last executing test programs:

39.524247092s ago: executing program 1 (id=2):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r1=>r0, 0x8000, 0x5, 0xa28})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4])
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04"])
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x22052, r7, 0x2000)

39.084061208s ago: executing program 1 (id=7):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x1081, 0x200000000000})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000340)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

39.024814309s ago: executing program 1 (id=9):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r2, 0xfffff000) (async)
ioctl$BLKRRPART(r1, 0x125f, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

24.033131246s ago: executing program 32 (id=9):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r2, 0xfffff000) (async)
ioctl$BLKRRPART(r1, 0x125f, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x8, 0x1, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})

1.508256897s ago: executing program 4 (id=693):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYBLOB="636f79424c0d56a72269358edd1994c3f9d26e746578743d73797374656d5f752c"])

1.436650918s ago: executing program 4 (id=694):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0)
write$vga_arbiter(r3, &(0x7f00000000c0)=@other={'lock', ' ', 'mem'}, 0x9)
write$vga_arbiter(r3, &(0x7f00000006c0)=@other={'unlock', ' ', 'none'}, 0xc)
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r5, 0x0) (async)
syz_clone3(&(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x28011, r6, 0xaae46000) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)

1.345731419s ago: executing program 4 (id=697):
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIONCLEX(r0, 0x5450)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040))
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000020c0))
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000002100))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x4200, 0x145)
r2 = openat$incfs(r1, &(0x7f0000002180)='.pending_reads\x00', 0x200240, 0x106)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f00000021c0)={@desc={0x1, 0x0, @desc4}})
mkdirat(r1, &(0x7f0000002200)='./file0\x00', 0x0)
prctl$PR_SET_FPEMU(0xa, 0x1)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000002240)={0x8})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002280)={<r4=>0x0, "4772c20b04ed8fa09e96b5e21e703fb0"})
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000003280)={0x1, 0x1, @start={r4, 0x1, "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", "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"}, [0xffffffffffffffff, 0x3, 0x8, 0x4, 0x5, 0x7, 0x8, 0x2, 0x7, 0x4, 0xf8, 0x2, 0x5f, 0x3, 0x9, 0x0, 0xf, 0x5, 0x8, 0xf54, 0x8, 0x2d, 0x54e, 0x1, 0x8, 0x0, 0x6, 0x4, 0x90, 0x8, 0x2, 0x0, 0x3, 0x9, 0x6, 0x4, 0x6, 0x1d, 0xf18, 0x3ff, 0x7, 0xc25, 0x4, 0x2, 0xfff, 0xb0, 0xff, 0x8, 0x2, 0x0, 0x7bc8b43e, 0x6, 0x7, 0x5, 0x2, 0x4, 0x7, 0x4, 0x7, 0x5, 0x1, 0x7c9196fd, 0xa, 0x8]})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000003cc0)={0xdddd0000, 0x4000})
mkdirat$cgroup(r2, &(0x7f0000003d00)='syz0\x00', 0x1ff)
write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000003d40)={0x2e, 0x6, 0x0, {0x0, 0x1, 0x5, 0x0, '#[&{#'}}, 0x2e)
r5 = openat$cgroup_ro(r0, &(0x7f0000003d80)='memory.current\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000003dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000004000))
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000004080)={0xa3, 0x0, &(0x7f0000004040)})
ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000004100))
r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x4)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000004140)={{<r7=>0x0, 0x1, 0xf59, 0x5, 0x3ff, 0x6, 0x63, 0x0, 0x2, 0x1b5, 0xffff, 0xffffffffaf5e7005, 0x8000000000000000, 0x10, 0x3}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000005140)={0x0, r7, "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", "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"})
mkdirat(r5, &(0x7f0000006140)='./file1\x00', 0x0)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000006180))
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f00000061c0))
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000006200))
write$selinux_create(r2, &(0x7f0000006240)=@access={'system_u:object_r:apt_var_cache_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x6}, 0x51)

1.344992289s ago: executing program 4 (id=700):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r1, 0x540b, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000000)) (async)
r3 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 64)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (rerun: 64)
close(0x4) (async, rerun: 32)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r5, 0xaece, 0x0) (async, rerun: 32)
close(0x4) (async)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x1115a0, 0x102) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_subtree(r7, 0x0, 0xfffffdef)
r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f0000000100)) (async)
r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x31bd00, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYRESOCT=r10, @ANYRES16=r2, @ANYRESDEC=r7]) (async)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000011052f09e00000100"/32]) (async, rerun: 32)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000000087"]) (rerun: 32)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000000)={'wg2\x00', 0xca58c30f81b6079f}) (async)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="5600001000000000b5000040000000000300000000000000ae0800000000000003000000000000006008000000004c000101000000000000890100000000e9ff010000000000000048020000000000000400000000286a91a6272706000000"])
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000002c0)={0x0, 0x0, 0x6})

892.079086ms ago: executing program 2 (id=709):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x2) (async)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="3383250a551d"})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r6, &(0x7f0000000180)={'syz0\x00'}, 0x45c)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0xe, 0x2012, r9, 0x6000) (async)
mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0xe, 0x2012, r9, 0x6000)
ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x0)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001180)={[0x5188, 0x9, 0x7, 0x4, 0x32, 0xd, 0x10001, 0xfffff86e, 0x6da, 0x80, 0x0, 0x6, 0x100, 0x7, 0xe9, 0x21d, 0x1, 0xfffffffd, 0x6, 0x5f, 0x40008000, 0x0, 0x9, 0x81, 0x7, 0x8, 0x9, 0x5, 0x0, 0x9, 0x400, 0x1, 0x6, 0xffff00, 0xffffffff, 0xa7c, 0x10, 0x7, 0x2, 0x6, 0x1, 0x0, 0x5, 0x6, 0x101, 0x3, 0x873, 0xb5, 0x8, 0x6b38ea1d, 0x6, 0x3, 0xfffffffc, 0x0, 0x0, 0x6, 0xfc, 0xa, 0x28, 0x1000, 0x3, 0x3, 0x80, 0x8, 0x5, 0x9, 0x200, 0x0, 0xfff, 0xfffffffe, 0x6, 0xb, 0xb, 0xd, 0x8000, 0xe2b, 0x81, 0x0, 0x7fffffff, 0x4, 0x7, 0x80000001, 0xe3, 0x3ff, 0x9, 0x9, 0x1ff, 0x9b, 0xfffffffe, 0x9, 0x4, 0x2, 0x9, 0x3, 0x2f4, 0xfffff484, 0x5, 0x10001, 0x9, 0x5, 0xf7, 0x4000000, 0xd, 0x563, 0x1, 0xaae6, 0x114, 0xf, 0x3ff, 0x5, 0x3, 0xfff, 0x4, 0x1, 0x6, 0xff, 0x8d, 0x2, 0x7, 0x2, 0x3, 0xd, 0x3, 0x9, 0xffffb6e5, 0x3, 0xffff0000, 0x0, 0x0, 0x9, 0xc, 0x69, 0xc5, 0xa82, 0xa9, 0xa7e, 0xc4f2, 0x6, 0xa1c2, 0x1a, 0x2b6e, 0x2, 0x75ea, 0x9, 0x1, 0xfffff000, 0xa20d, 0xfc2b, 0x8, 0xfffffffd, 0x10, 0x65ec17c5, 0x8f1, 0x4, 0x401, 0x6, 0x1, 0xb37, 0xde, 0x3760, 0x1, 0x100, 0x1, 0x200, 0x6, 0x8, 0x1ff, 0x7, 0x3, 0xdbf7, 0x100000, 0x9, 0x9, 0x1, 0xac1, 0x0, 0x4, 0x555, 0x7, 0x29af0754, 0x2, 0x6, 0xa, 0x1, 0x9, 0x9, 0x4, 0x3, 0x5, 0x10000, 0x6, 0xd, 0x101, 0x7f, 0xa1, 0x5, 0x2, 0x2, 0x6, 0x4, 0xa, 0x6, 0x3, 0x1, 0x4, 0xffffff82, 0x8, 0x8, 0x3, 0xd, 0x10001, 0x6, 0x8, 0x2, 0x80000000, 0x1, 0xfffffffd, 0x7c75, 0x0, 0x7, 0xa, 0x0, 0x7, 0xbd4, 0xe5, 0x400, 0x533b, 0x6, 0x86, 0xdc3e, 0x5, 0xfffffff8, 0x9, 0x0, 0x3aca, 0x7, 0x4, 0x6, 0x87, 0x80000001, 0x18, 0xfffffff0, 0x8001, 0x7fff, 0xfffffff2, 0x5, 0x6, 0xe, 0x9, 0x9, 0x3ff, 0x6512, 0x6, 0x3, 0x8, 0x3, 0x1, 0x9, 0x80000001, 0xa, 0x3, 0x3666b276, 0x6, 0x908b, 0x40, 0xfffff2f4, 0x67, 0x5, 0xff000000, 0xfffffffc, 0x2, 0x5, 0x8, 0x9, 0x9, 0x5, 0x3, 0x9, 0x6, 0xc5, 0xfffffb68, 0x7, 0x0, 0x7, 0x2, 0xff, 0x6, 0xffff, 0x3a9, 0x7, 0x2, 0x3, 0x0, 0x7b3f, 0x3, 0x0, 0x9, 0xfffffffc, 0xf, 0x1fc00000, 0x9, 0xdbb, 0x2, 0x1e, 0x1, 0x1c, 0xf, 0x5, 0xe50, 0x52, 0xffffffff, 0x7f, 0x8, 0x7, 0x8, 0x8, 0x7, 0x5c4, 0x7, 0xff, 0x10000, 0x7, 0x7a38, 0x7fff, 0x8, 0x6, 0x4, 0x1fe, 0x3, 0x0, 0x80000001, 0x4, 0x1, 0x5, 0x400, 0x5, 0x9, 0x6, 0x1, 0x3b2, 0x83, 0x6, 0x9, 0x122b, 0x0, 0x4, 0x7fff, 0x4, 0x573, 0x9192, 0x3ff, 0x8, 0x2, 0xd, 0x4, 0x3, 0x8001, 0xa94b, 0x7, 0x2, 0x101, 0x400, 0x400, 0x6, 0x13, 0x7, 0x7, 0xa5, 0xc000, 0x7ffffffd, 0x1, 0xd, 0xfffffff7, 0x1ff, 0x12, 0x1, 0x101, 0x8, 0x8, 0x101, 0x2, 0xba, 0x1, 0x7, 0xf, 0x27a, 0x3, 0x2, 0x2, 0x200, 0x5, 0x5, 0x7fffffff, 0xab5, 0xa89, 0xff, 0x7, 0x2, 0x7, 0x1, 0x0, 0x32, 0x2, 0x806, 0x8, 0xf, 0x8, 0x316d, 0x5, 0x400, 0x2, 0x0, 0x91ba, 0x800, 0x4, 0x6, 0x3, 0x6, 0xca1, 0x1, 0xf7f, 0x5, 0x5, 0x5, 0x8, 0x6, 0x7, 0x8000, 0x1, 0x5, 0x3, 0x4, 0x6, 0x1, 0x6, 0x1, 0xfffffff1, 0x4, 0x7, 0x7, 0xffff, 0x1, 0x6e59, 0x3, 0x5, 0x4, 0x3df, 0x5, 0x0, 0x5, 0x1, 0x8, 0x4, 0x3ff, 0x1, 0x1000, 0x5, 0xffff65c5, 0x3ff, 0x5, 0x81, 0x7b30, 0x1, 0x0, 0xc0000000, 0x80000001, 0xfd, 0xb37a, 0x1, 0x2, 0xffff7bac, 0x87a, 0x2, 0x9b, 0x2, 0x5, 0x3, 0x9, 0x7, 0x4bfe, 0x3, 0xcd3, 0x80, 0x0, 0x7, 0x6, 0xfffffffc, 0x4, 0x10001, 0x3, 0x5, 0x9, 0x4, 0x800, 0xbc, 0x6, 0x4, 0x401, 0xffff, 0x40, 0x1, 0xf, 0xfffffff2, 0x59, 0xce8e, 0x8000, 0x9, 0x80000001, 0xe, 0xfff, 0x73, 0x6, 0x6e, 0x5, 0x9, 0x1, 0x3, 0x7, 0xac, 0x2, 0x8, 0x6e10, 0x2, 0x6, 0x10001, 0x5, 0x6, 0x7f, 0x4, 0x100, 0x2, 0xfff, 0x6, 0x422, 0x7f, 0x2, 0x9, 0xffffffff, 0xfffffffa, 0x4, 0x7, 0x2, 0x1, 0x30, 0x2a05, 0x62c4, 0x5, 0x9, 0x7f, 0x4, 0xf, 0x2, 0x1, 0xe6b, 0x10001, 0x9, 0x6, 0xfffffffd, 0x5, 0x4, 0xfffffff7, 0x0, 0x2, 0x1, 0x10, 0x9, 0xfffffff4, 0x3, 0x93500000, 0x1000, 0xffffffff, 0x3, 0x0, 0x0, 0x9, 0xfffffd26, 0x49, 0x8001, 0x6, 0x1, 0xffffffff, 0x8, 0xd12, 0x6, 0x80000000, 0x702cf789, 0x4fc, 0x0, 0x1, 0x5, 0x9, 0x3, 0x3, 0x0, 0x7, 0x6, 0x6, 0x3, 0x1, 0x2, 0x1, 0x6, 0x101, 0x8, 0x628f199f, 0x0, 0x6, 0xf, 0x2c, 0x0, 0x1, 0x10, 0x0, 0x40000000, 0x200, 0x800, 0x3, 0x4cb51b07, 0x6a6, 0x5, 0xfffffffc, 0x2a, 0x300000, 0xab, 0xa95, 0x3, 0x0, 0xb0000000, 0x8, 0x103, 0x7, 0x7, 0x3, 0xffff0000, 0xfff, 0x3054, 0x73, 0x1, 0x1ff, 0x8, 0x2, 0x3, 0x1ff, 0x6, 0x6, 0xf3, 0x1, 0x8, 0x1a82, 0x7, 0x7fffffff, 0x8, 0xc3, 0x5bb, 0x17, 0xfffffff7, 0x7ff, 0x0, 0x3, 0x5, 0x17c0, 0x20000000, 0x1000, 0xfffffffd, 0x1, 0x8, 0xffffffff, 0x2, 0x9, 0xffffffff, 0x0, 0x1, 0x901, 0x1, 0x2, 0x2aed, 0x0, 0x3, 0x6, 0x5, 0x7, 0x6, 0x80000001, 0x40, 0x6, 0x9, 0x7ff, 0xdd7a, 0x1, 0x9, 0xbe1, 0x8, 0xfffffff5, 0x0, 0x6, 0x7ef4, 0x6, 0xf5, 0x3, 0x5, 0xfffffffa, 0xff, 0x0, 0x6f5, 0x1, 0x9, 0x5, 0xe, 0x2, 0xdeb, 0x36, 0x6, 0x8, 0x10, 0xce1, 0xa2a2, 0x0, 0x8, 0x0, 0x2, 0x6, 0x7, 0x0, 0x10001, 0x9, 0x0, 0x6, 0x233, 0x3, 0x9, 0x7ff, 0x9dc, 0x7f, 0xc, 0x5, 0x0, 0x800, 0x9, 0x8000, 0x7fff, 0x2, 0x0, 0x778, 0xfa4a, 0x1, 0x5, 0x21ca, 0x2, 0x0, 0x4, 0xb, 0xe, 0x10001, 0x8001, 0x1, 0xa, 0x5, 0x80000000, 0x637, 0x7, 0x6, 0x800, 0x9, 0x2, 0x3, 0x6, 0x6, 0x6, 0x8, 0x3, 0x4, 0x3, 0x909, 0x73e, 0x9, 0xd4, 0x2400000, 0xfffffff7, 0xf3b, 0x4, 0x7, 0x5, 0xfffffff9, 0x9, 0x1, 0x13, 0x8, 0x2, 0x9, 0x101, 0xc, 0x4, 0x4, 0x0, 0xb, 0x1, 0xfaeb, 0x401, 0xac, 0x7, 0x0, 0x0, 0xe, 0x0, 0xffffffff, 0xa18d, 0x4, 0xc, 0x811, 0x1, 0xf, 0xbf, 0x4, 0xd, 0x2, 0x100, 0x4, 0x7ff, 0x101, 0x69, 0x5, 0x0, 0x800, 0x4, 0xa77, 0xd, 0x5, 0x8, 0x1, 0x3, 0xab9, 0x8, 0x3ff, 0x5, 0xfffffe00, 0xa71e00c, 0x3, 0x1, 0x8, 0x9, 0x92f9, 0x3, 0x3bf, 0x2, 0x20b8, 0x7, 0x2, 0x1e3, 0x4, 0xfff, 0xff, 0xc, 0x400, 0x6, 0x9, 0xe, 0x2, 0xd, 0x7, 0x4, 0x6, 0xa, 0xffffffc0, 0x735, 0x3, 0x4, 0x6, 0x8, 0x4, 0x19c, 0x10, 0xd1, 0x11e3e460, 0x7, 0x5, 0x401, 0xa, 0x19, 0x7, 0xffff0001, 0xae, 0x6, 0x1ff, 0xe, 0x8, 0x4, 0x3, 0xff, 0x2, 0x3, 0x2bb, 0x333, 0x101, 0xf9f, 0xc, 0x9, 0xddc, 0x4, 0x200, 0x38, 0x0, 0x8, 0x9, 0x9, 0x3, 0x200, 0xd4, 0x7f, 0x3, 0x0, 0x4, 0x6, 0x3, 0x0, 0x7, 0xfd7, 0x10000, 0x6, 0x858, 0x7b2, 0x6, 0x9, 0x2, 0xfffff566, 0xed0b, 0x101, 0x1, 0x36, 0xf, 0x8, 0x3ff, 0x8, 0xf122, 0x0, 0xc43, 0x0, 0x80000001, 0x0, 0x2, 0x7, 0x0, 0x8, 0x1, 0xfb8, 0xffff7fff, 0x7f, 0x0, 0x8, 0x3, 0x8, 0x4, 0xffff, 0x27b, 0x4, 0x7, 0x170, 0x1, 0x81, 0x7, 0xfffffffc, 0x100, 0xc, 0x10, 0x8, 0x9, 0x9, 0x5, 0x7fffffff, 0x100, 0xcce8, 0xc09a, 0x9, 0xfffffffe, 0x2, 0x401, 0x7000000, 0x6, 0x2, 0xeb, 0x7, 0x800, 0x0, 0x7fffffff, 0x1ff, 0x800, 0x1, 0x1, 0x0, 0x7, 0x6, 0x3, 0x1000000, 0x3817, 0x3, 0x7a, 0x7, 0xa, 0x1, 0x8, 0x81, 0x1, 0x3, 0x3, 0x0, 0x0, 0xfff, 0xfffffff8, 0x9, 0xef4, 0x49, 0x1, 0xf3b, 0x4, 0x0, 0x2, 0x400, 0x8, 0x2, 0xfff, 0x2, 0x7ff, 0x8001, 0x1000, 0x5]})
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
ioctl$UI_DEV_CREATE(r6, 0x5501)
write$uinput_user_dev(r6, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d, 0x0, 0x2, 0x0, 0xfffffffc, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(r6, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d, 0x0, 0x2, 0x0, 0xfffffffc, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff326, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff]}, 0x45c)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/24]) (async)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/24])
r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000000000)=0x5) (async)
ioctl$KVM_INTERRUPT(r11, 0x4004ae86, &(0x7f0000000000)=0x5)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0x7, 0x7901})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000796000/0x3000)=nil, 0x3000, 0x3000001, 0x22052, r11, 0x2000) (async)
mmap(&(0x7f0000796000/0x3000)=nil, 0x3000, 0x3000001, 0x22052, r11, 0x2000)

740.825168ms ago: executing program 3 (id=713):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x12) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x9, 0x0, 0xb, 0x6, 0xfb, 0x1, 0x0, 0x3, 0x9, 0x15, 0x0, 0x9, 0x5, 0x6, 0x4, 0x4}})
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0xd, 0x7, 0x3, 0x0, 0x5, 0xf, 0x0, 0xd9, 0x7d, 0x36, 0x4, 0x8, 0x0, 0xfffffffb, 0x80000000, 0x6, 0xd0, 0x41, 0x0, '\x00', 0xff, 0x4})
mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x2000001, 0x1010, r5, 0xf8e10000)

711.813329ms ago: executing program 4 (id=714):
openat$rnullb(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000), 0xa)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000033c0), 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1243, 0x0)
ioctl$BLKRRPART(r2, 0x125f, 0x0)
read$FUSE(r1, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002a40), 0x200, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'none'}, 0xa)
ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000540)=0x10001)
r6 = openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

695.932469ms ago: executing program 4 (id=715):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0)
write$snapshot(r5, 0x0, 0x1f)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b00000000ab00"])
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22201, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000280), 0x8800, 0x0)
read(r7, &(0x7f0000000080)=""/93, 0xffffff6c)

633.98669ms ago: executing program 3 (id=718):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100), 0x2, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000140)={{0x5, 0x6}, 0x100, './file0\x00'})
close_range(r1, 0xffffffffffffffff, 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x153a00, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0xc2a4a000)

537.504122ms ago: executing program 3 (id=719):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xb4006, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x5, 0x5, 0x3, 0x6}, {0x9, 0x80, 0x9, 0xfffffff8}, {0xd43, 0x4, 0x8e, 0x5}, {0x5, 0x40, 0xf8, 0x9}, {0x1, 0x9, 0x80, 0xfff}, {0x0, 0x0, 0x8, 0x4}, {0x9, 0x7, 0x80, 0xfffffffd}]})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309})
ioctl$TUNGETSNDBUF(r3, 0x400454dc, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0})

497.139352ms ago: executing program 0 (id=720):
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000040)=0x333a8006) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x4, 0x4, 0x4d, 0x2}, 0x28, [0x7, 0x1000, 0x5, 0x1, 0xe8d, 0x400, 0x2, 0xa, 0x4, 0x4b7e, 0xfffffffb, 0x5, 0x1, 0x2, 0x0, 0x1, 0x8, 0x10001, 0x3, 0x8, 0x0, 0x7, 0x2, 0xa115, 0x8, 0x9, 0xa24, 0xc4a, 0xc, 0x1, 0x829, 0x0, 0x2, 0x2, 0x101, 0x6, 0x5ece, 0xcd2f, 0x3, 0x7fff, 0x7, 0x10, 0x4, 0x2, 0x80000000, 0x7, 0xd, 0x2, 0xfffffffa, 0x3d7, 0x7, 0x1, 0x7, 0x86b, 0x7, 0x0, 0xecaae44, 0xf80b, 0x8c, 0xa, 0x0, 0x5, 0x5, 0x148], [0x10, 0x5, 0x8, 0x1, 0x8, 0x800, 0x8, 0x8000, 0x3, 0x2, 0x1ff80, 0x7fffffff, 0x1, 0x1, 0xffff, 0x7fffffff, 0xda95, 0x1ff, 0x3, 0xb6, 0x0, 0x95e, 0x2, 0x7, 0xdb, 0x0, 0x3, 0x8, 0x1000, 0x9, 0x2, 0x3, 0x2, 0x5, 0x0, 0x1, 0xfffffff4, 0x2, 0x8, 0x8, 0x7, 0xff, 0x4, 0x7fff, 0xfffffff9, 0x3, 0x8, 0x202, 0x2, 0x8, 0x3, 0xf, 0x1, 0x8, 0x9, 0x7, 0x40000, 0x3, 0x9, 0x7ee, 0x7, 0x2e1377b7, 0x8, 0x8], [0x0, 0x0, 0xfffffffc, 0xc9, 0xfffffff7, 0x4, 0x8, 0x80000001, 0x4, 0xfffffffa, 0x40, 0x2, 0x0, 0xffffffff, 0x6, 0x400, 0x488, 0xfffffffe, 0x5d0, 0x1, 0xe07, 0x3, 0x0, 0x5, 0xb4000000, 0x4f, 0x200, 0xe, 0x9, 0x101, 0x2, 0x8, 0x9, 0x83, 0x8, 0x7ff, 0x6, 0x8, 0x100, 0x2, 0x9, 0x8000, 0x9, 0x7fffffff, 0xfffffff9, 0x8, 0x9, 0x9, 0x9, 0xfffffe01, 0xfff, 0x2, 0x7f, 0x81, 0x9, 0xb52, 0x8, 0x10, 0x7, 0x401, 0x0, 0x7], [0x1, 0x16175b61, 0x8, 0xfffffffa, 0x100, 0x8, 0x80000000, 0x4, 0x80000000, 0x6, 0x200, 0xe, 0xffffffb0, 0x8, 0x37, 0xc, 0x10001, 0x1, 0xfffffffb, 0x4, 0x8, 0x2, 0xe, 0xfff, 0x8, 0x9, 0x0, 0x8601, 0x7fff, 0xd79, 0xffffffff, 0x4, 0x0, 0xc, 0x6, 0x2, 0x4, 0x8, 0xc, 0x2, 0x4, 0x6, 0x7d41, 0x5, 0x3, 0xdd, 0x7fffffff, 0x54, 0x3, 0x60000, 0x3, 0x5, 0xe, 0x1, 0x2, 0x1, 0x2, 0x8, 0x7, 0x8000, 0x0, 0x400, 0x2, 0x7fff]}, 0x45c) (async)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x57) (async)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x70791464f7fae095, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) (async)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000005c0)={0xdf65, {0xffffffff, 0xffff8c01, 0xfffff837, 0xf, 0xb, 0x9}})
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000600)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7fffffff, 0x3}}, 0x30) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7fffffff, &(0x7f0000000640)) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f00000006c0)={0xe, 0x200, {0x53, 0x2e8, 0xa, {0x6, 0x8}, {0x81, 0x3}, @const={0x4, {0x3, 0xbe2c, 0x4, 0x99f}}}, {0x53, 0x9, 0x7, {0x5, 0x3}, {0xfffc, 0x4}, @const={0x8, {0x9, 0x81, 0xfff9, 0x5}}}}) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000740)={0x9cf, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f000000f2c0)={0xefe, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
ioctl$UI_SET_PHYS(r1, 0x4008556c, 0xffffffffffffffff)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000025ac0)=""/147)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000025b80)={{0x94, 0x4f45, 0x1, 0x5}, 'syz0\x00', 0x32}) (async)
read$FUSE(r1, &(0x7f0000025c00)={0x2020, 0x0, <r4=>0x0}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000027c40)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_STATX(r1, &(0x7f0000029c80)={0x130, 0x0, r4, {0x49f, 0x6, 0x0, '\x00', {0x1000, 0x4, 0x800, 0x7, 0xffffffffffffffff, r5, 0x4000, '\x00', 0x4, 0x3ff, 0x93, 0x7, {0x7, 0x861a}, {0xa6, 0x4}, {0x100000001, 0x1}, {0xffffffff, 0x4}, 0xffff4f60, 0x9873, 0x4, 0x7ff}}}, 0x130) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64)
ioctl$TIOCNXCL(r1, 0x540d) (async, rerun: 64)
ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000029dc0)={0x40002, 0x0, [0xf20, 0x2, 0x2, 0x7fffffffffffffff, 0x2, 0x2, 0x46, 0xe]})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) (async)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000029e40)={0x4, 0x0, [{0x1, 0x8, 0xdd2e5d26bcf3f28f, 0x4, 0x8, 0x5, 0x8}, {0x4, 0x6, 0x5, 0xd, 0xffffffff, 0x7, 0x8}, {0x40000001, 0x7, 0x3, 0x7f, 0xff, 0x8001, 0x6}, {0xa, 0x5, 0x0, 0x4cb, 0x2, 0x3, 0x4}]}) (async)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000029f00)={0xed, 0x0, 0xffffffffffffffff}) (async)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x18)

396.706484ms ago: executing program 0 (id=721):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000140))
ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040))
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc018620c, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x100000001, <r10=>r1, 'id1\x00'})
write$cgroup_freezer_state(r10, &(0x7f0000000200)='THAWED\x00', 0x7)
openat$cgroup_freezer_state(r6, &(0x7f0000000240), 0x2, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x400000f3}]})
ioctl$BLKRRPART(r0, 0x125f, 0x0)

396.413304ms ago: executing program 2 (id=722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2/file0\x00', 0x400000, 0x1fb) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84001, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x100, 0x0)
unlinkat(r0, &(0x7f00000001c0)='./file1\x00', 0x200) (async)
openat$bsg(0xffffffffffffff9c, &(0x7f0000001640), 0x4000, 0x0) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)
unlinkat(r0, &(0x7f00000003c0)='./file2\x00', 0x200) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4008af60, &(0x7f0000000940))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x9, <r4=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0xf, 0x3, &(0x7f0000000140)}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x10, 0x0, &(0x7f0000000540)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0})

391.473574ms ago: executing program 3 (id=723):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r2, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x5, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]})
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f00), 0x101282, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000100)={0x8f, 0x0, 0x1})

391.168114ms ago: executing program 2 (id=724):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000003c0)={@my=0x1})
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x805848, &(0x7f0000000000)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x36, 0x35, 0x32, 0x61, 0x35, 0x36], 0x2d, [0x0, 0x63, 0x36, 0x36], 0x2d, [0x33, 0x62, 0x30, 0xb389bdf63d396880], 0x2d, [0x32, 0x36, 0x34, 0x36], 0x2d, [0x37, 0x34, 0x35, 0x30, 0x32, 0x37, 0x39, 0x37]}}}]})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

369.181464ms ago: executing program 2 (id=725):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000380)={0x1, 0x0, [{0x587, 0x0, 0x9}]})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01"], 0x3e)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x110e22fff6)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x8)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$RTC_AIE_OFF(r9, 0x7002)
ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000180)={0x6000, 0x1, 0x3, 0x9, 0x7})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x3000, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000003c0)=[@dead_binder_done], 0x9d, 0x0, &(0x7f0000000440)="86a26c9da618d909bce30b7cf1cd8e3cd67bebed2f51f050b192202dc79a841f2307e8a18d200c24f92523c2e73cd5d0392854de671d87310511c3173d65868163dae6dca81ce9330e7f8083114ca0336d334fce1f60203ec29a53e0f3109b5f95a1f5a20b1ee8f1d39b9660a40c44c98093ce8a73170e7bde42b3d6635738d31f142a3cc29ae231a13c3312602d24a87dd2633985828593c874478e39"})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000580)={[0x8001, 0x0, 0x8, 0x8000000000000000, 0x1, 0x8001, 0xd8bd, 0x5d, 0x800, 0x9, 0x0, 0x8000000000000000, 0x9, 0x2, 0x12, 0x39], 0x8080000, 0x10000})

289.900105ms ago: executing program 0 (id=726):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2)
read(r2, &(0x7f0000000040)=""/8, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd6)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)={[], [{@context={'context', 0x3d, 'system_u'}}]})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'freezer'}, {0x2d, 'freezer'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'devices'}]}, 0x31)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)

180.793127ms ago: executing program 3 (id=727):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080), 0x3f00, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYRES64=r0]) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x40305839, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async)
r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) (async)
r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3f)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000300000000020100890300000002000000001f00805e12dc418d9a1e5e228cbe1d03685f42132dddaf1619eb8cc4453a8371572fef8148f0b88ba1bc1abb8a216322d882f48a59a9bd7ebc9a8027036d5dffa3df8a67b5d8869b959ca2043cb922de788a767cd156f7a1afc32be244c69fa05bb71c214b5859c4e96d9bf136cea38f80078e05d271f3b0b26f81bbcf2b2820c6b86b14d5679e7b5ff6e955ed3268bdb4adc2554a508fb8b2ca73feddbf607443b5a5077c6f80bf91631cbe6e75ed07f186651430"]) (async)
r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x120) (async)
r13 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r14, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) (async)
write$binfmt_format(r13, &(0x7f0000000000)='0\x00', 0x2) (async)
read$FUSE(r12, &(0x7f0000000dc0)={0x2020}, 0x2020) (async)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0])
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000b, 0x12, r11, 0x6dc03000) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x3b06827, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/11])

148.543988ms ago: executing program 2 (id=728):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000081380000000000000600b96e22d80000"])
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xffff1000, 0x2011c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

147.762447ms ago: executing program 0 (id=729):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
read(r3, &(0x7f0000000280)=""/14, 0xe)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) (async)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
read(r3, &(0x7f0000000280)=""/14, 0xe) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}, @clear_death={0x400c6313}], 0x0, 0x0, 0x0}) (async)

121.529048ms ago: executing program 3 (id=730):
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e031800dd"], 0x22)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TCXONC(r2, 0x40045436, 0x2)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x420002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000080))
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES64=r4])
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007980), 0xe0040, 0x0)
read(r7, 0x0, 0x12)
ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000006c0)='\x00\x00\x03\t\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\x80\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\b\xd0\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=vj<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d\n\xce\f\xba\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xa9\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x00\x13P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xbeMk\xe0C\xc3\aSH\xe0\xf2\x0f\'z8\xbe\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\a\x00\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+p\x00\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc2\x00\x00\x00\x00\x00\x00\x04<\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|\x18\bb\x82\x8f\xc0\xab\xe3a`z\x06\x00\x00\x00\x00\x00\x00\x00\\\xf2\xd5\b\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000200)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2(\xdfn\x04\xff\xff\xe6-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfa\x13Vz\xbf\xe3\xe7\x83 +c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00 \x00d\xf0\xf1m\x11\x12\xc0\xbb\x05\x00~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80y\xdd\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe36\xe7\xd8\xf9\x13\xbc\x19\xde//go\x85\xd7\x8a\x14do\xb3\xc8\xd5l\x14!\xf9Xg\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe50\xe4\x87\xc9\x8f\xa7\xe0\xd9v\x9a\x14\xec\xe3*\xf5\xa83\xf8um \xb5\xdc\xaf4\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\a[\xb1\x00\xff\x7f\x00\x00\x00\x00\xb242\xf6{tYL\xbfN\x8dD\x12\xfcU\x9a\xba\xc5\xd8GM\xb1*\xa7\x0e\x0e\xbcs\x91p\x9fD-\xda2\x0fm\xc9B\x03\xf80\xfd\xb3\x1e\x18\x98L\xae\rmy')
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000)
mmap(&(0x7f00003b3000/0x4000)=nil, 0x4000, 0x1000007, 0x13, 0xffffffffffffffff, 0x8f690000)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000ffff00"/24])

73.159339ms ago: executing program 0 (id=731):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x583000, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x5fa58000)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x90, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x2, &(0x7f0000000240)=""/13, 0xd, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x2, 0xa}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x5a, 0x0, &(0x7f00000002c0)="1920ff09471b1099c7961fdcc405843a41a786d3ed8ebe8e80e4b4144e1cf51c728b926c80eb2a8e4f6b2dab5b6ac95dd16066dc703442a9132a8dd210e45df98d795a638622681df1cb222612051f612948409bc69ce5464f37"})
ioctl$AUTOFS_IOC_READY(r0, 0xc1086201, 0x20002000)

16.462909ms ago: executing program 0 (id=732):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75785aa0a6e2ac92c9bcf5ef1953f4b1175d91c793524e443b1e1bb9c6c248638b3107a4f3c241200907c7dc1289ff0fde79a60500e2be5c7ab3f379e5"], 0xb) (async)
write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75785aa0a6e2ac92c9bcf5ef1953f4b1175d91c793524e443b1e1bb9c6c248638b3107a4f3c241200907c7dc1289ff0fde79a60500e2be5c7ab3f379e5"], 0xb)
close(r1) (async)
close(r1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f})
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r7, 0x5000940e, &(0x7f0000000b80)={{r4}, "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"})
write$uinput_user_dev(r6, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0xb}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x5, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_DEV_CREATE(r6, 0x5501) (async)
ioctl$UI_DEV_CREATE(r6, 0x5501)
r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0)
close(r10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60)
ioctl$KVM_CAP_X2APIC_API(r12, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x1})
ioctl$KVM_SIGNAL_MSI(r12, 0x4020aea5, &(0x7f0000000040)={0x8000000, 0xf001, 0x9, 0x1, 0x20e})
write$selinux_load(r8, &(0x7f0000000000)=ANY=[], 0x1790)
read(r6, &(0x7f0000000600)=""/193, 0x18) (async)
read(r6, &(0x7f0000000600)=""/193, 0x18)
write$uinput_user_dev(r6, &(0x7f0000000700)={'syz0\x00', {0x3a06, 0xfffe, 0x300, 0x8}, 0x8, [0x3, 0x9, 0xffffffad, 0x100, 0x8001, 0x0, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8, 0x3, 0xffffff81, 0xfff, 0x2, 0xe, 0x4, 0x48c, 0x3, 0x2, 0x9, 0x4, 0x8, 0x64c4, 0x9, 0x7a8, 0x8001, 0x80000001, 0x2, 0x7, 0x8f, 0x6, 0x5, 0xffffffff, 0x7, 0x3, 0x2, 0xd, 0x5, 0x1, 0x80000000, 0x5, 0xfffffff7, 0x0, 0x0, 0x3, 0x0, 0x4, 0xe6b1, 0x5, 0x5, 0x3, 0x9, 0x8, 0xa3, 0xac, 0x0, 0xdd, 0x1, 0x8000, 0x6, 0x9, 0x1ff], [0xfff, 0x4, 0xff, 0x8, 0x0, 0x205, 0x6, 0x7, 0x7, 0x0, 0x7, 0xc646, 0x5, 0x8, 0x10, 0xc, 0x3, 0x7, 0x2, 0x8, 0x9, 0x8000, 0xa, 0x3ff, 0x2214d677, 0x2e83, 0x3, 0x6, 0x9, 0x0, 0x7, 0x0, 0x10021, 0x5, 0x8, 0x6, 0x7fff, 0x1, 0x2, 0xf, 0x9, 0x2376, 0x3, 0x34ec, 0x100, 0x30, 0x1, 0x9, 0x81, 0x0, 0x1ff, 0x6, 0x7, 0x1, 0x10001, 0x3, 0xed7b, 0x8001, 0xd153, 0xffffffff, 0x1, 0x10000, 0x2, 0x10000], [0x6, 0x3bce6e9e, 0xb5b0, 0x56, 0xe578, 0x5, 0xb, 0xe, 0x401, 0x8, 0xffff, 0x8, 0xa58, 0xfffffff9, 0xa42, 0x5, 0x4, 0x8, 0x9, 0x4, 0x0, 0x3c, 0x7fffffff, 0x5, 0x9, 0x398, 0x40, 0xaf, 0x7, 0x0, 0x7, 0x7fff, 0x80000001, 0xec, 0x0, 0x400, 0x749, 0x3, 0x6, 0x5, 0x6, 0x3, 0x9, 0x5, 0x8d, 0x1, 0xffff, 0xa5, 0x1, 0xde, 0x7f, 0x9, 0x8, 0x6, 0x6, 0x9, 0x6, 0xffff, 0x40, 0x3, 0x3, 0x7, 0x1, 0x1525defe], [0x3, 0x7, 0xa84, 0x6, 0x8, 0x26, 0x3, 0x40000000, 0x1, 0x3, 0x689d, 0xfff, 0x5, 0x40, 0x4, 0x4426, 0x800, 0x0, 0x79, 0x9, 0x3ff, 0x80, 0xc000000, 0x6, 0xfffffff4, 0x4, 0x6, 0x4, 0xfffffffd, 0x2d, 0x3, 0x8, 0xa, 0xffff0000, 0xec8, 0xfffffffa, 0xc, 0x2, 0xf2, 0x1000, 0x59, 0x0, 0x9a, 0x6, 0x6, 0x9, 0x8, 0x5, 0xc01, 0x9, 0x2, 0x400, 0x6, 0x2d, 0xf35, 0x25, 0x4, 0x5, 0x9, 0x3, 0x803, 0x40, 0x0, 0x1]}, 0x45c)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x50, r1, 0x2c94b000)

0s ago: executing program 2 (id=733):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0)
read(r5, &(0x7f0000000100)=""/84, 0x74)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x30, r4, 0x6951d000)
ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000c40)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\n\x9d\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xacp\x19\xec\x9a\f/\x03\\\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\x95\xf1\xbc\x95tM\x96u\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa4-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x97\x19\xde/\xaa\x868hB+\x97\xe92\xb5a\xed\xfb&\xae<9\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3\xfd\x19\x89%8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xcb-\x93)\x0e\xf8h\xd8\xbf\xb0c\xe8S\xea6\xf5\xd0\xda)\a\x00\x00\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80)WeT\x98X\xeb\xef(\x1c9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x85t,\xa2\xec\xaa\x80\xfb\n\xf8\x924\xb4\x8a\xb2\'\xc0\x161\xebx\xf3f\xa9\xcd<\b\x05\xd0\x13a\xeeT\xe0\r5\xabK>?P\r\xc1\xe4JM\xc4\xa6\x02\x05\x1d\xa2\x87\x1d\x00\x9e\x1a8\x95\x9f\x1b\xfd\xc4\xa3f\x8dv\xa28\xd8}\'\xc0Q\x0f\xa0\x819\xb3\x06\xbaL[d\xfe\xdfPo\xceHA]\x93r\x82\xde\"\xb3\xff\xb1\xb8{\xf3\x9a\x9f\"\x9b\xc9\x92W\x9cGe\xcf3\xe7\xaa\xc6%\xd1\xce\xbbJ\x95\xbbt\xe3\xba\xf3l)I\xd0\\@\xbc\xd6\x19\xe2\x0f_^\x89\xf0\f0\xb9\xb8')
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0xeeee8000, 0x42240})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000640)={[0x202a4, 0x6, 0x8002, 0xb, 0x0, 0x9, 0xeffffffffffffffb, 0x7, 0x4, 0x2, 0x0, 0x7, 0x3, 0x5, 0x8000000000000000, 0x9], 0x2000, 0x24b95c3e2ed9bbff})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f00000001c0))
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000680))
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000180)=0x7)
ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0x80095dc)
openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r8, 0x8858000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts.
[   21.589174][   T36] audit: type=1400 audit(1750371077.020:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   21.590641][  T281] cgroup: Unknown subsys name 'net'
[   21.611879][   T36] audit: type=1400 audit(1750371077.020:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.639152][   T36] audit: type=1400 audit(1750371077.040:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.639516][  T281] cgroup: Unknown subsys name 'devices'
[   21.781674][  T281] cgroup: Unknown subsys name 'hugetlb'
[   21.787304][  T281] cgroup: Unknown subsys name 'rlimit'
[   21.941659][   T36] audit: type=1400 audit(1750371077.370:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.965129][   T36] audit: type=1400 audit(1750371077.370:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.990033][   T36] audit: type=1400 audit(1750371077.370:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   22.001224][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   22.021943][   T36] audit: type=1400 audit(1750371077.450:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.047435][   T36] audit: type=1400 audit(1750371077.450:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.077212][   T36] audit: type=1400 audit(1750371077.500:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.077819][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.102958][   T36] audit: type=1400 audit(1750371077.500:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   22.937107][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.944236][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.951364][  T288] bridge_slave_0: entered allmulticast mode
[   22.957640][  T288] bridge_slave_0: entered promiscuous mode
[   22.965675][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.972810][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.980085][  T288] bridge_slave_1: entered allmulticast mode
[   22.986381][  T288] bridge_slave_1: entered promiscuous mode
[   23.031226][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.038298][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.045436][  T289] bridge_slave_0: entered allmulticast mode
[   23.051751][  T289] bridge_slave_0: entered promiscuous mode
[   23.065072][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.072162][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.079325][  T289] bridge_slave_1: entered allmulticast mode
[   23.085571][  T289] bridge_slave_1: entered promiscuous mode
[   23.094350][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.101496][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.108583][  T290] bridge_slave_0: entered allmulticast mode
[   23.114905][  T290] bridge_slave_0: entered promiscuous mode
[   23.132418][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.139500][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.146580][  T290] bridge_slave_1: entered allmulticast mode
[   23.153020][  T290] bridge_slave_1: entered promiscuous mode
[   23.194010][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.201106][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.208183][  T291] bridge_slave_0: entered allmulticast mode
[   23.214574][  T291] bridge_slave_0: entered promiscuous mode
[   23.228404][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.235559][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.242679][  T291] bridge_slave_1: entered allmulticast mode
[   23.249146][  T291] bridge_slave_1: entered promiscuous mode
[   23.392279][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.399381][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.406708][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.413816][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.422258][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.429358][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.436681][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.443735][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.472518][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.479606][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.486879][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.493977][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.523943][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.531039][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.538317][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.545402][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.570784][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.578093][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.585586][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.593348][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.600710][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.607910][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.615341][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.622526][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.638733][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.645818][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.658009][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.665105][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.684397][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.691497][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.699209][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.706339][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.714100][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.721169][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.728950][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.735994][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.769094][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.776167][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.789473][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.796543][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.823025][  T289] veth0_vlan: entered promiscuous mode
[   23.841039][  T290] veth0_vlan: entered promiscuous mode
[   23.861055][  T289] veth1_macvtap: entered promiscuous mode
[   23.870887][  T288] veth0_vlan: entered promiscuous mode
[   23.882256][  T290] veth1_macvtap: entered promiscuous mode
[   23.895011][  T288] veth1_macvtap: entered promiscuous mode
[   23.930275][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.931442][  T291] veth0_vlan: entered promiscuous mode
[   23.963382][  T291] veth1_macvtap: entered promiscuous mode
[   24.024182][  T309] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   24.102477][  T325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[   24.103425][  T325] rust_binder: Read failure Err(EFAULT) in pid:7
[   24.123165][  T311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   24.427323][  T334] input: syz0 as /devices/virtual/input/input4
[   24.444254][  T334] input: failed to attach handler leds to device input4, error: -6
[   24.462453][  T334] kvm: kvm [333]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400
[   24.759141][  T346] random: crng reseeded on system resumption
[   24.804408][  T346] rust_binder: validate_parent_fixup: new_min_offset=81, sg_entry.length=75
[   24.804441][  T346] rust_binder: Error while translating object.
[   24.813439][  T347] rust_binder: Write failure EINVAL in pid:14
[   24.821216][  T346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.827438][  T346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11
[   24.829813][  T347] rust_binder: Error while translating object.
[   24.850762][  T347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   24.859017][  T347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:14
[   24.872397][  T348] binder: Unknown parameter ''
[   26.017157][  T378] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3
[   26.020913][  T381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:21
[   26.024914][  T378] rust_binder: Write failure EINVAL in pid:28
[   26.461945][  T392] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   26.483785][  T392] kvm: requested 154209 ns i8254 timer period limited to 200000 ns
[   26.495316][  T392] kvm: requested 40228 ns i8254 timer period limited to 200000 ns
[   26.503577][  T392] kvm: requested 143314 ns i8254 timer period limited to 200000 ns
[   26.516227][  T405] rust_binder: validate_parent_fixup: fixup_min_offset=29, parent_offset=27
[   26.516251][  T405] rust_binder: Error while translating object.
[   26.526003][  T405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   26.536158][  T405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29
[   26.783881][  T409] rust_binder: Error while translating object.
[   26.808647][  T409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   26.818851][  T409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43
[   26.833272][   T36] kauditd_printk_skb: 61 callbacks suppressed
[   26.833291][   T36] audit: type=1400 audit(1750371082.260:135): avc:  denied  { write } for  pid=410 comm="syz.3.32" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.872628][   T36] audit: type=1400 audit(1750371082.270:136): avc:  denied  { map } for  pid=410 comm="syz.3.32" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.903426][   T36] audit: type=1400 audit(1750371082.270:137): avc:  denied  { execute } for  pid=410 comm="syz.3.32" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.951454][  T419] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[   26.954317][   T36] audit: type=1400 audit(1750371082.380:138): avc:  denied  { append } for  pid=418 comm="syz.0.35" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   26.956796][  T419] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   26.988158][  T421] rust_binder: Failed to allocate buffer. len:40, is_oneway:false
[   27.008981][  T419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:35
[   27.010836][  T424] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:24
[   27.045853][   T36] audit: type=1400 audit(1750371082.470:139): avc:  denied  { execute } for  pid=425 comm="syz.2.37" path="/13/cpu.stat" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   27.118027][  T429] rust_binder: Write failure EINVAL in pid:37
[   27.118587][  T429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[   27.133613][   T36] audit: type=1400 audit(1750371082.560:140): avc:  denied  { read write } for  pid=428 comm="syz.0.38" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.215725][   T36] audit: type=1400 audit(1750371082.560:141): avc:  denied  { open } for  pid=428 comm="syz.0.38" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   27.228836][  T437] input: syz0 as /devices/virtual/input/input5
[   27.264649][  T437] =======================================================
[   27.264649][  T437] WARNING: The mand mount option has been deprecated and
[   27.264649][  T437]          and is ignored by this kernel. Remove the mand
[   27.264649][  T437]          option from the mount to silence this warning.
[   27.264649][  T437] =======================================================
[   27.270014][  T434] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[   27.299702][   T36] audit: type=1400 audit(1750371082.690:142): avc:  denied  { remount } for  pid=436 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   27.339435][  T438] PM: Enabling pm_trace changes system date and time during resume.
[   27.339435][  T438] PM: Correct system time has to be restored manually after resume.
[   27.368038][  T437] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   27.519820][   T36] audit: type=1326 audit(1750371082.950:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=445 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe642f8e929 code=0x7ffc0000
[   27.587356][   T36] audit: type=1326 audit(1750371082.950:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=445 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe642f8e929 code=0x7ffc0000
[   27.633934][  T446] binder: Unknown parameter 'context'
[   27.792942][  T459] binder: Bad value for 'stats'
[   27.798337][  T459] binder: Bad value for 'stats'
[   27.804137][  T459] binder: Bad value for 'stats'
[   27.809330][  T459] binder: Bad value for 'stats'
[   27.814432][  T459] binder: Bad value for 'stats'
[   27.821701][  T459] binder: Bad value for 'stats'
[   27.831041][  T459] binder: Bad value for 'stats'
[   27.836095][  T459] binder: Bad value for 'stats'
[   27.843047][  T459] binder: Bad value for 'stats'
[   27.848086][  T459] binder: Bad value for 'stats'
[   27.853425][  T459] binder: Bad value for 'stats'
[   27.858450][  T459] binder: Bad value for 'stats'
[   27.863797][  T459] binder: Bad value for 'stats'
[   27.868960][  T459] binder: Bad value for 'stats'
[   27.874049][  T459] binder: Bad value for 'stats'
[   27.880386][  T459] binder: Bad value for 'stats'
[   27.885705][  T459] binder: Bad value for 'stats'
[   27.890956][  T459] binder: Bad value for 'stats'
[   27.896051][  T459] binder: Bad value for 'stats'
[   27.901335][  T459] binder: Bad value for 'stats'
[   27.914412][  T459] binder: Bad value for 'stats'
[   27.919813][  T459] binder: Bad value for 'stats'
[   27.925718][  T459] binder: Bad value for 'stats'
[   27.931010][  T459] binder: Bad value for 'stats'
[   27.936078][  T459] binder: Bad value for 'stats'
[   27.948100][  T459] binder: Bad value for 'stats'
[   27.954125][  T459] binder: Bad value for 'stats'
[   27.960359][  T459] binder: Bad value for 'stats'
[   27.965573][  T459] binder: Bad value for 'stats'
[   27.972778][  T459] binder: Bad value for 'stats'
[   27.977859][  T459] binder: Bad value for 'stats'
[   27.983659][  T459] binder: Bad value for 'stats'
[   27.988913][  T459] binder: Bad value for 'stats'
[   27.994004][  T459] binder: Bad value for 'stats'
[   27.999302][  T459] binder: Bad value for 'stats'
[   28.004376][  T459] binder: Bad value for 'stats'
[   28.009880][  T459] binder: Bad value for 'stats'
[   28.014962][  T459] binder: Bad value for 'stats'
[   28.020210][  T459] binder: Bad value for 'stats'
[   28.033121][  T459] binder: Bad value for 'stats'
[   28.043671][  T459] binder: Bad value for 'stats'
[   28.050433][  T459] binder: Bad value for 'stats'
[   28.056499][  T459] binder: Bad value for 'stats'
[   28.062116][  T459] binder: Bad value for 'stats'
[   28.067585][  T459] binder: Bad value for 'stats'
[   28.072893][  T459] binder: Bad value for 'stats'
[   28.078198][  T459] binder: Bad value for 'stats'
[   28.083542][  T459] binder: Bad value for 'stats'
[   28.088813][  T459] binder: Bad value for 'stats'
[   28.093854][  T459] binder: Bad value for 'stats'
[   28.099128][  T459] binder: Bad value for 'stats'
[   28.104155][  T459] binder: Bad value for 'stats'
[   28.109440][  T459] binder: Bad value for 'stats'
[   28.114476][  T459] binder: Bad value for 'stats'
[   28.121367][  T459] binder: Bad value for 'stats'
[   28.126401][  T459] binder: Bad value for 'stats'
[   28.132464][  T459] binder: Bad value for 'stats'
[   28.132540][  T470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.137489][  T459] binder: Bad value for 'stats'
[   28.148715][  T470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[   28.153680][  T459] binder: Bad value for 'stats'
[   28.168132][  T459] binder: Bad value for 'stats'
[   28.173387][  T459] binder: Bad value for 'stats'
[   28.178480][  T459] binder: Bad value for 'stats'
[   28.184179][  T459] binder: Bad value for 'stats'
[   28.189475][  T459] binder: Bad value for 'stats'
[   28.194537][  T459] binder: Bad value for 'stats'
[   28.593136][  T483] rust_binder: Write failure EFAULT in pid:63
[   28.640769][  T485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   28.854977][  T496] rust_binder: Write failure EINVAL in pid:57
[   28.860005][  T496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.864296][  T493] rust_binder: Error while translating object.
[   28.866464][  T496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57
[   28.889277][  T493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.898689][  T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[   28.914965][  T493] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.928974][  T493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.935511][  T493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70
[   29.037705][  T506] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.066532][  T505] rust_binder: Error in use_page_slow: ESRCH
[   29.066626][  T505] rust_binder: use_range failure ESRCH
[   29.073278][  T505] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   29.079228][  T505] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   29.087258][  T505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:62
[   29.353472][  T527] rust_binder: Write failure EFAULT in pid:70
[   29.505855][  T531] binder: Bad value for 'max'
[   29.912648][  T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[   29.921179][  T543] rust_binder: Error while translating object.
[   29.934489][  T543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.941519][  T543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79
[   30.202336][  T564] rust_binder: Error in use_page_slow: ESRCH
[   30.202364][  T564] rust_binder: use_range failure ESRCH
[   30.218704][  T564] rust_binder: Failed to allocate buffer. len:136, is_oneway:false
[   30.218730][  T564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   30.226750][  T564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:87
[   30.316061][  T576] rust_binder: validate_parent_fixup: new_min_offset=40, sg_entry.length=0
[   30.338754][  T576] rust_binder: Error while translating object.
[   30.349476][  T576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.363409][  T576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[   30.726452][  T612] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿß) failed with errno=-22
[   30.768720][  T617] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   30.845333][  T618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103
[   30.852071][  T618] rust_binder: Write failure EINVAL in pid:103
[   30.906248][  T621] binder: Bad value for 'stats'
[   31.139127][  T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[   31.141491][  T626] kvm: kvm [624]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x9000000000003
[   31.163198][  T633] rust_binder: Error while translating object.
[   31.163244][  T633] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   31.170170][  T633] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[   31.315867][  T643] rust_binder: Write failure EFAULT in pid:98
[   31.713349][  T657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   31.749041][  T657] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   31.759483][  T657] rust_binder: Error in use_page_slow: ESRCH
[   31.759507][  T657] rust_binder: use_range failure ESRCH
[   31.768641][  T657] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   31.788670][  T657] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   31.790249][  T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[   31.796598][  T657] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:107
[   31.966039][  T673] random: crng reseeded on system resumption
[   31.981256][   T36] kauditd_printk_skb: 68 callbacks suppressed
[   31.981274][   T36] audit: type=1400 audit(1750371087.390:213): avc:  denied  { append } for  pid=672 comm="syz.0.110" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   32.120143][   T36] audit: type=1400 audit(1750371087.550:214): avc:  denied  { execute } for  pid=672 comm="syz.0.110" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1
[   32.236028][   T36] audit: type=1400 audit(1750371087.650:215): avc:  denied  { read write } for  pid=681 comm="syz.0.113" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   32.295547][   T36] audit: type=1400 audit(1750371087.660:216): avc:  denied  { open } for  pid=681 comm="syz.0.113" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   32.344279][   T36] audit: type=1400 audit(1750371087.660:217): avc:  denied  { map } for  pid=681 comm="syz.0.113" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   32.367257][   T36] audit: type=1400 audit(1750371087.660:218): avc:  denied  { ioctl } for  pid=681 comm="syz.0.113" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   32.684279][  T691] binder: Unknown parameter '0x0000000000000006'
[   32.707793][  T695] binder: Unknown parameter '0x0000000000000006'
[   32.725443][  T697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   32.725475][  T697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:127
[   32.842109][  T714] input: syz1 as /devices/virtual/input/input9
[   32.874310][   T36] audit: type=1400 audit(1750371088.300:219): avc:  denied  { create } for  pid=713 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[   33.370451][   T36] audit: type=1400 audit(1750371088.800:220): avc:  denied  { write } for  pid=723 comm="syz.3.126" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   33.414419][  T724] rust_binder: Error while translating object.
[   33.414461][  T724] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.420859][  T724] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125
[   33.536247][   T36] audit: type=1326 audit(1750371088.960:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=727 comm="syz.2.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d63b8e929 code=0x0
[   33.575736][  T734] rust_binder: Write failure EINVAL in pid:129
[   33.575820][  T734] rust_binder: Write failure EINVAL in pid:129
[   33.622987][   T36] audit: type=1400 audit(1750371089.050:222): avc:  denied  { map } for  pid=738 comm="syz.0.132" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1
[   33.829294][  T748] rust_binder: Write failure EFAULT in pid:132
[   34.196954][  T768] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   34.208706][  T769] rust_binder: Write failure EINVAL in pid:168
[   34.218488][  T768] rust_binder: Read failure Err(EFAULT) in pid:168
[   34.226728][  T774] input: syz0 as /devices/virtual/input/input10
[   34.254442][  T774] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.292173][  T776] binder: Bad value for 'max'
[   34.383541][  T778] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   34.383566][  T778] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   34.392446][  T778] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:172
[   34.442506][  T784] rust_binder: Write failure EINVAL in pid:152
[   34.462978][  T783] rust_binder: Write failure EINVAL in pid:152
[   34.531215][  T786] rust_binder: Write failure EFAULT in pid:155
[   34.599670][  T792] rust_binder: Write failure EFAULT in pid:143
[   35.648831][  T836] binder: Bad value for 'stats'
[   35.808566][  T846] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 18446744073709551585)
[   35.808621][  T846] rust_binder: Error while translating object.
[   35.825793][  T849] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.832252][  T849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195
[   35.843776][  T846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   35.858694][  T847] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   35.868664][  T846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160
[   35.920779][  T851] kvm: kvm [848]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001
[   35.961922][  T851] rust_binder: Error while translating object.
[   35.961953][  T851] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   35.978674][  T851] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:195
[   36.063368][  T860] input: syz0 as /devices/virtual/input/input11
[   36.279107][  T868] rust_binder: Error while translating object.
[   36.279190][  T868] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.306693][  T868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:171
[   36.368931][  T871] rust_binder: Error while translating object.
[   36.386334][  T871] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   36.396425][  T871] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175
[   36.558450][  T901] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false
[   36.577081][  T874] cgroup: fork rejected by pids controller in 
[   36.585894][  T901] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   36.592404][  T901] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:177
[   36.602191][  T874] /syz3
[   36.854106][  T914] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[   37.072680][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   37.072699][   T36] audit: type=1400 audit(1750371092.500:231): avc:  denied  { write } for  pid=924 comm="syz.3.183" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.100984][   T36] audit: type=1400 audit(1750371092.500:232): avc:  denied  { remove_name } for  pid=924 comm="syz.3.183" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   37.176060][   T36] audit: type=1400 audit(1750371092.500:233): avc:  denied  { unlink } for  pid=924 comm="syz.3.183" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   37.242045][   T36] audit: type=1400 audit(1750371092.670:234): avc:  denied  { load_policy } for  pid=933 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   37.266193][  T934] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   37.293202][  T934] SELinux: failed to load policy
[   37.636150][  T950] binder: Unknown parameter '0x000000000000000001777777777777777777777'
[   37.847895][  T957] rust_binder: Error while translating object.
[   37.847928][  T957] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   37.863006][  T957] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:214
[   37.929860][  T967] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:216
[   38.558649][  T988] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   38.861060][ T1001] rust_binder: Write failure EINVAL in pid:238
[   38.904031][   T36] audit: type=1326 audit(1750371094.330:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.3.208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4412f8e929 code=0x0
[   39.022929][   T36] audit: type=1400 audit(1750371094.450:236): avc:  denied  { read write } for  pid=1012 comm="syz.0.211" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.065152][   T36] audit: type=1400 audit(1750371094.470:237): avc:  denied  { open } for  pid=1012 comm="syz.0.211" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   39.337946][ T1019] pim6reg0: tun_chr_ioctl cmd 1074025677
[   39.348679][ T1019] pim6reg0: linktype set to 769
[   39.567987][   T36] audit: type=1400 audit(1750371094.990:238): avc:  denied  { read } for  pid=1026 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   39.604514][   T36] audit: type=1400 audit(1750371094.990:239): avc:  denied  { open } for  pid=1026 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   39.646258][  T292] bridge_slave_1: left allmulticast mode
[   39.652710][  T292] bridge_slave_1: left promiscuous mode
[   39.658460][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.666661][  T292] bridge_slave_0: left allmulticast mode
[   39.672699][  T292] bridge_slave_0: left promiscuous mode
[   39.678504][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.760600][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.771579][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.779212][ T1026] bridge_slave_0: entered allmulticast mode
[   39.785774][ T1026] bridge_slave_0: entered promiscuous mode
[   39.792657][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.800046][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.807173][ T1026] bridge_slave_1: entered allmulticast mode
[   39.813741][ T1026] bridge_slave_1: entered promiscuous mode
[   39.820748][  T292] veth1_macvtap: left promiscuous mode
[   39.826347][  T292] veth0_vlan: left promiscuous mode
[   39.918358][   T36] audit: type=1400 audit(1750371095.340:240): avc:  denied  { create } for  pid=1026 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   39.924976][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.945994][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.953320][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.960384][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.987227][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.994698][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.004302][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.011382][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.022372][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.029484][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.056171][ T1026] veth0_vlan: entered promiscuous mode
[   40.068249][ T1026] veth1_macvtap: entered promiscuous mode
[   40.680572][ T1060] input: syz0 as /devices/virtual/input/input13
[   40.709804][ T1065] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   40.712949][ T1065] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   40.719724][ T1065] rust_binder: Error while translating object.
[   40.730296][ T1065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.736476][ T1065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[   40.864034][ T1071] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[   41.219636][ T1093] rust_binder: Write failure EINVAL in pid:26
[   41.362256][ T1098] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   41.375867][ T1098] rust_binder: Write failure EINVAL in pid:276
[   41.386477][ T1100] binder: Bad value for 'defcontext'
[   41.411571][ T1103] binder: Unknown parameter 'sta4s'
[   41.456399][ T1107] kvm: kvm [1106]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3
[   41.513539][ T1112] kvm: kvm [1111]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001
[   41.528926][ T1112] binder: Bad value for 'max'
[   41.668450][ T1121] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   41.668475][ T1121] rust_binder: Read failure Err(EFAULT) in pid:285
[   41.677675][ T1125] rust_binder: Write failure EINVAL in pid:41
[   41.690482][ T1124] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   41.704375][ T1125] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   41.713980][  T292] Bluetooth: hci0: Frame reassembly failed (-84)
[   41.845497][ T1135] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[   42.002134][ T1139] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   42.018669][ T1139] rust_binder: Write failure EINVAL in pid:49
[   42.116034][ T1144] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   42.139132][ T1146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287
[   42.139673][ T1146] rust_binder: Error while translating object.
[   42.168246][ T1146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   42.183381][ T1146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287
[   42.210371][ T1156] can0: slcan on ptm3.
[   42.227270][   T36] kauditd_printk_skb: 5 callbacks suppressed
[   42.227287][   T36] audit: type=1400 audit(1750371097.650:246): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   42.291461][ T1162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:58
[   42.304448][   T36] audit: type=1400 audit(1750371097.650:247): avc:  denied  { read } for  pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2286 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.311519][ T1164] input: syz1 as /devices/virtual/input/input17
[   42.336073][   T36] audit: type=1400 audit(1750371097.650:248): avc:  denied  { open } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2286 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.438131][   T36] audit: type=1400 audit(1750371097.650:249): avc:  denied  { getattr } for  pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2286 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.508658][   T36] audit: type=1326 audit(1750371097.860:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1166 comm="syz.4.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f560458e929 code=0x0
[   42.559995][ T1179] SELinux: security_context_str_to_sid () failed with errno=-22
[   42.569949][ T1156] can0 (unregistered): slcan off ptm3.
[   42.609864][   T36] audit: type=1400 audit(1750371098.040:251): avc:  denied  { append } for  pid=1181 comm="syz.3.262" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   42.688656][   T36] audit: type=1400 audit(1750371098.060:252): avc:  denied  { create } for  pid=1165 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.737781][   T36] audit: type=1400 audit(1750371098.060:253): avc:  denied  { write } for  pid=1165 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.813941][   T36] audit: type=1400 audit(1750371098.060:254): avc:  denied  { append } for  pid=1165 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.871573][ T1204] binder: Unknown parameter '00000000000000000000000'
[   42.908660][   T36] audit: type=1400 audit(1750371098.120:255): avc:  denied  { unlink } for  pid=1192 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2326 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   42.978102][ T1216] rust_binder: Failed to allocate buffer. len:18446744073709551440, is_oneway:true
[   42.978139][ T1216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   42.987857][ T1216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:304
[   43.056903][ T1222] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.067480][ T1222] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.471511][ T1253] rust_binder: Got transaction with invalid offset.
[   43.475374][ T1251] __vm_enough_memory: pid: 1251, comm: syz.4.279, bytes: 281474976845824 not enough memory for the allocation
[   43.478034][ T1253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   43.497050][ T1253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:313
[   43.651250][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.660625][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.668035][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.674786][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.681452][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.687928][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.695081][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.701707][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.708226][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.714837][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.721359][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   43.733301][ T1268] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   43.734529][ T1129] Bluetooth: hci0: command 0x1003 tx timeout
[   43.743911][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.758484][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.765397][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.772931][ T1269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   43.774616][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.779624][ T1269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:320
[   43.789488][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.808716][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.815394][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.822087][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.828730][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.835250][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.841789][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.848501][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.860399][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.866929][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.873575][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.886766][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.893830][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.903792][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.910520][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.917235][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.924394][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.943491][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.952317][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.958885][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.967006][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.974701][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.981527][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.987641][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   43.988959][ T1278] rust_binder: Write failure EINVAL in pid:322
[   43.994603][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.008729][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.021146][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.027729][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.034261][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.040760][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.047356][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.053864][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.060720][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.067255][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.073788][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.087771][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.094409][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.101695][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.108251][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.114749][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.121482][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.128158][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.134694][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.143291][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.149842][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.156439][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.165433][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.173718][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.182375][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.188907][ T1262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.211527][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.226096][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.230964][ T1287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.233522][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324
[   44.233817][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.244821][ T1287] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   44.252526][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.267516][ T1287] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 255)
[   44.273541][ T1287] rust_binder: Error while translating object.
[   44.283749][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.284707][ T1287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   44.290449][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.301970][ T1287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:324
[   44.309404][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.331484][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.349915][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.357518][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.368300][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.377538][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.385016][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.386561][ T1294] binder: Bad value for 'max'
[   44.392487][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.404649][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.416723][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.424251][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.432002][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.439616][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.455765][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.463538][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.471532][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.479323][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.488133][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.495693][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.503322][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.511974][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.519714][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.527283][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.535239][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.542715][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.550158][   T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   44.558826][   T10] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   44.635400][ T1307] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   44.635424][ T1307] rust_binder: Read failure Err(EFAULT) in pid:326
[   44.663904][ T1304] fido_id[1304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   44.667928][ T1310] binder: Bad value for 'defcontext'
[   44.717626][ T1315] binder: Binderfs stats mode cannot be changed during a remount
[   45.048575][ T1338] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   45.227516][ T1346] binder: Binderfs stats mode cannot be changed during a remount
[   45.261989][ T1345] kvm: kvm [1342]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x186) = 0x3
[   45.587663][ T1380] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   45.588068][ T1380] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[   45.784809][ T1398] rust_binder: Error while translating object.
[   45.784855][ T1398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   45.791461][ T1398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99
[   46.079023][ T1413] rust_binder: Write failure EINVAL in pid:107
[   46.088304][ T1413] rust_binder: Write failure EINVAL in pid:107
[   46.111411][ T1415] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   46.126444][ T1418] rust_binder: Write failure EINVAL in pid:109
[   46.136741][ T1415] rust_binder: Write failure EINVAL in pid:109
[   46.351453][ T1436] SELinux: security_context_str_to_sid (system_uÝGй‰:ÿß) failed with errno=-22
[   46.369653][ T1438] rust_binder: Error while translating object.
[   46.369694][ T1438] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   46.375994][ T1438] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114
[   46.587590][ T1453] rust_binder: Write failure EINVAL in pid:368
[   46.628649][ T1464] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   46.656763][ T1466] can0: slcan on ptm0.
[   46.668782][ T1468] SELinux:  truncated policydb string identifier
[   46.675176][ T1468] SELinux: failed to load policy
[   46.720822][ T1469] rust_binder: Error while translating object.
[   46.720870][ T1469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   46.747540][ T1469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:121
[   46.940726][ T1465] can0 (unregistered): slcan off ptm0.
[   47.067317][ T1518] binfmt_misc: register: failed to install interpreter file ./file0
[   47.276526][ T1548] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   47.276561][ T1548] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138
[   47.322126][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   47.322144][   T36] audit: type=1400 audit(1750371102.750:272): avc:  denied  { setcurrent } for  pid=1556 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   47.358429][   T36] audit: type=1401 audit(1750371102.750:273): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t
[   47.461171][ T1569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   47.461450][ T1569] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   47.468299][ T1569] rust_binder: Write failure EINVAL in pid:143
[   47.479653][ T1571] binder: Binderfs stats mode cannot be changed during a remount
[   47.519408][  T292] Bluetooth: hci0: Frame reassembly failed (-84)
[   47.559515][ T1575] kernel profiling enabled (shift: 63)
[   47.569348][ T1575] profiling shift: 63 too large
[   47.579509][ T1575] binder: Unknown parameter 'eirsi¸&'
[   47.586305][   T36] audit: type=1326 audit(1750371103.010:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1578 comm="syz.3.379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4412f8e929 code=0x0
[   47.864506][ T1591] binder: Bad value for 'max'
[   47.874723][ T1593] binder: Unknown parameter '\ªO6Í|ÉÕ?i¶*"Âá'
[   47.903495][   T36] audit: type=1326 audit(1750371103.330:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1598 comm="syz.2.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d63b8e929 code=0x0
[   48.032251][ T1609] rust_binder: Error in use_page_slow: ESRCH
[   48.032270][ T1609] rust_binder: use_range failure ESRCH
[   48.038278][ T1609] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   48.043909][ T1609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   48.051802][ T1609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:401
[   48.150104][   T36] audit: type=1400 audit(1750371103.580:276): avc:  denied  { map } for  pid=1612 comm="syz.0.390" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   48.182493][   T36] audit: type=1400 audit(1750371103.580:277): avc:  denied  { execute } for  pid=1612 comm="syz.0.390" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   48.239885][ T1616] binder: Binderfs stats mode cannot be changed during a remount
[   48.293304][ T1616] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   48.302530][ T1616] binder: Bad value for 'stats'
[   48.573577][ T1641] binder: Bad value for 'stats'
[   48.613741][ T1645] SELinux: security_context_str_to_sid () failed with errno=-22
[   48.824477][ T1652] input: syz0 as /devices/virtual/input/input22
[   48.887782][ T1653] __vm_enough_memory: pid: 1653, comm: syz.3.404, bytes: 281474976845824 not enough memory for the allocation
[   49.126155][ T1668] binder: Unknown parameter 'nXI'
[   49.350197][   T36] audit: type=1326 audit(1750371104.780:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.2.414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d63b8e929 code=0x0
[   49.558647][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   49.558672][ T1129] Bluetooth: hci0: command 0x1003 tx timeout
[   49.615935][ T1685] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149
[   49.651120][ T1689] binder: Bad value for 'max'
[   50.100663][ T1711] rust_binder: Error in use_page_slow: ESRCH
[   50.100685][ T1711] rust_binder: use_range failure ESRCH
[   50.106732][ T1711] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   50.112315][ T1711] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   50.120376][ T1711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:440
[   50.189583][ T1715] rust_binder: Error while translating object.
[   50.198691][ T1715] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   50.204884][ T1715] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444
[   50.285819][   T36] audit: type=1326 audit(1750371105.710:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1722 comm="syz.3.428" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4412f8e929 code=0x0
[   50.387167][ T1732] input: syz1 as /devices/virtual/input/input24
[   50.572306][ T1742] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[   50.594618][   T36] audit: type=1326 audit(1750371106.020:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1743 comm="syz.4.435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560458e929 code=0x0
[   50.702666][   T36] audit: type=1400 audit(1750371106.130:281): avc:  denied  { ioctl } for  pid=1743 comm="syz.4.435" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   50.946394][ T1783] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   51.346153][ T1805] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   51.554937][ T1811] input: syz0 as /devices/virtual/input/input25
[   51.598825][ T1811] rust_binder: Write failure EFAULT in pid:209
[   51.950514][ T1836] rust_binder: Write failure EINVAL in pid:344
[   51.994728][ T1845] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   52.018750][ T1846] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   52.101574][ T1853] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false
[   52.111512][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4
[   52.127117][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2
[   52.135560][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.143271][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.151992][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.159677][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   52.168885][ T1859] rust_binder: Error while translating object.
[   52.168924][ T1859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   52.175262][ T1859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[   52.175374][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x3
[   52.203959][ T1862] rust_binder: Write failure EINVAL in pid:428
[   52.224025][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   52.230409][ T1855] SELinux: failed to load policy
[   52.241064][ T1864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.244836][ T1864] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.320308][ T1881] fido_id[1881]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   52.345091][ T1890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:471
[   52.345284][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   52.345299][   T36] audit: type=1400 audit(1750371107.770:284): avc:  denied  { ioctl } for  pid=1885 comm="syz.3.479" path="net:[4026532507]" dev="nsfs" ino=4026532507 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[   52.419261][ T1892] rust_binder: Write failure EFAULT in pid:251
[   52.566728][ T1915] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   52.586875][ T1914] input: syz0 as /devices/virtual/input/input29
[   52.761783][ T1923] binder: Unknown parameter 'appraise_type'
[   52.810569][   T36] audit: type=1400 audit(1750371108.240:285): avc:  denied  { setattr } for  pid=1929 comm="syz.3.493" path="/dev/binderfs/binder1" dev="binder" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   52.838294][   T36] audit: type=1326 audit(1750371108.260:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1931 comm="syz.3.494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4412f8e929 code=0x0
[   52.840969][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   52.999671][ T1944] rust_binder: Write failure EFAULT in pid:453
[   53.145248][ T1954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:261
[   53.320589][ T1961] input: syz0 as /devices/virtual/input/input30
[   53.355885][ T1961] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   53.440935][ T1970] rust_binder: Write failure EINVAL in pid:469
[   53.472791][ T1975] binder: Unknown parameter 'nXI'
[   53.762718][ T1987] deleting an unspecified loop device is not supported.
[   53.762720][   T36] audit: type=1400 audit(1750371109.190:287): avc:  denied  { ioctl } for  pid=1986 comm="syz.4.512" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   53.900659][ T1985] rust_binder: Error in use_page_slow: ESRCH
[   53.900688][ T1985] rust_binder: use_range failure ESRCH
[   53.918685][ T1985] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   53.924281][ T1985] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   53.938681][ T1985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:479
[   54.054120][ T1997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:484
[   54.216183][ T2001] rust_binder: Write failure EINVAL in pid:488
[   54.233110][ T2004] rust_binder: Error while translating object.
[   54.240324][ T2004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   54.246589][ T2004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271
[   54.314940][ T2010] input: syz0 as /devices/virtual/input/input32
[   54.587250][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:285
[   54.645543][ T2038] binder: Bad value for 'stats'
[   54.645655][ T2037] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   54.667150][ T2037] rust_binder: Write failure EINVAL in pid:371
[   54.682036][ T2041] binder: Unknown parameter 'stal'
[   54.838690][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   54.844867][ T1129] Bluetooth: hci0: command 0x1003 tx timeout
[   54.900005][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.900036][ T2062] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   54.950380][ T2074] SELinux: failed to load policy
[   54.996238][ T2067] kvm: user requested TSC rate below hardware speed
[   55.019613][ T2067] SELinux: security_context_str_to_sid (syte) failed with errno=-22
[   55.185260][ T2083] binder: Unknown parameter '0x0000000000000003'
[   55.296959][   T36] audit: type=1400 audit(1750371110.720:288): avc:  denied  { map } for  pid=2089 comm="syz.3.542" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=33008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[   55.343003][   T36] audit: type=1400 audit(1750371110.720:289): avc:  denied  { execute } for  pid=2089 comm="syz.3.542" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=33008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[   55.397105][   T36] audit: type=1400 audit(1750371110.810:290): avc:  granted  { setsecparam } for  pid=2091 comm="syz.0.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   55.409936][ T2094] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   55.429729][ T2094] rust_binder: Got transaction with invalid offset.
[   55.439308][ T2094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   55.446034][ T2094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507
[   55.485188][ T2102] rust_binder: Failed to allocate buffer. len:128, is_oneway:false
[   55.517368][ T2107] binder: Unknown parameter 'fscontext?}'
[   55.563236][   T36] audit: type=1400 audit(1750371110.990:291): avc:  denied  { append } for  pid=2109 comm="syz.0.549" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[   55.578705][ T2094] input: syz1 as /devices/virtual/input/input33
[   55.833180][ T2133] syz.2.554: attempt to access beyond end of device
[   55.833180][ T2133] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[   55.838750][ T2132] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[   55.855669][ T2132] rust_binder: Write failure EINVAL in pid:396
[   55.897520][ T2137] rust_binder: Write failure EFAULT in pid:400
[   55.987362][ T2139] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   55.996009][   T36] audit: type=1326 audit(1750371111.420:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2140 comm="syz.0.557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe642f8e929 code=0x0
[   56.061660][ T2149] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.062714][ T2149] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   56.086032][ T2149] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   56.148755][ T2154] rust_binder: Error while translating object.
[   56.148805][ T2154] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.164377][ T2154] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:408
[   56.194323][   T36] audit: type=1326 audit(1750371111.620:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2162 comm="syz.4.565" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560458e929 code=0x0
[   56.264953][ T2167] kvm: kvm [2166]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3
[   56.542068][ T2185] binder: Bad value for 'defcontext'
[   56.641438][ T2187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:326
[   56.684780][ T2192] rust_binder: Write failure EINVAL in pid:331
[   56.718151][ T2198] rust_binder: Error while translating object.
[   56.724483][ T2198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.730733][ T2198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:333
[   56.813158][ T2205] binder: Bad value for 'max'
[   56.835564][ T2207] SELinux:  policydb version 1051377650 does not match my version range 15-33
[   56.845408][ T2207] SELinux: failed to load policy
[   56.872366][ T2211] kvm: kvm [2210]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf
[   57.051776][ T2232] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.066225][ T2217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531
[   57.073322][ T2217] rust_binder: Write failure EFAULT in pid:531
[   57.160833][ T2237] binder: Unknown parameter ''
[   57.261299][ T2257] rust_binder: Error while translating object.
[   57.261339][ T2257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   57.273669][ T2257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:544
[   57.321632][ T2262] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.331389][ T2262] rust_binder: Error in use_page_slow: ESRCH
[   57.337862][ T2262] rust_binder: use_range failure ESRCH
[   57.349254][ T2262] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[   57.365248][ T2262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   57.374709][ T2262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:537
[   57.384960][ T2270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.456543][ T2281] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.469005][ T2281] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   57.487354][ T2287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   57.500615][ T2287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:357
[   57.518656][ T2287] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   57.528621][ T2287] rust_binder: Read failure Err(EFAULT) in pid:357
[   57.609020][ T2293] binder: Bad value for 'max'
[   57.747265][ T2299] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.754267][ T2299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[   57.794972][ T2299] rust_binder: Error while translating object.
[   57.813435][ T2299] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   57.824606][ T2299] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363
[   57.898766][ T2311] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.920810][ T2313] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   57.924499][ T2310] random: crng reseeded on system resumption
[   57.967331][ T2311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:564
[   58.042268][ T2318] binder: Bad value for 'max'
[   58.059222][ T2319] binder: Bad value for 'max'
[   58.162619][ T2336] SELinux:  truncated policydb string identifier
[   58.181671][ T2336] SELinux: failed to load policy
[   58.187309][ T2336] SELinux: failed to load policy
[   58.215992][ T2342] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   58.238698][ T2341] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   58.276108][ T2345] can0: slcan on ptm0.
[   58.356245][ T2344] can0 (unregistered): slcan off ptm0.
[   58.455186][   T12] Bluetooth: hci0: Frame reassembly failed (-84)
[   58.505784][ T2374] input: syz1 as /devices/virtual/input/input35
[   58.558327][ T2384] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.647730][ T2393] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   58.654849][ T2393] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false
[   58.661426][ T2393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   58.670958][ T2393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:385
[   59.012315][ T2407] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.033891][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   59.033908][   T36] audit: type=1326 audit(1750371114.460:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2406 comm="syz.4.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f560458e929 code=0x0
[   59.161728][ T2418] rust_binder: Error in use_page_slow: ESRCH
[   59.161749][ T2418] rust_binder: use_range failure ESRCH
[   59.167803][ T2418] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[   59.170544][ T2420] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   59.173401][ T2418] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   59.181911][ T2420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:566
[   59.190349][ T2418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:395
[   59.221732][ T2424] rust_binder: Write failure EFAULT in pid:571
[   59.230960][ T2425] rust_binder: Write failure EFAULT in pid:571
[   59.381943][ T2429] rust_binder: Write failure EINVAL in pid:576
[   59.389615][ T2429] input: syz0 as /devices/virtual/input/input36
[   59.403907][ T2429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576
[   59.403946][ T2429] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   59.413164][ T2429] rust_binder: Read failure Err(EFAULT) in pid:576
[   59.421765][  T308] udevd[308]: setting mode of /dev/input/event3 to 020660 failed: No such file or directory
[   59.438576][  T308] udevd[308]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   59.500674][ T2433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   59.500704][ T2433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:580
[   59.541094][ T2440] binder: Bad value for 'max'
[   59.559237][ T2442] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:587
[   59.663409][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.680357][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.687870][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.704115][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.714985][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.726896][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.738637][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.755802][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.763421][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.770937][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.778488][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.785996][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.793563][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.801069][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.808654][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.816146][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.823715][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.831259][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.838848][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.850901][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.858344][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.865888][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.873379][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.880906][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.888326][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.897539][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.905020][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.912560][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.920032][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.927690][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.935137][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.943756][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.951448][ T2450] binder: Unknown parameter '00000000000000000003'
[   59.967871][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.975418][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   59.978061][ T2452] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.983549][ T2453] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   59.990553][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.004719][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.013887][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.021574][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.030064][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.037619][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.045406][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.059219][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.066881][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.074929][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.082993][ T2457] SELinux:  policydb version -1488241097 does not match my version range 15-33
[   60.092315][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.100132][ T2457] SELinux: failed to load policy
[   60.105315][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.112780][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.120432][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.127882][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.135575][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.150518][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.158087][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.165537][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.173009][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.181863][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.189354][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.196774][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.204416][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.212966][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.220523][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.227986][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.235600][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.243351][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.250986][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.258414][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.265861][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.274017][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.281636][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.289394][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.296931][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.304362][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.311809][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.319250][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.326644][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.334067][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.341498][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.348920][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.356324][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.363744][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.371169][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.378553][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.385974][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.393400][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.400815][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.408223][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.415656][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.423074][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.431200][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.438886][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.446311][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.454098][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.461914][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.469610][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.477044][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.487862][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.496132][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.503911][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.511750][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.519740][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.527380][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.528645][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[   60.540867][ T1129] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   60.568642][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.587159][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.594926][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.602834][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.608196][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   60.614066][ T2484] rust_binder: Failed to allocate buffer. len:65376, is_oneway:true
[   60.620888][ T2484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   60.630083][ T2484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:416
[   60.631352][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.665665][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.680028][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.703759][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.714226][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.733456][ T2502] kvm: kvm [2501]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x7fffffffffffffff
[   60.744702][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.746258][ T2502] binder: Unknown parameter '/proc/thread-self/attr/keycreate'
[   60.758315][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.768994][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.783011][ T2498] binder: Bad value for 'stats'
[   60.788124][ T2500] binder: Bad value for 'stats'
[   60.788723][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.803672][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.811194][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.818898][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.827434][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.834912][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.843107][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.850868][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.858298][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.865736][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.873911][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.881353][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.888821][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.896237][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.903744][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.911197][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.918675][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.930967][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.938410][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.946197][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.954431][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.962071][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.970507][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.980078][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.987531][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   60.998001][ T2513] rust_binder: Read failure Err(EAGAIN) in pid:480
[   60.998032][ T2513] rust_binder: Read failure Err(EAGAIN) in pid:480
[   61.004829][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.024076][ T2513] rust_binder: Read failure Err(EAGAIN) in pid:480
[   61.024137][ T2513] rust_binder: Read failure Err(EAGAIN) in pid:480
[   61.029957][ T2515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:429
[   61.031885][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.054858][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.062952][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.073000][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.080519][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.087966][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.095414][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.103008][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.110477][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.117887][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.125434][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.132931][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.140456][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.151350][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.158894][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.166359][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.174079][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.181980][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.189497][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.197217][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.204790][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.213964][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.221673][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.236275][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.251051][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.262959][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.271722][ T2529] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   61.274157][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.281787][ T2528] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   61.288682][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.309249][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.318458][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.327376][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.335648][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.343112][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.350741][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.358167][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.374947][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.382537][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.390140][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.398344][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.406103][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.414548][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.424126][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.451118][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.459339][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.459892][ T2541] SELinux: security_context_str_to_sid (syste_uÝGй‰:ÿß) failed with errno=-22
[   61.475989][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.488707][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.496152][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.508626][ T2541] binder: Bad value for 'stats'
[   61.529128][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.536610][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.545428][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.554925][ T2541] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[   61.565262][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.572829][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.580292][   T45] hid-generic 01FF:0004:0400.0003: unknown main item tag 0x0
[   61.588233][   T45] hid-generic 01FF:0004:0400.0003: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz1
[   61.688630][   T36] audit: type=1400 audit(1750371117.110:297): avc:  denied  { checkpoint_restore } for  pid=2546 comm="syz.0.679" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   61.772048][ T2561] SELinux: security_context_str_to_sid () failed with errno=-22
[   61.865709][ T2575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617
[   61.865869][ T2563] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[   61.875550][ T2563] rust_binder: Error in use_page_slow: EBUSY
[   61.889529][ T2563] rust_binder: use_range failure EBUSY
[   61.911714][ T2563] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   61.915040][ T2582] rust_binder: Write failure EFAULT in pid:500
[   61.917413][ T2563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[   61.917457][ T2563] rust_binder: Failure BR_FAILED_REPLY { source: EBUSY } during reply - delivering BR_FAILED_REPLY to sender.
[   61.944952][ T2563] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:617
[   61.982741][ T2589] binder: Unknown parameter 'coyBLV§"i5ŽÝ”ÃùÒntext'
[   62.064641][ T2597] rust_binder: Error in use_page_slow: ESRCH
[   62.064661][ T2597] rust_binder: use_range failure ESRCH
[   62.070867][ T2597] rust_binder: Failed to allocate buffer. len:16, is_oneway:false
[   62.076336][ T2597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   62.084243][ T2597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:620
[   62.280108][ T2625] can0: slcan on ttyS3.
[   62.310976][ T2625] rust_binder: Write failure EFAULT in pid:633
[   62.325044][   T36] audit: type=1400 audit(1750371117.750:298): avc:  denied  { write } for  pid=2627 comm="syz.3.703" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   62.444617][ T2644] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[   62.454631][ T2644] SELinux: failed to load policy
[   62.522299][ T2624] can0 (unregistered): slcan off ttyS3.
[   62.602994][ T2668] input: syz0 as /devices/virtual/input/input38
[   62.616709][ T2666] input: syz1 as /devices/virtual/input/input37
[   62.663197][ T2676] random: crng reseeded on system resumption
[   62.735268][ T2676] rust_binder: Write failure EFAULT in pid:640
[   62.820176][ T2686] random: crng reseeded on system resumption
[   63.002670][   T36] audit: type=1400 audit(1750371118.430:299): avc:  granted  { setsecparam } for  pid=2700 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   63.024570][   T36] audit: type=1400 audit(1750371118.450:300): avc:  granted  { setsecparam } for  pid=2700 comm="syz.0.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[   63.240074][ T2719] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[   63.388163][ T2733] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set
[   63.395544][ T2733] rust_binder: Write failure EINVAL in pid:657
[   63.395993][ T2734] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   63.432635][ T2740] SELinux:  truncated policydb string identifier
[   63.445708][ T2740] SELinux: failed to load policy
[   63.450790][ T2739] SELinux:  truncated policydb string identifier
[   63.457157][ T2739] SELinux: failed to load policy
[   63.466358][ T2740] input: syz0 as /devices/virtual/input/input41
[   63.495277][ T2740] ------------[ cut here ]------------
[   63.500859][ T2740] WARNING: CPU: 0 PID: 2740 at mm/page_alloc.c:5157 __alloc_pages_noprof+0xe4/0x6c0
[   63.510312][ T2740] Modules linked in:
[   63.514241][ T2740] CPU: 0 UID: 0 PID: 2740 Comm: syz.0.732 Not tainted 6.12.23-syzkaller-gf9fbc66f8444 #0 b8de21ba31122219d6c6778e419c74a11adc861d
[   63.527657][ T2740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   63.537778][ T2740] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0
[   63.543735][ T2740] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d a4 78 ee 05 00 0f 85 c4 00 00 00 c6 05 97 78 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c
[   63.563601][ T2740] RSP: 0018:ffffc90000def5a0 EFLAGS: 00010246
[   63.569737][ T2740] RAX: 0000000000000000 RBX: 1ffff920001bdeb8 RCX: 0000000000000000
[   63.577734][ T2740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000def648
[   63.585748][ T2740] RBP: ffffc90000def6c8 R08: ffffc90000def647 R09: 0000000000000000
[   63.593776][ T2740] R10: ffffc90000def630 R11: fffff520001bdec9 R12: ffffc90000def5e0
[   63.601797][ T2740] R13: 0000000000000016 R14: dffffc0000000000 R15: 0000000000000000
[   63.609821][ T2740] FS:  00007fe643d516c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   63.618820][ T2740] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   63.625489][ T2740] CR2: 0000200000001000 CR3: 0000000123438000 CR4: 00000000003526b0
[   63.633525][ T2740] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   63.641554][ T2740] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   63.649592][ T2740] Call Trace:
[   63.652895][ T2740]  <TASK>
[   63.655830][ T2740]  ? do_syscall_64+0x58/0xf0
[   63.660469][ T2740]  ? __cfi___alloc_pages_noprof+0x10/0x10
[   63.666218][ T2740]  ? hashtab_init+0xdb/0x1f0
[   63.670852][ T2740]  ___kmalloc_large_node+0x9c/0x1d0
[   63.676076][ T2740]  ? hashtab_init+0xdb/0x1f0
[   63.680743][ T2740]  __kmalloc_large_node_noprof+0x1e/0xe0
[   63.686400][ T2740]  ? hashtab_init+0xdb/0x1f0
[   63.691036][ T2740]  __kmalloc_noprof+0x26d/0x450
[   63.695912][ T2740]  hashtab_init+0xdb/0x1f0
[   63.700376][ T2740]  ? common_read+0x16d/0x480
[   63.704985][ T2740]  symtab_init+0x44/0x70
[   63.709264][ T2740]  common_read+0x1de/0x480
[   63.713700][ T2740]  ? __cfi_common_read+0x10/0x10
[   63.718704][ T2740]  ? hashtab_init+0x105/0x1f0
[   63.723407][ T2740]  policydb_read+0xaa8/0x28c0
[   63.728106][ T2740]  ? kasan_save_alloc_info+0x40/0x50
[   63.733432][ T2740]  ? __cfi_policydb_read+0x10/0x10
[   63.738665][ T2740]  ? security_load_policy+0x128/0x12f0
[   63.744145][ T2740]  security_load_policy+0x162/0x12f0
[   63.749468][ T2740]  ? irqentry_exit+0x4a/0x60
[   63.754094][ T2740]  ? exc_page_fault+0x66/0xc0
[   63.758867][ T2740]  ? asm_exc_page_fault+0x2b/0x30
[   63.763930][ T2740]  ? __cfi_security_load_policy+0x10/0x10
[   63.769707][ T2740]  ? rep_movs_alternative+0x4a/0xa0
[   63.774935][ T2740]  sel_write_load+0x298/0x5e0
[   63.779679][ T2740]  ? futex_wait+0x288/0x540
[   63.784206][ T2740]  ? __cfi_sel_write_load+0x10/0x10
[   63.789459][ T2740]  ? __cfi_futex_wait+0x10/0x10
[   63.794387][ T2740]  ? bpf_lsm_file_permission+0xd/0x20
[   63.799960][ T2740]  ? __cfi_sel_write_load+0x10/0x10
[   63.805200][ T2740]  vfs_write+0x3c0/0xe80
[   63.809498][ T2740]  ? __cfi_vfs_write+0x10/0x10
[   63.814287][ T2740]  ? __kasan_check_write+0x18/0x20
[   63.819441][ T2740]  ? mutex_lock+0x92/0x1c0
[   63.823877][ T2740]  ? __cfi_mutex_lock+0x10/0x10
[   63.828781][ T2740]  ? __fget_files+0x2c5/0x340
[   63.833487][ T2740]  ksys_write+0x141/0x250
[   63.837829][ T2740]  ? xfd_validate_state+0x68/0x150
[   63.842976][ T2740]  ? __cfi_ksys_write+0x10/0x10
[   63.847855][ T2740]  ? __kasan_check_write+0x18/0x20
[   63.853024][ T2740]  ? fpregs_restore_userregs+0x11d/0x260
[   63.858738][ T2740]  __x64_sys_write+0x7f/0x90
[   63.863363][ T2740]  x64_sys_call+0x271c/0x2ee0
[   63.868054][ T2740]  do_syscall_64+0x58/0xf0
[   63.872510][ T2740]  ? clear_bhb_loop+0x35/0x90
[   63.877217][ T2740]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   63.883184][ T2740] RIP: 0033:0x7fe642f8e929
[   63.887630][ T2740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   63.907285][ T2740] RSP: 002b:00007fe643d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   63.915765][ T2740] RAX: ffffffffffffffda RBX: 00007fe6431b6080 RCX: 00007fe642f8e929
[   63.923825][ T2740] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 000000000000000e
[   63.931856][ T2740] RBP: 00007fe643010b39 R08: 0000000000000000 R09: 0000000000000000
[   63.939898][ T2740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   63.947887][ T2740] R13: 0000000000000000 R14: 00007fe6431b6080 R15: 00007ffe3c30a278
[   63.955931][ T2740]  </TASK>
[   63.959001][ T2740] ---[ end trace 0000000000000000 ]---
[   63.964685][ T2740] SELinux: failed to load policy