last executing test programs:
401.792724ms ago: executing program 2 (id=170):
rt_sigpending(&(0x7f0000000000), 0x0)
351.977426ms ago: executing program 1 (id=172):
clock_settime(0x0, &(0x7f0000000000))
351.114441ms ago: executing program 2 (id=176):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000000))
350.789414ms ago: executing program 1 (id=179):
delete_module(&(0x7f0000000000), 0x0)
320.692103ms ago: executing program 2 (id=181):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2', 0x2, 0x0)
320.517105ms ago: executing program 1 (id=182):
stat(&(0x7f0000000000), &(0x7f0000000000))
320.249352ms ago: executing program 3 (id=183):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cdrom', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cdrom', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cdrom', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cdrom', 0x800, 0x0)
320.209533ms ago: executing program 4 (id=184):
flistxattr(0xffffffffffffffff, &(0x7f0000000000), 0x0)
320.156502ms ago: executing program 2 (id=185):
get_robust_list(0x0, &(0x7f0000000000), &(0x7f0000000000))
273.930109ms ago: executing program 0 (id=186):
migrate_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000))
273.738994ms ago: executing program 1 (id=187):
mq_timedsend(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0)
273.604185ms ago: executing program 2 (id=188):
syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800)
273.504343ms ago: executing program 0 (id=189):
getrusage(0x0, &(0x7f0000000000))
273.335566ms ago: executing program 3 (id=190):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0', 0x800, 0x0)
273.277869ms ago: executing program 4 (id=191):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128', 0x800, 0x0)
273.169042ms ago: executing program 0 (id=192):
syz_open_dev$midi(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$midi(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$midi(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$midi(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$midi(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$midi(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$midi(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$midi(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$midi(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$midi(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$midi(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$midi(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$midi(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$midi(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$midi(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$midi(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$midi(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$midi(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$midi(&(0x7f0000000500), 0x4, 0x800)
272.949493ms ago: executing program 1 (id=193):
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)
228.501498ms ago: executing program 3 (id=194):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg', 0x800, 0x0)
228.317119ms ago: executing program 4 (id=195):
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0)
228.258095ms ago: executing program 3 (id=196):
getpgrp(0x0)
228.12336ms ago: executing program 4 (id=197):
pipe(&(0x7f0000000000))
227.963234ms ago: executing program 1 (id=198):
socket$nl_audit(0x10, 0x3, 0x9)
227.916378ms ago: executing program 3 (id=199):
ustat(0x0, &(0x7f0000000000))
227.776226ms ago: executing program 0 (id=200):
socket$inet6_icmp(0xa, 0x2, 0x3a)
170.980308ms ago: executing program 4 (id=201):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control', 0x800, 0x0)
170.876683ms ago: executing program 0 (id=202):
utimensat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)
170.763262ms ago: executing program 3 (id=203):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq', 0x800, 0x0)
170.578954ms ago: executing program 0 (id=205):
setuid(0x0)
168.501544ms ago: executing program 4 (id=206):
semtimedop(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000))
0s ago: executing program 2 (id=210):
uname(&(0x7f0000000000))
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts.
[ 58.175719][ T5822] cgroup: Unknown subsys name 'net'
[ 58.301995][ T5822] cgroup: Unknown subsys name 'cpuset'
[ 58.309002][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 59.569346][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 61.525478][ T5863] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 61.833266][ T5892] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 63.309360][ T6050] ==================================================================
[ 63.309396][ T6050] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 63.309448][ T6050] Write of size 8 at addr ffff8880331b7408 by task syz-executor/6050
[ 63.309472][ T6050]
[ 63.309507][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250117-syzkaller #0
[ 63.309525][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 63.309540][ T6050] Call Trace:
[ 63.309546][ T6050]
[ 63.309553][ T6050] dump_stack_lvl+0x241/0x360
[ 63.309573][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10
[ 63.309589][ T6050] ? __pfx__printk+0x10/0x10
[ 63.309612][ T6050] ? _printk+0xd5/0x120
[ 63.309633][ T6050] ? __virt_addr_valid+0x183/0x530
[ 63.309654][ T6050] ? __virt_addr_valid+0x183/0x530
[ 63.309676][ T6050] print_report+0x169/0x550
[ 63.309697][ T6050] ? __virt_addr_valid+0x183/0x530
[ 63.309718][ T6050] ? __virt_addr_valid+0x183/0x530
[ 63.309739][ T6050] ? __virt_addr_valid+0x45f/0x530
[ 63.309759][ T6050] ? __phys_addr+0xba/0x170
[ 63.309779][ T6050] ? binder_add_device+0x5f/0xa0
[ 63.309796][ T6050] kasan_report+0x143/0x180
[ 63.309817][ T6050] ? binder_add_device+0x5f/0xa0
[ 63.309837][ T6050] binder_add_device+0x5f/0xa0
[ 63.309853][ T6050] binderfs_binder_device_create+0x7bf/0x9c0
[ 63.309874][ T6050] binderfs_fill_super+0x944/0xd90
[ 63.309893][ T6050] ? __pfx_binderfs_fill_super+0x10/0x10
[ 63.309918][ T6050] ? shrinker_register+0x160/0x230
[ 63.309936][ T6050] ? sget_fc+0x909/0x9c0
[ 63.309955][ T6050] ? __pfx_set_anon_super_fc+0x10/0x10
[ 63.309974][ T6050] ? __pfx_binderfs_fill_super+0x10/0x10
[ 63.309991][ T6050] get_tree_nodev+0xb7/0x140
[ 63.310010][ T6050] vfs_get_tree+0x90/0x2b0
[ 63.310031][ T6050] do_new_mount+0x2be/0xb40
[ 63.310055][ T6050] ? __pfx_do_new_mount+0x10/0x10
[ 63.310080][ T6050] __se_sys_mount+0x2d6/0x3c0
[ 63.310101][ T6050] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 63.310123][ T6050] ? __pfx___se_sys_mount+0x10/0x10
[ 63.310139][ T6050] ? do_syscall_64+0x100/0x230
[ 63.310158][ T6050] ? __x64_sys_mount+0x20/0xc0
[ 63.310174][ T6050] do_syscall_64+0xf3/0x230
[ 63.310191][ T6050] ? clear_bhb_loop+0x35/0x90
[ 63.310213][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.310237][ T6050] RIP: 0033:0x7f4c2cb874ca
[ 63.310255][ T6050] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 63.310268][ T6050] RSP: 002b:00007ffe5c6d7768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 63.310287][ T6050] RAX: ffffffffffffffda RBX: 00007f4c2cc01ecb RCX: 00007f4c2cb874ca
[ 63.310299][ T6050] RDX: 00007f4c2cc0ec27 RSI: 00007f4c2cc01ecb RDI: 00007f4c2cc0ec27
[ 63.310311][ T6050] RBP: 00007f4c2cc020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 63.310321][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c2cbe41c8
[ 63.310332][ T6050] R13: 00007f4c2cbe41a8 R14: 0000000000000009 R15: 0000000000000000
[ 63.310348][ T6050]
[ 63.310354][ T6050]
[ 63.310680][ T6050] Allocated by task 5833:
[ 63.310697][ T6050] kasan_save_track+0x3f/0x80
[ 63.310726][ T6050] __kasan_kmalloc+0x98/0xb0
[ 63.310754][ T6050] __kmalloc_cache_noprof+0x243/0x390
[ 63.310779][ T6050] binderfs_binder_device_create+0x16c/0x9c0
[ 63.310804][ T6050] binderfs_fill_super+0x944/0xd90
[ 63.310828][ T6050] get_tree_nodev+0xb7/0x140
[ 63.310854][ T6050] vfs_get_tree+0x90/0x2b0
[ 63.310880][ T6050] do_new_mount+0x2be/0xb40
[ 63.310908][ T6050] __se_sys_mount+0x2d6/0x3c0
[ 63.310931][ T6050] do_syscall_64+0xf3/0x230
[ 63.310956][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.310984][ T6050]
[ 63.310998][ T6050] Freed by task 5833:
[ 63.311016][ T6050] kasan_save_track+0x3f/0x80
[ 63.311043][ T6050] kasan_save_free_info+0x40/0x50
[ 63.311068][ T6050] __kasan_slab_free+0x59/0x70
[ 63.311102][ T6050] kfree+0x196/0x430
[ 63.311125][ T6050] evict+0x4e8/0x9a0
[ 63.311151][ T6050] __dentry_kill+0x20d/0x630
[ 63.311175][ T6050] shrink_kill+0xa9/0x2c0
[ 63.311199][ T6050] shrink_dentry_list+0x2c0/0x5b0
[ 63.311224][ T6050] shrink_dcache_parent+0xcb/0x3b0
[ 63.311250][ T6050] do_one_tree+0x23/0xe0
[ 63.311274][ T6050] shrink_dcache_for_umount+0xb4/0x180
[ 63.311301][ T6050] generic_shutdown_super+0x6a/0x2d0
[ 63.311327][ T6050] kill_litter_super+0x76/0xb0
[ 63.311352][ T6050] binderfs_kill_super+0x44/0x90
[ 63.311376][ T6050] deactivate_locked_super+0xc4/0x130
[ 63.311402][ T6050] cleanup_mnt+0x41f/0x4b0
[ 63.311427][ T6050] task_work_run+0x24f/0x310
[ 63.311457][ T6050] do_exit+0xa2a/0x28e0
[ 63.311484][ T6050] do_group_exit+0x207/0x2c0
[ 63.311511][ T6050] get_signal+0x16b2/0x1750
[ 63.311534][ T6050] arch_do_signal_or_restart+0x96/0x860
[ 63.311561][ T6050] syscall_exit_to_user_mode+0xce/0x340
[ 63.311587][ T6050] do_syscall_64+0x100/0x230
[ 63.311612][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.311641][ T6050]
[ 63.311655][ T6050] The buggy address belongs to the object at ffff8880331b7400
[ 63.311655][ T6050] which belongs to the cache kmalloc-512 of size 512
[ 63.311678][ T6050] The buggy address is located 8 bytes inside of
[ 63.311678][ T6050] freed 512-byte region [ffff8880331b7400, ffff8880331b7600)
[ 63.311705][ T6050]
[ 63.311719][ T6050] The buggy address belongs to the physical page:
[ 63.311737][ T6050] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x331b4
[ 63.311770][ T6050] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 63.311793][ T6050] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 63.311822][ T6050] page_type: f5(slab)
[ 63.311847][ T6050] raw: 00fff00000000040 ffff88801ac41c80 ffffea0000d23600 dead000000000002
[ 63.311871][ T6050] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 63.311896][ T6050] head: 00fff00000000040 ffff88801ac41c80 ffffea0000d23600 dead000000000002
[ 63.311919][ T6050] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 63.311943][ T6050] head: 00fff00000000002 ffffea0000cc6d01 ffffffffffffffff 0000000000000000
[ 63.311966][ T6050] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 63.311984][ T6050] page dumped because: kasan: bad access detected
[ 63.312007][ T6050] page_owner tracks the page as allocated
[ 63.312024][ T6050] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (udevadm), ts 19850240773, free_ts 19830465053
[ 63.312066][ T6050] post_alloc_hook+0x1f4/0x240
[ 63.312093][ T6050] get_page_from_freelist+0x365c/0x37a0
[ 63.312127][ T6050] __alloc_frozen_pages_noprof+0x292/0x710
[ 63.312155][ T6050] alloc_pages_mpol+0x311/0x660
[ 63.312185][ T6050] allocate_slab+0x8f/0x3a0
[ 63.312213][ T6050] ___slab_alloc+0xc27/0x14a0
[ 63.312238][ T6050] __slab_alloc+0x58/0xa0
[ 63.312264][ T6050] __kmalloc_cache_noprof+0x27b/0x390
[ 63.312288][ T6050] kernfs_fop_open+0x3e0/0xd10
[ 63.312314][ T6050] do_dentry_open+0xdec/0x1960
[ 63.312337][ T6050] vfs_open+0x3b/0x370
[ 63.312358][ T6050] path_openat+0x2c74/0x3580
[ 63.312385][ T6050] do_filp_open+0x27f/0x4e0
[ 63.312411][ T6050] do_sys_openat2+0x13e/0x1d0
[ 63.312435][ T6050] __x64_sys_openat+0x247/0x2a0
[ 63.312459][ T6050] do_syscall_64+0xf3/0x230
[ 63.312484][ T6050] page last free pid 5211 tgid 5211 stack trace:
[ 63.312503][ T6050] free_frozen_pages+0xe0d/0x10e0
[ 63.312529][ T6050] __put_partials+0x160/0x1c0
[ 63.312555][ T6050] put_cpu_partial+0x17c/0x250
[ 63.312582][ T6050] __slab_free+0x290/0x380
[ 63.312609][ T6050] qlist_free_all+0x9a/0x140
[ 63.312635][ T6050] kasan_quarantine_reduce+0x14f/0x170
[ 63.312663][ T6050] __kasan_slab_alloc+0x23/0x80
[ 63.312691][ T6050] __kmalloc_noprof+0x236/0x4c0
[ 63.312715][ T6050] tomoyo_realpath_from_path+0xcf/0x5e0
[ 63.312744][ T6050] tomoyo_check_open_permission+0x258/0x4f0
[ 63.312770][ T6050] security_file_open+0xac/0x250
[ 63.312796][ T6050] do_dentry_open+0x320/0x1960
[ 63.312819][ T6050] vfs_open+0x3b/0x370
[ 63.312841][ T6050] path_openat+0x2c74/0x3580
[ 63.312867][ T6050] do_filp_open+0x27f/0x4e0
[ 63.312893][ T6050] do_sys_openat2+0x13e/0x1d0
[ 63.312917][ T6050]
[ 63.312931][ T6050] Memory state around the buggy address:
[ 63.312949][ T6050] ffff8880331b7300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 63.312971][ T6050] ffff8880331b7380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 63.312991][ T6050] >ffff8880331b7400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.313009][ T6050] ^
[ 63.313027][ T6050] ffff8880331b7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.313048][ T6050] ffff8880331b7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.313065][ T6050] ==================================================================
[ 63.324819][ T6050] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.176198][ T6050] CPU: 0 UID: 0 PID: 6050 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250117-syzkaller #0
[ 64.186682][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 64.196809][ T6050] Call Trace:
[ 64.200080][ T6050]
[ 64.202998][ T6050] dump_stack_lvl+0x241/0x360
[ 64.207666][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.212862][ T6050] ? __pfx__printk+0x10/0x10
[ 64.217440][ T6050] ? preempt_schedule+0xe1/0xf0
[ 64.222282][ T6050] ? vscnprintf+0x5d/0x90
[ 64.226599][ T6050] panic+0x349/0x880
[ 64.230572][ T6050] ? check_panic_on_warn+0x21/0xb0
[ 64.235671][ T6050] ? __pfx_panic+0x10/0x10
[ 64.240077][ T6050] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 64.246044][ T6050] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 64.252443][ T6050] ? print_report+0x502/0x550
[ 64.257112][ T6050] check_panic_on_warn+0x86/0xb0
[ 64.262058][ T6050] ? binder_add_device+0x5f/0xa0
[ 64.266980][ T6050] end_report+0x77/0x160
[ 64.271215][ T6050] kasan_report+0x154/0x180
[ 64.275705][ T6050] ? binder_add_device+0x5f/0xa0
[ 64.280633][ T6050] binder_add_device+0x5f/0xa0
[ 64.285381][ T6050] binderfs_binder_device_create+0x7bf/0x9c0
[ 64.291346][ T6050] binderfs_fill_super+0x944/0xd90
[ 64.296442][ T6050] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.302066][ T6050] ? shrinker_register+0x160/0x230
[ 64.307185][ T6050] ? sget_fc+0x909/0x9c0
[ 64.311415][ T6050] ? __pfx_set_anon_super_fc+0x10/0x10
[ 64.316858][ T6050] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.322471][ T6050] get_tree_nodev+0xb7/0x140
[ 64.327155][ T6050] vfs_get_tree+0x90/0x2b0
[ 64.331585][ T6050] do_new_mount+0x2be/0xb40
[ 64.336094][ T6050] ? __pfx_do_new_mount+0x10/0x10
[ 64.341115][ T6050] __se_sys_mount+0x2d6/0x3c0
[ 64.345797][ T6050] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.351767][ T6050] ? __pfx___se_sys_mount+0x10/0x10
[ 64.356950][ T6050] ? do_syscall_64+0x100/0x230
[ 64.361701][ T6050] ? __x64_sys_mount+0x20/0xc0
[ 64.366451][ T6050] do_syscall_64+0xf3/0x230
[ 64.370940][ T6050] ? clear_bhb_loop+0x35/0x90
[ 64.375605][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.381481][ T6050] RIP: 0033:0x7f4c2cb874ca
[ 64.385881][ T6050] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 64.405473][ T6050] RSP: 002b:00007ffe5c6d7768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 64.413873][ T6050] RAX: ffffffffffffffda RBX: 00007f4c2cc01ecb RCX: 00007f4c2cb874ca
[ 64.421832][ T6050] RDX: 00007f4c2cc0ec27 RSI: 00007f4c2cc01ecb RDI: 00007f4c2cc0ec27
[ 64.429788][ T6050] RBP: 00007f4c2cc020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 64.437740][ T6050] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c2cbe41c8
[ 64.445693][ T6050] R13: 00007f4c2cbe41a8 R14: 0000000000000009 R15: 0000000000000000
[ 64.453657][ T6050]
[ 64.457291][ T6050] Kernel Offset: disabled
[ 64.461666][ T6050] Rebooting in 86400 seconds..