last executing test programs:
205.789647ms ago: executing program 0 (id=64):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
154.596946ms ago: executing program 0 (id=68):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2', 0x800, 0x0)
153.153581ms ago: executing program 2 (id=73):
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x800)
152.618879ms ago: executing program 4 (id=75):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs', 0x800, 0x0)
152.236909ms ago: executing program 0 (id=76):
set_thread_area(&(0x7f0000000000))
115.349886ms ago: executing program 1 (id=77):
splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
114.9741ms ago: executing program 2 (id=78):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
114.779953ms ago: executing program 4 (id=79):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tlk_device', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tlk_device', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tlk_device', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tlk_device', 0x800, 0x0)
114.122402ms ago: executing program 1 (id=80):
readv(0xffffffffffffffff, &(0x7f0000000000), 0x0)
113.552087ms ago: executing program 3 (id=81):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0', 0x800, 0x0)
113.458826ms ago: executing program 0 (id=82):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/ptrace', 0x2, 0x0)
113.142354ms ago: executing program 1 (id=83):
setpgid(0x0, 0x0)
83.501036ms ago: executing program 0 (id=84):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0)
82.678975ms ago: executing program 2 (id=85):
renameat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000))
82.508993ms ago: executing program 4 (id=86):
pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
82.396512ms ago: executing program 3 (id=87):
pkey_free(0xffffffffffffffff)
82.223459ms ago: executing program 3 (id=88):
sched_setattr(0x0, &(0x7f0000000000), 0x0)
81.979372ms ago: executing program 1 (id=89):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf', 0x2, 0x0)
81.561458ms ago: executing program 2 (id=90):
syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vcsa(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vcsa(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vcsa(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vcsa(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vcsa(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vcsa(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vcsa(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vcsa(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vcsa(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vcsa(&(0x7f0000000500), 0x4, 0x800)
81.116281ms ago: executing program 4 (id=91):
remap_file_pages(0x0, 0x0, 0x0, 0x0, 0x0)
47.621595ms ago: executing program 3 (id=92):
socket$rds(0x15, 0x5, 0x0)
47.325411ms ago: executing program 1 (id=93):
set_robust_list(&(0x7f0000000000), 0x0)
47.148536ms ago: executing program 0 (id=94):
signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
46.949ms ago: executing program 2 (id=95):
lseek(0xffffffffffffffff, 0x0, 0x0)
46.729676ms ago: executing program 3 (id=96):
clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
exit(0x0)
46.572149ms ago: executing program 1 (id=97):
epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
664.198µs ago: executing program 4 (id=98):
process_vm_readv(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0)
390.987µs ago: executing program 3 (id=99):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/change-rule', 0x2, 0x0)
279.364µs ago: executing program 4 (id=100):
msgsnd(0x0, &(0x7f0000000000), 0x0, 0x0)
0s ago: executing program 2 (id=101):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member', 0x2, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts.
[ 45.974938][ T29] audit: type=1400 audit(1738056193.632:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 45.978616][ T5802] cgroup: Unknown subsys name 'net'
[ 45.997731][ T29] audit: type=1400 audit(1738056193.632:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.027028][ T29] audit: type=1400 audit(1738056193.682:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 46.203524][ T5802] cgroup: Unknown subsys name 'cpuset'
[ 46.211638][ T5802] cgroup: Unknown subsys name 'rlimit'
[ 46.394478][ T29] audit: type=1400 audit(1738056194.052:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 46.425122][ T29] audit: type=1400 audit(1738056194.052:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.448294][ T29] audit: type=1400 audit(1738056194.052:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.466921][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 46.469382][ T29] audit: type=1400 audit(1738056194.052:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 46.497766][ T29] audit: type=1400 audit(1738056194.052:95): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 46.525003][ T29] audit: type=1400 audit(1738056194.052:96): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 46.548367][ T29] audit: type=1400 audit(1738056194.082:97): avc: denied { read } for pid=5485 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 47.366267][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 49.794280][ T5914] mmap: syz.4.91 (5914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 50.152469][ T5931] ==================================================================
[ 50.160566][ T5931] BUG: KASAN: slab-use-after-free in binder_add_device+0xa4/0xb0
[ 50.168299][ T5931] Write of size 8 at addr ffff888030dec008 by task syz-executor/5931
[ 50.176373][ T5931]
[ 50.178699][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 50.178718][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 50.178727][ T5931] Call Trace:
[ 50.178733][ T5931]
[ 50.178739][ T5931] dump_stack_lvl+0x116/0x1f0
[ 50.178769][ T5931] print_report+0xc3/0x620
[ 50.178788][ T5931] ? __virt_addr_valid+0x5e/0x590
[ 50.178805][ T5931] ? __phys_addr+0xc6/0x150
[ 50.178822][ T5931] kasan_report+0xd9/0x110
[ 50.178839][ T5931] ? binder_add_device+0xa4/0xb0
[ 50.178858][ T5931] ? binder_add_device+0xa4/0xb0
[ 50.178879][ T5931] binder_add_device+0xa4/0xb0
[ 50.178896][ T5931] binderfs_binder_device_create.isra.0+0x95f/0xb70
[ 50.178922][ T5931] binderfs_fill_super+0x8d6/0x1360
[ 50.178946][ T5931] ? __pfx_binderfs_fill_super+0x10/0x10
[ 50.178977][ T5931] ? shrinker_register+0x1a8/0x260
[ 50.179001][ T5931] ? sget_fc+0x808/0xc20
[ 50.179025][ T5931] ? __pfx_set_anon_super_fc+0x10/0x10
[ 50.179052][ T5931] ? __pfx_binderfs_fill_super+0x10/0x10
[ 50.179073][ T5931] get_tree_nodev+0xda/0x190
[ 50.179098][ T5931] vfs_get_tree+0x8b/0x340
[ 50.179119][ T5931] path_mount+0x14e6/0x1f10
[ 50.179137][ T5931] ? kmem_cache_free+0x2e2/0x4d0
[ 50.179153][ T5931] ? __pfx_path_mount+0x10/0x10
[ 50.179171][ T5931] ? putname+0x13c/0x180
[ 50.179191][ T5931] __x64_sys_mount+0x28f/0x310
[ 50.179208][ T5931] ? __pfx___x64_sys_mount+0x10/0x10
[ 50.179229][ T5931] do_syscall_64+0xcd/0x250
[ 50.179249][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 50.179272][ T5931] RIP: 0033:0x7fbe7b58e4ca
[ 50.179285][ T5931] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 50.179301][ T5931] RSP: 002b:00007fbe7b8cff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 50.179318][ T5931] RAX: ffffffffffffffda RBX: 00007fbe7b60e663 RCX: 00007fbe7b58e4ca
[ 50.179328][ T5931] RDX: 00007fbe7b61dd57 RSI: 00007fbe7b60e663 RDI: 00007fbe7b61dd57
[ 50.179339][ T5931] RBP: 00007fbe7b60e85b R08: 0000000000000000 R09: 0000000000000100
[ 50.179348][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe7b5eb1c8
[ 50.179358][ T5931] R13: 00007fbe7b5eb1a8 R14: 0000000000000009 R15: 0000000000000000
[ 50.179373][ T5931]
[ 50.179378][ T5931]
[ 50.406976][ T5931] Allocated by task 5813:
[ 50.411309][ T5931] kasan_save_stack+0x33/0x60
[ 50.416007][ T5931] kasan_save_track+0x14/0x30
[ 50.420707][ T5931] __kasan_kmalloc+0xaa/0xb0
[ 50.425306][ T5931] binderfs_binder_device_create.isra.0+0x17a/0xb70
[ 50.431911][ T5931] binderfs_fill_super+0x8d6/0x1360
[ 50.437132][ T5931] get_tree_nodev+0xda/0x190
[ 50.441744][ T5931] vfs_get_tree+0x8b/0x340
[ 50.446179][ T5931] path_mount+0x14e6/0x1f10
[ 50.450722][ T5931] __x64_sys_mount+0x28f/0x310
[ 50.455496][ T5931] do_syscall_64+0xcd/0x250
[ 50.460009][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 50.465918][ T5931]
[ 50.468239][ T5931] Freed by task 5813:
[ 50.472217][ T5931] kasan_save_stack+0x33/0x60
[ 50.476904][ T5931] kasan_save_track+0x14/0x30
[ 50.481586][ T5931] kasan_save_free_info+0x3b/0x60
[ 50.486622][ T5931] __kasan_slab_free+0x51/0x70
[ 50.491391][ T5931] kfree+0x2c4/0x4d0
[ 50.495302][ T5931] binderfs_evict_inode+0x1e0/0x250
[ 50.500511][ T5931] evict+0x409/0x960
[ 50.504417][ T5931] iput+0x52a/0x890
[ 50.508235][ T5931] dentry_unlink_inode+0x29c/0x480
[ 50.513359][ T5931] __dentry_kill+0x1d0/0x600
[ 50.517967][ T5931] shrink_dentry_list+0x140/0x5d0
[ 50.523006][ T5931] shrink_dcache_parent+0xe2/0x530
[ 50.528130][ T5931] shrink_dcache_for_umount+0xa1/0x3e0
[ 50.533603][ T5931] generic_shutdown_super+0x6c/0x390
[ 50.538905][ T5931] kill_litter_super+0x70/0xa0
[ 50.543736][ T5931] binderfs_kill_super+0x3b/0xa0
[ 50.548687][ T5931] deactivate_locked_super+0xbe/0x1a0
[ 50.554083][ T5931] deactivate_super+0xde/0x100
[ 50.558860][ T5931] cleanup_mnt+0x222/0x450
[ 50.563290][ T5931] task_work_run+0x14e/0x250
[ 50.567896][ T5931] do_exit+0xad8/0x2d70
[ 50.572065][ T5931] do_group_exit+0xd3/0x2a0
[ 50.576601][ T5931] get_signal+0x24ed/0x26c0
[ 50.581119][ T5931] arch_do_signal_or_restart+0x90/0x7e0
[ 50.586675][ T5931] syscall_exit_to_user_mode+0x150/0x2a0
[ 50.592344][ T5931] do_syscall_64+0xda/0x250
[ 50.596886][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 50.602812][ T5931]
[ 50.605140][ T5931] The buggy address belongs to the object at ffff888030dec000
[ 50.605140][ T5931] which belongs to the cache kmalloc-512 of size 512
[ 50.619197][ T5931] The buggy address is located 8 bytes inside of
[ 50.619197][ T5931] freed 512-byte region [ffff888030dec000, ffff888030dec200)
[ 50.632916][ T5931]
[ 50.635240][ T5931] The buggy address belongs to the physical page:
[ 50.641650][ T5931] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30dec
[ 50.650415][ T5931] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 50.658929][ T5931] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 50.666483][ T5931] page_type: f5(slab)
[ 50.670474][ T5931] raw: 00fff00000000040 ffff88801b041c80 dead000000000122 0000000000000000
[ 50.679070][ T5931] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 50.687668][ T5931] head: 00fff00000000040 ffff88801b041c80 dead000000000122 0000000000000000
[ 50.696343][ T5931] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 50.705023][ T5931] head: 00fff00000000002 ffffea0000c37b01 ffffffffffffffff 0000000000000000
[ 50.713705][ T5931] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 50.722406][ T5931] page dumped because: kasan: bad access detected
[ 50.728824][ T5931] page_owner tracks the page as allocated
[ 50.734554][ T5931] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (syz-executor), ts 49350908772, free_ts 49344569576
[ 50.755885][ T5931] post_alloc_hook+0x181/0x1b0
[ 50.760628][ T5931] get_page_from_freelist+0xfce/0x2f80
[ 50.766072][ T5931] __alloc_frozen_pages_noprof+0x221/0x2470
[ 50.771936][ T5931] alloc_pages_mpol+0x1fc/0x540
[ 50.776769][ T5931] new_slab+0x23d/0x330
[ 50.780902][ T5931] ___slab_alloc+0xc5d/0x1720
[ 50.785556][ T5931] __slab_alloc.constprop.0+0x56/0xb0
[ 50.790907][ T5931] __kmalloc_cache_noprof+0xfa/0x410
[ 50.796195][ T5931] binderfs_binder_device_create.isra.0+0x17a/0xb70
[ 50.802756][ T5931] binderfs_fill_super+0x8d6/0x1360
[ 50.807923][ T5931] get_tree_nodev+0xda/0x190
[ 50.812502][ T5931] vfs_get_tree+0x8b/0x340
[ 50.816894][ T5931] path_mount+0x14e6/0x1f10
[ 50.821382][ T5931] __x64_sys_mount+0x28f/0x310
[ 50.826126][ T5931] do_syscall_64+0xcd/0x250
[ 50.830599][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 50.836466][ T5931] page last free pid 5806 tgid 5806 stack trace:
[ 50.842763][ T5931] free_frozen_pages+0x6db/0xfb0
[ 50.847674][ T5931] __put_partials+0x14c/0x170
[ 50.852341][ T5931] qlist_free_all+0x4e/0x120
[ 50.856935][ T5931] kasan_quarantine_reduce+0x195/0x1e0
[ 50.862390][ T5931] __kasan_slab_alloc+0x69/0x90
[ 50.867224][ T5931] kmem_cache_alloc_noprof+0x226/0x3d0
[ 50.872658][ T5931] getname_flags.part.0+0x4c/0x550
[ 50.877756][ T5931] getname_flags+0x93/0xf0
[ 50.882148][ T5931] user_path_at+0x24/0x60
[ 50.886467][ T5931] do_utimes+0x103/0x2a0
[ 50.890677][ T5931] __x64_sys_utimensat+0x1c7/0x290
[ 50.895776][ T5931] do_syscall_64+0xcd/0x250
[ 50.900277][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 50.906150][ T5931]
[ 50.908446][ T5931] Memory state around the buggy address:
[ 50.914306][ T5931] ffff888030debf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 50.922337][ T5931] ffff888030debf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 50.930366][ T5931] >ffff888030dec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 50.938410][ T5931] ^
[ 50.942710][ T5931] ffff888030dec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 50.950827][ T5931] ffff888030dec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 50.958857][ T5931] ==================================================================
[ 50.971900][ T5931] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 50.979115][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz-executor Not tainted 6.13.0-syzkaller-09030-g6d61a53dd6f5 #0
[ 50.989605][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 50.999635][ T5931] Call Trace:
[ 51.002890][ T5931]
[ 51.005794][ T5931] dump_stack_lvl+0x3d/0x1f0
[ 51.010366][ T5931] panic+0x71d/0x800
[ 51.014235][ T5931] ? __pfx_panic+0x10/0x10
[ 51.018627][ T5931] ? irqentry_exit+0x3b/0x90
[ 51.023212][ T5931] ? lockdep_hardirqs_on+0x7c/0x110
[ 51.028387][ T5931] ? preempt_schedule_thunk+0x1a/0x30
[ 51.033736][ T5931] ? preempt_schedule_common+0x44/0xc0
[ 51.039167][ T5931] ? check_panic_on_warn+0x1f/0xb0
[ 51.044250][ T5931] check_panic_on_warn+0xab/0xb0
[ 51.049168][ T5931] end_report+0x117/0x180
[ 51.053491][ T5931] kasan_report+0xe9/0x110
[ 51.057907][ T5931] ? binder_add_device+0xa4/0xb0
[ 51.062824][ T5931] ? binder_add_device+0xa4/0xb0
[ 51.067735][ T5931] binder_add_device+0xa4/0xb0
[ 51.072480][ T5931] binderfs_binder_device_create.isra.0+0x95f/0xb70
[ 51.079046][ T5931] binderfs_fill_super+0x8d6/0x1360
[ 51.084220][ T5931] ? __pfx_binderfs_fill_super+0x10/0x10
[ 51.089829][ T5931] ? shrinker_register+0x1a8/0x260
[ 51.094917][ T5931] ? sget_fc+0x808/0xc20
[ 51.099146][ T5931] ? __pfx_set_anon_super_fc+0x10/0x10
[ 51.104578][ T5931] ? __pfx_binderfs_fill_super+0x10/0x10
[ 51.110198][ T5931] get_tree_nodev+0xda/0x190
[ 51.114780][ T5931] vfs_get_tree+0x8b/0x340
[ 51.119196][ T5931] path_mount+0x14e6/0x1f10
[ 51.123685][ T5931] ? kmem_cache_free+0x2e2/0x4d0
[ 51.128595][ T5931] ? __pfx_path_mount+0x10/0x10
[ 51.133440][ T5931] ? putname+0x13c/0x180
[ 51.137665][ T5931] __x64_sys_mount+0x28f/0x310
[ 51.142418][ T5931] ? __pfx___x64_sys_mount+0x10/0x10
[ 51.147676][ T5931] do_syscall_64+0xcd/0x250
[ 51.152154][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 51.158023][ T5931] RIP: 0033:0x7fbe7b58e4ca
[ 51.162411][ T5931] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 51.182002][ T5931] RSP: 002b:00007fbe7b8cff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 51.190394][ T5931] RAX: ffffffffffffffda RBX: 00007fbe7b60e663 RCX: 00007fbe7b58e4ca
[ 51.198357][ T5931] RDX: 00007fbe7b61dd57 RSI: 00007fbe7b60e663 RDI: 00007fbe7b61dd57
[ 51.206304][ T5931] RBP: 00007fbe7b60e85b R08: 0000000000000000 R09: 0000000000000100
[ 51.214247][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe7b5eb1c8
[ 51.222200][ T5931] R13: 00007fbe7b5eb1a8 R14: 0000000000000009 R15: 0000000000000000
[ 51.230158][ T5931]
[ 51.233368][ T5931] Kernel Offset: disabled
[ 51.237700][ T5931] Rebooting in 86400 seconds..