last executing test programs: 2.018237956s ago: executing program 2 (id=3): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001200010028bd7000fddbdf2520010000000000000000000200000000000104d60a013c000c0015005a0735000700000014000d"], 0x48}, 0x1, 0x0, 0x0, 0x40901}, 0x20048080) 1.968577768s ago: executing program 2 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000120000000000000000aaff02000000000000000000000000000188"], 0xffe) 1.749676344s ago: executing program 2 (id=12): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x180}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 1.748933055s ago: executing program 2 (id=13): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) 1.732595945s ago: executing program 2 (id=15): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xfffffffffffffffd}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 1.696557017s ago: executing program 2 (id=16): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x40010000, {{@in=@multicast2, @in=@empty, 0x4e24, 0x10, 0x0, 0x0, 0xa, 0x80, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0xffffffffd, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x2, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380), 0x80, &(0x7f0000001400)={[{@huge_never}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x38]}}, {@usrquota}, {@huge_never}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x38, 0x38, 0x74, 0x6b, 0x34]}}], [{@subj_type}]}) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x1a, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f0000000500)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x400, 0x1, 0x2, 0x6, 0x0, 0x80, 0x6, 0x1, 0x3ff, 0x6a50, 0x9, 0x8}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0xffff}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x800}, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.559303011s ago: executing program 1 (id=21): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7ffdffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1000000, 0x0, 0x6, 0x3, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x1, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x2fc1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0xd, 0x3, 0x0, 0x20f90d26, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x6, 0x0, 0x8, 0x0, 0x6, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0xa76, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) 1.457832414s ago: executing program 1 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc82c00fe8000000000200000000000000000aaff02000000000000000000000000000188"], 0xffe) 1.453794594s ago: executing program 1 (id=23): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x44000) 1.414356315s ago: executing program 1 (id=24): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aec000000020a01010000000000000000030000000c0004400000000000000004cc000600d2b802e6396afa985b466b81b628305246dde42953f4b5b4566f7d25339979e7075b914f04996c87a05ef8aca4afb29c728953fc42d032847bdc32f25578bd3498c38ef262b4292f5b344f82c8f4bc2d82786dd1c70754878f7c43be426454ee705a01d3a007dfc4249532b91d15955c006531f8085d037ee5ec95962257a7ebb7e464dbe1dc4a2e91b6f4fec0a4de9f72fc20432e86c64d6f6c23c1eea70231f5d759082e0f62971082988f34b139dc2769df47d5c99767685b2e25f0432e20233ee6b16bcf48bf6c000000160a01040000000000000000020000020900020073797a30000000000900010073797a30000000004000038008000140000000002c000380140001007465616d5f736c6176655f300000000014000100766c616e3100000000000000000000000800024000000200140000001100010000000000000000000100000a"], 0x180}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) 1.365767247s ago: executing program 3 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xfffffffffffffffd}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 1.365616507s ago: executing program 1 (id=26): r0 = getpid() capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) keyctl$clear(0x7, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x5, 0x9, "280834df7afe143621"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfc51}, 0x0, 0x0, 0x0}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x62, 0x0, 0x0) setns(r1, 0x24020000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xba, &(0x7f0000000040)) ptrace(0x4207, r3) setreuid(0xee01, 0xee01) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) 1.343428528s ago: executing program 3 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xffffffffffffffd8, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.330952008s ago: executing program 3 (id=28): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001200010000000000000000000200000000004e2300000000ffffffffff0700000000000000fffffff00000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011"], 0x54}}, 0x20004010) 1.27533713s ago: executing program 3 (id=29): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x2009, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x8000, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.175729843s ago: executing program 3 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "63dec22eb7ccb925", "2dd4dfe481bd48418903d7c0ef4277df", "848f0389", "1ae510327953a9e0"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYRES16=r2, @ANYRESDEC=0x0, @ANYRES8=r2]) 1.066717206s ago: executing program 3 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003000000408c0d020140000102030109026e000301046008080b0001012430010904000000010130000a2401f5023000090401010101023000090501090002b905030a2525000200000106000904020000010230000904020101010230000905820920000602d40a2555351207c54c5fcc9a8afa052178e55c3458cc18ae030f3d970ac9dbfb2be596ac7ec1d556ab2e88fa0be6eb530485769358ae008967474995d15c16e911f56cc295a34b6247b420a94b0eceec975f61c558548dfc7837adf926adbf449d14dd60de46534828b561b0ea38ee01a09f00"/231], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f80)={'ip6tnl0\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x4, 0x6a, 0x6, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x7, 0x800}}) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)='\x00z', 0x2, 0x4040080, &(0x7f00000000c0)={0x11, 0x88a8, r5, 0x1, 0x1, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001000)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001040)={'lo\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001140)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0xff, 0xffffff5f, {{0x31, 0x4, 0x0, 0x16, 0xc4, 0x67, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x89, 0x9, "1a6ae5951a0b89"}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x1c, [@private=0xa410102, @rand_addr=0x64010101]}, @cipso={0x86, 0x3a, 0x3, [{0x5, 0xb, "240e611289fea89897"}, {0x2, 0xf, "a2462da63ef4e234fab6251ab1"}, {0x6, 0x9, "38df100aafd112"}, {0x1, 0x6, "124de966"}, {0x7, 0x5, "298672"}, {0xf, 0x6, "cb28c70e"}]}, @lsrr={0x83, 0x2b, 0xa9, [@loopback, @multicast1, @empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @lsrr={0x83, 0x27, 0xc8, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @local, @remote, @private=0xa010101, @rand_addr=0x64010101, @empty, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001e80)=ANY=[@ANYBLOB="c40b0000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0c02028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004009200000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040005000000080007000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="dc0102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000e00000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000400003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="840102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400ff07f540ff0100000400050600000000810005080900000000000780810000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="380102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="8400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004002500000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fe88536308000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="5c02028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400b700000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000004000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=r7, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080904000600000008000600f744376d9dcdf0eddd2a318e035ef118a50e9e01f532f9c8f5fea36d530ad11439f56548c81809e1b4dcb3d8d920de00cb894bfd4f81bca18cacb76a7466fcd9649eddd975f3980f96d66a0d947a7eac108dd141188000a65026edba086f6a66faa031dbb264f72f5de6a7575063bfadc189fa1c34b64bbeec31e04a0ec5cb66f823b982bb55074e22c8d9dd3f3cc3af36343ec25a292f715c1f97d1f1ab2a6f496ab6cef8c43154e10cfc6ac62687f78d20032fafd4e310a90805a09158ae785a688258fd93572f0c29539b43b17473841e0bd537380696456e30677f", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="80000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0xbc4}, 0x1, 0x0, 0x0, 0x2000c001}, 0x1) r11 = socket(0xa, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000140)=""/138, &(0x7f0000000200)=0x8a) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r12, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r12, &(0x7f0000000800)={'syz0\x00', {0x0, 0x0, 0x4cf5}, 0x3, [0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x4, 0x0, 0x1a8, 0x0, 0x90000000, 0x7, 0x0, 0xfffffffe, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20296, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004, 0xfffffffc, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x10000], [0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x4, 0xffff, 0x8000000, 0x1, 0x0, 0x2, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x1, 0x40007ff, 0x8, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x689, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fc, 0x3, 0x0, 0x81, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, 0x1000000, 0xfffffffd, 0xb7, 0x807ffff, 0x0, 0x2, 0x0, 0x5b7f28b1, 0x0, 0x0, 0xfcd, 0x40, 0x0, 0x0, 0x1, 0x0, 0xa481, 0x0, 0x2, 0x0, 0xb, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x9d2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x8000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x7, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0xffffff45, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x1007, 0x1000, 0x0, 0x0, 0x5, 0x54, 0x5e68, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x85, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r12, 0x5501) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab) accept4$bt_l2cap(r11, 0x0, &(0x7f0000000080), 0x80000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 457.010736ms ago: executing program 0 (id=34): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f00004ef000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f00004ef000/0x2000)=nil, 0x2000}, 0x1}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) 456.873986ms ago: executing program 0 (id=35): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xfffffffffffffffd}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 455.894276ms ago: executing program 0 (id=36): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000000)=ANY=[@ANYBLOB="2e2e070c371303ed0133f2ff8689b3f20e2c12"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 21.88843ms ago: executing program 0 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xfffffffffffffff6, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 21.78461ms ago: executing program 0 (id=38): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001200010000000000000000000200000000004e2300000000ffffffffff0700000000000000f0ffffff0000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011"], 0x54}}, 0x20004010) 14.782ms ago: executing program 0 (id=39): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = socket(0x1e, 0x802, 0x0) r2 = epoll_create1(0x80000) socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x2}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x7f37, 0x8, [0x3, 0x100000001, 0xd, 0x8], &(0x7f0000000040)=[0x0]}) syz_usb_connect$uac2(0x3, 0xae, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000101e04003040000102030109029c000301004000080b000201032005090400000001012000092401ffff012300030c2403020404fc02030700ff07240c07eb084307240c0680030409040100000102200009040101010102200009240271648425040710240102f1010000000003e207000004090501090002"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_trace', 0x202000, 0x1) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@svm={0x9, 0x1, 0x1080, {0xeeef0000}, {"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"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000180)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r4, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x8}, @flat=@binder={0x73622a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000300)=""/225, 0xe1, 0x2, 0x3d}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 30.583457][ T36] audit: type=1400 audit(1781194737.899:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.584626][ T286] cgroup: Unknown subsys name 'net' [ 30.606636][ T36] audit: type=1400 audit(1781194737.899:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.634041][ T36] audit: type=1400 audit(1781194737.929:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.634206][ T286] cgroup: Unknown subsys name 'devices' [ 30.757390][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.763036][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.875433][ T36] audit: type=1400 audit(1781194738.199:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.893798][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.898631][ T36] audit: type=1400 audit(1781194738.199:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.931958][ T36] audit: type=1400 audit(1781194738.199:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.945847][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.955693][ T36] audit: type=1400 audit(1781194738.229:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.989842][ T36] audit: type=1400 audit(1781194738.229:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.015490][ T36] audit: type=1400 audit(1781194738.269:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.041009][ T36] audit: type=1400 audit(1781194738.269:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.778115][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.785308][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.792901][ T295] bridge_slave_0: entered allmulticast mode [ 31.799263][ T295] bridge_slave_0: entered promiscuous mode [ 31.807037][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.814088][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.821308][ T295] bridge_slave_1: entered allmulticast mode [ 31.827607][ T295] bridge_slave_1: entered promiscuous mode [ 31.852892][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.859980][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.867069][ T296] bridge_slave_0: entered allmulticast mode [ 31.873261][ T296] bridge_slave_0: entered promiscuous mode [ 31.881079][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.888162][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.895263][ T296] bridge_slave_1: entered allmulticast mode [ 31.901430][ T296] bridge_slave_1: entered promiscuous mode [ 31.935779][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.942834][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.949971][ T294] bridge_slave_0: entered allmulticast mode [ 31.956264][ T294] bridge_slave_0: entered promiscuous mode [ 31.965609][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.972664][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.979775][ T294] bridge_slave_1: entered allmulticast mode [ 31.986004][ T294] bridge_slave_1: entered promiscuous mode [ 32.026640][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.033727][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.040934][ T293] bridge_slave_0: entered allmulticast mode [ 32.047207][ T293] bridge_slave_0: entered promiscuous mode [ 32.065332][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.072410][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.079604][ T293] bridge_slave_1: entered allmulticast mode [ 32.085851][ T293] bridge_slave_1: entered promiscuous mode [ 32.188033][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.195117][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.202480][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.209567][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.247132][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.254315][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.261745][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.268800][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.280172][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.287775][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.295249][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.302287][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.333360][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.340462][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.347743][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.354772][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.366923][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.374358][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.382558][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.390137][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.397649][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.404882][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.412283][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.419634][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.437215][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.444278][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.452028][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.459097][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.488293][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.495441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.503852][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.510951][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.536564][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.543641][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.551434][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.558628][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.566937][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.573974][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.586385][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.593542][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.619135][ T295] veth0_vlan: entered promiscuous mode [ 32.639793][ T296] veth0_vlan: entered promiscuous mode [ 32.652330][ T295] veth1_macvtap: entered promiscuous mode [ 32.677128][ T296] veth1_macvtap: entered promiscuous mode [ 32.685868][ T294] veth0_vlan: entered promiscuous mode [ 32.707365][ T294] veth1_macvtap: entered promiscuous mode [ 32.714185][ T293] veth0_vlan: entered promiscuous mode [ 32.743408][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.771189][ T293] veth1_macvtap: entered promiscuous mode [ 32.825730][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.896181][ T325] syzkaller1: entered allmulticast mode [ 32.913221][ T319] kvm: pic: non byte read [ 32.918018][ T319] kvm: pic: non byte read [ 32.920082][ T325] bridge0: port 3(syz_tun) entered blocking state [ 32.924438][ T319] kvm: pic: non byte read [ 32.930956][ T325] bridge0: port 3(syz_tun) entered disabled state [ 32.940740][ T325] syz_tun: entered allmulticast mode [ 32.946763][ T325] syz_tun: entered promiscuous mode [ 32.952034][ T325] bridge0: port 3(syz_tun) entered blocking state [ 32.958513][ T325] bridge0: port 3(syz_tun) entered forwarding state [ 32.966065][ T327] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 32.966133][ T327] rust_binder: 323:327 transaction to 323 failed: BR_DEAD_REPLY [ 33.158774][ T355] rust_binder: 352:355 transaction to 0 failed: ENOENT [ 33.165386][ T354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 33.195500][ T357] netlink: 104 bytes leftover after parsing attributes in process `syz.2.16'. [ 33.220016][ T357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.245531][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.270180][ T361] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 33.270213][ T361] rust_binder: 360:361 transaction to 360 failed: BR_DEAD_REPLY [ 33.332139][ T371] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.347786][ T371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.354994][ T371] IPv6: NLM_F_CREATE should be set when creating new route [ 33.362246][ T371] IPv6: NLM_F_CREATE should be set when creating new route [ 33.395242][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 33.406795][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.422508][ T9] usb 1-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 33.441195][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.450330][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 33.478313][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.481142][ T379] rust_binder: 378:379 transaction to 0 failed: ENOENT [ 33.498372][ T382] capability: warning: `syz.1.26' uses deprecated v2 capabilities in a way that may be insecure [ 33.498534][ T9] usb 1-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 33.529145][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.542386][ T9] usb 1-1: Product: syz [ 33.546659][ T9] usb 1-1: Manufacturer: syz [ 33.559585][ T9] usb 1-1: SerialNumber: syz [ 33.569402][ T389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.578271][ T389] bridge_slave_1: left allmulticast mode [ 33.583929][ T389] bridge_slave_1: left promiscuous mode [ 33.589779][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.598200][ T389] bridge_slave_0: left allmulticast mode [ 33.604169][ T389] bridge_slave_0: left promiscuous mode [ 33.610151][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.646569][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.661061][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.670354][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.679601][ T45] usb 3-1: Product: syz [ 33.683809][ T45] usb 3-1: Manufacturer: syz [ 33.688450][ T45] usb 3-1: SerialNumber: syz [ 33.755329][ T315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.776902][ T325] netlink: 'syz.0.7': attribute type 46 has an invalid length. [ 33.789051][ T9] usb 1-1: 0:1 : does not exist [ 33.797749][ T9] usb 1-1: USB disconnect, device number 2 [ 33.905238][ T315] usb 2-1: Using ep0 maxpacket: 16 [ 33.912548][ T315] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 33.922119][ T315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.930174][ T315] usb 2-1: Product: syz [ 33.934346][ T315] usb 2-1: Manufacturer: syz [ 33.939021][ T315] usb 2-1: SerialNumber: syz [ 33.946414][ T315] r8152-cfgselector 2-1: Unknown version 0x0000 [ 33.952819][ T315] r8152-cfgselector 2-1: config 0 descriptor?? [ 34.095314][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.246898][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.255370][ T31] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 34.265547][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.276467][ T31] usb 4-1: string descriptor 0 read error: -22 [ 34.282667][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 34.291951][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.418473][ T410] rust_binder: 409:410 transaction to 0 failed: ENOENT [ 34.703812][ T45] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 34.721085][ T45] cdc_ncm 3-1:1.0: dwNtbInMaxSize=2 is too small. Using 2048 [ 34.729557][ T45] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 34.912074][ T422] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 225) [ 34.912101][ T422] rust_binder: Error while translating object. [ 34.918027][ T45] cdc_ncm 3-1:1.0: setting tx_max = 56 [ 34.922904][ C0] BUG: TASK stack guard page was hit at ffffc9000b7c7fb8 (stack is ffffc9000b7c8000..ffffc9000b7d0000) [ 34.922955][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 34.922979][ C0] CPU: 0 UID: 0 PID: 422 Comm: syz.1.40 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 34.923001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 34.923011][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 34.923044][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 34.923058][ C0] RSP: 0018:ffffc9000b7c7fc0 EFLAGS: 00010282 [ 34.923081][ C0] RAX: ffffc9000b7c8108 RBX: ffffc9000b7c8108 RCX: ffffc9000b7c8118 [ 34.923094][ C0] RDX: ffffc9000b7c80f8 RSI: ffffc9000b7c80f8 RDI: ffffc9000b7c8160 [ 34.923107][ C0] RBP: ffffc9000b7c8080 R08: ffffc9000b7c8101 R09: 0000000000000000 [ 34.923118][ C0] R10: ffffc9000b7c8108 R11: fffff520016f902d R12: 0000000000000000 [ 34.923129][ C0] R13: dffffc0000000000 R14: ffffc9000b7c8110 R15: ffffc9000b7c80f8 [ 34.923142][ C0] FS: 00007ff6317196c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.923157][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.923169][ C0] CR2: ffffc9000b7c7fb8 CR3: 0000000115576000 CR4: 00000000003526b0 [ 34.923184][ C0] Call Trace: [ 34.923191][ C0] [ 34.923199][ C0] ? __unwind_start+0x216/0x410 [ 34.923220][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.923240][ C0] ? arch_stack_walk+0xf2/0x170 [ 34.923258][ C0] ? stack_trace_save+0xaa/0x100 [ 34.923277][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 34.923295][ C0] ? __asan_memset+0x39/0x50 [ 34.923312][ C0] ? save_stack+0x125/0x240 [ 34.923331][ C0] ? free_contig_range+0x260/0x260 [ 34.923347][ C0] ? __reset_page_owner+0x450/0x450 [ 34.923367][ C0] ? zone_page_state_add+0x43/0x90 [ 34.923388][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 34.923406][ C0] ? sched_clock_noinstr+0xd/0x30 [ 34.923423][ C0] ? __set_page_owner+0x8e/0x600 [ 34.923442][ C0] ? __zone_watermark_ok+0x134/0x630 [ 34.923464][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 34.923484][ C0] ? kasan_unpoison+0x4a/0x70 [ 34.923501][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 34.923522][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 34.923541][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 34.923558][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 34.923579][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 34.923601][ C0] ? prep_new_page+0x2d/0x190 [ 34.923621][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 34.923648][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 34.923670][ C0] ? static_key_count+0x45/0x70 [ 34.923690][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 34.923708][ C0] ? lruvec_init+0x231/0x280 [ 34.923726][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 34.923748][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 34.923769][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.923796][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.923815][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.923833][ C0] ? stack_trace_save+0xaa/0x100 [ 34.923851][ C0] ? stack_depot_save_flags+0x672/0x800 [ 34.923873][ C0] ? kasan_save_track+0x4f/0x80 [ 34.923891][ C0] ? kasan_save_track+0x3e/0x80 [ 34.923908][ C0] ? kasan_save_free_info+0x4a/0x60 [ 34.923922][ C0] ? __kasan_slab_free+0x5f/0x80 [ 34.923940][ C0] ? kfree+0x158/0x440 [ 34.923954][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.923972][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 34.924017][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x1706/0x2660 [ 34.924041][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 34.924066][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 34.924094][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 34.924117][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 34.924139][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 34.924159][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 34.924188][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.924212][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.924231][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.924249][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.924266][ C0] ? do_syscall_64+0x57/0xf0 [ 34.924287][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.924315][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 34.924340][ C0] ? kasan_save_free_info+0x4a/0x60 [ 34.924354][ C0] ? __kasan_slab_free+0x5f/0x80 [ 34.924373][ C0] ? kfree+0x158/0x440 [ 34.924388][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.924406][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.924423][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 34.924463][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 34.924485][ C0] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 34.924531][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 34.924565][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 34.924599][ C0] ? __kasan_check_write+0x18/0x20 [ 34.924615][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.924636][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.924657][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x1706/0x2660 [ 34.924686][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 34.924715][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 34.924747][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.924762][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 34.924800][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 34.924827][ C0] ? __kasan_check_write+0x18/0x20 [ 34.924846][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.924866][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.924886][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 34.924914][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.924930][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 34.924958][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 34.924984][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 34.925010][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.925025][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 34.925049][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 34.925077][ C0] ? __kasan_check_write+0x18/0x20 [ 34.925093][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.925115][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 34.925141][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.925160][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 34.925191][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.925215][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.925232][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 34.925257][ C0] ? stack_depot_save_flags+0x399/0x800 [ 34.925277][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 34.925305][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.925321][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 34.925349][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 34.925375][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.925399][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.925417][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.925435][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.925450][ C0] ? do_syscall_64+0x57/0xf0 [ 34.925471][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.925494][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 34.925521][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 34.925551][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 34.925578][ C0] ? __cfi__RNvMsk_NtNtNtCsb7ts3l0a5c3_4core3fmt3num3impj10__fmt_inner+0x10/0x10 [ 34.925600][ C0] ? put_dec_trunc8+0x229/0x380 [ 34.925621][ C0] ? put_dec+0xd7/0xf0 [ 34.925646][ C0] ? __asan_memset+0x39/0x50 [ 34.925661][ C0] ? move_right+0x8e/0xb0 [ 34.925681][ C0] ? format_decode+0x1bb/0x1610 [ 34.925701][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 34.925720][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.925737][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 34.925758][ C0] ? sprintf+0xe8/0x140 [ 34.925801][ C0] ? __cfi_sprintf+0x10/0x10 [ 34.925820][ C0] ? prb_first_seq+0x109/0x1d0 [ 34.925839][ C0] ? desc_read+0x202/0x3e0 [ 34.925857][ C0] ? info_print_prefix+0x269/0x4a0 [ 34.925875][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.925898][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.925919][ C0] ? __kernel_text_address+0x11/0x40 [ 34.925941][ C0] ? __kasan_check_write+0x18/0x20 [ 34.925956][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.925978][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.925999][ C0] ? stack_trace_save+0xaa/0x100 [ 34.926018][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.926039][ C0] ? stack_depot_save_flags+0x399/0x800 [ 34.926060][ C0] ? __cfi___switch_to+0x10/0x10 [ 34.926079][ C0] ? kasan_save_track+0x4f/0x80 [ 34.926096][ C0] ? kasan_save_track+0x3e/0x80 [ 34.926113][ C0] ? kasan_save_free_info+0x4a/0x60 [ 34.926127][ C0] ? __kasan_slab_free+0x5f/0x80 [ 34.926145][ C0] ? kfree+0x158/0x440 [ 34.926160][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.926177][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x371/0x820 [ 34.926207][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c18/0x9460 [ 34.926230][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 34.926251][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 34.926272][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 34.926304][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.926326][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.926344][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.926362][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.926378][ C0] ? do_syscall_64+0x57/0xf0 [ 34.926398][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.926427][ C0] ? __kasan_slab_free+0x6a/0x80 [ 34.926445][ C0] ? kfree+0x158/0x440 [ 34.926460][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.926477][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 34.926492][ C0] ? krealloc_noprof+0xfa/0x130 [ 34.926510][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 34.926533][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 34.926568][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 34.926597][ C0] ? vprintk_emit+0x3e3/0x650 [ 34.926617][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 34.926636][ C0] ? _RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 34.926661][ C0] ? __cfi__RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 34.926687][ C0] ? vprintk_default+0x2a/0x40 [ 34.926711][ C0] ? vprintk+0x93/0xa0 [ 34.926729][ C0] ? _printk+0xde/0x140 [ 34.926747][ C0] ? __cfi___check_object_size+0x10/0x10 [ 34.926768][ C0] ? __cfi__printk+0x10/0x10 [ 34.926792][ C0] ? _copy_from_user+0x87/0xa0 [ 34.926808][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 34.926835][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 34.926857][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 34.926892][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 34.926933][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 34.926967][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 34.927000][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 34.927040][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.927063][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.927084][ C0] ? __kasan_check_write+0x18/0x20 [ 34.927100][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.927122][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.927144][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.927166][ C0] ? stack_depot_save_flags+0x399/0x800 [ 34.927188][ C0] ? kasan_save_track+0x4f/0x80 [ 34.927205][ C0] ? kasan_save_track+0x3e/0x80 [ 34.927222][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.927237][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.927254][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.927271][ C0] ? __set_page_owner+0x2af/0x600 [ 34.927290][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 34.927309][ C0] ? prep_new_page+0x2d/0x190 [ 34.927329][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 34.927350][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 34.927371][ C0] ? alloc_slab_page+0x6b/0x1e0 [ 34.927390][ C0] ? allocate_slab+0x69/0x420 [ 34.927408][ C0] ? ___slab_alloc+0x5a2/0x8d0 [ 34.927425][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 34.927442][ C0] ? krealloc_noprof+0x8d/0x130 [ 34.927457][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 34.927481][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 34.927503][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1a91/0xa690 [ 34.927531][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.927554][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.927572][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.927590][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.927605][ C0] ? do_syscall_64+0x57/0xf0 [ 34.927626][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.927658][ C0] ? __kasan_check_write+0x18/0x20 [ 34.927673][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.927694][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.927716][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.927733][ C0] ? __set_page_owner+0x2af/0x600 [ 34.927753][ C0] ? __kasan_check_write+0x18/0x20 [ 34.927768][ C0] ? __set_page_owner+0x3fe/0x600 [ 34.927793][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 34.927813][ C0] ? kasan_unpoison+0x4a/0x70 [ 34.927830][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 34.927850][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 34.927870][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 34.927886][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 34.927906][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 34.927932][ C0] ? __kasan_check_write+0x18/0x20 [ 34.927947][ C0] ? prep_new_page+0x42/0x190 [ 34.927967][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 34.927992][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.928015][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.928036][ C0] ? __kernel_text_address+0x11/0x40 [ 34.928057][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.928077][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.928095][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.928113][ C0] ? stack_depot_save_flags+0x38/0x800 [ 34.928134][ C0] ? kasan_save_track+0x4f/0x80 [ 34.928152][ C0] ? kasan_save_track+0x3e/0x80 [ 34.928169][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.928183][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.928201][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 34.928218][ C0] ? krealloc_noprof+0x8d/0x130 [ 34.928235][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process23insert_or_update_handle+0x51e/0x2c70 [ 34.928260][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x7c0/0x2660 [ 34.928282][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1a91/0xa690 [ 34.928310][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.928334][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.928352][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.928370][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.928385][ C0] ? do_syscall_64+0x57/0xf0 [ 34.928405][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.928431][ C0] ? __kasan_check_write+0x18/0x20 [ 34.928451][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.928473][ C0] ? __cfi__RNvMs5_NtCs1ewLyjEZ7Le_6kernel6bitmapNtB5_6Bitmap7set_bit+0x10/0x10 [ 34.928495][ C0] ? _raw_spin_unlock+0x45/0x60 [ 34.928517][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 34.928550][ C0] ? __kasan_check_write+0x18/0x20 [ 34.928566][ C0] ? mutex_unlock+0x90/0x240 [ 34.928582][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 34.928600][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.928619][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.928641][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.928662][ C0] ? __kernel_text_address+0x11/0x40 [ 34.928683][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.928702][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.928721][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.928737][ C0] ? __kernel_text_address+0x11/0x40 [ 34.928758][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.928783][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.928802][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.928817][ C0] ? stack_depot_save_flags+0x38/0x800 [ 34.928834][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 34.928856][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 34.928876][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.928890][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.928905][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 34.928921][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720 [ 34.928957][ C0] ? __asan_memset+0x39/0x50 [ 34.928973][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x2c5/0x720 [ 34.929013][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10/0x10 [ 34.929052][ C0] ? avc_has_perm_noaudit+0x28a/0x360 [ 34.929072][ C0] ? avc_has_perm+0x155/0x240 [ 34.929089][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 34.929109][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 34.929129][ C0] ? __kasan_check_write+0x18/0x20 [ 34.929145][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.929165][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.929186][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 34.929207][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 34.929229][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0xc7a/0x2660 [ 34.929257][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 34.929292][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.929313][ C0] ? __kasan_check_write+0x18/0x20 [ 34.929329][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 34.929370][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 34.929415][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.929438][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.929458][ C0] ? __kasan_check_write+0x18/0x20 [ 34.929474][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.929495][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.929518][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 34.929540][ C0] ? stack_depot_save_flags+0x399/0x800 [ 34.929562][ C0] ? kasan_save_track+0x4f/0x80 [ 34.929579][ C0] ? kasan_save_track+0x3e/0x80 [ 34.929596][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.929616][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.929634][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.929651][ C0] ? __set_page_owner+0x2af/0x600 [ 34.929671][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 34.929691][ C0] ? prep_new_page+0x2d/0x190 [ 34.929710][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 34.929732][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 34.929753][ C0] ? alloc_slab_page+0x6b/0x1e0 [ 34.929771][ C0] ? allocate_slab+0x69/0x420 [ 34.929797][ C0] ? ___slab_alloc+0x5a2/0x8d0 [ 34.929815][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 34.929832][ C0] ? krealloc_noprof+0x8d/0x130 [ 34.929849][ C0] ? _RNvMs3_NtCs2tVsXcF29le_11rust_binder6threadNtB5_11ThreadError7try_new+0x106/0x6e0 [ 34.929876][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x54c/0x1c70 [ 34.929905][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x408/0x5d80 [ 34.929928][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.929947][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.929964][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.929980][ C0] ? do_syscall_64+0x57/0xf0 [ 34.930001][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.930029][ C0] ? __kasan_check_write+0x18/0x20 [ 34.930045][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 34.930066][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 34.930088][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 34.930105][ C0] ? __set_page_owner+0x2af/0x600 [ 34.930125][ C0] ? __kasan_check_write+0x18/0x20 [ 34.930141][ C0] ? __set_page_owner+0x3fe/0x600 [ 34.930161][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 34.930180][ C0] ? kasan_unpoison+0x4a/0x70 [ 34.930196][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 34.930217][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 34.930237][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 34.930254][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 34.930277][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.930300][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.930321][ C0] ? __kernel_text_address+0x11/0x40 [ 34.930342][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.930362][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.930385][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.930407][ C0] ? stack_depot_save_flags+0x38/0x800 [ 34.930430][ C0] ? kasan_save_track+0x4f/0x80 [ 34.930448][ C0] ? kasan_save_track+0x3e/0x80 [ 34.930465][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.930480][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.930498][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 34.930516][ C0] ? krealloc_noprof+0x8d/0x130 [ 34.930533][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x920/0x1aa0 [ 34.930557][ C0] ? _RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x43a/0x6c0 [ 34.930591][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.930610][ C0] ? __cfi__RNvMs6_NtCs1ewLyjEZ7Le_6kernel4listINtB5_4ListINtCs2tVsXcF29le_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x10/0x10 [ 34.930643][ C0] ? __kasan_check_write+0x18/0x20 [ 34.930659][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder4nodeNtB5_4Node28incr_refcount_allow_zero2one+0x502/0xee0 [ 34.930686][ C0] ? __kasan_check_write+0x18/0x20 [ 34.930701][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.930721][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.930743][ C0] ? _raw_spin_unlock+0x45/0x60 [ 34.930769][ C0] ? _RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x5ec/0x950 [ 34.930802][ C0] ? __cfi__RNvMs0_NtCs2tVsXcF29le_11rust_binder7processNtB5_12ProcessInner24new_node_ref_with_thread+0x10/0x10 [ 34.930829][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x403/0x500 [ 34.930859][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreeyINtNtNtB7_4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1d_4node4NodeEEE9raw_entryB1d_+0x10/0x10 [ 34.930888][ C0] ? __kasan_check_write+0x18/0x20 [ 34.930903][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.930923][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.930944][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x11f1/0x1aa0 [ 34.930973][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.930988][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 34.931012][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x127e/0x1aa0 [ 34.931040][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process8get_node+0x10/0x10 [ 34.931065][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 34.931101][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 34.931136][ C0] ? __kasan_check_write+0x18/0x20 [ 34.931170][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.931190][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.931211][ C0] ? _raw_spin_unlock+0x45/0x60 [ 34.931231][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 34.931253][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 34.931283][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 34.931312][ C0] ? do_pte_missing+0x28b9/0x4410 [ 34.931332][ C0] ? avc_has_perm_noaudit+0x26c/0x360 [ 34.931350][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.931367][ C0] ? __kasan_check_write+0x18/0x20 [ 34.931382][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 34.931412][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x10/0x10 [ 34.931440][ C0] ? avc_has_perm+0x155/0x240 [ 34.931458][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 34.931478][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 34.931498][ C0] ? __kasan_check_write+0x18/0x20 [ 34.931514][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.931533][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.931554][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xb14/0x1030 [ 34.931583][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.931599][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0xd14/0x1030 [ 34.931627][ C0] ? __kernel_text_address+0x11/0x40 [ 34.931649][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process14set_as_manager+0x10/0x10 [ 34.931678][ C0] ? stack_trace_save+0xaa/0x100 [ 34.931697][ C0] ? __kasan_check_write+0x18/0x20 [ 34.931713][ C0] ? _raw_spin_lock+0x92/0x120 [ 34.931733][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 34.931754][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 34.931783][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.931799][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 34.931823][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 34.931846][ C0] ? _raw_spin_unlock+0x45/0x60 [ 34.931866][ C0] ? call_rcu_nocb+0x6d7/0xc80 [ 34.931888][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 34.931913][ C0] ? swake_up_one_online_ipi+0x30/0x30 [ 34.931935][ C0] ? __cfi_mt_free_rcu+0x10/0x10 [ 34.931959][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 34.931983][ C0] ? kernel_text_address+0xa9/0xe0 [ 34.932003][ C0] ? __kernel_text_address+0x11/0x40 [ 34.932024][ C0] ? unwind_get_return_address+0x51/0x90 [ 34.932043][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 34.932062][ C0] ? arch_stack_walk+0x10a/0x170 [ 34.932080][ C0] ? stack_trace_save+0xaa/0x100 [ 34.932099][ C0] ? stack_depot_save_flags+0x38/0x800 [ 34.932120][ C0] ? kasan_save_track+0x4f/0x80 [ 34.932137][ C0] ? kasan_save_track+0x3e/0x80 [ 34.932154][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 34.932169][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 34.932187][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 34.932205][ C0] ? krealloc_noprof+0x8d/0x130 [ 34.932225][ C0] ? kvrealloc_noprof+0x59/0x120 [ 34.932241][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_mmap+0x78b/0x11f0 [ 34.932264][ C0] ? mmap_region+0x1579/0x1d60 [ 34.932279][ C0] ? do_mmap+0xb85/0x13c0 [ 34.932291][ C0] ? vm_mmap_pgoff+0x36e/0x4b0 [ 34.932308][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 34.932329][ C0] ? sched_balance_rq+0x4636/0x4ce0 [ 34.932349][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 34.932368][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 34.932386][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 34.932404][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 34.932421][ C0] ? sched_clock+0x44/0x60 [ 34.932442][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 34.932463][ C0] ? update_curr+0x6c1/0x9e0 [ 34.932480][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 34.932497][ C0] ? __calc_delta+0x280/0x280 [ 34.932518][ C0] ? update_entity_lag+0x28f/0x2c0 [ 34.932535][ C0] ? dequeue_entity+0x809/0x1380 [ 34.932557][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 34.932576][ C0] ? sched_clock+0x44/0x60 [ 34.932596][ C0] ? __kasan_check_write+0x18/0x20 [ 34.932613][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 34.932633][ C0] ? dequeue_entities+0x1d7/0x1400 [ 34.932656][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 34.932677][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 34.932694][ C0] ? sched_clock_noinstr+0xd/0x30 [ 34.932711][ C0] ? __kasan_check_write+0x18/0x20 [ 34.932727][ C0] ? __switch_to+0xc4f/0x1300 [ 34.932743][ C0] ? __cfi___switch_to+0x10/0x10 [ 34.932757][ C0] ? psi_task_switch+0x4f2/0xa10 [ 34.932784][ C0] ? __kasan_check_write+0x18/0x20 [ 34.932799][ C0] ? finish_task_switch+0x1d9/0x760 [ 34.932819][ C0] ? __switch_to_asm+0x3d/0x70 [ 34.932835][ C0] ? __schedule+0x14d6/0x2100 [ 34.932850][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 34.932868][ C0] ? __asan_memcpy+0x5a/0x80 [ 34.932885][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 34.932904][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 34.932925][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 34.932945][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 34.932965][ C0] ? schedule+0xc5/0x240 [ 34.932979][ C0] ? futex_unqueue+0x136/0x160 [ 34.933004][ C0] ? ioctl_has_perm+0x39a/0x500 [ 34.933020][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 34.933036][ C0] ? futex_wait+0x2ac/0x7b0 [ 34.933052][ C0] ? __cfi_futex_wait+0x10/0x10 [ 34.933071][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 34.933086][ C0] ? __cfi_userfaultfd_unmap_complete+0x10/0x10 [ 34.933105][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 34.933120][ C0] ? do_futex+0x32a/0x510 [ 34.933141][ C0] ? __cfi_do_futex+0x10/0x10 [ 34.933162][ C0] ? vm_mmap_pgoff+0x153/0x4b0 [ 34.933178][ C0] ? __fget_files+0x2c5/0x340 [ 34.933198][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 34.933219][ C0] ? security_file_ioctl+0x3e/0x110 [ 34.933241][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 34.933264][ C0] ? __se_sys_ioctl+0x132/0x1b0 [ 34.933282][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 34.933301][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 34.933317][ C0] ? do_syscall_64+0x57/0xf0 [ 34.933337][ C0] ? clear_bhb_loop+0x50/0xa0 [ 34.933353][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.933378][ C0] [ 34.933384][ C0] Modules linked in: [ 34.933409][ C0] ---[ end trace 0000000000000000 ]--- [ 34.933418][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 34.933441][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 34.933454][ C0] RSP: 0018:ffffc9000b7c7fc0 EFLAGS: 00010282 [ 34.933467][ C0] RAX: ffffc9000b7c8108 RBX: ffffc9000b7c8108 RCX: ffffc9000b7c8118 [ 34.933480][ C0] RDX: ffffc9000b7c80f8 RSI: ffffc9000b7c80f8 RDI: ffffc9000b7c8160 [ 34.933492][ C0] RBP: ffffc9000b7c8080 R08: ffffc9000b7c8101 R09: 0000000000000000 [ 34.933504][ C0] R10: ffffc9000b7c8108 R11: fffff520016f902d R12: 0000000000000000 [ 34.933515][ C0] R13: dffffc0000000000 R14: ffffc9000b7c8110 R15: ffffc9000b7c80f8 [ 34.933528][ C0] FS: 00007ff6317196c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.933544][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.933556][ C0] CR2: ffffc9000b7c7fb8 CR3: 0000000115576000 CR4: 00000000003526b0 [ 34.933573][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 34.934642][ C0] Kernel Offset: disabled