last executing test programs:
1.534562497s ago: executing program 3 (id=55):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls', 0x0, 0x0)
1.432429721s ago: executing program 3 (id=64):
execveat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), 0x0)
1.43138769s ago: executing program 3 (id=68):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull', 0x800, 0x0)
1.377780365s ago: executing program 3 (id=75):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid', 0x800, 0x0)
1.359049817s ago: executing program 3 (id=79):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/uverbs0', 0x2, 0x0)
1.270658975s ago: executing program 3 (id=86):
pause()
349.488667ms ago: executing program 4 (id=184):
epoll_create(0x0)
338.58552ms ago: executing program 4 (id=187):
socket$netlink(0x10, 0x3, 0x0)
295.054556ms ago: executing program 1 (id=191):
syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x800)
294.849047ms ago: executing program 4 (id=192):
chmod(&(0x7f0000000000), 0x0)
243.609477ms ago: executing program 1 (id=195):
socket$alg(0x26, 0x5, 0x0)
243.492673ms ago: executing program 4 (id=196):
sigaltstack(&(0x7f0000000000), 0x0)
242.63874ms ago: executing program 4 (id=199):
kexec_load(0x0, 0x0, &(0x7f0000000000), 0x0)
242.181043ms ago: executing program 1 (id=201):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$evdev(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$evdev(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$evdev(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$evdev(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$evdev(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$evdev(&(0x7f0000000500), 0x4, 0x800)
182.344364ms ago: executing program 4 (id=202):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
179.175576ms ago: executing program 0 (id=206):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse', 0x800, 0x0)
166.037536ms ago: executing program 2 (id=207):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)
98.624149ms ago: executing program 0 (id=208):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0)
98.513225ms ago: executing program 2 (id=209):
inotify_init1(0x0)
98.414674ms ago: executing program 0 (id=210):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/init_regions', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/init_regions', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/init_regions', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/init_regions', 0x800, 0x0)
98.233131ms ago: executing program 1 (id=211):
shmat(0x0, 0x0, 0x0)
97.920767ms ago: executing program 2 (id=212):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2', 0x2, 0x0)
87.823954ms ago: executing program 1 (id=213):
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)
83.356167ms ago: executing program 0 (id=214):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0', 0x2, 0x0)
22.726203ms ago: executing program 2 (id=215):
mbind(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
22.542867ms ago: executing program 1 (id=216):
times(&(0x7f0000000000))
22.456506ms ago: executing program 2 (id=217):
socket$nl_netfilter(0x10, 0x3, 0xc)
22.378408ms ago: executing program 0 (id=218):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0)
9.155496ms ago: executing program 2 (id=220):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control', 0x800, 0x0)
0s ago: executing program 0 (id=221):
chown(&(0x7f0000000000), 0x0, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.10.53' (ED25519) to the list of known hosts.
[ 66.668324][ T5818] cgroup: Unknown subsys name 'net'
[ 66.824361][ T5818] cgroup: Unknown subsys name 'cpuset'
[ 66.833216][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 68.230690][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 71.509409][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.518291][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.312461][ T5830] ==================================================================
[ 72.320579][ T5830] BUG: KASAN: slab-use-after-free in binderfs_evict_inode+0x1de/0x2d0
[ 72.328769][ T5830] Write of size 8 at addr ffff888142bab808 by task syz-executor/5830
[ 72.336843][ T5830]
[ 72.339370][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full)
[ 72.339391][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 72.339405][ T5830] Call Trace:
[ 72.339415][ T5830]
[ 72.339423][ T5830] dump_stack_lvl+0x189/0x250
[ 72.339446][ T5830] ? __virt_addr_valid+0x18c/0x540
[ 72.339464][ T5830] ? rcu_is_watching+0x15/0xb0
[ 72.339483][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.339501][ T5830] ? rcu_is_watching+0x15/0xb0
[ 72.339520][ T5830] ? lock_release+0x4b/0x3e0
[ 72.339540][ T5830] ? __virt_addr_valid+0x18c/0x540
[ 72.339557][ T5830] ? __virt_addr_valid+0x469/0x540
[ 72.339574][ T5830] print_report+0xb4/0x290
[ 72.339591][ T5830] ? binderfs_evict_inode+0x1de/0x2d0
[ 72.339608][ T5830] kasan_report+0x118/0x150
[ 72.339626][ T5830] ? binderfs_evict_inode+0x1de/0x2d0
[ 72.339646][ T5830] binderfs_evict_inode+0x1de/0x2d0
[ 72.339664][ T5830] ? __pfx_binderfs_evict_inode+0x10/0x10
[ 72.339682][ T5830] evict+0x501/0x9c0
[ 72.339700][ T5830] ? __pfx_evict+0x10/0x10
[ 72.339713][ T5830] ? do_raw_spin_unlock+0x122/0x240
[ 72.339731][ T5830] ? _raw_spin_unlock+0x28/0x50
[ 72.339746][ T5830] ? iput+0x6d8/0x9d0
[ 72.339766][ T5830] __dentry_kill+0x209/0x660
[ 72.339786][ T5830] ? shrink_kill+0x8d/0x2c0
[ 72.339804][ T5830] shrink_kill+0xa9/0x2c0
[ 72.339823][ T5830] shrink_dentry_list+0x2e0/0x5e0
[ 72.339845][ T5830] shrink_dcache_parent+0xa1/0x2c0
[ 72.339864][ T5830] ? __lock_acquire+0xaac/0xd20
[ 72.339883][ T5830] ? __pfx_shrink_dcache_parent+0x10/0x10
[ 72.339909][ T5830] do_one_tree+0x23/0xe0
[ 72.339929][ T5830] shrink_dcache_for_umount+0xa0/0x170
[ 72.339951][ T5830] generic_shutdown_super+0x67/0x2c0
[ 72.339968][ T5830] kill_litter_super+0x76/0xb0
[ 72.339983][ T5830] binderfs_kill_super+0x44/0x90
[ 72.340001][ T5830] deactivate_locked_super+0xb9/0x130
[ 72.340016][ T5830] cleanup_mnt+0x425/0x4c0
[ 72.340038][ T5830] task_work_run+0x1d1/0x260
[ 72.340062][ T5830] ? __pfx_task_work_run+0x10/0x10
[ 72.340081][ T5830] ? kmem_cache_free+0x192/0x3f0
[ 72.340101][ T5830] do_exit+0x8d6/0x2550
[ 72.340122][ T5830] ? do_raw_spin_lock+0x121/0x290
[ 72.340138][ T5830] ? __pfx_do_exit+0x10/0x10
[ 72.340154][ T5830] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 72.340176][ T5830] do_group_exit+0x21c/0x2d0
[ 72.340193][ T5830] ? lockdep_hardirqs_on+0x9c/0x150
[ 72.340212][ T5830] get_signal+0x125e/0x1310
[ 72.340240][ T5830] arch_do_signal_or_restart+0x95/0x780
[ 72.340263][ T5830] ? kmem_cache_free+0x301/0x3f0
[ 72.340281][ T5830] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 72.340301][ T5830] ? local_irq_enable_exit_to_user+0x5/0x10
[ 72.340322][ T5830] syscall_exit_to_user_mode+0x8b/0x120
[ 72.340340][ T5830] do_syscall_64+0x103/0x210
[ 72.340358][ T5830] ? clear_bhb_loop+0x45/0xa0
[ 72.340375][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.340390][ T5830] RIP: 0033:0x7fa5ebf8d33d
[ 72.340409][ T5830] Code: Unable to access opcode bytes at 0x7fa5ebf8d313.
[ 72.340417][ T5830] RSP: 002b:00007fa5ec2dfda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 72.340440][ T5830] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fa5ebf8d33d
[ 72.340451][ T5830] RDX: 0000000000000030 RSI: 00007fa5ec2dfe40 RDI: 00000000000000f9
[ 72.340461][ T5830] RBP: 00007fa5ec2dfdec R08: 000000000000000a R09: 00007fa5ec2dfaf7
[ 72.340471][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b
[ 72.340481][ T5830] R13: 00000000000927c0 R14: 0000000000011a1b R15: 00007fa5ec2dfe40
[ 72.340498][ T5830]
[ 72.340503][ T5830]
[ 72.686292][ T5830] Allocated by task 5829:
[ 72.690715][ T5830] kasan_save_track+0x3e/0x80
[ 72.695396][ T5830] __kasan_kmalloc+0x93/0xb0
[ 72.699976][ T5830] __kmalloc_cache_noprof+0x230/0x3d0
[ 72.705424][ T5830] binderfs_binder_device_create+0x17f/0xaf0
[ 72.711480][ T5830] binderfs_fill_super+0xa0e/0xe90
[ 72.716605][ T5830] get_tree_nodev+0xb8/0x150
[ 72.721365][ T5830] vfs_get_tree+0x8f/0x2b0
[ 72.725769][ T5830] do_new_mount+0x24a/0xa40
[ 72.730276][ T5830] __se_sys_mount+0x317/0x410
[ 72.734952][ T5830] do_syscall_64+0xf6/0x210
[ 72.739452][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.745350][ T5830]
[ 72.747678][ T5830] Freed by task 5829:
[ 72.751660][ T5830] kasan_save_track+0x3e/0x80
[ 72.756345][ T5830] kasan_save_free_info+0x46/0x50
[ 72.761368][ T5830] __kasan_slab_free+0x62/0x70
[ 72.766208][ T5830] kfree+0x193/0x440
[ 72.770087][ T5830] evict+0x501/0x9c0
[ 72.773969][ T5830] __dentry_kill+0x209/0x660
[ 72.778554][ T5830] shrink_kill+0xa9/0x2c0
[ 72.782880][ T5830] shrink_dentry_list+0x2e0/0x5e0
[ 72.787981][ T5830] shrink_dcache_parent+0xa1/0x2c0
[ 72.793082][ T5830] do_one_tree+0x23/0xe0
[ 72.797319][ T5830] shrink_dcache_for_umount+0xa0/0x170
[ 72.802795][ T5830] generic_shutdown_super+0x67/0x2c0
[ 72.808067][ T5830] kill_litter_super+0x76/0xb0
[ 72.812826][ T5830] binderfs_kill_super+0x44/0x90
[ 72.817849][ T5830] deactivate_locked_super+0xb9/0x130
[ 72.823239][ T5830] cleanup_mnt+0x425/0x4c0
[ 72.827993][ T5830] task_work_run+0x1d1/0x260
[ 72.832580][ T5830] do_exit+0x8d6/0x2550
[ 72.836726][ T5830] do_group_exit+0x21c/0x2d0
[ 72.841403][ T5830] get_signal+0x125e/0x1310
[ 72.845908][ T5830] arch_do_signal_or_restart+0x95/0x780
[ 72.851526][ T5830] syscall_exit_to_user_mode+0x8b/0x120
[ 72.857096][ T5830] do_syscall_64+0x103/0x210
[ 72.861675][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.867554][ T5830]
[ 72.869880][ T5830] The buggy address belongs to the object at ffff888142bab800
[ 72.869880][ T5830] which belongs to the cache kmalloc-512 of size 512
[ 72.883931][ T5830] The buggy address is located 8 bytes inside of
[ 72.883931][ T5830] freed 512-byte region [ffff888142bab800, ffff888142baba00)
[ 72.897573][ T5830]
[ 72.899884][ T5830] The buggy address belongs to the physical page:
[ 72.906296][ T5830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142ba8
[ 72.915482][ T5830] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 72.923967][ T5830] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[ 72.931704][ T5830] page_type: f5(slab)
[ 72.935673][ T5830] raw: 057ff00000000040 ffff88801a041c80 ffffea00052d2c00 dead000000000002
[ 72.944508][ T5830] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 72.953083][ T5830] head: 057ff00000000040 ffff88801a041c80 ffffea00052d2c00 dead000000000002
[ 72.961824][ T5830] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 72.970482][ T5830] head: 057ff00000000002 ffffea00050aea01 00000000ffffffff 00000000ffffffff
[ 72.979137][ T5830] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 72.987875][ T5830] page dumped because: kasan: bad access detected
[ 72.994299][ T5830] page_owner tracks the page as allocated
[ 73.000262][ T5830] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6904634222, free_ts 0
[ 73.019962][ T5830] post_alloc_hook+0x1d8/0x230
[ 73.024719][ T5830] get_page_from_freelist+0x21ce/0x22b0
[ 73.030256][ T5830] __alloc_frozen_pages_noprof+0x181/0x370
[ 73.036141][ T5830] alloc_pages_mpol+0x232/0x4a0
[ 73.040979][ T5830] allocate_slab+0x8a/0x3b0
[ 73.045472][ T5830] ___slab_alloc+0xbfc/0x1480
[ 73.050138][ T5830] __kmalloc_cache_noprof+0x296/0x3d0
[ 73.055519][ T5830] efi_partition+0x31e/0x3430
[ 73.060185][ T5830] bdev_disk_changed+0x75c/0x14b0
[ 73.065195][ T5830] blkdev_get_whole+0x380/0x510
[ 73.070048][ T5830] bdev_open+0x31e/0xd30
[ 73.074362][ T5830] bdev_file_open_by_dev+0x1be/0x240
[ 73.079634][ T5830] disk_scan_partitions+0x1c1/0x2c0
[ 73.084908][ T5830] add_disk_fwnode+0xdbc/0x10e0
[ 73.089774][ T5830] brd_alloc+0x53b/0x740
[ 73.094001][ T5830] brd_init+0x122/0x1b0
[ 73.098142][ T5830] page_owner free stack trace missing
[ 73.103559][ T5830]
[ 73.105869][ T5830] Memory state around the buggy address:
[ 73.111487][ T5830] ffff888142bab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 73.119626][ T5830] ffff888142bab780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 73.127759][ T5830] >ffff888142bab800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 73.135803][ T5830] ^
[ 73.140176][ T5830] ffff888142bab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 73.148567][ T5830] ffff888142bab900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 73.156784][ T5830] ==================================================================
[ 73.287473][ T5830] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 73.294801][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full)
[ 73.306980][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[ 73.317149][ T5830] Call Trace:
[ 73.320467][ T5830]
[ 73.323417][ T5830] dump_stack_lvl+0x99/0x250
[ 73.328034][ T5830] ? __asan_memcpy+0x40/0x70
[ 73.332643][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10
[ 73.337843][ T5830] ? __pfx__printk+0x10/0x10
[ 73.342517][ T5830] panic+0x2db/0x790
[ 73.346410][ T5830] ? __pfx_panic+0x10/0x10
[ 73.350826][ T5830] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 73.357095][ T5830] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 73.363446][ T5830] ? print_memory_metadata+0x314/0x400
[ 73.368902][ T5830] ? binderfs_evict_inode+0x1de/0x2d0
[ 73.374351][ T5830] check_panic_on_warn+0x89/0xb0
[ 73.379283][ T5830] ? binderfs_evict_inode+0x1de/0x2d0
[ 73.384821][ T5830] end_report+0x78/0x160
[ 73.389072][ T5830] kasan_report+0x129/0x150
[ 73.393585][ T5830] ? binderfs_evict_inode+0x1de/0x2d0
[ 73.398989][ T5830] binderfs_evict_inode+0x1de/0x2d0
[ 73.404177][ T5830] ? __pfx_binderfs_evict_inode+0x10/0x10
[ 73.409890][ T5830] evict+0x501/0x9c0
[ 73.413990][ T5830] ? __pfx_evict+0x10/0x10
[ 73.418391][ T5830] ? do_raw_spin_unlock+0x122/0x240
[ 73.423585][ T5830] ? _raw_spin_unlock+0x28/0x50
[ 73.428420][ T5830] ? iput+0x6d8/0x9d0
[ 73.432433][ T5830] __dentry_kill+0x209/0x660
[ 73.437011][ T5830] ? shrink_kill+0x8d/0x2c0
[ 73.441502][ T5830] shrink_kill+0xa9/0x2c0
[ 73.445824][ T5830] shrink_dentry_list+0x2e0/0x5e0
[ 73.450840][ T5830] shrink_dcache_parent+0xa1/0x2c0
[ 73.455947][ T5830] ? __lock_acquire+0xaac/0xd20
[ 73.460788][ T5830] ? __pfx_shrink_dcache_parent+0x10/0x10
[ 73.466501][ T5830] do_one_tree+0x23/0xe0
[ 73.470752][ T5830] shrink_dcache_for_umount+0xa0/0x170
[ 73.476203][ T5830] generic_shutdown_super+0x67/0x2c0
[ 73.481474][ T5830] kill_litter_super+0x76/0xb0
[ 73.486224][ T5830] binderfs_kill_super+0x44/0x90
[ 73.491152][ T5830] deactivate_locked_super+0xb9/0x130
[ 73.496508][ T5830] cleanup_mnt+0x425/0x4c0
[ 73.500914][ T5830] task_work_run+0x1d1/0x260
[ 73.505507][ T5830] ? __pfx_task_work_run+0x10/0x10
[ 73.510694][ T5830] ? kmem_cache_free+0x192/0x3f0
[ 73.515622][ T5830] do_exit+0x8d6/0x2550
[ 73.519857][ T5830] ? do_raw_spin_lock+0x121/0x290
[ 73.524870][ T5830] ? __pfx_do_exit+0x10/0x10
[ 73.529448][ T5830] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 73.534819][ T5830] do_group_exit+0x21c/0x2d0
[ 73.539406][ T5830] ? lockdep_hardirqs_on+0x9c/0x150
[ 73.544604][ T5830] get_signal+0x125e/0x1310
[ 73.549109][ T5830] arch_do_signal_or_restart+0x95/0x780
[ 73.554640][ T5830] ? kmem_cache_free+0x301/0x3f0
[ 73.559567][ T5830] ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 73.565709][ T5830] ? local_irq_enable_exit_to_user+0x5/0x10
[ 73.571771][ T5830] syscall_exit_to_user_mode+0x8b/0x120
[ 73.577311][ T5830] do_syscall_64+0x103/0x210
[ 73.581908][ T5830] ? clear_bhb_loop+0x45/0xa0
[ 73.586586][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 73.592555][ T5830] RIP: 0033:0x7fa5ebf8d33d
[ 73.596957][ T5830] Code: Unable to access opcode bytes at 0x7fa5ebf8d313.
[ 73.604134][ T5830] RSP: 002b:00007fa5ec2dfda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 73.612537][ T5830] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fa5ebf8d33d
[ 73.620521][ T5830] RDX: 0000000000000030 RSI: 00007fa5ec2dfe40 RDI: 00000000000000f9
[ 73.628568][ T5830] RBP: 00007fa5ec2dfdec R08: 000000000000000a R09: 00007fa5ec2dfaf7
[ 73.636541][ T5830] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b
[ 73.644724][ T5830] R13: 00000000000927c0 R14: 0000000000011a1b R15: 00007fa5ec2dfe40
[ 73.653084][ T5830]
[ 73.656370][ T5830] Kernel Offset: disabled
[ 73.667119][ T5830] Rebooting in 86400 seconds..