last executing test programs:

1.66112592s ago: executing program 4 (id=281):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls', 0x0, 0x0)

1.66003578s ago: executing program 4 (id=285):
migrate_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000))

1.618884177s ago: executing program 4 (id=291):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log', 0x0, 0x0)

1.618329232s ago: executing program 4 (id=294):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer', 0x800, 0x0)

1.571092354s ago: executing program 4 (id=301):
stat(&(0x7f0000000000), &(0x7f0000000000))

1.561732707s ago: executing program 4 (id=303):
msgrcv(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0)

1.512409423s ago: executing program 0 (id=306):
landlock_create_ruleset(&(0x7f0000000000), 0x0, 0x0)

1.511529899s ago: executing program 0 (id=311):
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000), &(0x7f0000000000))

1.488596724s ago: executing program 0 (id=313):
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$loop(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$loop(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$loop(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$loop(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$loop(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$loop(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$loop(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x800)

1.430178023s ago: executing program 0 (id=320):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats', 0x0, 0x0)

1.376487093s ago: executing program 0 (id=324):
renameat2(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0)

1.375643295s ago: executing program 0 (id=325):
pause()

276.31528ms ago: executing program 1 (id=451):
newfstatat(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000000), 0x0)

274.944532ms ago: executing program 1 (id=455):
eventfd2(0x0, 0x0)

258.907077ms ago: executing program 1 (id=457):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1', 0x800, 0x0)

124.499393ms ago: executing program 3 (id=465):
socket$inet6_mptcp(0xa, 0x1, 0x106)

123.424794ms ago: executing program 2 (id=468):
wait4(0x0, 0x0, 0x0, 0x0)

123.263731ms ago: executing program 3 (id=469):
syz_open_dev$drirender(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$drirender(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$drirender(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$drirender(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$drirender(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$drirender(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$drirender(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$drirender(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$drirender(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$drirender(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$drirender(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$drirender(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$drirender(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$drirender(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$drirender(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$drirender(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$drirender(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$drirender(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$drirender(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$drirender(&(0x7f0000000500), 0x4, 0x800)

120.473715ms ago: executing program 2 (id=470):
fspick(0xffffffffffffffff, &(0x7f0000000000), 0x0)

97.078251ms ago: executing program 2 (id=471):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control', 0x2, 0x0)

51.734793ms ago: executing program 3 (id=472):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock', 0x800, 0x0)

51.548573ms ago: executing program 1 (id=473):
ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0)

51.468135ms ago: executing program 2 (id=474):
chmod(&(0x7f0000000000), 0x0)

51.341072ms ago: executing program 1 (id=475):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput', 0x800, 0x0)

51.242053ms ago: executing program 3 (id=476):
socket$igmp(0x2, 0x3, 0x2)

51.134895ms ago: executing program 2 (id=477):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce', 0x800, 0x0)

51.074639ms ago: executing program 3 (id=478):
fgetxattr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000), 0x0)

387.934µs ago: executing program 1 (id=479):
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)

224.596µs ago: executing program 2 (id=480):
execve(&(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000))

0s ago: executing program 3 (id=481):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
[   54.917389][ T5821] cgroup: Unknown subsys name 'net'
[   55.060996][ T5821] cgroup: Unknown subsys name 'cpuset'
[   55.068009][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.361200][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.576369][ T6202] mmap: syz.3.356 (6202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   61.065037][ T6261] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.148756][ T6269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.969515][ T6332] =========
** replaying previous printk message **
[   61.969515][ T6332] ==================================================================
[   61.969560][ T6332] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[   61.969613][ T6332] Write of size 8 at addr ffff888145b0c408 by task syz-executor/6332
[   61.969637][ T6332] 
[   61.969671][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250114-syzkaller #0
[   61.969690][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   61.969703][ T6332] Call Trace:
[   61.969710][ T6332]  <TASK>
[   61.969717][ T6332]  dump_stack_lvl+0x241/0x360
[   61.969736][ T6332]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.969753][ T6332]  ? __pfx__printk+0x10/0x10
[   61.969775][ T6332]  ? _printk+0xd5/0x120
[   61.969795][ T6332]  ? __virt_addr_valid+0x183/0x530
[   61.969816][ T6332]  ? __virt_addr_valid+0x183/0x530
[   61.969837][ T6332]  print_report+0x169/0x550
[   61.969859][ T6332]  ? __virt_addr_valid+0x183/0x530
[   61.969879][ T6332]  ? __virt_addr_valid+0x183/0x530
[   61.969898][ T6332]  ? __virt_addr_valid+0x45f/0x530
[   61.969918][ T6332]  ? __phys_addr+0xba/0x170
[   61.969938][ T6332]  ? binder_add_device+0x5f/0xa0
[   61.969954][ T6332]  kasan_report+0x143/0x180
[   61.969975][ T6332]  ? binder_add_device+0x5f/0xa0
[   61.969994][ T6332]  binder_add_device+0x5f/0xa0
[   61.970012][ T6332]  binderfs_binder_device_create+0x7bf/0x9c0
[   61.970033][ T6332]  binderfs_fill_super+0x944/0xd90
[   61.970052][ T6332]  ? __pfx_binderfs_fill_super+0x10/0x10
[   61.970078][ T6332]  ? shrinker_register+0x160/0x230
[   61.970098][ T6332]  ? sget_fc+0x909/0x9c0
[   61.970117][ T6332]  ? __pfx_set_anon_super_fc+0x10/0x10
[   61.970135][ T6332]  ? __pfx_binderfs_fill_super+0x10/0x10
[   61.970152][ T6332]  get_tree_nodev+0xb7/0x140
[   61.970172][ T6332]  vfs_get_tree+0x90/0x2b0
[   61.970193][ T6332]  do_new_mount+0x2be/0xb40
[   61.970210][ T6332]  ? __pfx_do_new_mount+0x10/0x10
[   61.970229][ T6332]  __se_sys_mount+0x2d6/0x3c0
[   61.970244][ T6332]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   61.970266][ T6332]  ? __pfx___se_sys_mount+0x10/0x10
[   61.970282][ T6332]  ? lockdep_hardirqs_on+0x99/0x150
[   61.970300][ T6332]  ? __x64_sys_mount+0x20/0xc0
[   61.970315][ T6332]  do_syscall_64+0xf3/0x230
[   61.970332][ T6332]  ? clear_bhb_loop+0x35/0x90
[   61.970354][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.970373][ T6332] RIP: 0033:0x7f96bcb874ca
[   61.970394][ T6332] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   61.970407][ T6332] RSP: 002b:00007ffc8edf72e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   61.970425][ T6332] RAX: ffffffffffffffda RBX: 00007f96bcc01ecb RCX: 00007f96bcb874ca
[   61.970437][ T6332] RDX: 00007f96bcc0ec27 RSI: 00007f96bcc01ecb RDI: 00007f96bcc0ec27
[   61.970449][ T6332] RBP: 00007ffc8edf7360 R08: 0000000000000000 R09: 0000000000000000
[   61.970459][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8edf7360
[   61.970470][ T6332] R13: 00007ffc8edf7368 R14: 0000000000000009 R15: 0000000000000000
[   61.970486][ T6332]  </TASK>
[   61.970492][ T6332] 
[   61.970828][ T6332] Allocated by task 5834:
[   61.970846][ T6332]  kasan_save_track+0x3f/0x80
[   61.970875][ T6332]  __kasan_kmalloc+0x98/0xb0
[   61.970903][ T6332]  __kmalloc_cache_noprof+0x243/0x390
[   61.970929][ T6332]  binderfs_binder_device_create+0x16c/0x9c0
[   61.970954][ T6332]  binderfs_fill_super+0x944/0xd90
[   61.970978][ T6332]  get_tree_nodev+0xb7/0x140
[   61.971005][ T6332]  vfs_get_tree+0x90/0x2b0
[   61.971032][ T6332]  do_new_mount+0x2be/0xb40
[   61.971055][ T6332]  __se_sys_mount+0x2d6/0x3c0
[   61.971077][ T6332]  do_syscall_64+0xf3/0x230
[   61.971102][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.971131][ T6332] 
[   61.971145][ T6332] Freed by task 5834:
[   61.971161][ T6332]  kasan_save_track+0x3f/0x80
[   61.971188][ T6332]  kasan_save_free_info+0x40/0x50
[   61.971214][ T6332]  __kasan_slab_free+0x59/0x70
[   61.971241][ T6332]  kfree+0x196/0x430
[   61.971263][ T6332]  evict+0x4e8/0x9a0
[   61.971290][ T6332]  __dentry_kill+0x20d/0x630
[   61.971314][ T6332]  shrink_kill+0xa9/0x2c0
[   61.971338][ T6332]  shrink_dentry_list+0x2c0/0x5b0
[   61.971362][ T6332]  shrink_dcache_parent+0xcb/0x3b0
[   61.971388][ T6332]  do_one_tree+0x23/0xe0
[   61.971412][ T6332]  shrink_dcache_for_umount+0xb4/0x180
[   61.971435][ T6332]  generic_shutdown_super+0x6a/0x2d0
[   61.971459][ T6332]  kill_litter_super+0x76/0xb0
[   61.971483][ T6332]  binderfs_kill_super+0x44/0x90
[   61.971505][ T6332]  deactivate_locked_super+0xc4/0x130
[   61.971529][ T6332]  cleanup_mnt+0x41f/0x4b0
[   61.971558][ T6332]  task_work_run+0x24f/0x310
[   61.971585][ T6332]  do_exit+0xa2a/0x28e0
[   61.971609][ T6332]  do_group_exit+0x207/0x2c0
[   61.971634][ T6332]  get_signal+0x16b2/0x1750
[   61.971656][ T6332]  arch_do_signal_or_restart+0x96/0x860
[   61.971681][ T6332]  syscall_exit_to_user_mode+0xce/0x340
[   61.971706][ T6332]  do_syscall_64+0x100/0x230
[   61.971728][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.971754][ T6332] 
[   61.971767][ T6332] The buggy address belongs to the object at ffff888145b0c400
[   61.971767][ T6332]  which belongs to the cache kmalloc-512 of size 512
[   61.971789][ T6332] The buggy address is located 8 bytes inside of
[   61.971789][ T6332]  freed 512-byte region [ffff888145b0c400, ffff888145b0c600)
[   61.971815][ T6332] 
[   61.971828][ T6332] The buggy address belongs to the physical page:
[   61.971851][ T6332] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x145b0c
[   61.971881][ T6332] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   61.971903][ T6332] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   61.971931][ T6332] page_type: f5(slab)
[   61.971955][ T6332] raw: 057ff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001
[   61.971978][ T6332] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   61.972001][ T6332] head: 057ff00000000040 ffff88801ac41c80 0000000000000000 dead000000000001
[   61.972023][ T6332] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   61.972046][ T6332] head: 057ff00000000002 ffffea000516c301 ffffffffffffffff 0000000000000000
[   61.972068][ T6332] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[   61.972086][ T6332] page dumped because: kasan: bad access detected
[   61.972106][ T6332] page_owner tracks the page as allocated
[   61.972122][ T6332] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10067316124, free_ts 0
[   61.972160][ T6332]  post_alloc_hook+0x1f4/0x240
[   61.972184][ T6332]  get_page_from_freelist+0x365c/0x37a0
[   61.972210][ T6332]  __alloc_frozen_pages_noprof+0x292/0x710
[   61.972237][ T6332]  alloc_pages_mpol+0x311/0x660
[   61.972267][ T6332]  allocate_slab+0x8f/0x3a0
[   61.972294][ T6332]  ___slab_alloc+0xc27/0x14a0
[   61.972319][ T6332]  __slab_alloc+0x58/0xa0
[   61.972344][ T6332]  __kmalloc_cache_noprof+0x27b/0x390
[   61.972368][ T6332]  usb_cache_string+0x63/0x100
[   61.972394][ T6332]  usb_new_device+0x2ab/0x19a0
[   61.972418][ T6332]  register_root_hub+0x25c/0x550
[   61.972448][ T6332]  usb_add_hcd+0xb49/0x1110
[   61.972478][ T6332]  vhci_hcd_probe+0x167/0x3c0
[   61.972503][ T6332]  platform_probe+0x13a/0x1c0
[   61.972532][ T6332]  really_probe+0x2b9/0xad0
[   61.972561][ T6332]  __driver_probe_device+0x1a2/0x390
[   61.972586][ T6332] page_owner free stack trace missing
[   61.972602][ T6332] 
[   61.972616][ T6332] Memory state around the buggy address:
[   61.972635][ T6332]  ffff888145b0c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.972656][ T6332]  ffff888145b0c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.972676][ T6332] >ffff888145b0c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.972694][ T6332]                       ^
[   61.972713][ T6332]  ffff888145b0c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.972734][ T6332]  ffff888145b0c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.972752][ T6332] ==================================================================
[   61.975501][ T6332] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   62.763619][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250114-syzkaller #0
[   62.773951][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   62.784371][ T6332] Call Trace:
[   62.787644][ T6332]  <TASK>
[   62.790569][ T6332]  dump_stack_lvl+0x241/0x360
[   62.795254][ T6332]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.800441][ T6332]  ? __pfx__printk+0x10/0x10
[   62.805029][ T6332]  ? preempt_schedule+0xe1/0xf0
[   62.809874][ T6332]  ? vscnprintf+0x5d/0x90
[   62.814375][ T6332]  panic+0x349/0x880
[   62.818275][ T6332]  ? check_panic_on_warn+0x21/0xb0
[   62.823382][ T6332]  ? __pfx_panic+0x10/0x10
[   62.827796][ T6332]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   62.833776][ T6332]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   62.840097][ T6332]  ? print_report+0x502/0x550
[   62.844772][ T6332]  check_panic_on_warn+0x86/0xb0
[   62.849711][ T6332]  ? binder_add_device+0x5f/0xa0
[   62.854649][ T6332]  end_report+0x77/0x160
[   62.858889][ T6332]  kasan_report+0x154/0x180
[   62.863386][ T6332]  ? binder_add_device+0x5f/0xa0
[   62.868315][ T6332]  binder_add_device+0x5f/0xa0
[   62.873070][ T6332]  binderfs_binder_device_create+0x7bf/0x9c0
[   62.879048][ T6332]  binderfs_fill_super+0x944/0xd90
[   62.884154][ T6332]  ? __pfx_binderfs_fill_super+0x10/0x10
[   62.889890][ T6332]  ? shrinker_register+0x160/0x230
[   62.894998][ T6332]  ? sget_fc+0x909/0x9c0
[   62.899237][ T6332]  ? __pfx_set_anon_super_fc+0x10/0x10
[   62.904695][ T6332]  ? __pfx_binderfs_fill_super+0x10/0x10
[   62.910409][ T6332]  get_tree_nodev+0xb7/0x140
[   62.914993][ T6332]  vfs_get_tree+0x90/0x2b0
[   62.919404][ T6332]  do_new_mount+0x2be/0xb40
[   62.923906][ T6332]  ? __pfx_do_new_mount+0x10/0x10
[   62.928922][ T6332]  __se_sys_mount+0x2d6/0x3c0
[   62.933587][ T6332]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   62.939563][ T6332]  ? __pfx___se_sys_mount+0x10/0x10
[   62.944750][ T6332]  ? lockdep_hardirqs_on+0x99/0x150
[   62.949949][ T6332]  ? __x64_sys_mount+0x20/0xc0
[   62.954709][ T6332]  do_syscall_64+0xf3/0x230
[   62.959224][ T6332]  ? clear_bhb_loop+0x35/0x90
[   62.964032][ T6332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.969944][ T6332] RIP: 0033:0x7f96bcb874ca
[   62.974363][ T6332] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   62.993959][ T6332] RSP: 002b:00007ffc8edf72e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   63.002368][ T6332] RAX: ffffffffffffffda RBX: 00007f96bcc01ecb RCX: 00007f96bcb874ca
[   63.010433][ T6332] RDX: 00007f96bcc0ec27 RSI: 00007f96bcc01ecb RDI: 00007f96bcc0ec27
[   63.018404][ T6332] RBP: 00007ffc8edf7360 R08: 0000000000000000 R09: 0000000000000000
[   63.026392][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8edf7360
[   63.034375][ T6332] R13: 00007ffc8edf7368 R14: 0000000000000009 R15: 0000000000000000
[   63.042353][ T6332]  </TASK>
[   64.178022][ T6332] Shutting down cpus with NMI
[   64.183260][ T6332] Kernel Offset: disabled
[   64.187667][ T6332] Rebooting in 86400 seconds..