------------[ cut here ]------------ WARNING: CPU: 0 PID: 7421 at include/linux/mmap_lock.h:155 mmap_assert_locked include/linux/mmap_lock.h:155 [inline] WARNING: CPU: 0 PID: 7421 at include/linux/mmap_lock.h:155 binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] WARNING: CPU: 0 PID: 7421 at include/linux/mmap_lock.h:155 binder_alloc_vma_close+0x98/0xb0 drivers/android/binder_alloc.c:986 Modules linked in: CPU: 0 PID: 7421 Comm: syz-executor.0 Not tainted 6.0.0-rc6-syzkaller-17742-gc194837ebb57 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mmap_assert_locked include/linux/mmap_lock.h:155 [inline] pc : binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] pc : binder_alloc_vma_close+0x98/0xb0 drivers/android/binder_alloc.c:986 lr : mmap_assert_locked include/linux/mmap_lock.h:155 [inline] lr : binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] lr : binder_alloc_vma_close+0x98/0xb0 drivers/android/binder_alloc.c:986 sp : ffff8000160e39c0 x29: ffff8000160e39c0 x28: ffff80000da85000 x27: 0000000000000000 x26: ffffffffffffffea x25: ffff0000f14a1bb8 x24: 0000000000000ffc x23: ffff80000afbcd08 x22: ffff80000cb74370 x21: 0000000000000000 x20: ffff0000ed029f80 x19: ffff0001006669e0 x18: fffffffffffffff5 x17: 0000000000000000 x16: ffff80000db49158 x15: ffff000100988000 x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 x11: 000000000003ffff x10: ffff8000127cd000 x9 : ffff80000afc1cf0 x8 : 0000000000040000 x7 : 0060000000000fc3 x6 : 0000000010000091 x5 : 0000000000000004 x4 : 0000000020ffd000 x3 : 0000000020ffc000 x2 : 0000000000001cfa x1 : 0000000000000000 x0 : 0000000000000000 Call trace: mmap_assert_locked include/linux/mmap_lock.h:155 [inline] binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] binder_alloc_vma_close+0x98/0xb0 drivers/android/binder_alloc.c:986 binder_vma_close+0x48/0x58 drivers/android/binder.c:5545 remove_vma mm/mmap.c:143 [inline] exit_mmap+0x148/0x2e4 mm/mmap.c:3124 __mmput+0x90/0x204 kernel/fork.c:1187 mmput+0x64/0xa0 kernel/fork.c:1208 copy_process+0xcfc/0x171c kernel/fork.c:2521 kernel_clone+0x12c/0x380 kernel/fork.c:2674 __do_sys_clone3 kernel/fork.c:2966 [inline] __se_sys_clone3 kernel/fork.c:2950 [inline] __arm64_sys_clone3+0x234/0x248 kernel/fork.c:2950 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 irq event stamp: 1486 hardirqs last enabled at (1485): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (1485): [] _raw_spin_unlock_irqrestore+0x48/0x8c kernel/locking/spinlock.c:194 hardirqs last disabled at (1486): [] el1_dbg+0x24/0x5c arch/arm64/kernel/entry-common.c:404 softirqs last enabled at (226): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (224): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- mm ffff0000ed029f80 mmap ffff0000ee4a47d0 seqnum 1 task_size 281474976710656 get_unmapped_area ffff8000084865b0 mmap_base 281473403002880 mmap_legacy_base 0 highest_vm_end 281474198306816 pgd ffff00010c9be000 mm_users 2 mm_count 2 pgtables_bytes 77824 map_count 24 hiwater_rss 872 hiwater_vm 3507 total_vm 3507 locked_vm 0 pinned_vm 0 data_vm 239f exec_vm ea stack_vm 21 start_code ffffa1200000 end_code ffffa12e85cc start_data ffffa12f8be0 end_data ffffa1356148 start_brk aaaac1bda000 brk aaaac1bfc000 start_stack ffffd19a79f0 arg_start ffffd19a7ec9 arg_end ffffd19a7ee3 env_start ffffd19a7ee3 env_end ffffd19a7fe3 binfmt ffff80000d47d0f0 flags 8d ioctx_table 0000000000000000 owner ffff0001032b4f80 exe_file ffff0000c9031a00 ------------[ cut here ]------------ kernel BUG at include/linux/mmap_lock.h:156! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 7421 Comm: syz-executor.0 Tainted: G W 6.0.0-rc6-syzkaller-17742-gc194837ebb57 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mmap_assert_locked include/linux/mmap_lock.h:156 [inline] pc : binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] pc : binder_alloc_vma_close+0xac/0xb0 drivers/android/binder_alloc.c:986 lr : mmap_assert_locked include/linux/mmap_lock.h:156 [inline] lr : binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] lr : binder_alloc_vma_close+0xac/0xb0 drivers/android/binder_alloc.c:986 sp : ffff8000160e39c0 x29: ffff8000160e39c0 x28: ffff80000da85000 x27: 0000000000000000 x26: ffffffffffffffea x25: ffff0000f14a1bb8 x24: 0000000000000ffc x23: ffff80000afbcd08 x22: ffff80000cb74370 x21: 0000000000000000 x20: ffff0000ed029f80 x19: ffff0001006669e0 x18: 0000000000000385 x17: ffff80000bffd6bc x16: ffff80000db49158 x15: ffff000100988000 x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 x11: 000000000003ffff x10: ffff8000127cd000 x9 : 14ddff44061e6000 x8 : 14ddff44061e6000 x7 : ffff8000081625f0 x6 : 0000000000000000 x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 x2 : ffff0001fefddcd0 x1 : 0000000100000000 x0 : 0000000000000360 Call trace: mmap_assert_locked include/linux/mmap_lock.h:156 [inline] binder_alloc_set_vma drivers/android/binder_alloc.c:327 [inline] binder_alloc_vma_close+0xac/0xb0 drivers/android/binder_alloc.c:986 binder_vma_close+0x48/0x58 drivers/android/binder.c:5545 remove_vma mm/mmap.c:143 [inline] exit_mmap+0x148/0x2e4 mm/mmap.c:3124 __mmput+0x90/0x204 kernel/fork.c:1187 mmput+0x64/0xa0 kernel/fork.c:1208 copy_process+0xcfc/0x171c kernel/fork.c:2521 kernel_clone+0x12c/0x380 kernel/fork.c:2674 __do_sys_clone3 kernel/fork.c:2966 [inline] __se_sys_clone3 kernel/fork.c:2950 [inline] __arm64_sys_clone3+0x234/0x248 kernel/fork.c:2950 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common+0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc+0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync+0x18c/0x190 Code: 17fffff2 974b79f1 aa1403e0 975243d7 (d4210000) ---[ end trace 0000000000000000 ]--- pstore: crypto_comp_compress failed, ret = -22!