last executing test programs:
763.826643ms ago: executing program 2 (id=19):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats', 0x0, 0x0)
712.833583ms ago: executing program 2 (id=21):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/attrs', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/attrs', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/attrs', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/attrs', 0x800, 0x0)
663.898782ms ago: executing program 2 (id=28):
fchown(0xffffffffffffffff, 0x0, 0x0)
663.402282ms ago: executing program 2 (id=31):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0)
642.911892ms ago: executing program 2 (id=37):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun', 0x800, 0x0)
599.626852ms ago: executing program 2 (id=41):
sync()
418.866011ms ago: executing program 0 (id=58):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net', 0x2, 0x0)
363.883481ms ago: executing program 4 (id=60):
futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000))
363.694141ms ago: executing program 1 (id=61):
sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0)
363.529291ms ago: executing program 0 (id=63):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0)
363.303121ms ago: executing program 4 (id=65):
syncfs(0xffffffffffffffff)
363.175301ms ago: executing program 1 (id=66):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status', 0x0, 0x0)
349.726051ms ago: executing program 4 (id=68):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
345.976551ms ago: executing program 1 (id=69):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control', 0x800, 0x0)
303.946971ms ago: executing program 0 (id=70):
fchmodat(0xffffffffffffffff, &(0x7f0000000000), 0x0)
303.844471ms ago: executing program 1 (id=71):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock', 0x2, 0x0)
303.773201ms ago: executing program 0 (id=72):
faccessat(0xffffffffffffffff, &(0x7f0000000000), 0x0)
303.724111ms ago: executing program 4 (id=73):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse', 0x2, 0x0)
298.138221ms ago: executing program 1 (id=75):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37', 0x2, 0x0)
296.534081ms ago: executing program 0 (id=76):
chroot(&(0x7f0000000000))
248.004461ms ago: executing program 4 (id=78):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/schemes', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/schemes', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/schemes', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/schemes', 0x800, 0x0)
247.896701ms ago: executing program 1 (id=79):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dma_heap/system', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dma_heap/system', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dma_heap/system', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dma_heap/system', 0x800, 0x0)
247.741291ms ago: executing program 4 (id=81):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0)
247.694471ms ago: executing program 0 (id=82):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0)
116.05181ms ago: executing program 3 (id=88):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio', 0x800, 0x0)
84.99107ms ago: executing program 3 (id=89):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0', 0x800, 0x0)
54.68274ms ago: executing program 3 (id=90):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0', 0x800, 0x0)
43.77602ms ago: executing program 3 (id=91):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu', 0x800, 0x0)
23.80013ms ago: executing program 3 (id=92):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max', 0x2, 0x0)
0s ago: executing program 3 (id=93):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput', 0x800, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
[ 59.596668][ T5806] cgroup: Unknown subsys name 'net'
[ 59.738280][ T5806] cgroup: Unknown subsys name 'cpuset'
[ 59.746416][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 61.069211][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 68.536463][ T5916] ==================================================================
[ 68.544576][ T5916] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 68.552342][ T5916] Write of size 8 at addr ffff888033a95408 by task syz-executor/5916
[ 68.560421][ T5916]
[ 68.562772][ T5916] CPU: 1 UID: 0 PID: 5916 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 68.562791][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 68.562805][ T5916] Call Trace:
[ 68.562811][ T5916]
[ 68.562817][ T5916] dump_stack_lvl+0x241/0x360
[ 68.562838][ T5916] ? __pfx_dump_stack_lvl+0x10/0x10
[ 68.562852][ T5916] ? __pfx__printk+0x10/0x10
[ 68.562871][ T5916] ? _printk+0xd5/0x120
[ 68.562888][ T5916] ? __virt_addr_valid+0x183/0x530
[ 68.562906][ T5916] ? __virt_addr_valid+0x183/0x530
[ 68.562923][ T5916] print_report+0x169/0x550
[ 68.562939][ T5916] ? __virt_addr_valid+0x183/0x530
[ 68.562957][ T5916] ? __virt_addr_valid+0x183/0x530
[ 68.562975][ T5916] ? __virt_addr_valid+0x45f/0x530
[ 68.562991][ T5916] ? __phys_addr+0xba/0x170
[ 68.563010][ T5916] ? binder_add_device+0x5f/0xa0
[ 68.563028][ T5916] kasan_report+0x143/0x180
[ 68.563045][ T5916] ? binder_add_device+0x5f/0xa0
[ 68.563066][ T5916] binder_add_device+0x5f/0xa0
[ 68.563084][ T5916] binderfs_binder_device_create+0x7bf/0x9c0
[ 68.563104][ T5916] binderfs_fill_super+0x944/0xd90
[ 68.563124][ T5916] ? __pfx_binderfs_fill_super+0x10/0x10
[ 68.563157][ T5916] ? shrinker_register+0x160/0x230
[ 68.563180][ T5916] ? sget_fc+0x909/0x9c0
[ 68.563200][ T5916] ? __pfx_set_anon_super_fc+0x10/0x10
[ 68.563215][ T5916] ? __pfx_binderfs_fill_super+0x10/0x10
[ 68.563232][ T5916] get_tree_nodev+0xb7/0x140
[ 68.563247][ T5916] vfs_get_tree+0x90/0x2b0
[ 68.563264][ T5916] do_new_mount+0x2be/0xb40
[ 68.563284][ T5916] ? __pfx_do_new_mount+0x10/0x10
[ 68.563305][ T5916] __se_sys_mount+0x2d6/0x3c0
[ 68.563324][ T5916] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 68.563344][ T5916] ? __pfx___se_sys_mount+0x10/0x10
[ 68.563362][ T5916] ? do_syscall_64+0x100/0x230
[ 68.563384][ T5916] ? __x64_sys_mount+0x20/0xc0
[ 68.563401][ T5916] do_syscall_64+0xf3/0x230
[ 68.563421][ T5916] ? clear_bhb_loop+0x35/0x90
[ 68.563441][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.563460][ T5916] RIP: 0033:0x7fe887d8e54a
[ 68.563481][ T5916] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.563495][ T5916] RSP: 002b:00007fe8880cff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 68.563511][ T5916] RAX: ffffffffffffffda RBX: 00007fe887e0e663 RCX: 00007fe887d8e54a
[ 68.563523][ T5916] RDX: 00007fe887e1dda7 RSI: 00007fe887e0e663 RDI: 00007fe887e1dda7
[ 68.563533][ T5916] RBP: 00007fe887e0e8ac R08: 0000000000000000 R09: 0000000000000100
[ 68.563544][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe887deb1a8
[ 68.563553][ T5916] R13: 00007fe887deb180 R14: 0000000000000009 R15: 0000000000000000
[ 68.563568][ T5916]
[ 68.563574][ T5916]
[ 68.690666][ T5806] syz-executor (5806) used greatest stack depth: 18768 bytes left
[ 68.694695][ T5916] Allocated by task 5820:
[ 68.694711][ T5916] kasan_save_track+0x3f/0x80
[ 68.694732][ T5916] __kasan_kmalloc+0x98/0xb0
[ 68.694745][ T5916] __kmalloc_cache_noprof+0x243/0x390
[ 68.694762][ T5916] binderfs_binder_device_create+0x16c/0x9c0
[ 68.869941][ T5916] binderfs_fill_super+0x944/0xd90
[ 68.875069][ T5916] get_tree_nodev+0xb7/0x140
[ 68.879670][ T5916] vfs_get_tree+0x90/0x2b0
[ 68.884167][ T5916] do_new_mount+0x2be/0xb40
[ 68.888745][ T5916] __se_sys_mount+0x2d6/0x3c0
[ 68.893413][ T5916] do_syscall_64+0xf3/0x230
[ 68.897909][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 68.903795][ T5916]
[ 68.906107][ T5916] Freed by task 5820:
[ 68.910166][ T5916] kasan_save_track+0x3f/0x80
[ 68.914831][ T5916] kasan_save_free_info+0x40/0x50
[ 68.919870][ T5916] __kasan_slab_free+0x59/0x70
[ 68.924636][ T5916] kfree+0x196/0x430
[ 68.928530][ T5916] evict+0x4e8/0x9a0
[ 68.932445][ T5916] __dentry_kill+0x20d/0x630
[ 68.937223][ T5916] shrink_kill+0xa9/0x2c0
[ 68.941555][ T5916] shrink_dentry_list+0x2c0/0x5b0
[ 68.946576][ T5916] shrink_dcache_parent+0xcb/0x3b0
[ 68.951680][ T5916] do_one_tree+0x23/0xe0
[ 68.955915][ T5916] shrink_dcache_for_umount+0xb4/0x180
[ 68.961363][ T5916] generic_shutdown_super+0x6a/0x2d0
[ 68.966638][ T5916] kill_litter_super+0x76/0xb0
[ 68.971388][ T5916] binderfs_kill_super+0x44/0x90
[ 68.976314][ T5916] deactivate_locked_super+0xc4/0x130
[ 68.981687][ T5916] cleanup_mnt+0x41f/0x4b0
[ 68.986094][ T5916] task_work_run+0x24f/0x310
[ 68.990676][ T5916] do_exit+0xa2a/0x28e0
[ 68.994821][ T5916] do_group_exit+0x207/0x2c0
[ 68.999403][ T5916] get_signal+0x16b2/0x1750
[ 69.003900][ T5916] arch_do_signal_or_restart+0x96/0x860
[ 69.009436][ T5916] syscall_exit_to_user_mode+0xce/0x340
[ 69.014975][ T5916] do_syscall_64+0x100/0x230
[ 69.019558][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.025450][ T5916]
[ 69.027769][ T5916] The buggy address belongs to the object at ffff888033a95400
[ 69.027769][ T5916] which belongs to the cache kmalloc-512 of size 512
[ 69.041807][ T5916] The buggy address is located 8 bytes inside of
[ 69.041807][ T5916] freed 512-byte region [ffff888033a95400, ffff888033a95600)
[ 69.055418][ T5916]
[ 69.057736][ T5916] The buggy address belongs to the physical page:
[ 69.064167][ T5916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33a94
[ 69.072914][ T5916] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 69.081407][ T5916] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 69.089549][ T5916] page_type: f5(slab)
[ 69.093525][ T5916] raw: 00fff00000000040 ffff88801ac41c80 0000000000000000 0000000000000001
[ 69.102126][ T5916] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 69.110701][ T5916] head: 00fff00000000040 ffff88801ac41c80 0000000000000000 0000000000000001
[ 69.119450][ T5916] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 69.128111][ T5916] head: 00fff00000000002 ffffea0000cea501 ffffffffffffffff 0000000000000000
[ 69.136769][ T5916] head: ffff888000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 69.145422][ T5916] page dumped because: kasan: bad access detected
[ 69.151852][ T5916] page_owner tracks the page as allocated
[ 69.157578][ T5916] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (udevd), ts 34206069323, free_ts 31765173143
[ 69.178339][ T5916] post_alloc_hook+0x1f4/0x240
[ 69.183109][ T5916] get_page_from_freelist+0x3651/0x37a0
[ 69.188648][ T5916] __alloc_frozen_pages_noprof+0x292/0x710
[ 69.194459][ T5916] alloc_pages_mpol+0x311/0x660
[ 69.199301][ T5916] allocate_slab+0x8f/0x3a0
[ 69.203788][ T5916] ___slab_alloc+0xc27/0x14a0
[ 69.208460][ T5916] __slab_alloc+0x58/0xa0
[ 69.212780][ T5916] __kmalloc_cache_noprof+0x27b/0x390
[ 69.218142][ T5916] kernfs_fop_open+0x3e0/0xd10
[ 69.222908][ T5916] do_dentry_open+0xdec/0x1960
[ 69.227663][ T5916] vfs_open+0x3b/0x370
[ 69.231722][ T5916] path_openat+0x2c74/0x3580
[ 69.236307][ T5916] do_filp_open+0x27f/0x4e0
[ 69.240802][ T5916] do_sys_openat2+0x13e/0x1d0
[ 69.245472][ T5916] __x64_sys_openat+0x247/0x2a0
[ 69.250316][ T5916] do_syscall_64+0xf3/0x230
[ 69.254818][ T5916] page last free pid 5201 tgid 5201 stack trace:
[ 69.261128][ T5916] free_frozen_pages+0xe04/0x10e0
[ 69.266146][ T5916] __slab_free+0x2c2/0x380
[ 69.270550][ T5916] qlist_free_all+0x9a/0x140
[ 69.275154][ T5916] kasan_quarantine_reduce+0x14f/0x170
[ 69.280602][ T5916] __kasan_slab_alloc+0x23/0x80
[ 69.285441][ T5916] kmem_cache_alloc_node_noprof+0x1d9/0x380
[ 69.291338][ T5916] dup_task_struct+0x57/0x8c0
[ 69.296009][ T5916] copy_process+0x5d1/0x3d50
[ 69.300588][ T5916] kernel_clone+0x223/0x870
[ 69.305119][ T5916] __x64_sys_clone+0x258/0x2a0
[ 69.309875][ T5916] do_syscall_64+0xf3/0x230
[ 69.314374][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.320261][ T5916]
[ 69.322572][ T5916] Memory state around the buggy address:
[ 69.328274][ T5916] ffff888033a95300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.336327][ T5916] ffff888033a95380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.344380][ T5916] >ffff888033a95400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.352427][ T5916] ^
[ 69.356739][ T5916] ffff888033a95480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.364787][ T5916] ffff888033a95500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.372830][ T5916] ==================================================================
[ 69.472326][ T5916] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 69.479565][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 69.490081][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 69.500152][ T5916] Call Trace:
[ 69.503449][ T5916]
[ 69.506397][ T5916] dump_stack_lvl+0x241/0x360
[ 69.511098][ T5916] ? __pfx_dump_stack_lvl+0x10/0x10
[ 69.516319][ T5916] ? __pfx__printk+0x10/0x10
[ 69.520939][ T5916] ? preempt_schedule+0xe1/0xf0
[ 69.525816][ T5916] ? vscnprintf+0x5d/0x90
[ 69.530175][ T5916] panic+0x349/0x880
[ 69.534097][ T5916] ? check_panic_on_warn+0x21/0xb0
[ 69.539230][ T5916] ? __pfx_panic+0x10/0x10
[ 69.543674][ T5916] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 69.549678][ T5916] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 69.556033][ T5916] ? print_report+0x502/0x550
[ 69.560748][ T5916] check_panic_on_warn+0x86/0xb0
[ 69.565709][ T5916] ? binder_add_device+0x5f/0xa0
[ 69.570675][ T5916] end_report+0x77/0x160
[ 69.574938][ T5916] kasan_report+0x154/0x180
[ 69.579473][ T5916] ? binder_add_device+0x5f/0xa0
[ 69.584437][ T5916] binder_add_device+0x5f/0xa0
[ 69.589229][ T5916] binderfs_binder_device_create+0x7bf/0x9c0
[ 69.595329][ T5916] binderfs_fill_super+0x944/0xd90
[ 69.600472][ T5916] ? __pfx_binderfs_fill_super+0x10/0x10
[ 69.606136][ T5916] ? shrinker_register+0x160/0x230
[ 69.611363][ T5916] ? sget_fc+0x909/0x9c0
[ 69.615633][ T5916] ? __pfx_set_anon_super_fc+0x10/0x10
[ 69.621109][ T5916] ? __pfx_binderfs_fill_super+0x10/0x10
[ 69.626771][ T5916] get_tree_nodev+0xb7/0x140
[ 69.631383][ T5916] vfs_get_tree+0x90/0x2b0
[ 69.635820][ T5916] do_new_mount+0x2be/0xb40
[ 69.640356][ T5916] ? __pfx_do_new_mount+0x10/0x10
[ 69.645409][ T5916] __se_sys_mount+0x2d6/0x3c0
[ 69.650134][ T5916] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 69.656320][ T5916] ? __pfx___se_sys_mount+0x10/0x10
[ 69.661544][ T5916] ? do_syscall_64+0x100/0x230
[ 69.666344][ T5916] ? __x64_sys_mount+0x20/0xc0
[ 69.671135][ T5916] do_syscall_64+0xf3/0x230
[ 69.675665][ T5916] ? clear_bhb_loop+0x35/0x90
[ 69.680377][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 69.686345][ T5916] RIP: 0033:0x7fe887d8e54a
[ 69.690780][ T5916] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 69.710491][ T5916] RSP: 002b:00007fe8880cff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 69.718935][ T5916] RAX: ffffffffffffffda RBX: 00007fe887e0e663 RCX: 00007fe887d8e54a
[ 69.726932][ T5916] RDX: 00007fe887e1dda7 RSI: 00007fe887e0e663 RDI: 00007fe887e1dda7
[ 69.734960][ T5916] RBP: 00007fe887e0e8ac R08: 0000000000000000 R09: 0000000000000100
[ 69.742920][ T5916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe887deb1a8
[ 69.750882][ T5916] R13: 00007fe887deb180 R14: 0000000000000009 R15: 0000000000000000
[ 69.758856][ T5916]
[ 69.762162][ T5916] Kernel Offset: disabled
[ 69.766486][ T5916] Rebooting in 86400 seconds..