last executing test programs:
2.408908411s ago: executing program 3 (id=121):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create', 0x2, 0x0)
2.408247465s ago: executing program 3 (id=125):
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800)
2.359451428s ago: executing program 3 (id=132):
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vim2m(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vim2m(&(0x7f0000000500), 0x4, 0x800)
2.287813483s ago: executing program 3 (id=137):
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000))
2.22565343s ago: executing program 3 (id=144):
pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
2.224550136s ago: executing program 3 (id=150):
pause()
708.166088ms ago: executing program 2 (id=327):
syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$audion(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$audion(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$audion(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$audion(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$audion(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$audion(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$audion(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$audion(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$audion(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$audion(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$audion(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$audion(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$audion(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$audion(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$audion(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$audion(&(0x7f0000000500), 0x4, 0x800)
363.365884ms ago: executing program 2 (id=364):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0)
362.856329ms ago: executing program 2 (id=368):
inotify_init1(0x0)
311.783459ms ago: executing program 2 (id=373):
getresgid(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))
303.694744ms ago: executing program 2 (id=377):
sync()
292.113471ms ago: executing program 0 (id=379):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m', 0x2, 0x0)
243.945465ms ago: executing program 4 (id=381):
socket$phonet(0x23, 0x2, 0x1)
204.611379ms ago: executing program 0 (id=384):
socket$nl_rdma(0x10, 0x3, 0x14)
160.247992ms ago: executing program 4 (id=385):
clock_getres(0x0, &(0x7f0000000000))
159.920949ms ago: executing program 0 (id=387):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0', 0x800, 0x0)
159.877493ms ago: executing program 1 (id=388):
rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000))
159.576151ms ago: executing program 4 (id=389):
socket$caif_seqpacket(0x25, 0x5, 0x0)
146.853919ms ago: executing program 0 (id=390):
sched_rr_get_interval(0x0, &(0x7f0000000000))
140.662967ms ago: executing program 1 (id=391):
get_robust_list(0x0, &(0x7f0000000000), &(0x7f0000000000))
84.181557ms ago: executing program 4 (id=392):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg', 0x800, 0x0)
84.056384ms ago: executing program 0 (id=393):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
83.951891ms ago: executing program 1 (id=394):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x14)
83.849781ms ago: executing program 4 (id=395):
futex_waitv(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0)
83.773195ms ago: executing program 1 (id=396):
chmod(&(0x7f0000000000), 0x0)
67.070606ms ago: executing program 1 (id=397):
exit_group(0x0)
66.895072ms ago: executing program 4 (id=398):
capget(&(0x7f0000000000), &(0x7f0000000000))
59.001807ms ago: executing program 0 (id=399):
io_destroy(0x0)
241.864µs ago: executing program 1 (id=400):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptp1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptp1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptp1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptp1', 0x800, 0x0)
0s ago: executing program 2 (id=401):
flock(0xffffffffffffffff, 0x0)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.10.31' (ED25519) to the list of known hosts.
[ 57.113438][ T5821] cgroup: Unknown subsys name 'net'
[ 57.220233][ T5821] cgroup: Unknown subsys name 'cpuset'
[ 57.229468][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 58.680970][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 61.989677][ T6054] mmap: syz.2.211 (6054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 62.485846][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 64.300427][ T6254] ==================================================================
[ 64.308635][ T6254] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 64.316392][ T6254] Write of size 8 at addr ffff888145fa2c08 by task syz-executor/6254
[ 64.324463][ T6254]
[ 64.326806][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz-executor Not tainted 6.13.0-next-20250124-syzkaller #0
[ 64.326827][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 64.326839][ T6254] Call Trace:
[ 64.326845][ T6254]
[ 64.326850][ T6254] dump_stack_lvl+0x241/0x360
[ 64.326868][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.326880][ T6254] ? __pfx__printk+0x10/0x10
[ 64.326892][ T6254] ? _printk+0xd5/0x120
[ 64.326903][ T6254] ? __virt_addr_valid+0x183/0x530
[ 64.326920][ T6254] ? __virt_addr_valid+0x183/0x530
[ 64.326937][ T6254] print_report+0x169/0x550
[ 64.326955][ T6254] ? __virt_addr_valid+0x183/0x530
[ 64.326971][ T6254] ? __virt_addr_valid+0x183/0x530
[ 64.326987][ T6254] ? __virt_addr_valid+0x45f/0x530
[ 64.327002][ T6254] ? __phys_addr+0xba/0x170
[ 64.327019][ T6254] ? binder_add_device+0x5f/0xa0
[ 64.327036][ T6254] kasan_report+0x143/0x180
[ 64.327054][ T6254] ? binder_add_device+0x5f/0xa0
[ 64.327073][ T6254] binder_add_device+0x5f/0xa0
[ 64.327090][ T6254] binderfs_binder_device_create+0x7bf/0x9c0
[ 64.327110][ T6254] binderfs_fill_super+0x944/0xd90
[ 64.327128][ T6254] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.327151][ T6254] ? shrinker_register+0x160/0x230
[ 64.327166][ T6254] ? sget_fc+0x909/0x9c0
[ 64.327181][ T6254] ? __pfx_set_anon_super_fc+0x10/0x10
[ 64.327196][ T6254] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.327213][ T6254] get_tree_nodev+0xb7/0x140
[ 64.327228][ T6254] vfs_get_tree+0x90/0x2b0
[ 64.327245][ T6254] do_new_mount+0x2be/0xb40
[ 64.327258][ T6254] ? __pfx_do_new_mount+0x10/0x10
[ 64.327272][ T6254] __se_sys_mount+0x2d6/0x3c0
[ 64.327285][ T6254] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.327302][ T6254] ? __pfx___se_sys_mount+0x10/0x10
[ 64.327315][ T6254] ? do_syscall_64+0x100/0x230
[ 64.327329][ T6254] ? __x64_sys_mount+0x20/0xc0
[ 64.327342][ T6254] do_syscall_64+0xf3/0x230
[ 64.327354][ T6254] ? clear_bhb_loop+0x35/0x90
[ 64.327372][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.327391][ T6254] RIP: 0033:0x7fa68e38e4ca
[ 64.327406][ T6254] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 64.327417][ T6254] RSP: 002b:00007ffcab83abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 64.327431][ T6254] RAX: ffffffffffffffda RBX: 00007fa68e40e663 RCX: 00007fa68e38e4ca
[ 64.327440][ T6254] RDX: 00007fa68e41dd57 RSI: 00007fa68e40e663 RDI: 00007fa68e41dd57
[ 64.327449][ T6254] RBP: 00007fa68e40e85b R08: 0000000000000000 R09: 00000000000001ff
[ 64.327457][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa68e3eb1c8
[ 64.327464][ T6254] R13: 00007fa68e3eb1a8 R14: 0000000000000009 R15: 0000000000000000
[ 64.327477][ T6254]
[ 64.327481][ T6254]
[ 64.600513][ T6254] Allocated by task 6247:
[ 64.604926][ T6254] kasan_save_track+0x3f/0x80
[ 64.609699][ T6254] __kasan_kmalloc+0x98/0xb0
[ 64.614296][ T6254] __kmalloc_cache_noprof+0x243/0x390
[ 64.619653][ T6254] binderfs_binder_device_create+0x16c/0x9c0
[ 64.625624][ T6254] binderfs_fill_super+0x944/0xd90
[ 64.630725][ T6254] get_tree_nodev+0xb7/0x140
[ 64.635309][ T6254] vfs_get_tree+0x90/0x2b0
[ 64.639714][ T6254] do_new_mount+0x2be/0xb40
[ 64.644298][ T6254] __se_sys_mount+0x2d6/0x3c0
[ 64.648963][ T6254] do_syscall_64+0xf3/0x230
[ 64.653459][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.659340][ T6254]
[ 64.661652][ T6254] Freed by task 6247:
[ 64.665621][ T6254] kasan_save_track+0x3f/0x80
[ 64.670290][ T6254] kasan_save_free_info+0x40/0x50
[ 64.675332][ T6254] __kasan_slab_free+0x59/0x70
[ 64.680096][ T6254] kfree+0x196/0x430
[ 64.684149][ T6254] evict+0x4e8/0x9a0
[ 64.688045][ T6254] __dentry_kill+0x20d/0x630
[ 64.692627][ T6254] shrink_kill+0xa9/0x2c0
[ 64.696955][ T6254] shrink_dentry_list+0x2c0/0x5b0
[ 64.701971][ T6254] shrink_dcache_parent+0xcb/0x3b0
[ 64.707071][ T6254] do_one_tree+0x23/0xe0
[ 64.711300][ T6254] shrink_dcache_for_umount+0xb4/0x180
[ 64.716747][ T6254] generic_shutdown_super+0x6a/0x2d0
[ 64.722053][ T6254] kill_litter_super+0x76/0xb0
[ 64.726809][ T6254] binderfs_kill_super+0x44/0x90
[ 64.731742][ T6254] deactivate_locked_super+0xc4/0x130
[ 64.737116][ T6254] cleanup_mnt+0x41f/0x4b0
[ 64.741608][ T6254] task_work_run+0x24f/0x310
[ 64.746190][ T6254] do_exit+0xa2a/0x28e0
[ 64.750606][ T6254] do_group_exit+0x207/0x2c0
[ 64.755188][ T6254] __x64_sys_exit_group+0x3f/0x40
[ 64.760204][ T6254] x64_sys_call+0x26a8/0x26b0
[ 64.764893][ T6254] do_syscall_64+0xf3/0x230
[ 64.769385][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.775267][ T6254]
[ 64.777579][ T6254] The buggy address belongs to the object at ffff888145fa2c00
[ 64.777579][ T6254] which belongs to the cache kmalloc-512 of size 512
[ 64.791632][ T6254] The buggy address is located 8 bytes inside of
[ 64.791632][ T6254] freed 512-byte region [ffff888145fa2c00, ffff888145fa2e00)
[ 64.805344][ T6254]
[ 64.807666][ T6254] The buggy address belongs to the physical page:
[ 64.814083][ T6254] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x145fa0
[ 64.822933][ T6254] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 64.831508][ T6254] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[ 64.839570][ T6254] page_type: f5(slab)
[ 64.843559][ T6254] raw: 057ff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001
[ 64.852154][ T6254] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 64.860822][ T6254] head: 057ff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001
[ 64.869570][ T6254] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 64.878232][ T6254] head: 057ff00000000002 ffffea000517e801 ffffffffffffffff 0000000000000000
[ 64.886890][ T6254] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 64.895716][ T6254] page dumped because: kasan: bad access detected
[ 64.902127][ T6254] page_owner tracks the page as allocated
[ 64.907844][ T6254] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10178269698, free_ts 0
[ 64.928074][ T6254] post_alloc_hook+0x1f4/0x240
[ 64.932939][ T6254] get_page_from_freelist+0x365c/0x37a0
[ 64.938479][ T6254] __alloc_frozen_pages_noprof+0x292/0x710
[ 64.944362][ T6254] alloc_pages_mpol+0x311/0x660
[ 64.949198][ T6254] allocate_slab+0x8f/0x3a0
[ 64.953705][ T6254] ___slab_alloc+0xc27/0x14a0
[ 64.958381][ T6254] __slab_alloc+0x58/0xa0
[ 64.962803][ T6254] __kmalloc_cache_noprof+0x27b/0x390
[ 64.968169][ T6254] dev_pm_qos_constraints_allocate+0x8f/0x410
[ 64.974229][ T6254] __dev_pm_qos_add_request+0x121/0x4d0
[ 64.979849][ T6254] dev_pm_qos_add_request+0x3a/0x60
[ 64.985148][ T6254] usb_hub_create_port_device+0x494/0xc10
[ 64.990960][ T6254] hub_probe+0x2503/0x3640
[ 64.995370][ T6254] usb_probe_interface+0x641/0xbb0
[ 65.000724][ T6254] really_probe+0x2b9/0xad0
[ 65.005392][ T6254] __driver_probe_device+0x1a2/0x390
[ 65.010680][ T6254] page_owner free stack trace missing
[ 65.016208][ T6254]
[ 65.018519][ T6254] Memory state around the buggy address:
[ 65.024135][ T6254] ffff888145fa2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 65.032207][ T6254] ffff888145fa2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 65.040258][ T6254] >ffff888145fa2c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.048314][ T6254] ^
[ 65.052643][ T6254] ffff888145fa2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.060717][ T6254] ffff888145fa2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 65.068759][ T6254] ==================================================================
[ 65.110343][ T6254] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 65.117689][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz-executor Not tainted 6.13.0-next-20250124-syzkaller #0
[ 65.127739][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 65.137817][ T6254] Call Trace:
[ 65.141221][ T6254]
[ 65.144151][ T6254] dump_stack_lvl+0x241/0x360
[ 65.148829][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10
[ 65.154024][ T6254] ? __pfx__printk+0x10/0x10
[ 65.158601][ T6254] ? preempt_schedule+0xe1/0xf0
[ 65.163447][ T6254] ? vscnprintf+0x5d/0x90
[ 65.167788][ T6254] panic+0x349/0x880
[ 65.171693][ T6254] ? check_panic_on_warn+0x21/0xb0
[ 65.176845][ T6254] ? __pfx_panic+0x10/0x10
[ 65.181267][ T6254] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 65.187328][ T6254] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 65.193812][ T6254] ? print_report+0x502/0x550
[ 65.198925][ T6254] check_panic_on_warn+0x86/0xb0
[ 65.203859][ T6254] ? binder_add_device+0x5f/0xa0
[ 65.208791][ T6254] end_report+0x77/0x160
[ 65.213039][ T6254] kasan_report+0x154/0x180
[ 65.217643][ T6254] ? binder_add_device+0x5f/0xa0
[ 65.222579][ T6254] binder_add_device+0x5f/0xa0
[ 65.227539][ T6254] binderfs_binder_device_create+0x7bf/0x9c0
[ 65.233516][ T6254] binderfs_fill_super+0x944/0xd90
[ 65.238636][ T6254] ? __pfx_binderfs_fill_super+0x10/0x10
[ 65.244360][ T6254] ? shrinker_register+0x160/0x230
[ 65.249465][ T6254] ? sget_fc+0x909/0x9c0
[ 65.253698][ T6254] ? __pfx_set_anon_super_fc+0x10/0x10
[ 65.259149][ T6254] ? __pfx_binderfs_fill_super+0x10/0x10
[ 65.264783][ T6254] get_tree_nodev+0xb7/0x140
[ 65.269366][ T6254] vfs_get_tree+0x90/0x2b0
[ 65.273773][ T6254] do_new_mount+0x2be/0xb40
[ 65.278263][ T6254] ? __pfx_do_new_mount+0x10/0x10
[ 65.283274][ T6254] __se_sys_mount+0x2d6/0x3c0
[ 65.287956][ T6254] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 65.293951][ T6254] ? __pfx___se_sys_mount+0x10/0x10
[ 65.299492][ T6254] ? do_syscall_64+0x100/0x230
[ 65.304244][ T6254] ? __x64_sys_mount+0x20/0xc0
[ 65.309006][ T6254] do_syscall_64+0xf3/0x230
[ 65.313586][ T6254] ? clear_bhb_loop+0x35/0x90
[ 65.318264][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 65.324150][ T6254] RIP: 0033:0x7fa68e38e4ca
[ 65.328636][ T6254] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 65.348498][ T6254] RSP: 002b:00007ffcab83abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 65.357081][ T6254] RAX: ffffffffffffffda RBX: 00007fa68e40e663 RCX: 00007fa68e38e4ca
[ 65.365062][ T6254] RDX: 00007fa68e41dd57 RSI: 00007fa68e40e663 RDI: 00007fa68e41dd57
[ 65.373022][ T6254] RBP: 00007fa68e40e85b R08: 0000000000000000 R09: 00000000000001ff
[ 65.381021][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa68e3eb1c8
[ 65.389170][ T6254] R13: 00007fa68e3eb1a8 R14: 0000000000000009 R15: 0000000000000000
[ 65.397148][ T6254]
[ 65.400472][ T6254] Kernel Offset: disabled
[ 65.404779][ T6254] Rebooting in 86400 seconds..