last executing test programs: 1.943521605s ago: executing program 4 (id=304): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio', 0x800, 0x0) 1.884439712s ago: executing program 4 (id=308): socket$inet6_icmp(0xa, 0x2, 0x3a) 1.884133282s ago: executing program 4 (id=311): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.804655208s ago: executing program 4 (id=316): get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0) 1.803874529s ago: executing program 4 (id=320): io_uring_setup(0x0, &(0x7f0000000000)) 1.785624666s ago: executing program 4 (id=324): msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) 872.544633ms ago: executing program 1 (id=441): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0) 868.783967ms ago: executing program 1 (id=446): fchdir(0xffffffffffffffff) 822.0441ms ago: executing program 1 (id=452): getpid() 768.867665ms ago: executing program 0 (id=454): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800) 768.621343ms ago: executing program 1 (id=455): syz_init_net_socket$rose(0xb, 0x5, 0x0) 768.061848ms ago: executing program 0 (id=458): readlink(&(0x7f0000000000), &(0x7f0000000000), 0x0) 767.797888ms ago: executing program 1 (id=459): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/iommu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/iommu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/iommu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/iommu', 0x800, 0x0) 704.948969ms ago: executing program 0 (id=462): munlockall() 704.74047ms ago: executing program 1 (id=464): pause() 704.029617ms ago: executing program 0 (id=466): unshare(0x0) 703.409339ms ago: executing program 0 (id=468): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/acpi_thermal_rel', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/acpi_thermal_rel', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/acpi_thermal_rel', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/acpi_thermal_rel', 0x800, 0x0) 284.125342ms ago: executing program 0 (id=471): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 116.935413ms ago: executing program 2 (id=506): sched_rr_get_interval(0x0, &(0x7f0000000000)) 116.68266ms ago: executing program 2 (id=508): socket$inet6_udplite(0xa, 0x2, 0x88) 116.619565ms ago: executing program 3 (id=509): link(&(0x7f0000000000), &(0x7f0000000000)) 116.459958ms ago: executing program 3 (id=510): syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$vim2m(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$vim2m(&(0x7f0000000500), 0x4, 0x800) 100.143876ms ago: executing program 2 (id=511): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bifrost', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bifrost', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bifrost', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bifrost', 0x800, 0x0) 98.49479ms ago: executing program 3 (id=512): setpgid(0x0, 0x0) 60.337742ms ago: executing program 3 (id=513): syz_open_dev$usbfs(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$usbfs(&(0x7f0000000140), 0xa, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0xa, 0x1) syz_open_dev$usbfs(&(0x7f00000001c0), 0xa, 0x2) syz_open_dev$usbfs(&(0x7f0000000200), 0xa, 0x800) syz_open_dev$usbfs(&(0x7f0000000240), 0x14, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x14, 0x1) syz_open_dev$usbfs(&(0x7f00000002c0), 0x14, 0x2) syz_open_dev$usbfs(&(0x7f0000000300), 0x14, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x1e, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x1e, 0x1) syz_open_dev$usbfs(&(0x7f00000003c0), 0x1e, 0x2) syz_open_dev$usbfs(&(0x7f0000000400), 0x1e, 0x800) syz_open_dev$usbfs(&(0x7f0000000440), 0x28, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x28, 0x1) syz_open_dev$usbfs(&(0x7f00000004c0), 0x28, 0x2) syz_open_dev$usbfs(&(0x7f0000000500), 0x28, 0x800) 12.939267ms ago: executing program 2 (id=514): mkdir(&(0x7f0000000000), 0x0) 12.808631ms ago: executing program 2 (id=515): getdents64(0xffffffffffffffff, &(0x7f0000000000), 0x0) 12.648953ms ago: executing program 3 (id=516): mknod(&(0x7f0000000000), 0x0, 0x0) 6.654861ms ago: executing program 3 (id=517): process_vm_readv(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x0, 0x0) 0s ago: executing program 2 (id=518): setregid(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 57.965259][ T5818] cgroup: Unknown subsys name 'net' [ 58.088326][ T5818] cgroup: Unknown subsys name 'cpuset' [ 58.095715][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.404345][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.554037][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.129562][ T6256] mmap: syz.2.411 (6256) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 64.901711][ T6321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.144666][ T6358] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.276270][ T6354] ================================================================== [ 65.276306][ T6354] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 65.276365][ T6354] Write of size 8 at addr ffff888033097808 by task syz-executor/6354 [ 65.276388][ T6354] [ 65.276422][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250120-syzkaller #0 [ 65.276440][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.276451][ T6354] Call Trace: [ 65.276457][ T6354] <TASK> [ 65.276464][ T6354] dump_stack_lvl+0x241/0x360 [ 65.276483][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.276499][ T6354] ? __pfx__printk+0x10/0x10 [ 65.276521][ T6354] ? _printk+0xd5/0x120 [ 65.276533][ T6354] ? __virt_addr_valid+0x183/0x530 [ 65.276553][ T6354] ? __virt_addr_valid+0x183/0x530 [ 65.276573][ T6354] print_report+0x169/0x550 [ 65.276595][ T6354] ? __virt_addr_valid+0x183/0x530 [ 65.276614][ T6354] ? __virt_addr_valid+0x183/0x530 [ 65.276634][ T6354] ? __virt_addr_valid+0x45f/0x530 [ 65.276653][ T6354] ? __phys_addr+0xba/0x170 [ 65.276673][ T6354] ? binder_add_device+0x5f/0xa0 ** replaying previous printk message ** [ 65.276673][ T6354] ? binder_add_device+0x5f/0xa0 [ 65.276690][ T6354] kasan_report+0x143/0x180 [ 65.276712][ T6354] ? binder_add_device+0x5f/0xa0 [ 65.276741][ T6354] binder_add_device+0x5f/0xa0 [ 65.276760][ T6354] binderfs_binder_device_create+0x7bf/0x9c0 [ 65.276781][ T6354] binderfs_fill_super+0x944/0xd90 [ 65.276802][ T6354] ? __pfx_binderfs_fill_super+0x10/0x10 [ 65.276829][ T6354] ? shrinker_register+0x160/0x230 [ 65.276847][ T6354] ? sget_fc+0x909/0x9c0 [ 65.276867][ T6354] ? __pfx_set_anon_super_fc+0x10/0x10 [ 65.276885][ T6354] ? __pfx_binderfs_fill_super+0x10/0x10 [ 65.276903][ T6354] get_tree_nodev+0xb7/0x140 [ 65.276922][ T6354] vfs_get_tree+0x90/0x2b0 [ 65.276943][ T6354] do_new_mount+0x2be/0xb40 [ 65.276960][ T6354] ? __pfx_do_new_mount+0x10/0x10 [ 65.276978][ T6354] __se_sys_mount+0x2d6/0x3c0 [ 65.276994][ T6354] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.277016][ T6354] ? __pfx___se_sys_mount+0x10/0x10 [ 65.277033][ T6354] ? do_syscall_64+0x100/0x230 [ 65.277055][ T6354] ? __x64_sys_mount+0x20/0xc0 [ 65.277071][ T6354] do_syscall_64+0xf3/0x230 [ 65.277092][ T6354] ? clear_bhb_loop+0x35/0x90 [ 65.277113][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.277138][ T6354] RIP: 0033:0x7fb462f874ca [ 65.277156][ T6354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.277170][ T6354] RSP: 002b:00007ffcdfe58a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.277191][ T6354] RAX: ffffffffffffffda RBX: 00007fb463001ecb RCX: 00007fb462f874ca [ 65.277203][ T6354] RDX: 00007fb46300ec27 RSI: 00007fb463001ecb RDI: 00007fb46300ec27 [ 65.277215][ T6354] RBP: 00007fb4630020c3 R08: 0000000000000000 R09: 00000000000001ff [ 65.277225][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 000055558a9e24a8 [ 65.277234][ T6354] R13: 00007ffcdfe58af8 R14: 0000000000000009 R15: 0000000000000000 [ 65.277250][ T6354] </TASK> [ 65.277256][ T6354] [ 65.277559][ T6354] Allocated by task 6321: [ 65.277576][ T6354] kasan_save_track+0x3f/0x80 [ 65.277603][ T6354] __kasan_kmalloc+0x98/0xb0 [ 65.277629][ T6354] __kmalloc_cache_noprof+0x243/0x390 [ 65.277654][ T6354] binderfs_binder_device_create+0x16c/0x9c0 [ 65.277680][ T6354] binderfs_fill_super+0x944/0xd90 [ 65.277705][ T6354] get_tree_nodev+0xb7/0x140 [ 65.277738][ T6354] vfs_get_tree+0x90/0x2b0 [ 65.277764][ T6354] do_new_mount+0x2be/0xb40 [ 65.277785][ T6354] __se_sys_mount+0x2d6/0x3c0 [ 65.277809][ T6354] do_syscall_64+0xf3/0x230 [ 65.277836][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.277862][ T6354] [ 65.277875][ T6354] Freed by task 6321: [ 65.277890][ T6354] kasan_save_track+0x3f/0x80 [ 65.277916][ T6354] kasan_save_free_info+0x40/0x50 [ 65.277940][ T6354] __kasan_slab_free+0x59/0x70 [ 65.277967][ T6354] kfree+0x196/0x430 [ 65.277989][ T6354] evict+0x4e8/0x9a0 [ 65.278013][ T6354] __dentry_kill+0x20d/0x630 [ 65.278037][ T6354] shrink_kill+0xa9/0x2c0 [ 65.278060][ T6354] shrink_dentry_list+0x2c0/0x5b0 [ 65.278084][ T6354] shrink_dcache_parent+0xcb/0x3b0 [ 65.278109][ T6354] do_one_tree+0x23/0xe0 [ 65.278132][ T6354] shrink_dcache_for_umount+0xb4/0x180 [ 65.278158][ T6354] generic_shutdown_super+0x6a/0x2d0 [ 65.278183][ T6354] kill_litter_super+0x76/0xb0 [ 65.278208][ T6354] binderfs_kill_super+0x44/0x90 [ 65.278233][ T6354] deactivate_locked_super+0xc4/0x130 [ 65.278258][ T6354] cleanup_mnt+0x41f/0x4b0 [ 65.278283][ T6354] task_work_run+0x24f/0x310 [ 65.278311][ T6354] do_exit+0xa2a/0x28e0 [ 65.278338][ T6354] do_group_exit+0x207/0x2c0 [ 65.278364][ T6354] get_signal+0x16b2/0x1750 [ 65.278387][ T6354] arch_do_signal_or_restart+0x96/0x860 [ 65.278411][ T6354] syscall_exit_to_user_mode+0xce/0x340 [ 65.278438][ T6354] do_syscall_64+0x100/0x230 [ 65.278465][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.278492][ T6354] [ 65.278506][ T6354] The buggy address belongs to the object at ffff888033097800 [ 65.278506][ T6354] which belongs to the cache kmalloc-512 of size 512 [ 65.278529][ T6354] The buggy address is located 8 bytes inside of [ 65.278529][ T6354] freed 512-byte region [ffff888033097800, ffff888033097a00) [ 65.278554][ T6354] [ 65.278567][ T6354] The buggy address belongs to the physical page: [ 65.278583][ T6354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33094 [ 65.278613][ T6354] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 65.278636][ T6354] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 65.278664][ T6354] page_type: f5(slab) [ 65.278689][ T6354] raw: 00fff00000000040 ffff88801ac41c80 ffffea0000d1b700 dead000000000003 [ 65.278712][ T6354] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 65.278740][ T6354] head: 00fff00000000040 ffff88801ac41c80 ffffea0000d1b700 dead000000000003 [ 65.278763][ T6354] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 65.278787][ T6354] head: 00fff00000000002 ffffea0000cc2501 ffffffffffffffff 0000000000000000 [ 65.278807][ T6354] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 65.278823][ T6354] page dumped because: kasan: bad access detected [ 65.278844][ T6354] page_owner tracks the page as allocated [ 65.278861][ T6354] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 20222555849, free_ts 14055290361 [ 65.278893][ T6354] post_alloc_hook+0x1f4/0x240 [ 65.278920][ T6354] get_page_from_freelist+0x365c/0x37a0 [ 65.278948][ T6354] __alloc_frozen_pages_noprof+0x292/0x710 [ 65.278973][ T6354] alloc_pages_mpol+0x311/0x660 [ 65.278995][ T6354] allocate_slab+0x8f/0x3a0 [ 65.279019][ T6354] ___slab_alloc+0xc27/0x14a0 [ 65.279042][ T6354] __slab_alloc+0x58/0xa0 [ 65.279064][ T6354] __kmalloc_cache_noprof+0x27b/0x390 [ 65.279086][ T6354] kernfs_fop_open+0x3e0/0xd10 [ 65.279109][ T6354] do_dentry_open+0xdec/0x1960 [ 65.279129][ T6354] vfs_open+0x3b/0x370 [ 65.279149][ T6354] path_openat+0x2c81/0x3590 [ 65.279172][ T6354] do_filp_open+0x27f/0x4e0 [ 65.279196][ T6354] do_sys_openat2+0x13e/0x1d0 [ 65.279217][ T6354] __x64_sys_openat+0x247/0x2a0 [ 65.279238][ T6354] do_syscall_64+0xf3/0x230 [ 65.279268][ T6354] page last free pid 8 tgid 8 stack trace: [ 65.279285][ T6354] free_frozen_pages+0xe0d/0x10e0 [ 65.279310][ T6354] vfree+0x1c3/0x360 [ 65.279333][ T6354] delayed_vfree_work+0x56/0x80 [ 65.279358][ T6354] process_scheduled_works+0xa66/0x1840 [ 65.279381][ T6354] worker_thread+0x870/0xd30 [ 65.279405][ T6354] kthread+0x7a9/0x920 [ 65.279431][ T6354] ret_from_fork+0x4b/0x80 [ 65.279458][ T6354] ret_from_fork_asm+0x1a/0x30 [ 65.279483][ T6354] [ 65.279496][ T6354] Memory state around the buggy address: [ 65.279513][ T6354] ffff888033097700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.279533][ T6354] ffff888033097780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.279553][ T6354] >ffff888033097800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.279570][ T6354] ^ [ 65.279587][ T6354] ffff888033097880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.279603][ T6354] ffff888033097900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.279616][ T6354] ================================================================== [ 65.394593][ T6354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.113197][ T6354] CPU: 0 UID: 0 PID: 6354 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250120-syzkaller #0 [ 66.123609][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 66.133750][ T6354] Call Trace: [ 66.137022][ T6354] <TASK> [ 66.139953][ T6354] dump_stack_lvl+0x241/0x360 [ 66.144830][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.150118][ T6354] ? __pfx__printk+0x10/0x10 [ 66.154704][ T6354] ? preempt_schedule+0xe1/0xf0 [ 66.159550][ T6354] ? vscnprintf+0x5d/0x90 [ 66.163892][ T6354] panic+0x349/0x880 [ 66.167783][ T6354] ? check_panic_on_warn+0x21/0xb0 [ 66.172983][ T6354] ? __pfx_panic+0x10/0x10 [ 66.177493][ T6354] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 66.183480][ T6354] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 66.189886][ T6354] ? print_report+0x502/0x550 [ 66.194569][ T6354] check_panic_on_warn+0x86/0xb0 [ 66.199540][ T6354] ? binder_add_device+0x5f/0xa0 [ 66.204477][ T6354] end_report+0x77/0x160 [ 66.208725][ T6354] kasan_report+0x154/0x180 [ 66.213238][ T6354] ? binder_add_device+0x5f/0xa0 [ 66.218171][ T6354] binder_add_device+0x5f/0xa0 [ 66.222935][ T6354] binderfs_binder_device_create+0x7bf/0x9c0 [ 66.228916][ T6354] binderfs_fill_super+0x944/0xd90 [ 66.234025][ T6354] ? __pfx_binderfs_fill_super+0x10/0x10 [ 66.239658][ T6354] ? shrinker_register+0x160/0x230 [ 66.244772][ T6354] ? sget_fc+0x909/0x9c0 [ 66.249010][ T6354] ? __pfx_set_anon_super_fc+0x10/0x10 [ 66.254461][ T6354] ? __pfx_binderfs_fill_super+0x10/0x10 [ 66.260092][ T6354] get_tree_nodev+0xb7/0x140 [ 66.264705][ T6354] vfs_get_tree+0x90/0x2b0 [ 66.269125][ T6354] do_new_mount+0x2be/0xb40 [ 66.273717][ T6354] ? __pfx_do_new_mount+0x10/0x10 [ 66.278735][ T6354] __se_sys_mount+0x2d6/0x3c0 [ 66.283413][ T6354] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 66.289399][ T6354] ? __pfx___se_sys_mount+0x10/0x10 [ 66.294612][ T6354] ? do_syscall_64+0x100/0x230 [ 66.299368][ T6354] ? __x64_sys_mount+0x20/0xc0 [ 66.304212][ T6354] do_syscall_64+0xf3/0x230 [ 66.310882][ T6354] ? clear_bhb_loop+0x35/0x90 [ 66.315557][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.321531][ T6354] RIP: 0033:0x7fb462f874ca [ 66.325943][ T6354] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.345997][ T6354] RSP: 002b:00007ffcdfe58a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.354423][ T6354] RAX: ffffffffffffffda RBX: 00007fb463001ecb RCX: 00007fb462f874ca [ 66.362388][ T6354] RDX: 00007fb46300ec27 RSI: 00007fb463001ecb RDI: 00007fb46300ec27 [ 66.370513][ T6354] RBP: 00007fb4630020c3 R08: 0000000000000000 R09: 00000000000001ff [ 66.378495][ T6354] R10: 0000000000000000 R11: 0000000000000246 R12: 000055558a9e24a8 [ 66.386923][ T6354] R13: 00007ffcdfe58af8 R14: 0000000000000009 R15: 0000000000000000 [ 66.394899][ T6354] </TASK> [ 67.523666][ T6354] Shutting down cpus with NMI [ 67.528988][ T6354] Kernel Offset: disabled [ 67.533326][ T6354] Rebooting in 86400 seconds..