last executing test programs:
511.491731ms ago: executing program 1 (id=81):
socket$netlink(0x10, 0x3, 0x0)
453.953376ms ago: executing program 3 (id=86):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule', 0x2, 0x0)
453.771096ms ago: executing program 4 (id=87):
clock_gettime(0x0, &(0x7f0000000000))
453.413839ms ago: executing program 1 (id=88):
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0)
453.056425ms ago: executing program 2 (id=90):
syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$hidraw(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$hidraw(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$hidraw(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$hidraw(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$hidraw(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$hidraw(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$hidraw(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$hidraw(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$hidraw(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$hidraw(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$hidraw(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$hidraw(&(0x7f0000000500), 0x4, 0x800)
452.938857ms ago: executing program 1 (id=91):
fstatfs(0xffffffffffffffff, &(0x7f0000000000))
452.856241ms ago: executing program 3 (id=92):
sigaltstack(&(0x7f0000000000), 0x0)
404.116575ms ago: executing program 2 (id=93):
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000000))
403.602473ms ago: executing program 4 (id=94):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/rm_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/rm_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/rm_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/rm_contexts', 0x800, 0x0)
403.429783ms ago: executing program 3 (id=95):
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)
403.29118ms ago: executing program 1 (id=96):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom', 0x800, 0x0)
403.213795ms ago: executing program 2 (id=97):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0', 0x800, 0x0)
403.158752ms ago: executing program 3 (id=98):
munmap(0x0, 0x0)
403.094503ms ago: executing program 4 (id=99):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sr0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sr0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sr0', 0x800, 0x0)
392.325683ms ago: executing program 3 (id=100):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0', 0x2, 0x0)
384.161057ms ago: executing program 2 (id=101):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/btf/vmlinux', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/btf/vmlinux', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/btf/vmlinux', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/btf/vmlinux', 0x800, 0x0)
340.087606ms ago: executing program 1 (id=102):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot', 0x800, 0x0)
339.844491ms ago: executing program 4 (id=103):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/random', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/random', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/random', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/random', 0x800, 0x0)
339.786571ms ago: executing program 4 (id=104):
statfs(&(0x7f0000000000), &(0x7f0000000000))
339.643741ms ago: executing program 2 (id=105):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0)
339.589955ms ago: executing program 3 (id=106):
migrate_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000))
339.531696ms ago: executing program 4 (id=107):
socket$inet_udp(0x2, 0x2, 0x0)
329.322189ms ago: executing program 2 (id=108):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/virtual_nci', 0x2, 0x0)
326.431143ms ago: executing program 1 (id=109):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec', 0x2, 0x0)
146.047626ms ago: executing program 0 (id=114):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0)
137.800358ms ago: executing program 0 (id=115):
fdatasync(0xffffffffffffffff)
85.547884ms ago: executing program 0 (id=116):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0)
98.33µs ago: executing program 0 (id=117):
socket$can_raw(0x1d, 0x3, 0x1)
63.85µs ago: executing program 0 (id=118):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status', 0x0, 0x0)
0s ago: executing program 0 (id=119):
syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$hiddev(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$hiddev(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$hiddev(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$hiddev(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$hiddev(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$hiddev(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$hiddev(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$hiddev(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$hiddev(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$hiddev(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$hiddev(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$hiddev(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$hiddev(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$hiddev(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$hiddev(&(0x7f0000000500), 0x4, 0x800)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
[ 57.309584][ T5825] cgroup: Unknown subsys name 'net'
[ 57.459876][ T5825] cgroup: Unknown subsys name 'cpuset'
[ 57.468281][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 58.778523][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 61.828967][ T5961] ==================================================================
[ 61.829003][ T5961] BUG: KASAN: slab-use-after-free in binder
** replaying previous printk message **
[ 61.829003][ T5961] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 61.829054][ T5961] Write of size 8 at addr ffff888033ab5408 by task syz-executor/5961
[ 61.829078][ T5961]
[ 61.829108][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz-executor Not tainted 6.13.0-next-20250121-syzkaller #0
[ 61.829126][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 61.829136][ T5961] Call Trace:
[ 61.829141][ T5961]
[ 61.829148][ T5961] dump_stack_lvl+0x241/0x360
[ 61.829168][ T5961] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.829185][ T5961] ? __pfx__printk+0x10/0x10
[ 61.829201][ T5961] ? _printk+0xd5/0x120
[ 61.829215][ T5961] ? __virt_addr_valid+0x183/0x530
[ 61.829238][ T5961] ? __virt_addr_valid+0x183/0x530
[ 61.829261][ T5961] print_report+0x169/0x550
[ 61.829284][ T5961] ? __virt_addr_valid+0x183/0x530
[ 61.829306][ T5961] ? __virt_addr_valid+0x183/0x530
[ 61.829327][ T5961] ? __virt_addr_valid+0x45f/0x530
[ 61.829349][ T5961] ? __phys_addr+0xba/0x170
[ 61.829377][ T5961] ? binder_add_device+0x5f/0xa0
[ 61.829399][ T5961] kasan_report+0x143/0x180
[ 61.829422][ T5961] ? binder_add_device+0x5f/0xa0
[ 61.829445][ T5961] binder_add_device+0x5f/0xa0
[ 61.829467][ T5961] binderfs_binder_device_create+0x7bf/0x9c0
[ 61.829492][ T5961] binderfs_fill_super+0x944/0xd90
[ 61.829516][ T5961] ? __pfx_binderfs_fill_super+0x10/0x10
[ 61.829546][ T5961] ? shrinker_register+0x160/0x230
[ 61.829567][ T5961] ? sget_fc+0x909/0x9c0
[ 61.829586][ T5961] ? __pfx_set_anon_super_fc+0x10/0x10
[ 61.829603][ T5961] ? __pfx_binderfs_fill_super+0x10/0x10
[ 61.829620][ T5961] get_tree_nodev+0xb7/0x140
[ 61.829651][ T5961] vfs_get_tree+0x90/0x2b0
[ 61.829672][ T5961] do_new_mount+0x2be/0xb40
[ 61.829689][ T5961] ? __pfx_do_new_mount+0x10/0x10
[ 61.829708][ T5961] __se_sys_mount+0x2d6/0x3c0
[ 61.829723][ T5961] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 61.829745][ T5961] ? __pfx___se_sys_mount+0x10/0x10
[ 61.829762][ T5961] ? do_syscall_64+0x100/0x230
[ 61.829780][ T5961] ? __x64_sys_mount+0x20/0xc0
[ 61.829796][ T5961] do_syscall_64+0xf3/0x230
[ 61.829813][ T5961] ? clear_bhb_loop+0x35/0x90
[ 61.829836][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.829861][ T5961] RIP: 0033:0x7f04d93874ca
[ 61.829884][ T5961] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 61.829897][ T5961] RSP: 002b:00007fff8a371ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 61.829916][ T5961] RAX: ffffffffffffffda RBX: 00007f04d9401ecb RCX: 00007f04d93874ca
[ 61.829928][ T5961] RDX: 00007f04d940ec27 RSI: 00007f04d9401ecb RDI: 00007f04d940ec27
[ 61.829940][ T5961] RBP: 00007f04d94020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 61.829950][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d93e41c8
[ 61.829961][ T5961] R13: 00007f04d93e41a8 R14: 0000000000000009 R15: 0000000000000000
[ 61.829977][ T5961]
[ 61.829983][ T5961]
[ 61.830242][ T5961] Allocated by task 5838:
[ 61.830257][ T5961] kasan_save_track+0x3f/0x80
[ 61.830280][ T5961] __kasan_kmalloc+0x98/0xb0
[ 61.830302][ T5961] __kmalloc_cache_noprof+0x243/0x390
[ 61.830322][ T5961] binderfs_binder_device_create+0x16c/0x9c0
[ 61.830346][ T5961] binderfs_fill_super+0x944/0xd90
[ 61.830369][ T5961] get_tree_nodev+0xb7/0x140
[ 61.830393][ T5961] vfs_get_tree+0x90/0x2b0
[ 61.830419][ T5961] do_new_mount+0x2be/0xb40
[ 61.830437][ T5961] __se_sys_mount+0x2d6/0x3c0
[ 61.830456][ T5961] do_syscall_64+0xf3/0x230
[ 61.830475][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.830498][ T5961]
[ 61.830510][ T5961] Freed by task 5838:
[ 61.830524][ T5961] kasan_save_track+0x3f/0x80
[ 61.830548][ T5961] kasan_save_free_info+0x40/0x50
[ 61.830572][ T5961] __kasan_slab_free+0x59/0x70
[ 61.830599][ T5961] kfree+0x196/0x430
[ 61.830628][ T5961] evict+0x4e8/0x9a0
[ 61.830652][ T5961] __dentry_kill+0x20d/0x630
[ 61.830674][ T5961] shrink_kill+0xa9/0x2c0
[ 61.830697][ T5961] shrink_dentry_list+0x2c0/0x5b0
[ 61.830721][ T5961] shrink_dcache_parent+0xcb/0x3b0
[ 61.830746][ T5961] do_one_tree+0x23/0xe0
[ 61.830770][ T5961] shrink_dcache_for_umount+0xb4/0x180
[ 61.830797][ T5961] generic_shutdown_super+0x6a/0x2d0
[ 61.830825][ T5961] kill_litter_super+0x76/0xb0
[ 61.830852][ T5961] binderfs_kill_super+0x44/0x90
[ 61.830879][ T5961] deactivate_locked_super+0xc4/0x130
[ 61.830904][ T5961] cleanup_mnt+0x41f/0x4b0
[ 61.830927][ T5961] task_work_run+0x24f/0x310
[ 61.830955][ T5961] do_exit+0xa2a/0x28e0
[ 61.830980][ T5961] do_group_exit+0x207/0x2c0
[ 61.831004][ T5961] get_signal+0x16b2/0x1750
[ 61.831028][ T5961] arch_do_signal_or_restart+0x96/0x860
[ 61.831056][ T5961] syscall_exit_to_user_mode+0xce/0x340
[ 61.831082][ T5961] do_syscall_64+0x100/0x230
[ 61.831106][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 61.831136][ T5961]
[ 61.831150][ T5961] The buggy address belongs to the object at ffff888033ab5400
[ 61.831150][ T5961] which belongs to the cache kmalloc-512 of size 512
[ 61.831182][ T5961] The buggy address is located 8 bytes inside of
[ 61.831182][ T5961] freed 512-byte region [ffff888033ab5400, ffff888033ab5600)
[ 61.831209][ T5961]
[ 61.831223][ T5961] The buggy address belongs to the physical page:
[ 61.831241][ T5961] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33ab4
[ 61.831280][ T5961] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 61.831304][ T5961] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 61.831332][ T5961] page_type: f5(slab)
[ 61.831361][ T5961] raw: 00fff00000000040 ffff88801ac41c80 ffffea0000ce3c00 0000000000000002
[ 61.831383][ T5961] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 61.831406][ T5961] head: 00fff00000000040 ffff88801ac41c80 ffffea0000ce3c00 0000000000000002
[ 61.831429][ T5961] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 61.831453][ T5961] head: 00fff00000000002 ffffea0000cead01 ffffffffffffffff 0000000000000000
[ 61.831476][ T5961] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 61.831490][ T5961] page dumped because: kasan: bad access detected
[ 61.831507][ T5961] page_owner tracks the page as allocated
[ 61.831519][ T5961] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5506, tgid 5506 (dhcpcd), ts 32526034901, free_ts 28749258620
[ 61.831548][ T5961] post_alloc_hook+0x1f4/0x240
[ 61.831569][ T5961] get_page_from_freelist+0x365c/0x37a0
[ 61.831592][ T5961] __alloc_frozen_pages_noprof+0x292/0x710
[ 61.831614][ T5961] alloc_pages_mpol+0x311/0x660
[ 61.831640][ T5961] allocate_slab+0x8f/0x3a0
[ 61.831663][ T5961] ___slab_alloc+0xc27/0x14a0
[ 61.831683][ T5961] __slab_alloc+0x58/0xa0
[ 61.831704][ T5961] __kmalloc_noprof+0x2e6/0x4c0
[ 61.831723][ T5961] tomoyo_init_log+0x1b3d/0x2050
[ 61.831744][ T5961] tomoyo_supervisor+0x3a4/0x1770
[ 61.831764][ T5961] tomoyo_path_permission+0x243/0x360
[ 61.831789][ T5961] tomoyo_path_perm+0x490/0x740
[ 61.831813][ T5961] security_inode_getattr+0x130/0x330
[ 61.831838][ T5961] vfs_getattr+0x2a/0x3a0
[ 61.831856][ T5961] vfs_fstatat+0xa8/0x130
[ 61.831876][ T5961] __x64_sys_newfstatat+0x117/0x190
[ 61.831901][ T5961] page last free pid 25 tgid 25 stack trace:
[ 61.831919][ T5961] free_frozen_pages+0xe0d/0x10e0
[ 61.831946][ T5961] __tlb_remove_table+0x33c/0x420
[ 61.831977][ T5961] tlb_remove_table_rcu+0x76/0xf0
[ 61.832006][ T5961] rcu_core+0xaaa/0x17a0
[ 61.832036][ T5961] handle_softirqs+0x2d4/0x9b0
[ 61.832061][ T5961] run_ksoftirqd+0xca/0x130
[ 61.832087][ T5961] smpboot_thread_fn+0x544/0xa30
[ 61.832111][ T5961] kthread+0x7a9/0x920
[ 61.832136][ T5961] ret_from_fork+0x4b/0x80
[ 61.832164][ T5961] ret_from_fork_asm+0x1a/0x30
[ 61.832191][ T5961]
[ 61.832205][ T5961] Memory state around the buggy address:
[ 61.832224][ T5961] ffff888033ab5300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.832245][ T5961] ffff888033ab5380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 61.832264][ T5961] >ffff888033ab5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.832280][ T5961] ^
[ 61.832298][ T5961] ffff888033ab5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.832317][ T5961] ffff888033ab5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 61.832334][ T5961] ==================================================================
[ 61.847430][ T5961] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 62.671163][ T5961] CPU: 1 UID: 0 PID: 5961 Comm: syz-executor Not tainted 6.13.0-next-20250121-syzkaller #0
[ 62.681231][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 62.691292][ T5961] Call Trace:
[ 62.694572][ T5961]
[ 62.697495][ T5961] dump_stack_lvl+0x241/0x360
[ 62.702179][ T5961] ? __pfx_dump_stack_lvl+0x10/0x10
[ 62.707368][ T5961] ? __pfx__printk+0x10/0x10
[ 62.711943][ T5961] ? preempt_schedule+0xe1/0xf0
[ 62.716819][ T5961] ? vscnprintf+0x5d/0x90
[ 62.721145][ T5961] panic+0x349/0x880
[ 62.725033][ T5961] ? check_panic_on_warn+0x21/0xb0
[ 62.730154][ T5961] ? __pfx_panic+0x10/0x10
[ 62.734566][ T5961] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 62.740548][ T5961] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 62.746894][ T5961] ? print_report+0x502/0x550
[ 62.751596][ T5961] check_panic_on_warn+0x86/0xb0
[ 62.756540][ T5961] ? binder_add_device+0x5f/0xa0
[ 62.761481][ T5961] end_report+0x77/0x160
[ 62.765721][ T5961] kasan_report+0x154/0x180
[ 62.770228][ T5961] ? binder_add_device+0x5f/0xa0
[ 62.775175][ T5961] binder_add_device+0x5f/0xa0
[ 62.779933][ T5961] binderfs_binder_device_create+0x7bf/0x9c0
[ 62.785911][ T5961] binderfs_fill_super+0x944/0xd90
[ 62.791018][ T5961] ? __pfx_binderfs_fill_super+0x10/0x10
[ 62.796659][ T5961] ? shrinker_register+0x160/0x230
[ 62.801876][ T5961] ? sget_fc+0x909/0x9c0
[ 62.806117][ T5961] ? __pfx_set_anon_super_fc+0x10/0x10
[ 62.811589][ T5961] ? __pfx_binderfs_fill_super+0x10/0x10
[ 62.817248][ T5961] get_tree_nodev+0xb7/0x140
[ 62.821940][ T5961] vfs_get_tree+0x90/0x2b0
[ 62.826358][ T5961] do_new_mount+0x2be/0xb40
[ 62.830861][ T5961] ? __pfx_do_new_mount+0x10/0x10
[ 62.835885][ T5961] __se_sys_mount+0x2d6/0x3c0
[ 62.840551][ T5961] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 62.846533][ T5961] ? __pfx___se_sys_mount+0x10/0x10
[ 62.851727][ T5961] ? do_syscall_64+0x100/0x230
[ 62.856484][ T5961] ? __x64_sys_mount+0x20/0xc0
[ 62.861244][ T5961] do_syscall_64+0xf3/0x230
[ 62.865743][ T5961] ? clear_bhb_loop+0x35/0x90
[ 62.870447][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.876343][ T5961] RIP: 0033:0x7f04d93874ca
[ 62.880748][ T5961] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 62.900363][ T5961] RSP: 002b:00007fff8a371ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 62.908768][ T5961] RAX: ffffffffffffffda RBX: 00007f04d9401ecb RCX: 00007f04d93874ca
[ 62.916731][ T5961] RDX: 00007f04d940ec27 RSI: 00007f04d9401ecb RDI: 00007f04d940ec27
[ 62.924700][ T5961] RBP: 00007f04d94020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 62.932667][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04d93e41c8
[ 62.940629][ T5961] R13: 00007f04d93e41a8 R14: 0000000000000009 R15: 0000000000000000
[ 62.948600][ T5961]
[ 64.081655][ T5961] Shutting down cpus with NMI
[ 64.086821][ T5961] Kernel Offset: disabled
[ 64.091134][ T5961] Rebooting in 86400 seconds..