last executing test programs:
1.099327545s ago: executing program 3 (id=93):
socket$inet_sctp(0x2, 0x1, 0x84)
1.036076901s ago: executing program 3 (id=99):
readahead(0xffffffffffffffff, 0x0, 0x0)
1.035212994s ago: executing program 3 (id=102):
socket(0x1, 0x1, 0x0)
1.025880471s ago: executing program 3 (id=105):
delete_module(&(0x7f0000000000), 0x0)
964.032765ms ago: executing program 3 (id=109):
inotify_init1(0x0)
963.106645ms ago: executing program 3 (id=114):
pause()
600.996758ms ago: executing program 4 (id=170):
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
547.619491ms ago: executing program 4 (id=175):
syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vcsu(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vcsu(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vcsu(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vcsu(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vcsu(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vcsu(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vcsu(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vcsu(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vcsu(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vcsu(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vcsu(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vcsu(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vcsu(&(0x7f0000000500), 0x4, 0x800)
542.812037ms ago: executing program 1 (id=177):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/mk_contexts', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/mk_contexts', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/mk_contexts', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/mk_contexts', 0x800, 0x0)
542.661168ms ago: executing program 4 (id=178):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/syslog', 0x2, 0x0)
487.952257ms ago: executing program 2 (id=181):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/sync/sw_sync', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/sync/sw_sync', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/sync/sw_sync', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/sync/sw_sync', 0x800, 0x0)
487.889095ms ago: executing program 4 (id=182):
splice(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
487.800677ms ago: executing program 2 (id=183):
uname(&(0x7f0000000000))
487.752247ms ago: executing program 1 (id=184):
getpgrp(0x0)
487.707643ms ago: executing program 4 (id=185):
listen(0xffffffffffffffff, 0x0)
476.636896ms ago: executing program 2 (id=186):
getgroups(0x0, &(0x7f0000000000))
471.448314ms ago: executing program 1 (id=187):
sysinfo(&(0x7f0000000000))
420.226002ms ago: executing program 4 (id=188):
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)
420.054009ms ago: executing program 2 (id=189):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
419.796886ms ago: executing program 1 (id=190):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/monitor_on', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/monitor_on', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/monitor_on', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/monitor_on', 0x800, 0x0)
409.330704ms ago: executing program 1 (id=192):
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000000), 0x0)
409.267617ms ago: executing program 2 (id=193):
pkey_free(0xffffffffffffffff)
379.603591ms ago: executing program 1 (id=194):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
332.269544ms ago: executing program 2 (id=195):
socket$inet_smc(0x2b, 0x1, 0x0)
72.171473ms ago: executing program 0 (id=206):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold', 0x2, 0x0)
72.045717ms ago: executing program 0 (id=207):
epoll_wait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
63.554128ms ago: executing program 0 (id=208):
io_pgetevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
55.57347ms ago: executing program 0 (id=209):
openat(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/damon/kdamond_pid', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/damon/kdamond_pid', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/damon/kdamond_pid', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/damon/kdamond_pid', 0x800, 0x0)
137.915µs ago: executing program 0 (id=210):
syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$media(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$media(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$media(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$media(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$media(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$media(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$media(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$media(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$media(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$media(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$media(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$media(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$media(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$media(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$media(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$media(&(0x7f0000000500), 0x4, 0x800)
0s ago: executing program 0 (id=211):
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x1)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x800)
syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x1, 0x1)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x800)
syz_open_dev$vim2m(&(0x7f0000000240), 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x1)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2, 0x2)
syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x800)
syz_open_dev$vim2m(&(0x7f0000000340), 0x3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000380), 0x3, 0x1)
syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2)
syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x800)
syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x0)
syz_open_dev$vim2m(&(0x7f0000000480), 0x4, 0x1)
syz_open_dev$vim2m(&(0x7f00000004c0), 0x4, 0x2)
syz_open_dev$vim2m(&(0x7f0000000500), 0x4, 0x800)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts.
[ 58.215501][ T5824] cgroup: Unknown subsys name 'net'
[ 58.383827][ T5824] cgroup: Unknown subsys name 'cpuset'
[ 58.391840][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 59.763658][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 62.564510][ T5975] mmap: syz.4.128 (5975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 62.815776][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 63.482229][ T6048] ==================================================================
[ 63.482264][ T6048] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0
[ 63.482315][ T6048] Write of size 8 at addr ffff8880330f9808 by task syz-executor/6048
[ 63.482339][ T6048]
[ 63.482373][ T6048] CPU: 1 UID: 0 PID: 6048 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250114-syzkaller #0
[ 63.482391][ T6048] Hardware name: Google Google Compute Engi
** replaying previous printk message **
[ 63.482391][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 63.482404][ T6048] Call Trace:
[ 63.482411][ T6048]
[ 63.482418][ T6048] dump_stack_lvl+0x241/0x360
[ 63.482437][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10
[ 63.482460][ T6048] ? __pfx__printk+0x10/0x10
[ 63.482481][ T6048] ? _printk+0xd5/0x120
[ 63.482500][ T6048] ? __virt_addr_valid+0x183/0x530
[ 63.482521][ T6048] ? __virt_addr_valid+0x183/0x530
[ 63.482541][ T6048] print_report+0x169/0x550
[ 63.482563][ T6048] ? __virt_addr_valid+0x183/0x530
[ 63.482583][ T6048] ? __virt_addr_valid+0x183/0x530
[ 63.482602][ T6048] ? __virt_addr_valid+0x45f/0x530
[ 63.482621][ T6048] ? __phys_addr+0xba/0x170
[ 63.482641][ T6048] ? binder_add_device+0x5f/0xa0
[ 63.482658][ T6048] kasan_report+0x143/0x180
[ 63.482679][ T6048] ? binder_add_device+0x5f/0xa0
[ 63.482699][ T6048] binder_add_device+0x5f/0xa0
[ 63.482715][ T6048] binderfs_binder_device_create+0x7bf/0x9c0
[ 63.482744][ T6048] binderfs_fill_super+0x944/0xd90
[ 63.482763][ T6048] ? __pfx_binderfs_fill_super+0x10/0x10
[ 63.482788][ T6048] ? shrinker_register+0x160/0x230
[ 63.482807][ T6048] ? sget_fc+0x909/0x9c0
[ 63.482826][ T6048] ? __pfx_set_anon_super_fc+0x10/0x10
[ 63.482845][ T6048] ? __pfx_binderfs_fill_super+0x10/0x10
[ 63.482862][ T6048] get_tree_nodev+0xb7/0x140
[ 63.482881][ T6048] vfs_get_tree+0x90/0x2b0
[ 63.482900][ T6048] do_new_mount+0x2be/0xb40
[ 63.482917][ T6048] ? __pfx_do_new_mount+0x10/0x10
[ 63.482935][ T6048] __se_sys_mount+0x2d6/0x3c0
[ 63.482951][ T6048] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 63.482972][ T6048] ? __pfx___se_sys_mount+0x10/0x10
[ 63.482988][ T6048] ? do_syscall_64+0x100/0x230
[ 63.483007][ T6048] ? __x64_sys_mount+0x20/0xc0
[ 63.483023][ T6048] do_syscall_64+0xf3/0x230
[ 63.483045][ T6048] ? clear_bhb_loop+0x35/0x90
[ 63.483066][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.483083][ T6048] RIP: 0033:0x7f99e21874ca
[ 63.483101][ T6048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 63.483112][ T6048] RSP: 002b:00007fffcc82afb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 63.483128][ T6048] RAX: ffffffffffffffda RBX: 00007f99e2201ecb RCX: 00007f99e21874ca
[ 63.483137][ T6048] RDX: 00007f99e220ec27 RSI: 00007f99e2201ecb RDI: 00007f99e220ec27
[ 63.483146][ T6048] RBP: 00007f99e22020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 63.483155][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99e21e41c8
[ 63.483164][ T6048] R13: 00007f99e21e41a8 R14: 0000000000000009 R15: 0000000000000000
[ 63.483179][ T6048]
[ 63.483186][ T6048]
[ 63.483466][ T6048] Allocated by task 5835:
[ 63.483481][ T6048] kasan_save_track+0x3f/0x80
[ 63.483505][ T6048] __kasan_kmalloc+0x98/0xb0
[ 63.483527][ T6048] __kmalloc_cache_noprof+0x243/0x390
[ 63.483549][ T6048] binderfs_binder_device_create+0x16c/0x9c0
[ 63.483569][ T6048] binderfs_fill_super+0x944/0xd90
[ 63.483588][ T6048] get_tree_nodev+0xb7/0x140
[ 63.483611][ T6048] vfs_get_tree+0x90/0x2b0
[ 63.483634][ T6048] do_new_mount+0x2be/0xb40
[ 63.483656][ T6048] __se_sys_mount+0x2d6/0x3c0
[ 63.483679][ T6048] do_syscall_64+0xf3/0x230
[ 63.483704][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.483732][ T6048]
[ 63.483750][ T6048] Freed by task 5835:
[ 63.483764][ T6048] kasan_save_track+0x3f/0x80
[ 63.483787][ T6048] kasan_save_free_info+0x40/0x50
[ 63.483813][ T6048] __kasan_slab_free+0x59/0x70
[ 63.483840][ T6048] kfree+0x196/0x430
[ 63.483862][ T6048] evict+0x4e8/0x9a0
[ 63.483887][ T6048] __dentry_kill+0x20d/0x630
[ 63.483912][ T6048] shrink_kill+0xa9/0x2c0
[ 63.483936][ T6048] shrink_dentry_list+0x2c0/0x5b0
[ 63.483960][ T6048] shrink_dcache_parent+0xcb/0x3b0
[ 63.483984][ T6048] do_one_tree+0x23/0xe0
[ 63.484006][ T6048] shrink_dcache_for_umount+0xb4/0x180
[ 63.484030][ T6048] generic_shutdown_super+0x6a/0x2d0
[ 63.484056][ T6048] kill_litter_super+0x76/0xb0
[ 63.484083][ T6048] binderfs_kill_super+0x44/0x90
[ 63.484106][ T6048] deactivate_locked_super+0xc4/0x130
[ 63.484130][ T6048] cleanup_mnt+0x41f/0x4b0
[ 63.484155][ T6048] task_work_run+0x24f/0x310
[ 63.484183][ T6048] do_exit+0xa2a/0x28e0
[ 63.484208][ T6048] do_group_exit+0x207/0x2c0
[ 63.484234][ T6048] get_signal+0x16b2/0x1750
[ 63.484256][ T6048] arch_do_signal_or_restart+0x96/0x860
[ 63.484282][ T6048] syscall_exit_to_user_mode+0xce/0x340
[ 63.484306][ T6048] do_syscall_64+0x100/0x230
[ 63.484331][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.484359][ T6048]
[ 63.484373][ T6048] The buggy address belongs to the object at ffff8880330f9800
[ 63.484373][ T6048] which belongs to the cache kmalloc-512 of size 512
[ 63.484396][ T6048] The buggy address is located 8 bytes inside of
[ 63.484396][ T6048] freed 512-byte region [ffff8880330f9800, ffff8880330f9a00)
[ 63.484422][ T6048]
[ 63.484434][ T6048] The buggy address belongs to the physical page:
[ 63.484456][ T6048] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x330f8
[ 63.484485][ T6048] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 63.484508][ T6048] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 63.484536][ T6048] page_type: f5(slab)
[ 63.484560][ T6048] raw: 00fff00000000040 ffff88801ac41c80 ffffea0000a74c00 0000000000000002
[ 63.484583][ T6048] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 63.484607][ T6048] head: 00fff00000000040 ffff88801ac41c80 ffffea0000a74c00 0000000000000002
[ 63.484629][ T6048] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 63.484652][ T6048] head: 00fff00000000002 ffffea0000cc3e01 ffffffffffffffff 0000000000000000
[ 63.484675][ T6048] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[ 63.484692][ T6048] page dumped because: kasan: bad access detected
[ 63.484714][ T6048] page_owner tracks the page as allocated
[ 63.484731][ T6048] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5484, tgid 5484 (mtd_probe), ts 31743339382, free_ts 31683245601
[ 63.484780][ T6048] post_alloc_hook+0x1f4/0x240
[ 63.484807][ T6048] get_page_from_freelist+0x365c/0x37a0
[ 63.484836][ T6048] __alloc_frozen_pages_noprof+0x292/0x710
[ 63.484865][ T6048] alloc_pages_mpol+0x311/0x660
[ 63.484892][ T6048] allocate_slab+0x8f/0x3a0
[ 63.484918][ T6048] ___slab_alloc+0xc27/0x14a0
[ 63.484942][ T6048] __slab_alloc+0x58/0xa0
[ 63.484967][ T6048] __kmalloc_noprof+0x2e6/0x4c0
[ 63.484989][ T6048] tomoyo_init_log+0x1b3d/0x2050
[ 63.485016][ T6048] tomoyo_supervisor+0x3a4/0x1770
[ 63.485038][ T6048] tomoyo_path_permission+0x243/0x360
[ 63.485061][ T6048] tomoyo_path_perm+0x490/0x740
[ 63.485085][ T6048] security_inode_getattr+0x130/0x330
[ 63.485115][ T6048] vfs_getattr+0x2a/0x3a0
[ 63.485138][ T6048] vfs_fstatat+0xa8/0x130
[ 63.485160][ T6048] __x64_sys_newfstatat+0x117/0x190
[ 63.485181][ T6048] page last free pid 5484 tgid 5484 stack trace:
[ 63.485196][ T6048] free_frozen_pages+0xe0d/0x10e0
[ 63.485219][ T6048] __slab_free+0x2c2/0x380
[ 63.485244][ T6048] qlist_free_all+0x9a/0x140
[ 63.485266][ T6048] kasan_quarantine_reduce+0x14f/0x170
[ 63.485294][ T6048] __kasan_slab_alloc+0x23/0x80
[ 63.485322][ T6048] __kmalloc_cache_noprof+0x1d9/0x390
[ 63.485346][ T6048] tomoyo_init_log+0x1ca/0x2050
[ 63.485373][ T6048] tomoyo_supervisor+0x3a4/0x1770
[ 63.485400][ T6048] tomoyo_path_permission+0x243/0x360
[ 63.485421][ T6048] tomoyo_check_open_permission+0x307/0x4f0
[ 63.485441][ T6048] security_file_open+0xac/0x250
[ 63.485460][ T6048] do_dentry_open+0x320/0x1960
[ 63.485478][ T6048] vfs_open+0x3b/0x370
[ 63.485496][ T6048] path_openat+0x2c74/0x3580
[ 63.485518][ T6048] do_filp_open+0x27f/0x4e0
[ 63.485540][ T6048] do_sys_openat2+0x13e/0x1d0
[ 63.485559][ T6048]
[ 63.485571][ T6048] Memory state around the buggy address:
[ 63.485587][ T6048] ffff8880330f9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 63.485603][ T6048] ffff8880330f9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 63.485622][ T6048] >ffff8880330f9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.485640][ T6048] ^
[ 63.485658][ T6048] ffff8880330f9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.485677][ T6048] ffff8880330f9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 63.485695][ T6048] ==================================================================
[ 63.533743][ T6048] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.363218][ T6048] CPU: 0 UID: 0 PID: 6048 Comm: syz-executor Not tainted 6.13.0-rc7-next-20250114-syzkaller #0
[ 64.373624][ T6048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 64.383673][ T6048] Call Trace:
[ 64.386942][ T6048]
[ 64.390061][ T6048] dump_stack_lvl+0x241/0x360
[ 64.394749][ T6048] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.399950][ T6048] ? __pfx__printk+0x10/0x10
[ 64.404535][ T6048] ? preempt_schedule+0xe1/0xf0
[ 64.409378][ T6048] ? vscnprintf+0x5d/0x90
[ 64.413700][ T6048] panic+0x349/0x880
[ 64.417590][ T6048] ? check_panic_on_warn+0x21/0xb0
[ 64.422784][ T6048] ? __pfx_panic+0x10/0x10
[ 64.427193][ T6048] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 64.433162][ T6048] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 64.439485][ T6048] ? print_report+0x502/0x550
[ 64.444160][ T6048] check_panic_on_warn+0x86/0xb0
[ 64.449104][ T6048] ? binder_add_device+0x5f/0xa0
[ 64.454029][ T6048] end_report+0x77/0x160
[ 64.458263][ T6048] kasan_report+0x154/0x180
[ 64.462759][ T6048] ? binder_add_device+0x5f/0xa0
[ 64.467691][ T6048] binder_add_device+0x5f/0xa0
[ 64.472447][ T6048] binderfs_binder_device_create+0x7bf/0x9c0
[ 64.478420][ T6048] binderfs_fill_super+0x944/0xd90
[ 64.483523][ T6048] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.489154][ T6048] ? shrinker_register+0x160/0x230
[ 64.494256][ T6048] ? sget_fc+0x909/0x9c0
[ 64.498489][ T6048] ? __pfx_set_anon_super_fc+0x10/0x10
[ 64.503940][ T6048] ? __pfx_binderfs_fill_super+0x10/0x10
[ 64.509562][ T6048] get_tree_nodev+0xb7/0x140
[ 64.514231][ T6048] vfs_get_tree+0x90/0x2b0
[ 64.518642][ T6048] do_new_mount+0x2be/0xb40
[ 64.523136][ T6048] ? __pfx_do_new_mount+0x10/0x10
[ 64.528166][ T6048] __se_sys_mount+0x2d6/0x3c0
[ 64.532866][ T6048] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.538852][ T6048] ? __pfx___se_sys_mount+0x10/0x10
[ 64.544044][ T6048] ? do_syscall_64+0x100/0x230
[ 64.548803][ T6048] ? __x64_sys_mount+0x20/0xc0
[ 64.553650][ T6048] do_syscall_64+0xf3/0x230
[ 64.558149][ T6048] ? clear_bhb_loop+0x35/0x90
[ 64.562823][ T6048] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.568839][ T6048] RIP: 0033:0x7f99e21874ca
[ 64.573261][ T6048] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 64.592870][ T6048] RSP: 002b:00007fffcc82afb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 64.601325][ T6048] RAX: ffffffffffffffda RBX: 00007f99e2201ecb RCX: 00007f99e21874ca
[ 64.609311][ T6048] RDX: 00007f99e220ec27 RSI: 00007f99e2201ecb RDI: 00007f99e220ec27
[ 64.617273][ T6048] RBP: 00007f99e22020c3 R08: 0000000000000000 R09: 00000000000001ff
[ 64.625231][ T6048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99e21e41c8
[ 64.633189][ T6048] R13: 00007f99e21e41a8 R14: 0000000000000009 R15: 0000000000000000
[ 64.641156][ T6048]
[ 65.772917][ T6048] Shutting down cpus with NMI
[ 65.778052][ T6048] Kernel Offset: disabled
[ 65.782366][ T6048] Rebooting in 86400 seconds..