Backtrace

kernel BUG at include/linux/mmap_lock.h:156!
invalid opcode: 0000 [#1] PREEMPT SMP PTI
CPU: 1 PID: 1381 Comm: vold Tainted: G           OE     5.18.18-200.fc36.x86_64 #1
Hardware name: Gigabyte Technology Co., Ltd. Z97X-Gaming 3/Z97X-Gaming 3, BIOS F7 09/18/2015
RIP: 0010:find_vma+0x34/0x80
Code: 48 83 ec 08 48 8b 47 78 48 85 c0 74 18 48 89 f3 e8 c1 93 fe ff 48 85 c0 74 12 48 83 c4 08 5b 5d c3 cc cc cc cc e8 02 c8 a0 00 <0f> 0b 48 8b 55 08 48 85 d2 75 15 eb e3 48 8d 42 e0 48 3b 5a e0 73
RSP: 0018:ffffb772c0c8f9f8 EFLAGS: 00010296
RAX: 0000000000000365 RBX: ffff8bda1fa84a10 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffff8366edec RDI: 00000000ffffffff
RBP: ffff8bda08fe72c0 R08: 0000000000000000 R09: ffffb772c0c8f6f8
R10: 0000000000000003 R11: ffffffff83f453e8 R12: 0000000000000000
R13: 0000000000000000 R14: ffff8bda03d405a8 R15: 00007f8901549000
FS:  00007fb8baa84010(0000) GS:ffff8bdc14240000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb8b9d0d008 CR3: 000000011c596006 CR4: 00000000001706e0
Call Trace:
 <TASK>
 binder_alloc_new_buf+0x4a/0x850
 ? binder_transaction+0x8a6/0x2fc0
 ? kmem_cache_alloc_trace+0x16c/0x2b0
 binder_transaction+0x999/0x2fc0
 ? memcg_slab_post_alloc_hook+0x185/0x2c0
 ? post_alloc_hook+0xc8/0x150
 ? get_page_from_freelist+0x563/0x1530
 binder_thread_write+0x476/0x13c0
 ? get_page_from_freelist+0x563/0x1530
 ? _raw_spin_unlock+0x15/0x30
 binder_ioctl+0x972/0x2be0
 ? folio_add_lru+0x8b/0x100
 ? _raw_spin_unlock+0x15/0x30
 ? wp_page_copy+0x2ed/0x590
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 __x64_sys_ioctl+0x90/0xd0
 do_syscall_64+0x5b/0x80
 ? do_user_addr_fault+0x1e2/0x670
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7fb8ba33ef17
Code: cc cc cc b8 60 00 00 00 0f 05 48 3d 01 f0 ff ff 72 09 f7 d8 89 c7 e8 c8 fc ff ff c3 cc cc cc cc cc cc cc b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 72 09 f7 d8 89 c7 e8 a8 fc ff ff c3 cc cc cc cc
RSP: 002b:00007ffd06bb5118 EFLAGS: 00000206 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8ba33ef17
RDX: 00007ffd06bb5210 RSI: 00000000c0306201 RDI: 0000000000000005
RBP: 00000000fffffff7 R08: 000000005f504e47 R09: 00007ffd06bb53c0
R10: 0000000080000003 R11: 0000000000000206 R12: 00007fb8b9426000
R13: 00007ffd06bb5210 R14: 00007fb8b94260a8 R15: 00007fb8b9426120
 </TASK>
Modules linked in: bpf_preload nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject veth nft_ct loop nft_masq nft_chain_nat nf_nat nf_conntrack ip_set nf_defrag_ipv6 nf_defrag_ipv4 bridge stp llc nf_tables nfnetlink vboxnetadp(OE) vboxnetflt(OE) vboxdrv(OE) qrtr sunrpc vfat fat mt7601u intel_rapl_msr intel_rapl_common mac80211 snd_hda_codec_realtek x86_pkg_temp_thermal snd_hda_codec_generic intel_powerclamp uvcvideo ledtrig_audio snd_hda_codec_hdmi coretemp iTCO_wdt intel_pmc_bxt kvm_intel mei_hdcp iTCO_vendor_support videobuf2_vmalloc at24 videobuf2_memops mei_pxp snd_hda_intel libarc4 videobuf2_v4l2 snd_intel_dspcfg cfg80211 kvm snd_soc_rt5640 videobuf2_common snd_soc_rl6231 snd_intel_sdw_acpi snd_soc_core videodev snd_hda_codec irqbypass snd_compress rapl snd_hda_core ac97_bus mc joydev intel_cstate snd_hwdep snd_pcm_dmaengine rfkill mxm_wmi intel_uncore snd_seq
 pcspkr i2c_i801 snd_seq_device mei_me i2c_smbus lpc_ich snd_pcm mei snd_timer snd soundcore acpi_pad zram i915 crct10dif_pclmul crc32_pclmul crc32c_intel drm_buddy ghash_clmulni_intel drm_dp_helper alx mdio ttm wmi video ip6_tables ip_tables fuse