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.765326][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.769518][ T64] hid-generic 01FF:0004:0400.0015: invalid report_count 47227 [ 304.779542][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.791287][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.791439][ T64] hid-generic 01FF:0004:0400.0015: item 0 2 1 9 parsing failed [ 304.804703][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.811869][T13849] can0 (unregistered): slcan off ptm0. [ 304.813357][ T64] hid-generic 01FF:0004:0400.0015: probe with driver hid-generic failed with error -22 [ 304.827104][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.872903][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.905945][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.915374][T13872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1391 [ 304.929391][T13872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1391 [ 304.949672][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.959207][T13856] rust_binder: Write failure EINVAL in pid:212 [ 304.981682][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 304.988141][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.035377][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.049638][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.066471][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.073867][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.088066][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.105775][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.118742][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.125793][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.133351][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.141872][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.148601][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.155951][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.175980][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.186058][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.199802][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.200427][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.221684][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.245383][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.260817][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.277262][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.291410][T13891] rust_binder: Write failure EINVAL in pid:108 [ 305.293921][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.327395][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.346424][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.368847][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.383483][T13855] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 305.398941][T13856] rust_binder: Write failure EINVAL in pid:212 [ 305.539886][T13894] rust_binder: Error in use_page_slow: ESRCH [ 305.546082][T13894] rust_binder: use_range failure ESRCH [ 305.571208][T13894] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 305.584562][T13894] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 305.609520][T13894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:110 [ 305.703638][T13903] binder: Unknown parameter 'seclaq' [ 305.749753][T13903] binder: Unknown parameter 'seclaq' [ 305.764786][T13903] binder: Unknown parameter 'seclaq' [ 305.798902][T13903] binder: Unknown parameter 'seclaq' [ 305.829891][T13903] binder: Unknown parameter 'seclaq' [ 305.855983][T13903] binder: Unknown parameter 'seclaq' [ 305.893728][T13903] binder: Unknown parameter 'seclaq' [ 305.909719][T13903] binder: Unknown parameter 'seclaq' [ 305.917033][T13903] binder: Unknown parameter 'seclaq' [ 305.923625][T13903] binder: Unknown parameter 'seclaq' [ 305.939279][T13903] binder: Unknown parameter 'seclaq' [ 305.946447][T13903] binder: Unknown parameter 'seclaq' [ 305.967513][T13903] binder: Unknown parameter 'seclaq' [ 305.981339][T13903] binder: Unknown parameter 'seclaq' [ 306.009232][T13903] binder: Unknown parameter 'seclaq' [ 306.023537][T13903] binder: Unknown parameter 'seclaq' [ 306.039135][T13903] binder: Unknown parameter 'seclaq' [ 306.050764][T13903] binder: Unknown parameter 'seclaq' [ 306.070978][T13903] binder: Unknown parameter 'seclaq' [ 306.080651][T13903] binder: Unknown parameter 'seclaq' [ 306.089378][T13903] binder: Unknown parameter 'seclaq' [ 306.099158][T13903] binder: Unknown parameter 'seclaq' [ 306.107203][T13903] binder: Unknown parameter 'seclaq' [ 306.117279][T13903] binder: Unknown parameter 'seclaq' [ 306.136775][T13903] binder: Unknown parameter 'seclaq' [ 306.155754][T13903] binder: Unknown parameter 'seclaq' [ 306.162373][T13903] binder: Unknown parameter 'seclaq' [ 306.169187][T13903] binder: Unknown parameter 'seclaq' [ 306.176908][T13903] binder: Unknown parameter 'seclaq' [ 306.192484][T13903] binder: Unknown parameter 'seclaq' [ 306.212424][T13903] binder: Unknown parameter 'seclaq' [ 306.223178][T13903] binder: Unknown parameter 'seclaq' [ 306.235839][T13903] binder: Unknown parameter 'seclaq' [ 306.239531][T13925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 306.243823][T13925] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:501 [ 306.245839][T13903] binder: Unknown parameter 'seclaq' [ 306.280716][T13925] input: syz0 as /devices/virtual/input/input213 [ 306.299564][T13903] binder: Unknown parameter 'seclaq' [ 306.303079][T13925] binder: Bad value for 'max' [ 306.311909][T13903] binder: Unknown parameter 'seclaq' [ 306.336414][T13903] binder: Unknown parameter 'seclaq' [ 306.348687][T13903] binder: Unknown parameter 'seclaq' [ 306.364358][T13903] binder: Unknown parameter 'seclaq' [ 306.381192][T13903] binder: Unknown parameter 'seclaq' [ 306.396671][T13903] binder: Unknown parameter 'seclaq' [ 306.412964][T13903] binder: Unknown parameter 'seclaq' [ 306.421705][T13903] binder: Unknown parameter 'seclaq' [ 306.428316][T13903] binder: Unknown parameter 'seclaq' [ 306.435412][T13903] binder: Unknown parameter 'seclaq' [ 306.445944][T13903] binder: Unknown parameter 'seclaq' [ 306.470511][T13903] binder: Unknown parameter 'seclaq' [ 306.482667][T13903] binder: Unknown parameter 'seclaq' [ 306.502840][T13903] binder: Unknown parameter 'seclaq' [ 306.514878][T13903] binder: Unknown parameter 'seclaq' [ 306.556415][T13930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:503 [ 306.891630][T13944] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 306.901327][T13944] rust_binder: Error while translating object. [ 306.919543][T13944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 306.935970][T13944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 307.116963][T13952] SELinux: failed to load policy [ 307.195677][T13954] rust_binder: Write failure EFAULT in pid:509 [ 307.196050][T13954] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 307.205155][T13954] rust_binder: Error in use_page_slow: EBUSY [ 307.224704][T13954] rust_binder: use_range failure EBUSY [ 307.233115][T13954] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 307.238736][T13954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 307.251359][T13954] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 307.262475][T13954] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:509 [ 307.411354][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.445586][T13974] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 307.489913][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.490153][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.507302][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.532922][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.549413][T13974] rust_binder: Write failure EINVAL in pid:135 [ 307.550287][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.576109][T13981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:518 [ 307.588557][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.605308][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.630905][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.646905][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.653821][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.663026][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.669869][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.676638][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.718050][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.743644][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.763839][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.775583][T13985] kvm: Disabled LAPIC found during irq injection [ 307.794825][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.795083][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.819028][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.836331][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.856479][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.878319][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.891326][ T36] kauditd_printk_skb: 1477 callbacks suppressed [ 307.891360][ T36] audit: type=1400 audit(1750369803.539:77512): avc: denied { read } for pid=13986 comm="syz.0.4211" name="binder1" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.907871][ T36] audit: type=1400 audit(1750369803.539:77513): avc: denied { read open } for pid=13986 comm="syz.0.4211" path="/dev/binderfs/binder1" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 307.929779][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.959532][T13988] kvm: kvm [13983]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 307.997931][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.998183][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.003788][ T36] audit: type=1400 audit(1750369803.539:77514): avc: denied { read } for pid=13983 comm="syz.1.4210" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.018669][T13992] rust_binder: Error while translating object. [ 308.034691][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.060202][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.066899][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.099182][ T36] audit: type=1400 audit(1750369803.539:77515): avc: denied { read open } for pid=13983 comm="syz.1.4210" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.130564][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.130805][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.156213][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.167390][T13992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 308.175976][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.180252][ T36] audit: type=1400 audit(1750369803.539:77516): avc: denied { map } for pid=13986 comm="syz.0.4211" path="/dev/binderfs/binder1" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 308.194916][T13992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:520 [ 308.216379][T13973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 308.223168][T13996] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.244500][T13996] audit: audit_lost=286 audit_rate_limit=0 audit_backlog_limit=64 [ 308.261162][T13996] audit: backlog limit exceeded [ 308.270064][ T36] audit: type=1400 audit(1750369803.539:77517): avc: denied { read } for pid=13986 comm="syz.0.4211" path="/dev/binderfs/binder1" dev="binder" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 308.298545][T12977] audit: audit_backlog=65 > audit_backlog_limit=64 [ 308.476401][T14004] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 308.940948][T14016] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 308.958072][T14016] SELinux: failed to load policy [ 309.379933][T14034] SELinux: security_context_str_to_sid () failed with errno=-22 [ 309.510287][T14039] rtc_cmos 00:00: Alarms can be up to one day in the future [ 309.589974][T14037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 309.629089][T14045] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:546 [ 310.139260][T14071] rust_binder: Write failure EINVAL in pid:154 [ 310.157522][T14075] rust_binder: Write failure EINVAL in pid:154 [ 310.183760][T14076] rust_binder: Got transaction with invalid offset. [ 310.197901][T14076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 310.212598][T14076] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404 [ 310.246722][T14079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.259042][T14079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 310.293725][ T468] rtc_cmos 00:00: Alarms can be up to one day in the future [ 310.318009][ T468] rtc_cmos 00:00: Alarms can be up to one day in the future [ 310.335577][ T468] rtc_cmos 00:00: Alarms can be up to one day in the future [ 310.350915][ T468] rtc_cmos 00:00: Alarms can be up to one day in the future [ 310.351062][ T1223] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz1 [ 310.360888][ T468] rtc rtc0: __rtc_set_alarm: err=-22 [ 310.496494][T14088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1412 [ 310.498337][T14086] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 310.519768][T14086] rust_binder: Error in use_page_slow: EBUSY [ 310.532413][T14086] rust_binder: use_range failure EBUSY [ 310.538779][T14086] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 310.558206][T14086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 310.577871][T14086] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 310.640134][T14086] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:1412 [ 310.830923][T14096] input: syz1 as /devices/virtual/input/input214 [ 310.853089][T14098] rust_binder: Write failure EINVAL in pid:269 [ 311.068812][T14108] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.077263][T14108] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 311.089747][T14108] rust_binder: Error while translating object. [ 311.098417][T14108] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 311.139514][T14108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 311.159751][T14111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.194029][T14111] rust_binder: Error while translating object. [ 311.199971][T14117] rust_binder: Error while translating object. [ 311.208142][T14111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 311.215619][T14117] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 311.225962][T14111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:160 [ 311.235698][T14119] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.246576][T14117] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1426 [ 311.380513][T14125] FAULT_INJECTION: forcing a failure. [ 311.380513][T14125] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 311.459641][T14130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 311.469521][T14125] CPU: 0 UID: 0 PID: 14125 Comm: syz.1.4251 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d [ 311.469550][T14125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.469567][T14125] Call Trace: [ 311.469574][T14125] [ 311.469581][T14125] __dump_stack+0x21/0x30 [ 311.469602][T14125] dump_stack_lvl+0x10c/0x190 [ 311.469619][T14125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 311.469636][T14125] dump_stack+0x19/0x20 [ 311.469652][T14125] should_fail_ex+0x3d9/0x530 [ 311.469668][T14125] should_fail+0xf/0x20 [ 311.469682][T14125] should_fail_usercopy+0x1e/0x30 [ 311.469698][T14125] _copy_to_user+0x24/0xa0 [ 311.469716][T14125] simple_read_from_buffer+0xed/0x160 [ 311.469737][T14125] proc_fail_nth_read+0x19e/0x210 [ 311.469752][T14125] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 311.469766][T14125] ? bpf_lsm_file_permission+0xd/0x20 [ 311.469781][T14125] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 311.469795][T14125] vfs_read+0x278/0xb60 [ 311.469812][T14125] ? __cfi_vfs_read+0x10/0x10 [ 311.469827][T14125] ? __kasan_check_write+0x18/0x20 [ 311.469848][T14125] ? mutex_lock+0x92/0x1c0 [ 311.469862][T14125] ? __cfi_mutex_lock+0x10/0x10 [ 311.469875][T14125] ? __fget_files+0x2c5/0x340 [ 311.469895][T14125] ksys_read+0x141/0x250 [ 311.469911][T14125] ? __cfi_ksys_read+0x10/0x10 [ 311.469926][T14125] ? fdget+0x189/0x1f0 [ 311.469944][T14125] ? __kasan_check_read+0x15/0x20 [ 311.469959][T14125] __x64_sys_read+0x7f/0x90 [ 311.469975][T14125] x64_sys_call+0x2638/0x2ee0 [ 311.469992][T14125] do_syscall_64+0x58/0xf0 [ 311.470015][T14125] ? clear_bhb_loop+0x35/0x90 [ 311.470035][T14125] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 311.470057][T14125] RIP: 0033:0x7fe8ddf8d33c [ 311.470074][T14125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.470087][T14125] RSP: 002b:00007fe8ded35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.470105][T14125] RAX: ffffffffffffffda RBX: 00007fe8de1b5fa0 RCX: 00007fe8ddf8d33c [ 311.470117][T14125] RDX: 000000000000000f RSI: 00007fe8ded350a0 RDI: 0000000000000003 [ 311.470126][T14125] RBP: 00007fe8ded35090 R08: 0000000000000000 R09: 0000000000000000 [ 311.470136][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.470146][T14125] R13: 0000000000000000 R14: 00007fe8de1b5fa0 R15: 00007fff8cd4c128 [ 311.470159][T14125] [ 311.741164][T14133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 311.741660][T14133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 312.150521][T14155] binder: Unknown parameter ':Ҁ6_I蓮wm?' [ 312.650882][T14179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:579 [ 312.762286][T14196] rust_binder: Error while translating object. [ 312.789550][T14196] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.826187][T14196] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1449 [ 312.850883][T14198] binder: Unknown parameter 'uid' [ 312.899483][ T36] kauditd_printk_skb: 884 callbacks suppressed [ 312.899500][ T36] audit: type=1400 audit(1750369808.539:78388): avc: denied { read write open } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 312.979768][ T36] audit: type=1400 audit(1750369808.539:78389): avc: denied { ioctl } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.036826][T14206] rust_binder: Write failure EINVAL in pid:1453 [ 313.071561][ T36] audit: type=1400 audit(1750369808.589:78390): avc: denied { read } for pid=14201 comm="syz.7.4275" name="binder0" dev="binder" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.138452][ T36] audit: type=1400 audit(1750369808.589:78391): avc: denied { read open } for pid=14201 comm="syz.7.4275" path="/dev/binderfs/binder0" dev="binder" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.201765][T14208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.213462][ T36] audit: type=1400 audit(1750369808.589:78392): avc: denied { read } for pid=14201 comm="syz.7.4275" name="binder0" dev="binder" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.254413][T12063] audit: audit_backlog=65 > audit_backlog_limit=64 [ 313.261162][T14208] audit: audit_lost=292 audit_rate_limit=0 audit_backlog_limit=64 [ 313.279527][T14208] audit: backlog limit exceeded [ 313.284469][ T36] audit: type=1400 audit(1750369808.589:78393): avc: denied { read open } for pid=14201 comm="syz.7.4275" path="/dev/binderfs/binder0" dev="binder" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 313.885512][T14234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 313.988190][T14236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 314.070776][T14242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 314.185414][T14254] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 314.862989][T14280] SELinux: security_context_str_to_sid (0xffffffffffffffff) failed with errno=-22 [ 315.216660][T14309] binder: Bad value for 'max' [ 315.225204][T14310] binder: Bad value for 'max' [ 315.318701][T14318] binder: Unknown parameter 'non' [ 315.330874][T14316] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1473 [ 315.339192][T14308] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1473 [ 315.527042][T14315] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 315.532426][T14327] input: syz1 as /devices/virtual/input/input221 [ 315.597607][T14331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 315.846645][T14345] binder: Unknown parameter 'non' [ 315.890778][T14347] binder: Unknown parameter 'defcontext01777777777777777777777' [ 315.951282][T14347] input: syz0 as /devices/virtual/input/input223 [ 315.974695][T14347] input: failed to attach handler leds to device input223, error: -6 [ 316.120384][T14354] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.230206][T14357] binder: Bad value for 'stats' [ 316.258657][T14362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.269854][T14363] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 316.287046][T14362] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 316.316954][T14363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 316.319539][T14362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 316.338336][T14362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:196 [ 316.351490][T14363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:196 [ 316.382690][ T1223] hid (null): unknown global tag 0xd [ 316.401998][ T1223] hid (null): unknown global tag 0xd [ 316.408172][ T1223] hid-generic 0008:FFFFFFFA:0F5C.0017: unknown global tag 0xd [ 316.429509][ T1223] hid-generic 0008:FFFFFFFA:0F5C.0017: item 0 1 1 13 parsing failed [ 316.439651][ T1223] hid-generic 0008:FFFFFFFA:0F5C.0017: probe with driver hid-generic failed with error -22 [ 316.574403][T14377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 316.577527][T14377] rust_binder: Error in use_page_slow: ESRCH [ 316.597840][T14377] rust_binder: use_range failure ESRCH [ 316.623400][T14377] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 316.639547][T14377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 316.657777][T14377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:201 [ 317.316125][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 317.611312][T14415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.784085][T14425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 317.913896][ T36] kauditd_printk_skb: 891 callbacks suppressed [ 317.913913][ T36] audit: type=1400 audit(1750369813.559:79274): avc: denied { read write } for pid=14433 comm="syz.0.4354" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 317.944965][ T36] audit: type=1400 audit(1750369813.559:79275): avc: denied { read open } for pid=14433 comm="syz.0.4354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 317.969616][ T36] audit: type=1400 audit(1750369813.559:79276): avc: denied { map } for pid=14433 comm="syz.0.4354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 317.994379][ T36] audit: type=1400 audit(1750369813.559:79277): avc: denied { read } for pid=14433 comm="syz.0.4354" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 318.023119][ T36] audit: type=1400 audit(1750369813.629:79278): avc: denied { read write } for pid=7833 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.054042][ T36] audit: type=1400 audit(1750369813.629:79279): avc: denied { read write open } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.080228][ T36] audit: type=1400 audit(1750369813.629:79280): avc: denied { ioctl } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.111504][ T36] audit: type=1400 audit(1750369813.699:79281): avc: denied { read write } for pid=7833 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.137406][ T36] audit: type=1400 audit(1750369813.699:79282): avc: denied { read write open } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.163759][ T36] audit: type=1400 audit(1750369813.699:79283): avc: denied { ioctl } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 318.180831][T14439] binder: Unknown parameter '' [ 318.297012][T14442] binder: Bad value for 'max' [ 318.410359][T14452] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1517 [ 318.420634][T14452] rust_binder: Read failure Err(EFAULT) in pid:1517 [ 318.574607][T14467] binder: Bad value for 'stats' [ 318.609974][T14471] binder: Binderfs stats mode cannot be changed during a remount [ 318.646841][T14476] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 318.649753][T14474] binder: Unknown parameter 'coyBLV"i5ntext' [ 318.659158][T14476] rust_binder: Write failure EFAULT in pid:221 [ 318.772788][T14482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.899792][T14488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 318.910870][T14486] rust_binder: Write failure EINVAL in pid:225 [ 318.991867][T14495] random: crng reseeded on system resumption [ 319.030758][T14497] rust_binder: Write failure EFAULT in pid:1531 [ 319.038519][T14497] rust_binder: Write failure EFAULT in pid:1531 [ 319.105291][T14506] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 319.111629][T14503] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 319.129910][T14506] rust_binder: Error in use_page_slow: ESRCH [ 319.129928][T14506] rust_binder: use_range failure ESRCH [ 319.135925][T14506] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 319.141484][T14506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 319.149828][T14506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1535 [ 319.279719][T14515] binder: Unknown parameter 'defcontext01777777777777777777777' [ 319.299818][T14519] binder: Bad value for 'stats' [ 319.379510][ T963] Bluetooth: hci0: command 0x1003 tx timeout [ 319.385549][ T8341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 319.439641][T14532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1544 [ 319.441156][T14530] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 319.460330][T14534] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 319.533116][T14539] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 319.533420][T14539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 319.553272][T14539] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 319.567480][T14544] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255) [ 319.579365][T14539] rust_binder: Error while translating object. [ 319.598935][T14544] rust_binder: Error while translating object. [ 319.605229][T14544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 319.611520][T14539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 319.621048][T14544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 319.630599][T14539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:660 [ 320.092583][T14568] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.105371][T14568] rust_binder: Write failure EINVAL in pid:257 [ 320.354885][T14587] rust_binder: Write failure EINVAL in pid:664 [ 320.401619][T14589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.407847][T14592] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.426527][T14589] rust_binder: Error in use_page_slow: ESRCH [ 320.433015][T14589] rust_binder: use_range failure ESRCH [ 320.443300][T14589] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 320.448779][T14589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 320.458048][T14589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:265 [ 320.663791][T14605] rust_binder: Error while translating object. [ 320.674781][T14605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 320.686567][T14605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:271 [ 320.810504][T14617] binder: Bad value for 'max' [ 320.844726][T14617] random: crng reseeded on system resumption [ 321.023658][T14625] random: crng reseeded on system resumption [ 321.214482][T14634] rust_binder: Error while translating object. [ 321.214508][T14634] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 321.220764][T14634] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:681 [ 321.601934][T14652] random: crng reseeded on system resumption [ 321.640229][T14661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 321.651016][T14652] Restarting kernel threads ... done. [ 321.749891][T14670] SELinux: policydb magic number 0x3942318c does not match expected magic number 0xf97cff8c [ 321.790340][T14670] SELinux: failed to load policy [ 321.834951][T14681] binder: Unknown parameter 'defcontext01777777777777777777777' [ 321.875959][T14677] input: syz0 as /devices/virtual/input/input227 [ 322.131655][T14698] binder: Bad value for 'max' [ 322.135415][T14699] SELinux: security_context_str_to_sid () failed with errno=-22 [ 322.228573][T14706] rust_binder: Error while translating object. [ 322.228603][T14706] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 322.239526][T14706] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:713 [ 322.269921][T14703] SELinux: security_context_str_to_sid () failed with errno=-22 [ 322.382222][T14710] binder: Unknown parameter 'context' [ 322.483465][T14717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:288 [ 322.529784][T14717] rust_binder: Read failure Err(EFAULT) in pid:288 [ 322.560909][T14720] binder: Binderfs stats mode cannot be changed during a remount [ 322.622036][T14724] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.674628][T14725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.687724][T14725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 322.710038][T14725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 322.795850][T14732] binder: Unknown parameter 'conttxt' [ 322.924535][ T36] kauditd_printk_skb: 1069 callbacks suppressed [ 322.924552][ T36] audit: type=1400 audit(1750369818.569:80353): avc: denied { read } for pid=14738 comm="syz.0.4449" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 322.979556][ T36] audit: type=1400 audit(1750369818.599:80354): avc: denied { read open } for pid=14738 comm="syz.0.4449" path="/dev/binderfs/binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 323.005138][ T36] audit: type=1400 audit(1750369818.599:80355): avc: denied { read } for pid=14738 comm="syz.0.4449" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.028721][ T36] audit: type=1400 audit(1750369818.599:80356): avc: denied { read open } for pid=14738 comm="syz.0.4449" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.054226][T14740] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.070128][T14745] input: syz1 as /devices/virtual/input/input228 [ 323.071434][T14740] rust_binder: Error in use_page_slow: ESRCH [ 323.082157][T14745] input: failed to attach handler leds to device input228, error: -6 [ 323.087685][T14739] rust_binder: Error in use_page_slow: ESRCH [ 323.103804][ T36] audit: type=1400 audit(1750369818.609:80357): avc: denied { ioctl } for pid=14738 comm="syz.0.4449" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.108225][T14740] rust_binder: use_range failure ESRCH [ 323.110810][ T36] audit: type=1400 audit(1750369818.609:80358): avc: denied { read } for pid=14741 comm="syz.1.4450" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.149121][T14740] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 323.163133][T14739] rust_binder: use_range failure ESRCH [ 323.171649][T14739] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 323.176405][T14739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 323.181748][T14745] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 323.196581][T14745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1573 [ 323.199517][T14739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:453 [ 323.206105][T14740] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 323.234421][ T36] audit: type=1400 audit(1750369818.609:80359): avc: denied { read open } for pid=14741 comm="syz.1.4450" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.253212][T14740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:453 [ 323.268454][ T36] audit: type=1400 audit(1750369818.609:80360): avc: denied { ioctl } for pid=14741 comm="syz.1.4450" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 323.302403][ T36] audit: type=1400 audit(1750369818.619:80361): avc: denied { read } for pid=14741 comm="syz.1.4450" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.349189][ T36] audit: type=1400 audit(1750369818.619:80362): avc: denied { read open } for pid=14741 comm="syz.1.4450" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.535989][T14764] SELinux: failed to load policy [ 323.537670][T14767] SELinux: syz.6.4459 (14767) set checkreqprot to 1. This is no longer supported. [ 323.546873][T14769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.558854][T14769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 323.579541][T14769] rust_binder: Error in use_page_slow: ESRCH [ 323.582495][T14767] rust_binder: Write failure EINVAL in pid:1580 [ 323.588292][T14769] rust_binder: use_range failure ESRCH [ 323.607003][T14769] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 323.612609][T14769] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 323.620701][T14769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:293 [ 323.633994][T14778] rust_binder: Error in use_page_slow: ESRCH [ 323.658634][T14778] rust_binder: use_range failure ESRCH [ 323.678836][T14778] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 323.696103][T14778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 323.721403][T14778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:293 [ 323.727930][T14781] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 323.762042][T14781] SELinux: failed to load policy [ 323.843523][T14788] input: syz1 as /devices/virtual/input/input229 [ 323.981700][T14795] input: syz0 as /devices/virtual/input/input230 [ 323.998285][T14795] input: failed to attach handler leds to device input230, error: -6 [ 324.079583][T14797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:464 [ 324.080197][T14793] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 324.118812][T14793] rust_binder: Error in use_page_slow: EBUSY [ 324.146895][T14793] rust_binder: use_range failure EBUSY [ 324.159041][T14793] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 324.180223][T14793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 324.209533][T14793] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 324.237242][T14804] kvm: kvm [14800]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 324.282650][T14793] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:464 [ 324.505123][ T60] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.553944][T14811] Bluetooth: hci0: Frame reassembly failed (-84) [ 324.671364][T14823] SELinux: failed to load policy [ 324.738522][T14830] rust_binder: Write failure EINVAL in pid:477 [ 324.739137][T14828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:477 [ 324.907959][T14834] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 324.947218][T14834] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 325.110273][T14836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.226909][T14837] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 325.247957][T14837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 325.284360][T14840] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 325.349099][T14841] rust_binder: Error in use_page_slow: ESRCH [ 325.355714][T14841] rust_binder: use_range failure ESRCH [ 325.361922][T14841] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 325.378621][T14841] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 325.398493][T14841] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1598 [ 325.421623][T14842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1598 [ 325.719377][T14853] binder: Unknown parameter '' [ 325.888541][T14860] input: syz0 as /devices/virtual/input/input231 [ 325.914491][T14860] input: syz1 as /devices/virtual/input/input232 [ 325.920936][T14860] input: failed to attach handler leds to device input232, error: -6 [ 326.204141][T14877] input: syz1 as /devices/virtual/input/input235 [ 326.411169][T14891] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585) [ 326.411194][T14891] rust_binder: Error while translating object. [ 326.436510][T14891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.451466][T14891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:500 [ 326.579768][ T963] Bluetooth: hci0: command 0x1003 tx timeout [ 326.579862][ T8341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.599533][T14897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 326.603253][T14897] rust_binder: Error while translating object. [ 326.612674][T14897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 326.620127][T14897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:504 [ 326.745004][T14901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:506 [ 326.765274][T14901] rust_binder: Write failure EINVAL in pid:506 [ 326.766002][T14906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:795 [ 326.827345][T14914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303 [ 326.874697][T14911] kvm: kvm [14910]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xfff [ 326.897607][T14918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.919027][T14911] SELinux: security_context_str_to_sid () failed with errno=-22 [ 326.995992][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.996274][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.009330][T14927] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.016613][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.024220][T14928] rust_binder: Got transaction with invalid offset. [ 327.032128][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.038834][T14928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.045707][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.055188][T14928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:804 [ 327.062027][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.071520][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.082971][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.098223][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.105497][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.113371][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.120663][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.127413][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.134861][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.142582][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.149356][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.156891][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.164181][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.171595][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.178248][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.185598][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.192882][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.200004][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.206653][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.213582][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.220670][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.228330][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.235507][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.242332][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.249085][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.255882][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.262868][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.270389][T14926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.280833][T14939] binder: Unknown parameter 'nXI' [ 327.349074][T14944] SELinux: security_context_str_to_sid () failed with errno=-22 [ 327.395707][T14949] input: syz0 as /devices/virtual/input/input236 [ 327.561341][T14956] rust_binder: Error while translating object. [ 327.561373][T14956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 327.573892][T14956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:510 [ 327.809388][T14973] rust_binder: Write failure EINVAL in pid:512 [ 327.936944][ T36] kauditd_printk_skb: 1122 callbacks suppressed [ 327.936963][ T36] audit: type=1400 audit(1750369823.579:81461): avc: denied { read } for pid=14980 comm="syz.6.4524" name="binder0" dev="binder" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 327.938291][T14981] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.943337][ T36] audit: type=1400 audit(1750369823.579:81462): avc: denied { read open } for pid=14980 comm="syz.6.4524" path="/dev/binderfs/binder0" dev="binder" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.003955][ T36] audit: type=1400 audit(1750369823.579:81463): avc: denied { ioctl } for pid=14980 comm="syz.6.4524" path="/dev/binderfs/binder0" dev="binder" ino=63 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.029721][ T36] audit: type=1400 audit(1750369823.599:81464): avc: denied { read } for pid=14980 comm="syz.6.4524" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.052639][ T36] audit: type=1400 audit(1750369823.599:81465): avc: denied { read open } for pid=14980 comm="syz.6.4524" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.083493][ T36] audit: type=1400 audit(1750369823.599:81466): avc: denied { ioctl } for pid=14980 comm="syz.6.4524" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.108409][ T36] audit: type=1400 audit(1750369823.649:81467): avc: denied { read } for pid=14980 comm="syz.6.4524" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.131717][ T36] audit: type=1400 audit(1750369823.649:81468): avc: denied { read open } for pid=14980 comm="syz.6.4524" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 328.157479][ T36] audit: type=1400 audit(1750369823.659:81469): avc: denied { ioctl } for pid=14980 comm="syz.6.4524" path="/dev/binderfs/binder0" dev="binder" ino=63 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.188277][T14984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1633 [ 328.188581][ T36] audit: type=1400 audit(1750369823.729:81470): avc: denied { map } for pid=14980 comm="syz.6.4524" path="/dev/binderfs/binder0" dev="binder" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 328.188647][T14984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1633 [ 328.314077][T14993] input: syz1 as /devices/virtual/input/input237 [ 328.467092][T14998] binder: Unknown parameter '.(erI7h]S֞.稔?ϣ9ʈI{Hgֺ?I˫B-M' [ 328.664106][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.679551][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.686985][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.709501][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.716029][T15010] serio: Serial port ttynull [ 328.727433][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.735523][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.762601][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.781423][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.788866][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.797374][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.808991][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.816641][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.825322][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.833504][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.841689][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.849191][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.888712][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.896804][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.904929][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.912206][T15021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.913050][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.928346][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.936395][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.939618][T15021] binfmt_misc: register: failed to install interpreter file ./cgroup [ 328.944685][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.980869][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 328.988318][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 329.013606][T15021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 329.013633][T15021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1637 [ 329.017983][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 329.039798][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 329.047209][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 329.054688][ T64] hid-generic FFF2:0003:0004.0018: unknown main item tag 0x0 [ 329.063700][ T64] hid-generic FFF2:0003:0004.0018: hidraw0: HID v9d.67 Device [syz0] on syz0 [ 329.305225][T15037] rust_binder: Write failure EFAULT in pid:526 [ 329.318589][T15026] fido_id[15026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 329.342240][T15030] rust_binder: Error while translating object. [ 329.342265][T15030] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 329.348465][T15030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1639 [ 329.861888][T15085] binder: Unknown parameter '._ܶx:?rw' [ 329.929068][T15089] binder: Unknown parameter '._ܶx:?rw' [ 329.992124][T15091] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 330.020783][T15091] binfmt_misc: register: failed to install interpreter file ./cgroup [ 330.112744][T15107] rust_binder: Write failure EINVAL in pid:1655 [ 330.180011][T15106] SELinux: truncated policydb string identifier [ 330.193066][T15112] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 330.229607][T15106] SELinux: failed to load policy [ 330.429496][T15124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 330.659641][T15144] rust_binder: Write failure EFAULT in pid:343 [ 330.860077][T15155] binder: Unknown parameter 'processor : 0 [ 330.860077][T15155] vendor_id : GenuineIntel [ 330.860077][T15155] cpu family : 6 [ 330.860077][T15155] model : 79 [ 330.860077][T15155] model name : Intel(R) Xeon(R) CPU @ 2.20GHz [ 330.860077][T15155] stepping : 0 [ 330.860077][T15155] microcode : 0xffffffff [ 330.860077][T15155] cpu MHz : 2200.220 [ 330.860077][T15155] cache size : 56320 KB [ 330.860077][T15155] physical id : 0 [ 330.860077][T15155] siblings : 2 [ 330.860077][T15155] core id : 0 [ 330.860077][T15155] cpu cores : 1 [ 330.860077][T15155] apicid : 0 [ 330.860077][T15155] initial apicid : 0 [ 330.860077][T15155] fpu : yes [ 330.860077][T15155] fpu_exception : yes [ 330.860077][T15155] cpuid level : 13 [ 330.860077][T15155] wp : yes [ 330.860077][T15155] flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx pdpe1gb rdtscp lm constant_tsc rep_good nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq vmx ssse3 fma cx16 sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch pti ssbd ibrs ibpb stibp tpr_shadow flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat vnmi md_clear arch_capabilities [ 330.860077][T15155] vmx flags : vnmi preemption_timer invvpid ept_x_only ept_ad flexpriority tsc_offset vtpr mtf vapic ept vpid unrestricted_guest vapi [ 331.000449][T15161] kvm: kvm [15160]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0xa1a9 [ 331.319971][T15165] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.321091][T15165] rust_binder: Error while translating object. [ 331.327596][T15165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 331.333797][T15165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1665 [ 331.372843][T15168] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.679620][T15189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1677 [ 331.700522][T15191] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 331.750474][T15189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 331.760268][T15189] rust_binder: Error in use_page_slow: ESRCH [ 331.774436][T15189] rust_binder: use_range failure ESRCH [ 331.790731][T15189] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 331.806870][T15189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 331.816469][T15189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1677 [ 331.991655][T15198] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.211914][T15214] binder: Unknown parameter '㊴v00000000000000000004' [ 332.331054][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.331294][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.346513][T15220] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27 [ 332.353288][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.369515][T15220] rust_binder: Error while translating object. [ 332.375986][T15220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 332.389817][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.399292][T15220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:920 [ 332.406040][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.419837][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.433022][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.439773][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.446417][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.454137][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.468110][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.474843][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.489773][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.496439][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.503993][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.518177][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.524949][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.537955][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.544733][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.554001][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.567631][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.574388][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.587426][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.594194][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.604235][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.617375][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.624145][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.638635][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.651267][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.665438][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.672274][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.679020][T15219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.798621][T15227] binder: Unknown parameter '_Vm;Ƴo0 o:&T}h5ӻ)E' [ 332.871868][ T60] Bluetooth: hci0: Frame reassembly failed (-90) [ 332.879061][T15227] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.902498][T15227] Bluetooth: hci0: Frame reassembly failed (-84) [ 332.962969][ T36] kauditd_printk_skb: 828 callbacks suppressed [ 332.962986][ T36] audit: type=1400 audit(1750369828.609:82299): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.993813][ T36] audit: type=1400 audit(1750369828.609:82300): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.047190][ T36] audit: type=1400 audit(1750369828.609:82301): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 333.077407][ T36] audit: type=1400 audit(1750369828.609:82302): avc: denied { mounton } for pid=15230 comm="syz.7.4591" path="/112/binderfs2" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 333.127901][ T36] audit: type=1400 audit(1750369828.609:82303): avc: denied { mount } for pid=15230 comm="syz.7.4591" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 333.157628][ T36] audit: type=1400 audit(1750369828.609:82304): avc: denied { read } for pid=15230 comm="syz.7.4591" name="binder0" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 333.172182][T15233] binder: Bad value for 'max' [ 333.220734][ T36] audit: type=1400 audit(1750369828.609:82305): avc: denied { read open } for pid=15230 comm="syz.7.4591" path="/112/binderfs2/binder0" dev="binder" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 333.284048][ T36] audit: type=1400 audit(1750369828.609:82306): avc: denied { read } for pid=15230 comm="syz.7.4591" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.306733][T15244] rust_binder: Failed copying remainder into alloc: EFAULT [ 333.306815][T15244] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 333.317506][T15244] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 333.326582][T15244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:555 [ 333.327125][T15246] can0: slcan on ttyS3. [ 333.339279][ T36] audit: type=1400 audit(1750369828.609:82307): avc: denied { read open } for pid=15230 comm="syz.7.4591" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.374578][ T36] audit: type=1400 audit(1750369828.609:82308): avc: denied { read write } for pid=15230 comm="syz.7.4591" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 333.410221][ T468] hid-generic 0000:0000:0000.0019: item fetching failed at offset 0/1 [ 333.419709][ T468] hid-generic 0000:0000:0000.0019: probe with driver hid-generic failed with error -22 [ 333.430465][T15246] can0 (unregistered): slcan off ttyS3. [ 333.636845][T15260] kvm: kvm [15259]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 333.766445][T15266] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 333.819030][T15270] binder: Unknown parameter '' [ 333.860753][T15271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:567 [ 333.861337][T15268] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 333.871042][T15268] rust_binder: Error in use_page_slow: EBUSY [ 333.890169][T15268] rust_binder: use_range failure EBUSY [ 333.896237][T15268] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 333.902490][T15268] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 333.911424][T15273] kvm: kvm [15272]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff [ 333.924875][T15268] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 333.930580][T15268] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:567 [ 333.988712][T15277] rust_binder: Write failure EINVAL in pid:570 [ 334.254874][T15299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.267634][T15299] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.510189][T15310] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 334.521923][T15317] kvm: kvm [15314]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3072 [ 334.539091][T15316] kvm: kvm [15314]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x3072 [ 334.593841][T15312] rust_binder: Write failure EINVAL in pid:584 [ 334.899536][ T963] Bluetooth: hci0: command 0x1003 tx timeout [ 334.899664][ T8341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 334.995232][T15347] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.103933][ T1218] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 335.123609][ T1218] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.131689][T15358] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 335.166998][T15358] rust_binder: Write failure EINVAL in pid:934 [ 335.449088][T15368] input input242: cannot allocate more than FF_MAX_EFFECTS effects [ 335.468703][T15369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:588 [ 335.469334][T15363] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 335.481683][T15363] rust_binder: Error in use_page_slow: EBUSY [ 335.496217][T15363] rust_binder: use_range failure EBUSY [ 335.504833][T15363] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 335.512215][T15363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 335.526625][T15363] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender. [ 335.560946][T15363] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:588 [ 335.986652][T15388] SELinux: policydb version 1011989343 does not match my version range 15-33 [ 336.017879][T15388] SELinux: failed to load policy [ 336.189705][T15404] input: syz0 as /devices/virtual/input/input243 [ 336.234221][T15406] SELinux: security_context_str_to_sid (syte) failed with errno=-22 [ 336.252866][T15404] input: failed to attach handler leds to device input243, error: -6 [ 336.322972][T15411] binder: Unknown parameter 'hash' [ 336.562139][T15420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.562171][T15420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:599 [ 336.995491][T15444] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 337.018796][T15444] SELinux: failed to load policy [ 337.114474][T15449] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 337.454998][T15466] random: crng reseeded on system resumption [ 337.618582][T15469] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 337.660923][T15475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 337.691670][T15469] SELinux: failed to load policy [ 337.769831][T15480] binder: Unknown parameter 'seclaZel' [ 337.781533][T15485] syz.0.4673: attempt to access beyond end of device [ 337.781533][T15485] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.881643][T15488] SELinux: security_context_str_to_sid (system_uGй :) failed with errno=-22 [ 338.007850][ T36] kauditd_printk_skb: 1231 callbacks suppressed [ 338.007867][ T36] audit: type=1400 audit(1750369833.649:83540): avc: denied { read write } for pid=15497 comm="syz.6.4678" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 338.064133][ T36] audit: type=1400 audit(1750369833.659:83541): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.094427][T15503] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.094800][ T36] audit: type=1400 audit(1750369833.659:83542): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.129609][ T36] audit: type=1400 audit(1750369833.659:83543): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.183810][T15508] rust_binder: Write failure EFAULT in pid:957 [ 338.216971][ T36] audit: type=1400 audit(1750369833.689:83544): avc: denied { ioctl open } for pid=15497 comm="syz.6.4678" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 338.293195][ T36] audit: type=1400 audit(1750369833.689:83545): avc: denied { ioctl } for pid=15497 comm="syz.6.4678" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 338.325180][T15521] audit: audit_backlog=65 > audit_backlog_limit=64 [ 338.331841][T15521] audit: audit_lost=305 audit_rate_limit=0 audit_backlog_limit=64 [ 338.355029][ T36] audit: type=1400 audit(1750369833.689:83546): avc: denied { read write } for pid=12063 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 338.380617][T15521] audit: backlog limit exceeded [ 338.760772][T15540] binder: Unknown parameter 'coyBLV"i5ntext' [ 338.872039][T15555] rust_binder: Write failure EFAULT in pid:1785 [ 338.899900][T15557] binder: Unknown parameter 'hash' [ 339.045778][T15565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:961 [ 339.047879][T15565] rust_binder: Write failure EINVAL in pid:961 [ 339.151897][T15571] SELinux: security_context_str_to_sid () failed with errno=-22 [ 339.232739][T15573] rust_binder: Write failure EFAULT in pid:1793 [ 339.244674][T15577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:471 [ 339.340833][T15582] SELinux: failed to load policy [ 339.515275][T15597] input: syz1 as /devices/virtual/input/input245 [ 339.535668][T15597] binder: Unknown parameter 'dirsynk' [ 339.924127][T15624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.927317][T15624] rust_binder: inc_ref_done called when no active inc_refs [ 339.995310][T15629] binder: Unknown parameter '' [ 340.210104][T15641] binder: Bad value for 'stats' [ 340.216943][T15643] binder: Bad value for 'stats' [ 340.220959][T15627] binder: Bad value for 'max' [ 340.298323][T15647] binder: Unknown parameter 'Xax' [ 340.421184][T15650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.609819][T15655] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:652 [ 340.714274][T15658] rust_binder: Write failure EINVAL in pid:495 [ 341.120538][T15686] SELinux: security_context_str_to_sid () failed with errno=-22 [ 341.154328][T15689] input: syz0 as /devices/virtual/input/input248 [ 341.177709][T15689] input: failed to attach handler leds to device input248, error: -6 [ 341.603524][T15711] input: syz1 as /devices/virtual/input/input249 [ 341.704762][T15721] rust_binder: Write failure EFAULT in pid:985 [ 342.015474][T15747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:524 [ 342.190554][T15761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.202627][T15750] rust_binder: Write failure EFAULT in pid:526 [ 342.236053][T15762] input: syz1 as /devices/virtual/input/input251 [ 342.306913][T15760] binder: Unknown parameter '18446744073709551615' [ 342.329718][T15762] binder: Unknown parameter '18446744073709551615' [ 342.500927][T15772] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 342.589917][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.613926][T15785] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:692 [ 342.858064][T15791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 342.996443][T15802] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 342.997933][T15802] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.015934][T15802] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:703 [ 343.029280][ T36] kauditd_printk_skb: 1057 callbacks suppressed [ 343.029298][ T36] audit: type=1400 audit(1750369838.679:84604): avc: denied { read } for pid=15801 comm="syz.0.4772" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.067684][ T36] audit: type=1400 audit(1750369838.679:84605): avc: denied { read open } for pid=15801 comm="syz.0.4772" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.092091][ T36] audit: type=1400 audit(1750369838.679:84606): avc: denied { ioctl } for pid=15801 comm="syz.0.4772" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 343.095969][T15802] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 343.117773][ T36] audit: type=1400 audit(1750369838.739:84607): avc: denied { mounton } for pid=15801 comm="syz.0.4772" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.167302][ T36] audit: type=1400 audit(1750369838.799:84608): avc: denied { read write } for pid=7833 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.219601][ T36] audit: type=1400 audit(1750369838.799:84609): avc: denied { read write open } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.245521][ T36] audit: type=1400 audit(1750369838.799:84610): avc: denied { ioctl } for pid=7833 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.276377][ T36] audit: type=1400 audit(1750369838.809:84611): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.329590][ T36] audit: type=1400 audit(1750369838.809:84612): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.358869][ T36] audit: type=1400 audit(1750369838.809:84613): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 343.422368][T15816] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.425678][T15816] rust_binder: Got transaction with invalid offset. [ 343.433229][T15816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 343.441359][T15816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:706 [ 343.548422][T15830] rust_binder: Write failure EFAULT in pid:1864 [ 343.550986][T15831] rust_binder: Write failure EFAULT in pid:1864 [ 343.590553][T15829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544 [ 343.776785][T15839] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 2 [ 343.793198][T15839] rust_binder: Write failure EINVAL in pid:546 [ 343.877869][T15851] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 343.899625][T15853] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 343.961649][T15856] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:714 [ 344.010817][T15858] SELinux: security_context_str_to_sid () failed with errno=-22 [ 344.028161][T15859] SELinux: security_context_str_to_sid () failed with errno=-22 [ 344.105506][T15861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 344.114498][T15861] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 344.141422][T15861] rust_binder: Error in use_page_slow: ESRCH [ 344.141445][T15861] rust_binder: use_range failure ESRCH [ 344.147652][T15861] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 344.154985][T15861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 344.157927][T15867] random: crng reseeded on system resumption [ 344.164175][T15861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:554 [ 344.190676][T15867] Unrecognized hibernate image header format! [ 344.205837][T15867] PM: hibernation: Image mismatch: architecture specific data [ 344.236045][T15869] random: crng reseeded on system resumption [ 344.278177][T15872] binder: Unknown parameter 'nXI' [ 344.659488][ T963] Bluetooth: hci0: command 0x1003 tx timeout [ 344.659511][ T8341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.730669][ T3086] bridge_slave_1: left allmulticast mode [ 344.736353][ T3086] bridge_slave_1: left promiscuous mode [ 344.746086][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.767496][ T3086] bridge_slave_0: left allmulticast mode [ 344.789477][ T3086] bridge_slave_0: left promiscuous mode [ 344.795135][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.820724][T15900] input: syz0 as /devices/virtual/input/input254 [ 344.945319][T15900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:568 [ 344.955479][T15900] rust_binder: Write failure EINVAL in pid:568 [ 345.000236][ T3086] veth1_macvtap: left promiscuous mode [ 345.048154][ T3086] veth0_vlan: left promiscuous mode [ 345.054672][T15910] rust_binder: Write failure EFAULT in pid:1011 [ 345.070032][T15911] rust_binder: Error while translating object. [ 345.095609][T15911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 345.103623][T15911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:571 [ 345.567714][T15932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:584 [ 345.734314][T15937] rust_binder: Write failure EINVAL in pid:586 [ 345.830002][T15939] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 345.861176][T15939] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 345.896545][T15939] rust_binder: Write failure EINVAL in pid:1020 [ 346.280632][T15951] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 346.315125][T15951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 346.326962][T15951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1024 [ 346.983908][T15964] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.007101][T15967] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 347.869327][T15982] binder: Unknown parameter 'donthM [ 347.869327][T15982] l' [ 347.930627][T15993] rust_binder: Read failure Err(EAGAIN) in pid:1043 [ 347.984304][T15997] rust_binder: Write failure EFAULT in pid:740 [ 348.001553][T15999] SELinux: security_context_str_to_sid (sytem_uGйaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 348.032954][ T36] kauditd_printk_skb: 718 callbacks suppressed [ 348.032971][ T36] audit: type=1400 audit(1750369843.679:85332): avc: denied { read open } for pid=16000 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 348.127871][T15997] binder: Bad value for 'max' [ 348.135493][ T36] audit: type=1400 audit(1750369843.679:85333): avc: denied { mounton } for pid=16000 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 348.206625][ T36] audit: type=1400 audit(1750369843.699:85334): avc: denied { read write } for pid=12063 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.219574][T16006] rust_binder: Write failure EFAULT in pid:1049 [ 348.257877][ T36] audit: type=1400 audit(1750369843.699:85335): avc: denied { read write open } for pid=12063 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.346872][ T36] audit: type=1400 audit(1750369843.699:85336): avc: denied { ioctl } for pid=12063 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 348.381525][ T36] audit: type=1400 audit(1750369843.729:85337): avc: denied { read write } for pid=16002 comm="syz.1.4835" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.424609][ T36] audit: type=1400 audit(1750369843.729:85338): avc: denied { read write open } for pid=16002 comm="syz.1.4835" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.450136][ T36] audit: type=1400 audit(1750369843.739:85339): avc: denied { read } for pid=16002 comm="syz.1.4835" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 348.473637][ T36] audit: type=1400 audit(1750369843.739:85340): avc: denied { read open } for pid=16002 comm="syz.1.4835" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 348.497671][ T36] audit: type=1400 audit(1750369843.739:85341): avc: denied { map } for pid=16002 comm="syz.1.4835" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.114091][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.114335][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.167539][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.167788][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.172014][ T468] hid-generic 0000:0000:0000.001B: item fetching failed at offset 0/1 [ 349.185036][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.198240][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.204921][ T468] hid-generic 0000:0000:0000.001B: probe with driver hid-generic failed with error -22 [ 349.207404][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.236257][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.249790][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.261962][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.268767][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.276454][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.283938][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.291330][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.298153][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.318386][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.331204][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.344249][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.356206][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.363619][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.370589][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.377325][T16030] input: syz1 as /devices/virtual/input/input258 [ 349.401100][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.401330][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.416705][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.424640][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.432386][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.440987][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.448278][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.455850][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.462967][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.469688][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.476280][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.482984][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.489656][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.496271][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.503113][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.515197][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.522586][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.529282][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.536007][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.543277][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.550756][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.557597][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.565226][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.572579][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.580147][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.586820][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.593519][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.600289][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.606955][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.613579][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.621243][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.628049][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.634733][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.641499][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.648156][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.654866][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.661567][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.668145][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.674867][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.681537][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.688150][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.694823][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.701474][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.708109][T16021] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.242614][T16035] binder: Bad value for 'defcontext' [ 350.341469][T16043] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.341813][T16042] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 350.379525][T16042] rust_binder: Write failure EINVAL in pid:756 [ 351.139527][ T8341] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.139527][ T963] Bluetooth: hci0: command 0x1003 tx timeout [ 351.378860][T16049] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.391812][T16055] rust_binder: Write failure EINVAL in pid:615 [ 351.429947][T16056] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.455068][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.500708][T16063] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 351.501090][T16063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1059 [ 351.539213][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.566814][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.576304][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.584699][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.592933][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.601255][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.609294][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.617073][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.632752][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.648629][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.661083][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.670476][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.678225][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.685946][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.693428][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.701764][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.709220][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.716890][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.724379][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.732194][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.739808][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.747279][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.754883][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.762587][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.770246][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.777651][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.785251][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.792620][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.800305][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.807732][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.815314][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.823046][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.830667][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.838294][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.845974][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.853736][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.862094][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.869864][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.877473][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.885115][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.892525][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.900180][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.907596][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.915175][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.922896][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.930649][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.938037][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.945703][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.953309][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.960880][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.968221][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.976096][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.983519][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.991207][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 351.998568][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.006141][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.013520][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.021190][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.028554][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.036175][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.044199][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.051788][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.059142][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.066775][T16059] binder: Unknown parameter 'cgroup.subtree_control' [ 352.729709][T16075] SELinux: security_context_str_to_sid () failed with errno=-22 [ 352.939964][T16084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1069 [ 353.056025][ T36] kauditd_printk_skb: 535 callbacks suppressed [ 353.056042][ T36] audit: type=1400 audit(1750369848.699:85877): avc: denied { read write } for pid=12977 comm="syz-executor" name="loop0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.101192][ T36] audit: type=1400 audit(1750369848.699:85878): avc: denied { read write open } for pid=12977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.126485][ T36] audit: type=1400 audit(1750369848.699:85879): avc: denied { ioctl } for pid=12977 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=589 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.635913][ T36] audit: type=1400 audit(1750369849.279:85880): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.660917][ T36] audit: type=1400 audit(1750369849.279:85881): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 353.686136][ T36] audit: type=1400 audit(1750369849.279:85882): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.089486][ T36] audit: type=1400 audit(1750369849.729:85883): avc: denied { execmem } for pid=16087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 354.099024][T16092] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.149489][ T36] audit: type=1400 audit(1750369849.729:85884): avc: denied { read } for pid=16089 comm="syz.0.4858" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.183172][ T36] audit: type=1400 audit(1750369849.729:85885): avc: denied { read open } for pid=16089 comm="syz.0.4858" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 354.238900][ T36] audit: type=1400 audit(1750369849.739:85886): avc: denied { read write } for pid=16090 comm="syz.7.4860" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 354.387107][T16100] rust_binder: Write failure EFAULT in pid:777 [ 357.237027][T16124] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.263828][T16124] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 357.279622][T16124] rust_binder: Error while translating object. [ 357.297992][T16124] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.309851][T16124] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:788 [ 358.862248][ T36] kauditd_printk_skb: 164 callbacks suppressed [ 358.862265][ T36] audit: type=1400 audit(1750369854.509:86051): avc: denied { execmem } for pid=16128 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 358.875532][T16132] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.893967][ T36] audit: type=1400 audit(1750369854.519:86052): avc: denied { read } for pid=16130 comm="syz.0.4870" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.898424][T16133] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.919486][ T36] audit: type=1400 audit(1750369854.519:86053): avc: denied { read open } for pid=16130 comm="syz.0.4870" path="/dev/binderfs/binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.941108][T16132] rust_binder: Error while translating object. [ 358.971630][T16132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 359.000535][T16132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:790 [ 359.009499][ T36] audit: type=1400 audit(1750369854.519:86054): avc: denied { read } for pid=16131 comm="syz.7.4872" name="binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.064739][ T36] audit: type=1400 audit(1750369854.519:86055): avc: denied { read open } for pid=16131 comm="syz.7.4872" path="/dev/binderfs/binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.090787][ T36] audit: type=1400 audit(1750369854.519:86056): avc: denied { ioctl } for pid=16130 comm="syz.0.4870" path="/dev/binderfs/binder0" dev="binder" ino=98 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.116482][ T36] audit: type=1400 audit(1750369854.539:86057): avc: denied { read } for pid=16129 comm="syz.1.4871" name="binder1" dev="binder" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.153827][ T36] audit: type=1400 audit(1750369854.539:86058): avc: denied { read open } for pid=16129 comm="syz.1.4871" path="/dev/binderfs/binder1" dev="binder" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.215467][ T36] audit: type=1400 audit(1750369854.539:86059): avc: denied { read } for pid=16129 comm="syz.1.4871" name="binder0" dev="binder" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 359.253322][ T36] audit: type=1400 audit(1750369854.539:86060): avc: denied { read open } for pid=16129 comm="syz.1.4871" path="/dev/binderfs/binder0" dev="binder" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 360.791172][T16151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 360.793166][T16151] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 360.815803][T16151] rust_binder: Read failure Err(EFAULT) in pid:638 [ 360.878443][T16151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.920991][T16151] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 360.935577][T16157] rust_binder: Write failure EFAULT in pid:1085 [ 362.730132][T16164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1087 [ 362.747670][T16166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1087 [ 362.829976][T16170] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 362.873160][T16171] binder: Unknown parameter 'fscontext?}' [ 362.908286][T16178] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 362.910998][T16177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 362.949329][T16181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.686203][ T36] kauditd_printk_skb: 346 callbacks suppressed [ 364.686224][ T36] audit: type=1400 audit(1750369860.329:86407): avc: denied { execmem } for pid=16184 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 364.698258][T16191] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.702976][T16189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 364.724906][ T36] audit: type=1400 audit(1750369860.339:86408): avc: denied { read } for pid=16187 comm="syz.7.4886" name="binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.792449][T16197] binder: Unknown parameter '0xffffffffffffffff' [ 364.799475][ T36] audit: type=1400 audit(1750369860.339:86409): avc: denied { read open } for pid=16187 comm="syz.7.4886" path="/dev/binderfs/binder0" dev="binder" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.828670][T16189] rust_binder: Error in use_page_slow: ESRCH [ 364.828689][T16189] rust_binder: use_range failure ESRCH [ 364.849508][T16189] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 364.855010][T16189] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 364.878235][T16189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1099 [ 364.888104][ T36] audit: type=1400 audit(1750369860.339:86410): avc: denied { read } for pid=16186 comm="syz.0.4884" name="binder1" dev="binder" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.934593][T16204] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.942299][T16205] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.948749][T16204] audit: audit_lost=306 audit_rate_limit=0 audit_backlog_limit=64 [ 364.948803][T16205] audit: audit_lost=307 audit_rate_limit=0 audit_backlog_limit=64 [ 364.960176][T16204] audit: backlog limit exceeded [ 364.964496][ T36] audit: type=1400 audit(1750369860.339:86411): avc: denied { read open } for pid=16186 comm="syz.0.4884" path="/dev/binderfs/binder1" dev="binder" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 365.031267][T16207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.939776][T16219] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.960602][T16219] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 366.992592][T16219] rust_binder: Write failure EINVAL in pid:1107 [ 367.074762][T16227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1109 [ 367.100197][T16230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 367.110913][T16229] rust_binder: Write failure EINVAL in pid:815 [ 367.120858][T16230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1109 [ 369.230362][T16245] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 369.250876][T16249] random: crng reseeded on system resumption [ 369.260600][T16245] rust_binder: Error while translating object. [ 369.263303][T16245] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 369.272220][T16245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:822 [ 369.301832][T16249] Restarting kernel threads ... done. [ 369.331062][T16249] binder: Unknown parameter 'cont' [ 369.411754][T16257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 370.096279][ T36] kauditd_printk_skb: 268 callbacks suppressed [ 370.096296][ T36] audit: type=1400 audit(1750369865.739:86652): avc: denied { read write } for pid=13412 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.126821][ T36] audit: type=1400 audit(1750369865.739:86653): avc: denied { read write open } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 370.152070][ T36] audit: type=1400 audit(1750369865.739:86654): avc: denied { ioctl } for pid=13412 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 371.462751][ T36] audit: type=1400 audit(1750369867.109:86655): avc: denied { execmem } for pid=16259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 371.472892][T16261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.516843][T16269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.521040][ T36] audit: type=1400 audit(1750369867.109:86656): avc: denied { read } for pid=16260 comm="syz.0.4904" name="binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.554830][ T36] audit: type=1400 audit(1750369867.109:86657): avc: denied { read open } for pid=16260 comm="syz.0.4904" path="/dev/binderfs/binder0" dev="binder" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 371.590479][ T36] audit: type=1400 audit(1750369867.109:86658): avc: denied { read write } for pid=16260 comm="syz.0.4904" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 371.637877][T16278] binder: Binderfs stats mode cannot be changed during a remount [ 371.653984][ T36] audit: type=1400 audit(1750369867.109:86659): avc: denied { read write open } for pid=16260 comm="syz.0.4904" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 371.709770][T16282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.711880][T16282] rust_binder: Error in use_page_slow: ESRCH [ 371.718601][T16282] rust_binder: use_range failure ESRCH [ 371.734754][T13412] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.755679][T16286] audit: audit_backlog=65 > audit_backlog_limit=64 [ 371.756297][T16282] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 371.762284][T16282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 371.772527][T16287] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 371.793287][T16286] rust_binder: Failure when writing BR_NOOP at beginning of buffer. SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=6 req=4799 state=3 status=67 (errno 32: Broken pipe) [ 371.801380][T16282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:831 [ 371.809421][T16287] rust_binder: Read failure Err(EFAULT) in pid:1130 [ 371.820380][T16286] rust_binder: Read failure Err(EFAULT) in pid:1130 [ 371.828398][T16282] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 371.846697][T16289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 371.854801][T16282] rust_binder: Read failure Err(EFAULT) in pid:831 [ 371.863530][T16289] rust_binder: Write failure EINVAL in pid:682 [ 371.884088][T16286] rust_binder: Write failure EINVAL in pid:1130 [ 372.680884][ T305] bridge_slave_1: left allmulticast mode [ 372.692972][ T305] bridge_slave_1: left promiscuous mode [ 372.698563][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.706102][ T305] bridge_slave_0: left allmulticast mode [ 372.711868][ T305] bridge_slave_0: left promiscuous mode [ 372.717508][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.725313][ T305] bridge_slave_1: left allmulticast mode [ 372.731701][ T305] bridge_slave_1: left promiscuous mode [ 372.737284][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.745005][ T305] bridge_slave_0: left allmulticast mode [ 372.750799][ T305] bridge_slave_0: left promiscuous mode [ 372.756374][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.764152][ T305] bridge_slave_1: left allmulticast mode [ 372.769940][ T305] bridge_slave_1: left promiscuous mode [ 372.775521][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.783211][ T305] bridge_slave_0: left allmulticast mode [ 372.788851][ T305] bridge_slave_0: left promiscuous mode [ 372.794471][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.361220][ T305] veth1_macvtap: left promiscuous mode [ 373.366762][ T305] veth0_vlan: left promiscuous mode [ 373.372279][ T305] veth1_macvtap: left promiscuous mode [ 373.377772][ T305] veth0_vlan: left promiscuous mode [ 373.384001][ T305] veth1_macvtap: left promiscuous mode [ 373.389582][ T305] veth0_vlan: left promiscuous mode