last executing test programs:
833.543963ms ago: executing program 0 (id=63):
prlimit64(0x0, 0x0, 0x0, 0x0)
821.249084ms ago: executing program 0 (id=69):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0)
803.067767ms ago: executing program 0 (id=70):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0)
772.676665ms ago: executing program 0 (id=78):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm', 0x2, 0x0)
729.911802ms ago: executing program 0 (id=83):
shmget(0xffffffffffffffff, 0x0, 0x0, 0x0)
715.063338ms ago: executing program 0 (id=90):
pause()
324.240847ms ago: executing program 2 (id=164):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/yama/ptrace_scope', 0x2, 0x0)
324.187866ms ago: executing program 3 (id=165):
tkill(0x0, 0x0)
324.104696ms ago: executing program 4 (id=166):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/random', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/random', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/random', 0x800, 0x0)
271.745379ms ago: executing program 4 (id=169):
mq_open(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000))
271.25196ms ago: executing program 3 (id=170):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0', 0x800, 0x0)
270.975105ms ago: executing program 2 (id=173):
socket$vsock_stream(0x28, 0x1, 0x0)
270.829762ms ago: executing program 4 (id=174):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_congestion_control', 0x1, 0x0)
270.748855ms ago: executing program 2 (id=176):
execveat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)
270.686594ms ago: executing program 3 (id=177):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0', 0x800, 0x0)
270.422935ms ago: executing program 3 (id=179):
sched_setscheduler(0x0, 0x0, &(0x7f0000000000))
270.340273ms ago: executing program 2 (id=180):
uselib(0x0)
251.816042ms ago: executing program 2 (id=182):
sysinfo(&(0x7f0000000000))
251.76923ms ago: executing program 3 (id=183):
syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5)
251.741325ms ago: executing program 4 (id=184):
timerfd_create(0x0, 0x0)
246.277191ms ago: executing program 4 (id=187):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci', 0x2, 0x0)
184.934606ms ago: executing program 2 (id=189):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0)
184.672659ms ago: executing program 4 (id=192):
link(&(0x7f0000000000), &(0x7f0000000000))
183.622166ms ago: executing program 1 (id=197):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l/by-path/platform-soc@0:qcom_cam-req-mgr-video-index0', 0x2, 0x0)
125.872402ms ago: executing program 3 (id=198):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load', 0x2, 0x0)
125.761206ms ago: executing program 1 (id=199):
socket$inet_udp(0x2, 0x2, 0x0)
125.708941ms ago: executing program 1 (id=201):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0)
118.26855ms ago: executing program 1 (id=202):
syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vivid(&(0x7f0000000100), 0x0, 0x800)
59.160951ms ago: executing program 5 (id=203):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)
59.091624ms ago: executing program 1 (id=204):
setpgid(0x0, 0x0)
59.030853ms ago: executing program 5 (id=205):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/register', 0x1, 0x0)
58.808109ms ago: executing program 1 (id=206):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0)
58.737358ms ago: executing program 5 (id=207):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty', 0x800, 0x0)
131.02µs ago: executing program 5 (id=209):
landlock_create_ruleset(&(0x7f0000000000), 0x0, 0x0)
60.558µs ago: executing program 5 (id=210):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
0s ago: executing program 5 (id=211):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm', 0x800, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '[localhost]:30454' (ED25519) to the list of known hosts.
[ 41.746556][ T5253] cgroup: Unknown subsys name 'net'
[ 41.811264][ T5253] cgroup: Unknown subsys name 'cpuset'
[ 41.813932][ T5253] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 42.755419][ T5253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 46.452163][ T5520] ==================================================================
[ 46.454569][ T5520] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 46.456924][ T5520] Write of size 8 at addr ffff888012271c08 by task syz-executor/5520
[ 46.459859][ T5520]
[ 46.460569][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 46.460577][ T5520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 46.460581][ T5520] Call Trace:
[ 46.460584][ T5520]
[ 46.460586][ T5520] dump_stack_lvl+0x241/0x360
[ 46.460596][ T5520] ? __pfx_dump_stack_lvl+0x10/0x10
[ 46.460602][ T5520] ? __pfx__printk+0x10/0x10
[ 46.460611][ T5520] ? _printk+0xd5/0x120
[ 46.460619][ T5520] ? __virt_addr_valid+0x183/0x530
[ 46.460628][ T5520] ? __virt_addr_valid+0x183/0x530
[ 46.460636][ T5520] print_report+0x169/0x550
[ 46.460646][ T5520] ? __virt_addr_valid+0x183/0x530
[ 46.460653][ T5520] ? __virt_addr_valid+0x183/0x530
[ 46.460661][ T5520] ? __virt_addr_valid+0x45f/0x530
[ 46.460669][ T5520] ? __phys_addr+0xba/0x170
[ 46.460677][ T5520] ? binder_add_device+0x5f/0xa0
[ 46.460684][ T5520] kasan_report+0x143/0x180
[ 46.460693][ T5520] ? binder_add_device+0x5f/0xa0
[ 46.460700][ T5520] binder_add_device+0x5f/0xa0
[ 46.460707][ T5520] binderfs_binder_device_create+0x7bf/0x9c0
[ 46.460716][ T5520] binderfs_fill_super+0x944/0xd90
[ 46.460723][ T5520] ? __pfx_binderfs_fill_super+0x10/0x10
[ 46.460733][ T5520] ? shrinker_register+0x160/0x230
[ 46.460740][ T5520] ? sget_fc+0x909/0x9c0
[ 46.460748][ T5520] ? __pfx_set_anon_super_fc+0x10/0x10
[ 46.460755][ T5520] ? __pfx_binderfs_fill_super+0x10/0x10
[ 46.460762][ T5520] get_tree_nodev+0xb7/0x140
[ 46.460769][ T5520] vfs_get_tree+0x90/0x2b0
[ 46.460778][ T5520] do_new_mount+0x2be/0xb40
[ 46.460784][ T5520] ? __pfx_do_new_mount+0x10/0x10
[ 46.460791][ T5520] __se_sys_mount+0x2d6/0x3c0
[ 46.460797][ T5520] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 46.460805][ T5520] ? __pfx___se_sys_mount+0x10/0x10
[ 46.460811][ T5520] ? do_syscall_64+0x100/0x230
[ 46.460820][ T5520] ? __x64_sys_mount+0x20/0xc0
[ 46.460826][ T5520] do_syscall_64+0xf3/0x230
[ 46.460834][ T5520] ? clear_bhb_loop+0x35/0x90
[ 46.460842][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 46.460850][ T5520] RIP: 0033:0x7f328658e54a
[ 46.460860][ T5520] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 46.460865][ T5520] RSP: 002b:00007ffc5e49cda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 46.460873][ T5520] RAX: ffffffffffffffda RBX: 00007f328660e663 RCX: 00007f328658e54a
[ 46.460877][ T5520] RDX: 00007f328661dda7 RSI: 00007f328660e663 RDI: 00007f328661dda7
[ 46.460881][ T5520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 46.460885][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3286628480
[ 46.460889][ T5520] R13: 00007ffc5e49ce28 R14: 0000000000000009 R15: 0000000000000000
[ 46.460894][ T5520]
[ 46.460897][ T5520]
[ 46.539736][ T5520] Allocated by task 5306:
[ 46.540946][ T5520] kasan_save_track+0x3f/0x80
[ 46.542239][ T5520] __kasan_kmalloc+0x98/0xb0
[ 46.543510][ T5520] __kmalloc_cache_noprof+0x243/0x390
[ 46.544991][ T5520] binderfs_binder_device_create+0x16c/0x9c0
[ 46.546659][ T5520] binderfs_fill_super+0x944/0xd90
[ 46.548096][ T5520] get_tree_nodev+0xb7/0x140
[ 46.549402][ T5520] vfs_get_tree+0x90/0x2b0
[ 46.550657][ T5520] do_new_mount+0x2be/0xb40
[ 46.551952][ T5520] __se_sys_mount+0x2d6/0x3c0
[ 46.553294][ T5520] do_syscall_64+0xf3/0x230
[ 46.554536][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 46.556155][ T5520]
[ 46.556818][ T5520] Freed by task 5306:
[ 46.557918][ T5520] kasan_save_track+0x3f/0x80
[ 46.559215][ T5520] kasan_save_free_info+0x40/0x50
[ 46.560609][ T5520] __kasan_slab_free+0x59/0x70
[ 46.561948][ T5520] kfree+0x196/0x430
[ 46.563014][ T5520] evict+0x4e8/0x9a0
[ 46.564122][ T5520] __dentry_kill+0x20d/0x630
[ 46.565385][ T5520] shrink_kill+0xa9/0x2c0
[ 46.566554][ T5520] shrink_dentry_list+0x2c0/0x5b0
[ 46.567967][ T5520] shrink_dcache_parent+0xcb/0x3b0
[ 46.569369][ T5520] do_one_tree+0x23/0xe0
[ 46.570513][ T5520] shrink_dcache_for_umount+0xb4/0x180
[ 46.572028][ T5520] generic_shutdown_super+0x6a/0x2d0
[ 46.573472][ T5520] kill_litter_super+0x76/0xb0
[ 46.574791][ T5520] binderfs_kill_super+0x44/0x90
[ 46.576168][ T5520] deactivate_locked_super+0xc4/0x130
[ 46.577627][ T5520] cleanup_mnt+0x41f/0x4b0
[ 46.578844][ T5520] task_work_run+0x24f/0x310
[ 46.580098][ T5520] do_exit+0xa2a/0x28e0
[ 46.581230][ T5520] do_group_exit+0x207/0x2c0
[ 46.582517][ T5520] get_signal+0x16b2/0x1750
[ 46.583765][ T5520] arch_do_signal_or_restart+0x96/0x860
[ 46.585488][ T5520] syscall_exit_to_user_mode+0xce/0x340
[ 46.587007][ T5520] do_syscall_64+0x100/0x230
[ 46.588354][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 46.590030][ T5520]
[ 46.590717][ T5520] The buggy address belongs to the object at ffff888012271c00
[ 46.590717][ T5520] which belongs to the cache kmalloc-512 of size 512
[ 46.594589][ T5520] The buggy address is located 8 bytes inside of
[ 46.594589][ T5520] freed 512-byte region [ffff888012271c00, ffff888012271e00)
[ 46.598372][ T5520]
[ 46.599059][ T5520] The buggy address belongs to the physical page:
[ 46.600836][ T5520] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12270
[ 46.603408][ T5520] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 46.605734][ T5520] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 46.607845][ T5520] page_type: f5(slab)
[ 46.608973][ T5520] raw: 00fff00000000040 ffff88801ac41c80 ffffea00010cd080 dead000000000002
[ 46.611304][ T5520] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 46.613672][ T5520] head: 00fff00000000040 ffff88801ac41c80 ffffea00010cd080 dead000000000002
[ 46.616055][ T5520] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 46.618439][ T5520] head: 00fff00000000001 ffffea0000489c01 ffffffffffffffff 0000000000000000
[ 46.620785][ T5520] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000
[ 46.623134][ T5520] page dumped because: kasan: bad access detected
[ 46.624883][ T5520] page_owner tracks the page as allocated
[ 46.626418][ T5520] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4735, tgid 4735 (udevadm), ts 18268622286, free_ts 17565144625
[ 46.632065][ T5520] post_alloc_hook+0x1f4/0x240
[ 46.633405][ T5520] get_page_from_freelist+0x365c/0x37a0
[ 46.634935][ T5520] __alloc_frozen_pages_noprof+0x292/0x710
[ 46.636548][ T5520] alloc_pages_mpol+0x311/0x660
[ 46.637914][ T5520] allocate_slab+0x8f/0x3a0
[ 46.639181][ T5520] ___slab_alloc+0xc27/0x14a0
[ 46.640499][ T5520] __slab_alloc+0x58/0xa0
[ 46.641705][ T5520] __kmalloc_cache_noprof+0x27b/0x390
[ 46.643191][ T5520] kernfs_fop_open+0x3e0/0xd10
[ 46.644543][ T5520] do_dentry_open+0xdec/0x1960
[ 46.645850][ T5520] vfs_open+0x3b/0x370
[ 46.646981][ T5520] path_openat+0x2c74/0x3580
[ 46.648271][ T5520] do_filp_open+0x27f/0x4e0
[ 46.649518][ T5520] do_sys_openat2+0x13e/0x1d0
[ 46.650823][ T5520] __x64_sys_openat+0x247/0x2a0
[ 46.652190][ T5520] do_syscall_64+0xf3/0x230
[ 46.653436][ T5520] page last free pid 4735 tgid 4735 stack trace:
[ 46.655217][ T5520] free_frozen_pages+0xe0d/0x10e0
[ 46.656624][ T5520] __slab_free+0x2c2/0x380
[ 46.657867][ T5520] qlist_free_all+0x9a/0x140
[ 46.659132][ T5520] kasan_quarantine_reduce+0x14f/0x170
[ 46.660629][ T5520] __kasan_slab_alloc+0x23/0x80
[ 46.661968][ T5520] kmem_cache_alloc_noprof+0x1d9/0x380
[ 46.663478][ T5520] getname_flags+0xb7/0x540
[ 46.664732][ T5520] do_readlinkat+0xd8/0x3a0
[ 46.665983][ T5520] __x64_sys_readlink+0x7f/0x90
[ 46.667339][ T5520] do_syscall_64+0xf3/0x230
[ 46.668612][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 46.670244][ T5520]
[ 46.670898][ T5520] Memory state around the buggy address:
[ 46.672453][ T5520] ffff888012271b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.674630][ T5520] ffff888012271b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 46.676820][ T5520] >ffff888012271c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 46.678991][ T5520] ^
[ 46.680183][ T5520] ffff888012271c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 46.682344][ T5520] ffff888012271d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 46.684558][ T5520] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 46.802349][ T5539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 46.804755][ T5539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 46.806918][ T5539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 46.809195][ T5539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 46.812203][ T5539] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 46.814280][ T5539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 46.873239][ T5534] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 46.897358][ T5520] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 46.899524][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 46.902578][ T5520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 46.905728][ T5520] Call Trace:
[ 46.906717][ T5520]
[ 46.907592][ T5520] dump_stack_lvl+0x241/0x360
[ 46.909011][ T5520] ? __pfx_dump_stack_lvl+0x10/0x10
[ 46.910539][ T5520] ? __pfx__printk+0x10/0x10
[ 46.911914][ T5520] ? preempt_schedule+0xe1/0xf0
[ 46.913339][ T5520] ? vscnprintf+0x5d/0x90
[ 46.914610][ T5520] panic+0x349/0x880
[ 46.915780][ T5520] ? check_panic_on_warn+0x21/0xb0
[ 46.917285][ T5520] ? __pfx_panic+0x10/0x10
[ 46.918598][ T5520] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 46.920363][ T5520] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 46.922206][ T5520] ? print_report+0x502/0x550
[ 46.923592][ T5520] check_panic_on_warn+0x86/0xb0
[ 46.925069][ T5520] ? binder_add_device+0x5f/0xa0
[ 46.926525][ T5520] end_report+0x77/0x160
[ 46.927768][ T5520] kasan_report+0x154/0x180
[ 46.929076][ T5520] ? binder_add_device+0x5f/0xa0
[ 46.930492][ T5520] binder_add_device+0x5f/0xa0
[ 46.931876][ T5520] binderfs_binder_device_create+0x7bf/0x9c0
[ 46.933582][ T5520] binderfs_fill_super+0x944/0xd90
[ 46.935040][ T5520] ? __pfx_binderfs_fill_super+0x10/0x10
[ 46.936646][ T5520] ? shrinker_register+0x160/0x230
[ 46.938103][ T5520] ? sget_fc+0x909/0x9c0
[ 46.939347][ T5520] ? __pfx_set_anon_super_fc+0x10/0x10
[ 46.940910][ T5520] ? __pfx_binderfs_fill_super+0x10/0x10
[ 46.942500][ T5520] get_tree_nodev+0xb7/0x140
[ 46.943843][ T5520] vfs_get_tree+0x90/0x2b0
[ 46.945118][ T5520] do_new_mount+0x2be/0xb40
[ 46.946416][ T5520] ? __pfx_do_new_mount+0x10/0x10
[ 46.947861][ T5520] __se_sys_mount+0x2d6/0x3c0
[ 46.949205][ T5520] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 46.950913][ T5520] ? __pfx___se_sys_mount+0x10/0x10
[ 46.952399][ T5520] ? do_syscall_64+0x100/0x230
[ 46.953766][ T5520] ? __x64_sys_mount+0x20/0xc0
[ 46.955135][ T5520] do_syscall_64+0xf3/0x230
[ 46.956443][ T5520] ? clear_bhb_loop+0x35/0x90
[ 46.957789][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 46.959465][ T5520] RIP: 0033:0x7f328658e54a
[ 46.960757][ T5520] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 46.966197][ T5520] RSP: 002b:00007ffc5e49cda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 46.968573][ T5520] RAX: ffffffffffffffda RBX: 00007f328660e663 RCX: 00007f328658e54a
[ 46.970821][ T5520] RDX: 00007f328661dda7 RSI: 00007f328660e663 RDI: 00007f328661dda7
[ 46.973071][ T5520] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 46.975307][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3286628480
[ 46.977557][ T5520] R13: 00007ffc5e49ce28 R14: 0000000000000009 R15: 0000000000000000
[ 46.979816][ T5520]
[ 46.981283][ T5520] Kernel Offset: disabled
[ 46.982528][ T5520] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:24:36 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000062 RBX=ffffffff9a74c0e0 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000f1471d0
R8 =ffffffff8576b96b R9 =1ffff11006640046 R10=dffffc0000000000 R11=ffffffff8576b920
R12=dffffc0000000000 R13=ffffffff9a446f61 R14=0000000000000062 R15=00000000000003f8
RIP=ffffffff8576b99e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055559013f500 ffffffff 00c00000
GS =0000 ffff88801fc00000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f328645a710 CR3=000000004004c000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000ffffff80 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5e49cdc0 0000003000000010
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6573726170206f74 2064656c69616600 277325273d727473 0035333535362030
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4056574455054a51 054140494c444300 0256000218575156 0010161010130515
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000