Backtrace

kernel BUG at include/linux/mmap_lock.h:156!
invalid opcode: 0000 [#1] PREEMPT SMP NOPTI
CPU: 1 PID: 1115 Comm: vold Not tainted 5.18.18-200.fc36.x86_64 #1
Hardware name: HUAWEI BOHB-WAX9/BOHB-WAX9-PCB, BIOS 1.26 04/27/2021
RIP: 0010:find_vma+0x34/0x80
Code: 48 83 ec 08 48 8b 47 78 48 85 c0 74 18 48 89 f3 e8 c1 93 fe ff 48 85 c0 74 12 48 83 c4 08 5b 5d c3 cc cc cc cc e8 02 c8 a0 00 <0f> 0b 48 8b 55 08 48 85 d2 75 15 eb e3 48 8d 42 e0 48 3b 5a e0 73
RSP: 0018:ffffae6f8145ba48 EFLAGS: 00010292
RAX: 0000000000000365 RBX: ffff95ee899dae90 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffffffffa666edec RDI: 00000000ffffffff
RBP: ffff95ee80f1cc80 R08: 0000000000000000 R09: ffffae6f8145b748
R10: 0000000000000003 R11: ffffffffa6f453e8 R12: 0000000000000000
R13: 0000000000000000 R14: ffff95ee89bbf5a8 R15: 00007f3e5ebff000
FS:  00007f2590056010(0000) GS:ffff95f1d2640000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f258f4f9008 CR3: 0000000104e82002 CR4: 00000000003706e0
Call Trace:
 <TASK>
 binder_alloc_new_buf+0x4a/0x850
 ? binder_transaction+0x8a6/0x2fc0
 ? kmem_cache_alloc_trace+0x16c/0x2b0
 binder_transaction+0x999/0x2fc0
 ? copy_from_kernel_nofault+0x1d/0xe0
 ? binder_open+0x48/0x370
 ? post_alloc_hook+0xc8/0x150
 ? get_page_from_freelist+0x563/0x1530
 binder_thread_write+0x476/0x13c0
 ? __mod_node_page_state+0x72/0xc0
 ? _raw_spin_unlock+0x15/0x30
 binder_ioctl+0x972/0x2be0
 ? ioctl_has_perm.constprop.0.isra.0+0xaa/0xf0
 __x64_sys_ioctl+0x8d/0xd0
 do_syscall_64+0x58/0x80
 ? exc_page_fault+0x70/0x170
 entry_SYSCALL_64_after_hwframe+0x61/0xcb
RIP: 0033:0x7f258fc36f17
Code: cc cc cc b8 60 00 00 00 0f 05 48 3d 01 f0 ff ff 72 09 f7 d8 89 c7 e8 c8 fc ff ff c3 cc cc cc cc cc cc cc b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 72 09 f7 d8 89 c7 e8 a8 fc ff ff c3 cc cc cc cc
RSP: 002b:00007fffcb119438 EFLAGS: 00000206 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f258fc36f17
RDX: 00007fffcb119530 RSI: 00000000c0306201 RDI: 0000000000000006
RBP: 00000000fffffff7 R08: 000000005f504e47 R09: 00007fffcb1196e0
R10: 0000000080000003 R11: 0000000000000206 R12: 00007f258ea26000
R13: 00007fffcb119530 R14: 00007f258ea260a8 R15: 00007f258ea26120
 </TASK>
Modules linked in: bpf_preload veth loop nft_masq nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set bridge stp llc nf_tables nfnetlink qrtr bnep sunrpc snd_sof_pci_intel_cnl snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence snd_sof_intel_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof binfmt_misc snd_sof_utils soundwire_bus snd_soc_skl snd_hda_codec_hdmi snd_soc_hdac_hda snd_hda_ext_core snd_soc_sst_ipc snd_soc_sst_dsp snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic iwlmvm snd_compress ac97_bus snd_pcm_dmaengine snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec intel_tcc_cooling mac80211 x86_pkg_temp_thermal snd_hda_core intel_powerclamp coretemp snd_hwdep mei_pxp iTCO_wdt intel_pmc_bxt
 iTCO_vendor_support mei_hdcp libarc4 kvm_intel vfat snd_seq fat intel_rapl_msr snd_seq_device kvm btusb btrtl iwlwifi irqbypass uvcvideo snd_pcm btbcm rapl btintel videobuf2_vmalloc intel_cstate videobuf2_memops huawei_wmi intel_uncore iwlmei ledtrig_audio snd_timer btmtk videobuf2_v4l2 sparse_keymap snd wmi_bmof i2c_i801 pcspkr i2c_smbus cfg80211 soundcore videobuf2_common spi_pxa2xx_platform bluetooth dw_dmac videodev mei_me idma64 processor_thermal_device_pci_legacy st_accel_i2c joydev processor_thermal_device st_sensors_i2c st_accel processor_thermal_rfim mc st_sensors mei processor_thermal_mbox ecdh_generic industrialio_triggered_buffer processor_thermal_rapl rfkill intel_pch_thermal intel_rapl_common kfifo_buf intel_soc_dts_iosf industrialio int3400_thermal int3403_thermal acpi_thermal_rel acpi_pad int340x_thermal_zone zram i915 nvme hid_multitouch drm_buddy crct10dif_pclmul crc32_pclmul crc32c_intel nvme_core ghash_clmulni_intel drm_dp_helper serio_raw i2c_hid_acpi
 ttm wmi i2c_hid video pinctrl_cannonlake ip6_tables ip_tables fuse