1ba2a0f3363a13552029bc87f76357b2f610f7fe802e48602ab56b668188c867e3a20b4b53a16eefcbb28ae61947df78e0d7687c06b317e82ab6c4a80af1c9cea8701c348eda65e37db93fd15d6d484f7b0ead31e86284df612eb4b4f7284351eb081d40b285896d5bd6bf3d40037605692728581528848ddb183d855279cc34d2319d1be05a6c597b16edecfa8d35246a30b232df4f1f29c0b354335bc2cbc64ce70f17f8098c8b1b6a7e66ce1be09153b962997fc946cb7f3ada6ce1b3fb777350427dc1237f7d7ba0c3d3d3ece54c12222c04b583a6e5244e2d2f72db004c6420d741dafc101a1200013e78660df9e492316e722294691adf64b54952343a397d7f8156d4f8b3df3c4e4140f126286eb0a744fba158b4c44533450d75f0b5dd551730d74499b05592861ab80fad3e013e0a2c6fb55062fc9e63cdc19120441a37129143c787cdbc9fba41d5ea198243207872d23b1519bea304ae57e0be60352c68b2bdb14bcc31dcc87ef39465f1f9214e44ee27a6a752194445eb5ebc05774df140ce8ca83475c9f227f47e0c2d811c24e37f4405db0f4e1b9d46e2a63723a51649bf7eac1063b8aa38433fd0524ff3e3b92639c4cc31a36e0b8a1fd270125a52142291a1ba4d9822fdee02d66ff5e99b508a6437032b44fdc593137c841a2a6853a80bfc9c831b2632c9280b6d8a29e1a31fff406b44daffac8b669f524c2f7571f65e2bcc012b9618e9e7a4d58d52967553c644cf1e35892d38bdf507310876fe806e92e01c7716d8025076f56cf38607751597fbb3144dfcbb8768612b5ca4f1d5b58ed3856d69879315650c12c782f56ae1cb86eaa3042a14dee53425e313aface69136427a2bfc11af93b5712d2ae9e1051176819d424907bbfb4993056da2e65c167159ddff5d8ccbd79ddce0c9f7f4e675d3eb3a72fc18bd4db59e9d50b2bee52783954e20780a8f312145d0d6feac435e0e3f176ca2618791bb5a6c34953fb0a620a2f0e0ae0f01243b973ab3683ca61e7cd28b1e7476ba37a8a193057babf7bdb21a1831f752c838e7b5cc5d47a2c735bd50d84f82f494ef57559a40d9adac8a5cd5c340cdc76bf7f30bafc9f53b3d29ab07db9877cbe45f1826cfd05799d243c070e1085d191d0907295d0d2b812753b72e49a688b3039cda1644346004862fa9fbb452c563c8804df35cca17136a1ea8b2e922b3dac8509f8a9249d8c96295aac239e4441c3a0753e4cc280f50059a557b76c038710165710a895d012d7ab6670907b8fa58b5fafd879d31dd5736bf120fbdaac0eead10f1d4ef710dbf7bb33172a67b47e7324090d5160f22edd3fee62699fd7859c8f0674dae8393aff80f90ea07965f36c7788bdca9b022bce557f939e735cc0ccb069b88897a81f5e5db9446c5b313f382e8b8c4c57685c0b1d3cc0035b578d9f8ff5c8ccb161cc64fd79875fa1192c1c5e63e4b385467127178bcff44cfcbec99db094d5ec3eb86dcf7774329d8867aa2545402c1205bbcd0d66e046da79b7196a2233291b1b5367dc3d7d2557c70b1be712704f7e7536044f17484fb61de2c031bcd7c69cec0763f361fd449020b9a7e9eddf220089d9f0d32b4df4c661d021142385b5acaa87de2e5b7cd914ec288e7f7d2649190d316c475697c56047382c11625592c8e0792e60a448079443ed554b923b957e4dbef8a019ed476d19026cc666574e9c6bc087f09416151960f27ec7d629478976498c16e912d2c509e1b32100c90494b967fd356b1d63844c298e469e27b52806f686ab9c6ceb8c2ccd0403886551578346ae834681b21adc0070b1a452d62cac260245d16b0e19c7219528041aa7fce9317b9911bacdff2decc11d5734300c60091a459ca03619e4f40b14bf6e7073dcc527983f0873665f964a97e58f090d8547c6b3a14af21d77104a016c6c145d09400eba0c737c5c9284a23f7267c465e09fea0ea3efb6dc1cdf0f997c4adc278a26fe2cea296e8a9803b0b196b9668854cd0d1991401741a01c625c20d1698f29559466e711ecf1c683c030f0a822344a271b08fbc2da22c1e0725f343b6032fae3e8535c4d7b9bbedcb2d204a319cf816c1a3d585b7218a07118d5d88ebf27ac4de4e297899e627a953152f98a9c226a3cd3ee6666f81f9336fa8d63ed1ed603fea1c9b2b6d4a00a9fe11d10d9d6537660769ce5a0219990789f87368f3b0f579ba70b4471d4741d33992de5deb5ba18b796fb2cb02e2acffaad3ad5efcbe82bbe66c399f8fb77491d2296910bc5d8dfe7d254684253dae3ff263060a2406ac9fa35304af0ec0b49836ebde61ff16ace30678a7a00b0790b6c2262c44853f31e5e6f5172d67d3f33b70454e9986cd1e34734651d3103d841a16dd2f4bfd471ebcca93a96c697de4cbc0374cc604fdec52d94bbaf26d7fad486c57d08c7350e4bae1a8cf63062faec79da503e564bea0cfbc703915103dd6bdff0d657ca5fc4576f9a75ba21705e413ef085fc2197cc6918954b8a5cf9e59a96b6a3b89c438c9b889d78266e0b3c0cf8729cb8f95b6c94fc9ecba70a23eda2676647645f6632140e511aa2fac9829c1f3075a07e08b158e3b2901e2746ee65c064a9e6ea736f1215fd020890347a544e313b529b17d2deb259f330757518345d20aafbf253492f7e6b28e62a5d3fdb64a0ca9336ceec80dc3016ab591ab33ceebb72c89e0ceaac49c9894547ffde55dc7989970454b40c28a3fbf1b8f052334edbb3b36a1c49a71aef637d8097536e8c394351fdbd69c9a2704a7598e40eee96bd6fe0e0bd592ec3d7a12f2b736a8f76c637e4cd2d25ae25acce6cad0c7fd9ec1346ab0a8dc6010b18a13d0fdb9be11c91878fce52b48154893bb5c173107aa38b116765a0b111fd7f7c6d674eb0796ac7a74bdac08db3a691894b0090dd2c8f47b6d8192c56407d4feb0912a5d2ba55396afa8e2ef79e2e4ba96615136a03a4e518f46fa5a50f4dd65a19bc99b18397236e24830cedabf5f45378f0bfd7b15ecb951861611bc1807c1caa05258fa8256a3174c245d9a9a60b50d907c3eda86afbe759de46267827d784888fcd27f6d60c91517e4825923334f6397362bfd8f3075f7962fc807262fc3de4fd20497f55d57cbf7942ec21897f57a5d15b8b4294cc99f592588753fee2bb4b61a42d925d44a37fd24b7b89865e41b1df948ec6b1d99a8038c03b740d871fa4d9ec4036de310cdf07ec711d456035d230d82d3d5eff964764403e712a9f1ff25dafbfcc7e184771b73465deb6a92ea3355223473ed7c06e80e91c2bce2397c9ae0b7d5706df861d240339421780e14c0cf011b2bb2b91354a5276573893f5dad6636498f43ae13a8c2c0ebd948950a7039224483a3adbfa780fa876397e2ac1743cccc023eb849e73cdf608604c1326cde2c7e71e6cde80eb0459e7fab0ae5b929a5ffce8e09c65629f9f1a3ac7e5bbdf6e32e85b7ff38bc4ed6a3b8f453d967dfdb6fe0a3e69ea8135db32dc563cb36a0564a69000d16f12b2625a9ca25582030136fff36f6fd0c47ee95394058e146624d10c5dc01d318ccce7b5430f9389a1bdfa6b404b709ee4fccc6417f988d8953c1f9f1291f466fb51838bfca8edb6799446b976a25183f4de09d0f17514a8e66c9e4689ee09283f006329b667d84a16afe19a0d76cc9d8ba68731c89c9034d62dd5596a4d8a80aaea14346ab8bde11798d13e5432bb6f880ee3cad06459c74de6de081415a246eb3d4e0c3d10e6c7f5c41b9f1fe176a6bb05c34f07c2b93b5251694c17eac3adcaca1e73585b4535cca0ad2d2089676cbfd2a28823a416c37efc9e04e201d50c0b079edce084d1a24580e1ca0bb9947688b289503fe2be3e5645af15c9af56cb4b9d075bbef90031d8e9bd8a10c18593b4ec6c0865ed7b6d55f0b9a1ebdab94e16faf7112b289e0de18e1ba718ff118b79a25f2afa493916fc6186ed62afb4e39b656f3f5055ee7608eeab75648f516db9d7830cfb545ebf120", 0x1000}, {&(0x7f00000012c0)="61097f3ec8c2208c3bcc0765d040eeb9b2d5deb63ba89e987f819a7ee95769373a7f6f55dc72a94c8e8317a211664b39a672c927d1bf759a4909afec944d6202dea7a2fafb6801e69f066a7770db35c206b97598b411c04a55bb42c2a190b4a66d050079fc73191729f8c6736cfa8602b9e07e7a0f40c25f449974225de635858b1beb1cf2639db1c298efd36d395924fd34c513819c53366413bd54479d92c04e7b41c862128c2de6ab4227b1305d2f14e3dca9941a56797c21fde24a0d0cbf6ef5260a81ed466c914491df7b5fda28288301bddb60531d910e46d7c147677170c7ae678d3edee6037dfb704b36f911bcc8a362966a84b959d09588b6d854b7635fe64201c321fbf40d661b058f4da3ae5e15c72c5efc60e41c136ab2e105cbba86edaa85b6fdce91b81cb65d8f0b6dee436ebe22a2b429e51c0d6a640a587558ede27e40097f402825704830ffe4cc27f7e7efda98771937ea94d1405544d3a2983c659ee7ac27c7da5dacc0bb318c1336debbe17090a2e12d452951c2912bda62ea2d1c53876eea22abeeb070cb79b141136b0a2f11a4f75f0dce414ebb9a7e22a279e7615f2445d0921a95008e90d8b8e6f124970308597960683d45f2dbdc4fbf884b7b50db2ecf7ec8ed1cdf1455e5c02434a96f80aefe7b80a95badfa457844b236c82e5b6aab339fe5dde8230bb82f39902341dd12e66360ca3c939306297d5d320c2573495ced24238f7960cfbd9a3508c24a80d3aae2c5279fae0a4f424084779e70aeeac5fa2b4c6d5294bdd33d88d07866a1622327e3cfcc6635683d7d25151598b988cd7c9b551b61a16a6fc87ff671d83485131691969eb845d6a735b0b2fa24b2e53f4f65112f0ef6a9804f770d3d7f2ca86258460329f26b0c828cba2d8bbd1e25f8cf57909dfc389da389bbed92eed0789a0f3f3b1373aa20533c0ed30b15b1aa62d67eaa7611c154f3bb578ba8acb5e0879234ab4aa7fc95d832e3643daf2c0120edcc62c347abbb5bcacfc90edb9474a3f2dcae23a26b304101b388d25b32199dd1e8ba0280ab2e0b8bc54f89fe926f28007a3d779e369e4d80924b1d502788550d1491276ca876e3d312778985a294463f3732304ee855f6c81b224e2fdbc4648a5d2401c8d78e51ff1be5cabb02bd319dbb73b4dfc35b6b3acbc6af5f691f5e937319c8dd23fe0c9f138f99cef1891d553373a9d3c50051b2ca43186ccd42eb2f1c20e34266a4ec6e620eae5b09cff9a9024616fbc97c972bd42e0b0c11e4c519b6d60f97e1af7a41ae5ce2b4a23b32623362e91254257f22cac46dd217f5e9e33f3f20df9ba1084316a74b244c9b3f3317d3ee4ab45990595a3f37cf748f3d3352efdcd6ba3373931354f4df905a47493e8ff3ef210ea588e622507dc5b71f91a24d7a9c53ad43ac0be299765291266c1236759dfecdd1857326afae43620242957bcc0876ef853ea52a4e26a9a1e9bd4b59830348f7366b1f8dc865b472130e2d541144a4cd161bfcc492cfddda40e533b9d1fc0d50d30336e4132626aef0d183995bd7eb7b8ba4cbee078c715082be5eafac5ce44d7b69d21fb50c184d774278c2ed09a3839a86ba8d8d98407724b156bbcfee91a9e571e5007f5d45cfca24f56f99abb89cba1ffb4d94ad6f350ca8e8823d45001e2c9f56c4f49b3c6fb7ceb74fc38a7cc4eeff193b9da1582b0c7a79def765b642d7b8f511cbfd0a8beba44447e2e4f335a9076797be6378d6e884377ce248e23dbf2dc19f111305882a9edadc8b2b8cc5986176791021f560c65fcdb6c024bda7e9518017f84b20b468a416894836f1f28828101cd3648ecbf536eedf23c89d4e2169a3e2d97b27ca8eb6200fa02fbfa4c105352d685cd95764efbd50f67d75e6cfc9a3ce20c5e87bab289f36397c2a19dc9852c0e3a6954fae6a0efb37927638fc1df0e83f2f15c65e974f861c54d3c7218de15ba558a15f8daf74a811d55f994bb6a909bc695da40282d55884a77de2a90156b0bc811a776d8598a94f5c0623d685e5aaacfecccdc880c2b16060430dbe402fef93e5255ac4ea416122898acd76b94331a86ae3445a289b5d205e0aa2b13ac6a46cd5cd0335eeea5b42ab618a607e3672a3d0483ef09e5b4714c4f85c7e6e8aa353b44e37eb5d00c3eee0510ce86226e34b2816de43069eed955cc6c5eb00f9cb3c45e75fe87f7804d3fc90824ce26747eb47f4ccff4726cab5defc11e235bd97c26ad66f13cd4513fec23d642da82786ab2e13f9e8073c37ec4a2bb893dbac3d4472560ee7be5f15d3384afc9e50bf016e2709979243e6da03ae81fb76a1473e0ee9d0fe84a9f0d289654c0933401ba9c159cab46dbb0386edb6a375b5477b3cd99a439d8a353ba75492f750e6e0e56ad6e2300a48f01ff3813ad891c8a274ed371e4e4f8b272f6f0d45aebf76905fe4fbab339c9d3dad2e6ac60c25543146d0cae8e208f5b1e46a4bb208ef13963b4501b2a597282b5e8306fa481ba95bcbcb1f120554e6d821988c14e225fbd4327f3e90230605a3adc44d6aa4400c019ec384a3532258bce496534c9f9e7de011c4c946d1d2042dc65ae9c631398ab37a26ab641ddc5136c40913971bbc3ea3d4cfabc7f2000deea9d03f8b88d5c6a32138a7a08fda58b6bdfd5caaf1140a13f2a4886527beb3fd47a74cc52ad224af6c9266fdf2fece80230aa3a0fca265198321ba36b35fb4a4b8910148090e0e696e84069ab02fa32b0bf904629c723f58169b01c115efc6296b75247fabd3e938a0c8106c32de7556eb5785f872d4afb88ab41d4ce4ace6dbad4cc4e00dcf4d58ec053d9d0ac14b12e6be04ca5f57dbfd3b033a278de48bca0a6811c994b2f06a46f7c71b29121dc0d5ade00d1d1fa18f0678c9ece0ced5a98a81f9d021a0652bc4c66463eae8f14704d04dd8381bf94f33462e68e8ad4bf31a04f55dee50d944847e9a964a06c0ee8808064a5191b8c0261df7f3a20e7aac7dd8cd0cf49a2ac9462883faffde5e0eb297b191987038ec866d60be7ed2e0f7a35359236fdc1503df2fea6fc50f3e2b011ba4dd4777b58cf657d95acaf146f54bd8e8a0b2dfd722b1468b90a5c72cfab8b7533fad36b736f019b319949937e062f8442f1b2f4deb965b0e58d0fcad253f3fad6e7b4a23a93a0eef1a04c4225b31ee0507f3e975f7f7999eee4b6855d7ae37b110ea41106802ad5f0751787c4f99d374a73f149f563a149d7ec4171ac7715efa091a7a92d6d41ddaf72572023cb456e8b89ee5c1157d3e96173c6bf5041897c6a88f9831c50fc071980088269e766f965afd8c4d4020fd2f1071dd5f2f5e65b6fd4d02e6148a86313f2d72311e728f034f66fbed838b4530fc4889e69b450aecb032f06f5d4885b8a70005810bd3000255d2a472d6af0b11b3e1d68fc48ef7a0f9c1edbd27c8a875bb42c93c0486ebe2d517d22a2fb3a2bbf7361b280aff5f70045cf182acf25d0d7e90b3b6d5caf842dc1574dad86f97ba42f4ed50f5debfa23544254240901ec0361683faf4cd8b04d841a0f9903ca00be219d3444566d58f02a95803f918b1cf514d000d0e68b080ba1ff8aa7fec09480f37f5a388499d3610197e6db6f23bd6b36d8a41853c95dda6dd03b3329fe4890cd69bc9ee943a4e5a8d4e9e4bca9b8b7bc42247a351dd78d478dcf11ecb4d5d7c594c9a0c5d7a39f6b2d98a88445b24bcf5fca86998702f4baf3d6c2d0b52a15b524b3306cc529c216e078af4fb553210cb1d32711d3eda0e51981b3323ade9a390f24c85db21d83b71ccf4a51ddd74f9612ccaa9c983548e499b3242a6633fc0c202b8c50d8d353367cf92504daa955d05b1c7a5e2cc6b659e86bac9d476570c5ceec1686d7b89da4c4d606046cf563815d4e5f34938e211125929226f7a8e864654affc1071684c4ff62df0e716fad6d35fc88f1e4e7541e2817bb53fa442751979fac5c5bcef2ef1d62e9a99a023dda96ed606808dcd523f676a03110193a6af1bb080c5ea0459f001adee408fff8dd0f9f6fadc9a414244034595e56889d6e419faf5db02ee62158844f4cc2a54aff4d69b33e0d121780b5230c49ce2d9e9d30fc31ac7937949c64214404ae64ac7cd5587e75db40b3b072f1d0832926c6e7cc1224b08e4e669a7825d2bf39545e92bb691c3f4717bd5c8be0c14a24ceee6d7c15c280f7f81a29130afbcc8d7a26d33f3212a5410dc9b2e55521e967da7dee6ec4d0dafcf7c9d550ee4034e8c1e5812ddfa946870d15b7ebe240f6c5783370fa49873eae931a4ffcf81f1cae535d04f835935e7f2477f1f7a26e092a30d30f1fb6ac7ee8f53d232642e6e124d22d328cf4fc5bd089804a2cbaf9e3253e217caf964b4c522c2117882a7fa22d237aa2aa9107e0ccac345faea91e98e4c711860153f5dd06c9ceb9b47fd5e47b4b9d7d6f12862a55bbc0d5bbf0831fd153a8ba4985ee5d117e13bf77808220072954774149500b0a539574c7974b325d3f2216296431c22ac0f9889a57be7a3bd0d3091c364732881b85e4698a1297851119f36c5c3ee3d2d682dae5346516fc708e3e27f2af4983ecb30e0fd5dbb0f6a33f5b866faed7df1314aa3b9494e74c88e73fb195d6a4b8adecd35714107b0372fae4a5e62d5b540ab4327726341ede051e564d94e61f63f787a3f311227540aa5f8d3084866c21c25ae4eb1ca738b280113e2b9a14d945af4f258ed2e02e4695a7ec2e937bd4047e2e452022cf56d898cf7ebb0edadeca834d56ba1a41775b0597dffd9a520ef7516133c27db79ff8922447729a55dab46ae7e6d17fd3d028a2ad350d0b6ee1e9489aee38a5aa2d120f2e4fa7a9fde729e6921a2627c1a239419446225955aeab4ff2a58fa67b5422461c31a59911fb663ef539ccf3a604f2d94f14a8bb8407516e4cde78b8c6d53cd000675d2f9a3bf5fa67380de18e33349b0dbf3a699f28812879172f43ea7a15932004a404e58a2882c3879c0c27ce0e0370a341e64664e32f38550939c359df6215a65dc225747311674013487068edbc728a6c0025ee177e109aaefeedafff777d9ebf5329d769eb85403a1d061f03306e8002fc6511c11f84a003df07c8f02c16c5bbc7ea02d12a361a37712984df1c09b9c8423d8961d4d34a5ec936ffcab81a801580f8c1236f4358d62086e1c0dba1440e2f094edff18e1e39b850f8a245d52a3a09574f6b7992c7992288df5b437bdde5e2e640135afe1a34a5c9eed5b3e43ee73a3a124aef9f915e9e3f601b33dc1d959b6618c534e8b9b992e821509046ae373ed5d9b32233f8df0bc8a828d59a59ed4b7cabaa19a9eeb88011855c89125f088a74998c169d40be7a7647b947a95978d5c7004b121b6ddf5a76639ee11c8cd99918de80791391ef1bd1586ae95572028ca5f84af5fc5c74885f7cd96bfa9a8d0b59b9cada8c10707aafd4432ed2f3fe6e3b08ea8e85b0d4df044297ea602015e9a12dbfbde2ebc4145a1b4beb10ccbbe9234e0d955cad407b900799ed72575eae61a180f988d65b714e879a2a354b149bfd1a938e543e758d593971d209ccde22f85eee2f171ce119d6979e4a21f3cda5dd6bbd99cec2ea587961681ab226dcb0b1b0d360a1b834861d14f46d93d1d949392163bc13621f062e27f24f8b5eb7eb762a83ad1bca298d6310c3fdc553b9a610cf225e107c9e7928eaa7572531f3db2296824c23c0068a325ac6f0df44a86e392fe98ecc1cf739ce989dc5795ee29ad12d4f304be861855f693cee05c5386d907a4ccd479c5", 0x1000}, {&(0x7f0000000040)="e287b40b2a19cc8abe2b22dfa4df2bb9", 0x10}, {&(0x7f00000022c0)="b25041c33eae243e1bb646af4b57773337708e3e8539bbe0621bcfc9d0256089da2166c4e944cf812fc25977e297d61917e8ed15d966f74d57ff5b0e47dc40c77de67848c792fa18427c539113dff17b8e4ae4e73670618ce8e5b8b9c6c69e0621cb93334c96e72cf1aebf8e2d6c3a51fedb", 0x72}, {&(0x7f0000002340)="e95e3a3f64413ed587d71d48a691a4a2395b6aaf0716b85e7dd1efda962d20a6c90b714e98295f7ff039383997db12a461c01cb55728a8615569927ff6d10e58c38c515a99f1758843e13250b24ea2b45e180566865d079080ebb3fc67ee280840f89101abb26a9e9dc69e30eea58b3965237ea057b49a6b009838c3cf41e3743ac80b62698135e29e3b2c", 0x8b}, {&(0x7f0000002400)="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", 0xd5a}], 0x9}, 0x0) [ 477.412937][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 477.435559][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 477.443863][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 477.456904][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 477.463912][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 477.472121][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 477.479528][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 477.486879][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 477.493866][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 477.501387][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 477.508817][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 477.516204][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 477.523194][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 477.546919][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 477.557161][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 477.612875][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 477.620304][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 477.652572][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 477.688232][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 477.713938][ T8311] 140727980978176-140727981113343: ffff8880284f8460 11:20:37 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) 11:20:37 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000180)=@raw=[@alu], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 11:20:37 executing program 5: mount$9p_fd(0x0, 0x0, 0x0, 0x800, 0x0) [ 477.733592][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 477.742499][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 477.760897][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 477.802728][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 477.869304][ T8311] Pass: 10366546 Run:10366640 [ 477.874967][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 477.884909][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 477.895086][ T8311] Call Trace: [ 477.898391][ T8311] [ 477.901353][ T8311] dump_stack_lvl+0xd1/0x138 [ 477.905987][ T8311] mt_find.cold+0x8b/0x90 [ 477.910366][ T8311] ? mas_find+0x1d0/0x1d0 [ 477.914766][ T8311] find_vma+0x10c/0x1b0 11:20:37 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-160\x00'}, 0x58) 11:20:37 executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff3, &(0x7f0000001900)=""/4083, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r2, 0x25, 0x2}, 0x10) close(r3) 11:20:37 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 11:20:37 executing program 0: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 11:20:37 executing program 4: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002140)='io.pressure\x00', 0x2, 0x0) 11:20:37 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) [ 477.918962][ T8311] ? can_vma_merge_before+0x390/0x390 [ 477.924475][ T8311] ? walk_page_test+0x78/0x180 [ 477.929280][ T8311] walk_page_range+0x2b1/0x4a0 [ 477.934094][ T8311] ? __walk_page_range+0x780/0x780 [ 477.939442][ T8311] mlock_fixup+0x650/0x810 [ 477.943912][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 477.949163][ T8311] ? mlock_fixup+0x810/0x810 [ 477.953811][ T8311] ? do_futex+0x132/0x360 [ 477.958193][ T8311] do_mlock+0x25a/0x6d0 [ 477.962411][ T8311] ? xfd_validate_state+0x5d/0x180 [ 477.967766][ T8311] ? folio_evictable+0x270/0x270 [ 477.972764][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 477.977579][ T8311] do_syscall_64+0x39/0xb0 [ 477.982046][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 477.987979][ T8311] RIP: 0033:0x7fafb788c0c9 [ 477.992417][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:20:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@dev}, {}, {@loopback}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@multicast1}]}]}}}}}) [ 478.013184][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 478.021636][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 478.029644][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 478.037665][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 478.045673][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.053674][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 478.061702][ T8311] 11:20:37 executing program 5: syz_clone(0x33208280, 0x0, 0x20, 0x0, 0x0, 0x0) 11:20:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 11:20:37 executing program 5: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0, 0x0, 0xfffe]) 11:20:37 executing program 4: request_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0x0) 11:20:38 executing program 5: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000015c0)=""/176) [ 478.373524][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 478.381773][ T8311] BUG at mt_find:6473 (1) [ 478.395179][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e 11:20:38 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 11:20:38 executing program 4: delete_module(&(0x7f0000000140)='/\x00', 0x0) 11:20:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 11:20:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 11:20:38 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0xaf02, 0x0) [ 478.445322][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:20:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 11:20:38 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), 0xffffffffffffffff) 11:20:38 executing program 4: syz_clone(0x52910400, 0x0, 0xfffffffffffffe23, 0x0, 0x0, 0x0) [ 478.549899][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:20:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 11:20:38 executing program 2: syz_open_dev$vcsu(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000019c0)=0x0) io_cancel(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x8609, &(0x7f0000002b40)) 11:20:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) 11:20:38 executing program 4: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x9e4a1f5ae54c9d93) 11:20:38 executing program 0: move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0xe5) 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 478.706012][ T8311] 0-536866815: 0000000000000000 [ 478.711863][ T8311] 536866816-536870911: ffff8880668dc9a0 11:20:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x10001, 0x4) 11:20:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x5}, 0x14}}, 0x0) 11:20:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6, 0x4) 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:20:38 executing program 5: io_setup(0x3, &(0x7f00000019c0)=0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 11:20:38 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/hwrng\x00', &(0x7f0000000100)='/dev/hwrng\x00', 0x0) [ 478.831034][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 478.856047][ T8311] 553635840-553639935: 0000000000000000 11:20:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 478.913855][ T8311] 553639936-553635839: ffff88805ff72d20 11:20:38 executing program 2: syz_open_dev$vcsu(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000019c0)=0x0) io_cancel(r0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_setup(0x8609, &(0x7f0000002b40)) 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:20:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}}, 0x0) [ 478.954508][ T8311] 553635840-553648127: ffff8880217871c0 11:20:38 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) stat(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000001e00), 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x10, r0) 11:20:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:20:38 executing program 5: io_setup(0x3, &(0x7f00000019c0)=0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 479.007046][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 479.026780][ T8311] 553652224-116813594623: 0000000000000000 [ 479.047890][ T8311] 116813594624-116817788927: ffff8880668dc2a0 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:20:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 11:20:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000440)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000480)=']\x00', 0x0, r0) [ 479.107182][ T8311] 116817788928-93825015144447: 0000000000000000 [ 479.113853][ T8311] 93825015144448-93825015283711: ffff8880668dc460 11:20:38 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:39 executing program 5: io_setup(0x3, &(0x7f00000019c0)=0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x1f}]) [ 479.209929][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 479.217322][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:20:39 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) clock_getres(0x3, &(0x7f0000001a00)) [ 479.229318][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 479.292178][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 479.322402][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 479.329695][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 479.337197][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 479.353182][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 479.361797][ T8311] 140392670429184-140392674623487: ffff8880668dc620 11:20:39 executing program 2: io_setup(0x9, &(0x7f00000019c0)=0x0) r1 = fanotify_init(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 11:20:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 11:20:39 executing program 5: io_setup(0x3, &(0x7f00000019c0)) io_setup(0x35, &(0x7f0000000180)) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8609, &(0x7f0000002b40)) pipe2$9p(0x0, 0x0) io_setup(0x1f, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) io_setup(0x6, &(0x7f00000001c0)) [ 479.370919][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 479.378430][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 479.385802][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 479.393899][ T8311] 140392675835904-140392675839999: 0000000000000000 11:20:39 executing program 0: add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000001c0)='$0', 0x2, 0xfffffffffffffffb) 11:20:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)="90", 0x1) [ 479.450756][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 11:20:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 11:20:39 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000002b40)) 11:20:39 executing program 2: syz_clone3(&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000b40)=""/58, 0x3a, 0x0, 0x0}, 0x58) 11:20:39 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}]}, 0x24}}, 0x0) [ 479.552352][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 479.582368][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 479.600466][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 479.607858][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 479.665687][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 479.673091][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 479.686166][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 479.693304][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 479.706525][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 479.716762][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 479.724806][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 479.731969][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 479.739369][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 479.752447][ T8311] Pass: 10431301 Run:10431396 11:20:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xfb}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) 11:20:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2046) dup2(r0, r1) [ 479.782201][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 479.792067][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 479.802149][ T8311] Call Trace: [ 479.805454][ T8311] [ 479.808412][ T8311] dump_stack_lvl+0xd1/0x138 [ 479.813048][ T8311] mt_find.cold+0x8b/0x90 [ 479.817424][ T8311] ? mas_find+0x1d0/0x1d0 [ 479.821811][ T8311] find_vma+0x10c/0x1b0 [ 479.826002][ T8311] ? can_vma_merge_before+0x390/0x390 [ 479.831411][ T8311] ? walk_page_test+0x78/0x180 [ 479.836216][ T8311] walk_page_range+0x2b1/0x4a0 [ 479.841020][ T8311] ? __walk_page_range+0x780/0x780 [ 479.846191][ T8311] mlock_fixup+0x650/0x810 [ 479.850657][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 479.855903][ T8311] ? mlock_fixup+0x810/0x810 [ 479.860550][ T8311] ? do_futex+0x132/0x360 [ 479.864927][ T8311] do_mlock+0x25a/0x6d0 [ 479.869124][ T8311] ? xfd_validate_state+0x5d/0x180 [ 479.874269][ T8311] ? folio_evictable+0x270/0x270 [ 479.879268][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 479.884080][ T8311] do_syscall_64+0x39/0xb0 [ 479.888536][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 479.894464][ T8311] RIP: 0033:0x7fafb788c0c9 [ 479.898902][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 479.918539][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 11:20:39 executing program 3: semget(0x2, 0x4, 0x31a) 11:20:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0xb, 0x0, "90dca8395c43bfd289e1815db49f4d453bfaa6312ee9530220546e38484e0b1dfe7cb8bb6ddd449e270cc413064a9377faf731543d3c4c986c09db6aa97fad650b4fe69cb60c5d06810110bade7d493f"}, 0xd8) 11:20:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x300, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, 0x1, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "ab5999b00d4ccbf5caa28ef47878c380c838d920266ce255bbb7473eed479c1ad6f3fa99b07b89ba939daaf28abd0ddbf1b0def03cb74346918eeebcb09ef1b1fe5861a9c503b97ab9a5fd61efe5a9a2396cbf00b0e96a942b94c0a6530604196551503d63148e877f34e765f43d316b60fa7630feb1daf91b1ea0d5272c605c944685852fb1909cc56c1910a9a1abc64b9f03a591d83a38cc1e40f9c68348df831da0e60ff71e925b7c78cb4b5056b8a2ce"}]}, 0xd8}, 0x1, 0x0, 0x0, 0x850}, 0x40084) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000180)={0x0, 'batadv0\x00', {0x7}, 0x7ff}) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x94, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f42}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2c1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x25}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x5, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008800}, 0x400c810) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}}, 0x8810) [ 479.926987][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 479.934994][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 479.942996][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 479.950994][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.958996][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 479.967022][ T8311] 11:20:39 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8a001, 0x0) r2 = dup2(r1, r0) write$FUSE_INTERRUPT(r2, 0x0, 0x0) 11:20:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) [ 480.026838][ T8804] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 480.041244][ T8311] index not increased! 20ffd000 <= 20ffd000 11:20:39 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0xfe0, 0x0) 11:20:39 executing program 5: syz_clone3(&(0x7f00000002c0)={0x9020000, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:20:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000023c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 11:20:39 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:20:40 executing program 5: syz_clone3(&(0x7f00000002c0)={0x9020000, &(0x7f0000000000), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:20:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0xa7, 0x0, 0x3, 0x801, 0x0, 0x0, {}, [@generic, @generic="7d22cdbe624cc8bf47aef8e2a13a7d7d37efcb40365005eda8d628bd76c4fe9f608604d5ecff30485091bcdff549ed11cbecc2c44d364d0ae63c66e129fb231f0040bee84e2caaa98b11049562fbd5c5aa7db1fd5c1f0b1e5423133b0d2b6206a32a7a90a310201148a6cc4bb67048874238fc20d396578ab2f48e51274b1b9422ad60f7d910dcdcc1f87d27bfe978baf197449bdbf6dc4f13a710b48bbfdef6499adae0f29c767db87171aacc8809ddc5fd1399fb81632352b090c5a08e50c29a7bdff6f69f1b6bfe0c5e47582fb7dd97a26be4c7b40f6c2d57c0d938a97866c720ec712dd4ba2893feb95b54d9c7ae6d31f508e0", @nested={0x18d, 0x0, 0x0, 0x1, [@typed={0x1e}, @typed={0x0, 0x0, 0x0, 0x0, @ipv6=@remote}]}, @generic="7443226144df9a64c8b40157bf3fb8c132de3e6f973c1eb04563082950d387987f65b505bb0fd0c3f61e2928fc2b0e14f78fb195110779ce642c8ea98a20e69610b08e140cf303563a85ae4fce54f4206a37ad193618d78c806ec89cf3f28bb4ccb585b5aa14d38fae67"]}, 0x304}}, 0x0) [ 480.248062][ T8819] loop0: detected capacity change from 0 to 1024 [ 480.365070][ T8831] netlink: 147 bytes leftover after parsing attributes in process `syz-executor.2'. 11:20:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) 11:20:40 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = mq_open(&(0x7f0000000000)='^*[\\*-\x00', 0x40, 0x50, &(0x7f0000000080)={0x3ff, 0x7f, 0x3, 0x6}) r2 = dup2(r0, r1) write$cgroup_subtree(r2, 0x0, 0x0) 11:20:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x4, &(0x7f0000000500)=0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup3(r2, r0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x7ffff000}]) [ 480.504358][ T8311] BUG at mt_find:6473 (1) [ 480.512217][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 480.602209][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 480.769838][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 480.886330][ T8311] 0-536866815: 0000000000000000 [ 480.891631][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 480.941112][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 480.962905][ T8311] 553635840-553639935: 0000000000000000 [ 480.980698][ T8311] 553639936-553635839: ffff88805ff72d20 11:20:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:40 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0xfe0, 0x0) 11:20:40 executing program 2: r0 = socket(0x2, 0x3, 0x1) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 11:20:40 executing program 4: syz_clone(0x84000, 0x0, 0x0, 0x0, 0x0, 0x0) 11:20:40 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000014000180"], 0x28}}, 0x0) 11:20:40 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00002c1000/0x2000)=nil, 0x2000, &(0x7f0000000000)='/dev/kvm\x00') mlock(&(0x7f0000121000/0x3000)=nil, 0x3000) openat$vimc0(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 481.038251][ T8311] 553635840-553648127: ffff8880217871c0 [ 481.060686][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 481.066767][ T8311] 553652224-116813594623: 0000000000000000 [ 481.073135][ T8311] 116813594624-116817788927: ffff8880668dc2a0 11:20:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x509, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 481.138423][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 481.150224][ T8845] loop0: detected capacity change from 0 to 1024 [ 481.157779][ T8311] 116817788928-93825015144447: 0000000000000000 11:20:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x1c}}, 0x0) [ 481.237904][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 481.250553][ T8311] 93825015283712-140392653647871: 0000000000000000 11:20:41 executing program 5: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1413, 0x1}, 0x10}}, 0x0) [ 481.283892][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:20:41 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x5, &(0x7f0000002b40)) [ 481.333506][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d 11:20:41 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) 11:20:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 481.413756][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 481.426244][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 481.433249][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 481.441431][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 481.449772][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 481.456852][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 481.465727][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 481.472719][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 481.481033][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 481.488174][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 481.503181][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 481.510404][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 481.517425][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 481.524471][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 11:20:41 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, &(0x7f0000000400)) 11:20:41 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0xfe0, 0x0) 11:20:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 481.531446][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 481.752128][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 481.764836][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 481.784876][ T8878] loop0: detected capacity change from 0 to 1024 [ 481.824817][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 481.831922][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 481.839121][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 481.847580][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 481.856504][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 481.872160][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 481.879455][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 481.888743][ T8311] Pass: 10460535 Run:10460631 [ 481.893828][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 481.903679][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 481.913769][ T8311] Call Trace: [ 481.917074][ T8311] [ 481.920042][ T8311] dump_stack_lvl+0xd1/0x138 [ 481.924686][ T8311] mt_find.cold+0x8b/0x90 [ 481.929068][ T8311] ? mas_find+0x1d0/0x1d0 [ 481.933464][ T8311] find_vma+0x10c/0x1b0 [ 481.937664][ T8311] ? can_vma_merge_before+0x390/0x390 [ 481.943076][ T8311] ? walk_page_test+0x78/0x180 [ 481.947888][ T8311] walk_page_range+0x2b1/0x4a0 [ 481.952701][ T8311] ? __walk_page_range+0x780/0x780 [ 481.957878][ T8311] mlock_fixup+0x650/0x810 [ 481.962354][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 481.967605][ T8311] ? mlock_fixup+0x810/0x810 [ 481.972283][ T8311] ? do_futex+0x132/0x360 [ 481.976669][ T8311] do_mlock+0x25a/0x6d0 [ 481.980867][ T8311] ? xfd_validate_state+0x5d/0x180 [ 481.986015][ T8311] ? folio_evictable+0x270/0x270 [ 481.991023][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 481.995835][ T8311] do_syscall_64+0x39/0xb0 [ 482.000303][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 482.006231][ T8311] RIP: 0033:0x7fafb788c0c9 [ 482.010679][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 482.030328][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 482.038781][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 482.046789][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 482.054795][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 482.062798][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 11:20:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x24}}, 0x0) 11:20:41 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) [ 482.070797][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 482.078824][ T8311] [ 482.094929][ T8311] index not increased! 20ffd000 <= 20ffd000 11:20:42 executing program 3: eventfd2(0x0, 0x400) 11:20:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0xc}) 11:20:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x38}) 11:20:42 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x8, 0xd8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 11:20:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0xfe0, 0x0) 11:20:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 482.252599][ T8311] BUG at mt_find:6473 (1) [ 482.265524][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 482.367003][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 482.404140][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.446141][ T8892] loop0: detected capacity change from 0 to 1024 11:20:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x38}) [ 482.493185][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:20:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002880), 0x10b002, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='1', 0xfffffffffffffe5e) 11:20:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000140)={0xdb, 0x0, 0xc}) 11:20:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:42 executing program 5: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000002200)={'syz', 0x2}, &(0x7f0000002240)="b0", 0x1, 0xffffffffffffffff) 11:20:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) 11:20:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x38}) [ 482.707441][ T8311] 0-536866815: 0000000000000000 11:20:42 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 11:20:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x38}) [ 482.765658][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 482.772896][ T8915] loop0: detected capacity change from 0 to 1024 [ 482.805690][ T8311] 536870912-553635839: ffff8880668dc0e0 11:20:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) 11:20:42 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000180)) 11:20:42 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 482.874575][ T8311] 553635840-553639935: 0000000000000000 [ 482.885136][ T8311] 553639936-553635839: ffff88805ff72d20 11:20:42 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0xbb38, 0x0, 0x0, 'queue1\x00'}) 11:20:42 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x0, "118b586da868fbdf0a1a4545d8aa53f2599362073c7b44e268b67c11997f91b94e19bc4a14410b691cc844c4e1216ecdc0ba467467db56c8bd1f9e779fe523a92f6c27c823c40ce6ee5061037dbeaf949b7db15dbff781882319f80709d3f6985a8c069c306edd613fb08e2a3df51a5aeaf2c1c75da39da657e81269c59700"}) 11:20:42 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a35eca032006a0933a"], 0xb) 11:20:42 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000800)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @private1}}, 0x5c) [ 482.928214][ T8311] 553635840-553648127: ffff8880217871c0 [ 483.024368][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 483.030341][ T8311] 553652224-116813594623: 0000000000000000 [ 483.037157][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 483.043643][ T8311] 116817788928-93825015144447: 0000000000000000 [ 483.051070][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 483.058334][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 483.065682][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:20:42 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) 11:20:42 executing program 2: openat$nullb(0xffffffffffffff9c, 0x0, 0x252002, 0x0) [ 483.072702][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 483.127731][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.140019][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 483.147924][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 483.178065][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 483.206883][ T8311] 140392666234880-140392668332031: ffff8880668dca80 11:20:43 executing program 5: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000080)=0x5, 0x7, 0x0) [ 483.223454][ T8944] loop0: detected capacity change from 0 to 1024 11:20:43 executing program 2: mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 11:20:43 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0xbb38, 0x0, 0x0, 'queue1\x00'}) 11:20:43 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0xfffffedc) [ 483.269374][ T8311] 140392668332032-140392670429183: ffff8880668dc700 11:20:43 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/asound/seq/timer\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, 0x930, 0x2000001, 0x11, r0, 0x0) [ 483.348741][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 483.407047][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 483.494364][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 483.501382][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 483.544257][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 483.551328][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 483.578234][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 483.600250][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 483.614298][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 483.630638][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 483.680592][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.852804][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 483.860714][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 483.891646][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 483.900396][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 483.908045][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 483.917009][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 483.926367][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 483.933433][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 11:20:43 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000240)={{}, 'port1\x00'}) 11:20:43 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$eJzs3U9oHNcdB/DvrFb/XHCUxE7cEqiIIS0VtfUHpVUvdUspOoQS0kPPwpZj4bUSpE1RQinqP3rtIfScHnTrqdC7IT23l5KrjoFCLjkU3RRmdlZaW7Kysi3vKvl8xNv33r6ZN7/57czsH7FsgK+t5Zk076fI8swbW2V/d2ehtbuzMF4Pt5KU7UbS7FQp1pPi4+RGOiXfLO+sly8etZ0P15be+uTz3U87vWZdquUbmXj0ev3Zrkumk4zU9VGjjzXfzUfO16/iIDNlwq52EweDtn/E9mlWf8LzFhgGRed584ip5EKSifp1QOqrQ+PZRvf0neoqBwAAAOfUc3vZ297f3x90HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCe1L//X9Sl0W1Pp+j+/v9YfV/q9rl2f9ABAAAAAAAAAMBT8O297GUrF7v9/aL6n/+rVedSdfuNvJfNrGYj17KVlbTTzkbmkkz1TDS2tdJub8z1seb8sWvOP5v9BQAAAAAAAICvqN9n+fD//wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAyKZKRTVeVStz2VRjPJRJKxcrnt5D/d9nl2f9ABAAAAwDPw3F72spWL3f5+Ub3nf6l63z+R97KedtbSTiuruVV9FtB519/Y3Vlo7e4s3CvL0Xn/+v/9Sp9hVDOm89nD8Vu+Ui0xmdtZq+65lpt5J63cSqNas3SlG8/xcf3us3LuH9f6jOxWXZd7/pe6Hg5TVUZGDzIyW8dWZuP5kzPxk8+eaEtzaRx88nPpDHJ+oa6Lh+rBezgT8z1H30snZyL5zj///qs7rfW7d25vzgzPLj2mBzMxXvW6mXj5a5WJ2WrfLx/0l/Pz/DIzmc6b2chafp2VtLOa6fysaq3Ux3N5O3Vypm480HvzyyIZqx+XzlX0dDG9Wq17MWv5Rd7Jrazm9epvPnP5QRazmKWeR/hyH2d943Rn/dXv1o3JJH+u6+FQ5vX5nrz2XnOnqrHeew6z9MLTvzY2v1U3ym38oa6Hw8OZmOvJxIsnZ+Jv1euEzdb63Y07K+/2ub3X6ro8j/40VM8S5fHyQvlgVb0Hj45y7MVjx+aqsUsHY40jY5cPxr7sTB2rX8MdnWm+Gnv52LGFauxKz9hxr7cAGHoXvndhbPJ/k/+e/Gjyj5N3Jt+Y+On4D8dfGcvov0Z/1Jwdea3xSvGPfJTfHr7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt/m+x/cXWm1VjfOrNH9OaeTFy7qH/I5+3i+Yo2JDEUYp2q0/psMQRhD1RgftoN/wBcm4Mxdb9979/rm+x98f+3eyturb6+ujy4uLs0uLb6+cP32Wmsk5e3q7KCjBM7C4ZP+oCMBAAAAAAAAAAAA+nXy1wBG66We7OsEA95FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JxbnknzforMzV6bLfu7OwutsnTbh0s2kzSSFL9Jio+TG+mUTPVMVzxqOx+uLb31yee7nx7O1ewu3zhpvf5s1yXTSUbq+mnNd/OJ5ysO9rBM2NVu4mDQvggAAP//c+gHsA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 11:20:43 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x80800) 11:20:43 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0xbb38, 0x0, 0x0, 'queue1\x00'}) 11:20:43 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000e80)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) [ 483.947507][ T8311] 140727981912064-18446744073709551615: 0000000000000000 11:20:43 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000c80)) 11:20:43 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000240)={{}, 'port1\x00'}) [ 484.000390][ T8311] Pass: 10482643 Run:10482740 [ 484.046517][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 484.047744][ T8963] loop0: detected capacity change from 0 to 1024 [ 484.056358][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 484.056375][ T8311] Call Trace: [ 484.056384][ T8311] [ 484.056394][ T8311] dump_stack_lvl+0xd1/0x138 [ 484.056433][ T8311] mt_find.cold+0x8b/0x90 [ 484.056469][ T8311] ? mas_find+0x1d0/0x1d0 [ 484.056518][ T8311] find_vma+0x10c/0x1b0 [ 484.096644][ T8311] ? can_vma_merge_before+0x390/0x390 [ 484.102063][ T8311] ? walk_page_test+0x78/0x180 [ 484.106876][ T8311] walk_page_range+0x2b1/0x4a0 [ 484.111684][ T8311] ? __walk_page_range+0x780/0x780 [ 484.116857][ T8311] mlock_fixup+0x650/0x810 [ 484.121327][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 484.126582][ T8311] ? mlock_fixup+0x810/0x810 [ 484.131309][ T8311] ? do_futex+0x132/0x360 [ 484.136113][ T8311] do_mlock+0x25a/0x6d0 [ 484.140312][ T8311] ? xfd_validate_state+0x5d/0x180 [ 484.145458][ T8311] ? folio_evictable+0x270/0x270 [ 484.150457][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 484.155262][ T8311] do_syscall_64+0x39/0xb0 [ 484.159702][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 484.165605][ T8311] RIP: 0033:0x7fafb788c0c9 [ 484.170026][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 11:20:44 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000000)={0xbb38, 0x0, 0x0, 'queue1\x00'}) 11:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 484.189636][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 484.198058][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 484.206033][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 484.214009][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 484.221989][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.229966][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 484.238045][ T8311] [ 484.241127][ C0] vkms_vblank_simulate: vblank timer overrun 11:20:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 11:20:44 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000240)={{}, 'port1\x00'}) 11:20:44 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) [ 484.324864][ T8311] index not increased! 20ffd000 <= 20ffd000 11:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 484.384282][ T8311] BUG at mt_find:6473 (1) [ 484.388895][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e 11:20:44 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000240)={{}, 'port1\x00'}) 11:20:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 11:20:44 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x2, 0x0, 0x98, &(0x7f0000000100)={0x0, 0x0, 0xe}}) [ 484.490860][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:20:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 11:20:44 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:44 executing program 2: add_key(&(0x7f00000000c0)='big_key\x00', 0x0, &(0x7f0000000140)="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", 0x4df, 0xffffffffffffffff) 11:20:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 11:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:20:44 executing program 5: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0xa0002, 0x0) 11:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 11:20:44 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11:20:44 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000002880), 0x20c001, 0x0) 11:20:44 executing program 5: pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}}, 0x78) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) 11:20:44 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:44 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 484.894124][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 484.996159][ T9009] loop0: detected capacity change from 0 to 1024 [ 485.013247][ T8371] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.114200][ T8311] 0-536866815: 0000000000000000 [ 485.119511][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 485.219597][ T8311] 536870912-553635839: ffff8880668dc0e0 11:20:45 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) 11:20:45 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000140)=@rose={'rose', 0x0}, 0x10) 11:20:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x3}) 11:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:45 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:45 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 485.264185][ T8311] 553635840-553639935: 0000000000000000 [ 485.270186][ T8311] 553639936-553635839: ffff88805ff72d20 11:20:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000003c0)) [ 485.324848][ T8311] 553635840-553648127: ffff8880217871c0 [ 485.331536][ T8311] 553648128-553652223: ffff8880668dc1c0 11:20:45 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:45 executing program 3: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/oss_mixer\x00', 0xa0002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=[{'VOLUME', @val={' \'', 'Master Capture Switch'}}], 0x34) [ 485.399755][ T9024] loop0: detected capacity change from 0 to 1024 11:20:45 executing program 0: syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x3d5e}}, {}, {}, {@gid}, {@force}, {@type={'type', 0x3d, "c6ccf764"}}, {@nls={'nls', 0x3d, 'maccroatian'}}]}, 0x8, 0x604, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 11:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 485.474281][ T8311] 553652224-116813594623: 0000000000000000 11:20:45 executing program 5: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x204a1, 0x0) [ 485.530650][ T8311] 116813594624-116817788927: ffff8880668dc2a0 11:20:45 executing program 2: socketpair(0x21, 0x0, 0x2, 0x0) 11:20:45 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) [ 485.598746][ T9044] loop0: detected capacity change from 0 to 1024 [ 485.616497][ T8311] 116817788928-93825015144447: 0000000000000000 [ 485.624833][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 485.635281][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 485.642372][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:20:45 executing program 3: landlock_create_ruleset(0x0, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000001780)=[0x0, 0x0], 0x0, 0x0) 11:20:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x125d, &(0x7f0000000000)) [ 485.650184][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 485.717812][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 485.740168][ T8311] 140392662040576-140392664137727: ffff8880668dc380 11:20:45 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), 0x4) 11:20:45 executing program 4: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 11:20:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 485.761530][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 485.788128][ T8311] 140392666234880-140392668332031: ffff8880668dca80 11:20:45 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 11:20:45 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/cgroups\x00', 0x0, 0x0) [ 485.829486][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 485.867870][ T8311] 140392670429184-140392674623487: ffff8880668dc620 11:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:45 executing program 4: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 11:20:45 executing program 0: syz_open_dev$dri(&(0x7f0000001c80), 0x0, 0x0) [ 485.921245][ T8311] 140392674623488-140392674770943: ffff8880284f8380 11:20:45 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 485.971074][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 485.989190][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 11:20:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000280)) 11:20:45 executing program 4: ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) [ 486.029026][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.041242][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.050294][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.062077][ T8311] 140392676241408-140392676261887: 0000000000000000 11:20:45 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 486.074539][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 11:20:45 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:20:45 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:20:45 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) [ 486.092232][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.142767][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.159609][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.171125][ T8311] 140392689410048-140392689541119: ffff8880284f8700 11:20:45 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:46 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:46 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 486.184008][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.191600][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.206524][ T8311] 140727981113344-140727981887487: 0000000000000000 11:20:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000280)) 11:20:46 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 486.304110][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 11:20:46 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x2c01, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:20:46 executing program 4: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) 11:20:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) [ 486.344722][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.344760][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.344825][ T8311] Pass: 10513362 Run:10513460 [ 486.344841][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 11:20:46 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:20:46 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) 11:20:46 executing program 0: r0 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x81) [ 486.344869][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 11:20:46 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 11:20:46 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:20:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x1278, &(0x7f0000000000)) 11:20:46 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) [ 486.344884][ T8311] Call Trace: [ 486.344893][ T8311] [ 486.344904][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.344945][ T8311] mt_find.cold+0x8b/0x90 [ 486.344984][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.345033][ T8311] find_vma+0x10c/0x1b0 [ 486.345061][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.345096][ T8311] ? walk_page_test+0x78/0x180 [ 486.345133][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.345172][ T8311] ? __walk_page_range+0x780/0x780 [ 486.345228][ T8311] mlock_fixup+0x650/0x810 [ 486.345281][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.345325][ T8311] ? mlock_fixup+0x810/0x810 [ 486.345376][ T8311] ? do_futex+0x132/0x360 [ 486.345419][ T8311] do_mlock+0x25a/0x6d0 [ 486.345453][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.345484][ T8311] ? folio_evictable+0x270/0x270 [ 486.345544][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.345585][ T8311] do_syscall_64+0x39/0xb0 [ 486.345619][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.345647][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.345668][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.345690][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.345714][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.345731][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.345747][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.345763][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.345778][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.345824][ T8311] [ 486.345904][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.345919][ T8311] BUG at mt_find:6473 (1) [ 486.345934][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.345954][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.346203][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.346433][ T8311] 0-536866815: 0000000000000000 [ 486.346456][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.346479][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.346503][ T8311] 553635840-553639935: 0000000000000000 [ 486.346526][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.346549][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.346572][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.346595][ T8311] 553652224-116813594623: 0000000000000000 [ 486.346618][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.346643][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.346666][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.346691][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.346716][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.346740][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.346983][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.347008][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.347033][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.347058][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.347083][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.347129][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.347154][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.347178][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.347202][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.347226][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.347250][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.347275][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.347300][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.347323][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.347348][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.347572][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.347596][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.347621][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.347646][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.347671][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.347696][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.347719][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.347744][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.347769][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.347794][ T8311] Pass: 10513362 Run:10513461 [ 486.347808][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.347841][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.347857][ T8311] Call Trace: [ 486.347865][ T8311] [ 486.347876][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.347915][ T8311] mt_find.cold+0x8b/0x90 [ 486.347954][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.348001][ T8311] find_vma+0x10c/0x1b0 [ 486.348029][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.348061][ T8311] ? walk_page_test+0x78/0x180 [ 486.348099][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.348138][ T8311] ? __walk_page_range+0x780/0x780 [ 486.348194][ T8311] mlock_fixup+0x650/0x810 [ 486.348246][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.348287][ T8311] ? mlock_fixup+0x810/0x810 [ 486.348337][ T8311] ? do_futex+0x132/0x360 [ 486.348380][ T8311] do_mlock+0x25a/0x6d0 [ 486.348418][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.348450][ T8311] ? folio_evictable+0x270/0x270 [ 486.348510][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.348552][ T8311] do_syscall_64+0x39/0xb0 [ 486.348589][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.348620][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.348641][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.348665][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.348692][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.348709][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.348726][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.348742][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.348767][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.348807][ T8311] [ 486.348827][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.348841][ T8311] BUG at mt_find:6473 (1) [ 486.348856][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.348877][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.349124][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.349351][ T8311] 0-536866815: 0000000000000000 [ 486.349374][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.349397][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.349421][ T8311] 553635840-553639935: 0000000000000000 [ 486.349442][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.349464][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.349487][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.349511][ T8311] 553652224-116813594623: 0000000000000000 [ 486.349533][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.349557][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.349579][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.349602][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.349623][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.349647][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.349885][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.349908][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.349930][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.351073][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.351100][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.351124][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.351147][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.351170][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.351194][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.351217][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.351240][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.351265][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.351290][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.351314][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.351338][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.351561][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.351585][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.351610][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.351634][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.351658][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.351682][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.351706][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.351731][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.351754][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.351778][ T8311] Pass: 10513362 Run:10513462 [ 486.351792][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.351826][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.351842][ T8311] Call Trace: [ 486.351850][ T8311] [ 486.351861][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.351898][ T8311] mt_find.cold+0x8b/0x90 [ 486.351935][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.351982][ T8311] find_vma+0x10c/0x1b0 [ 486.352009][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.352041][ T8311] ? walk_page_test+0x78/0x180 [ 486.352077][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.352115][ T8311] ? __walk_page_range+0x780/0x780 [ 486.352171][ T8311] mlock_fixup+0x650/0x810 [ 486.352223][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.352266][ T8311] ? mlock_fixup+0x810/0x810 [ 486.352315][ T8311] ? do_futex+0x132/0x360 [ 486.352358][ T8311] do_mlock+0x25a/0x6d0 [ 486.352395][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.352427][ T8311] ? folio_evictable+0x270/0x270 [ 486.352484][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.352527][ T8311] do_syscall_64+0x39/0xb0 [ 486.352562][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.352592][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.352613][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.352637][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.352663][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.352681][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.352697][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.352712][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.352728][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.352765][ T8311] [ 486.352780][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.352793][ T8311] BUG at mt_find:6473 (1) [ 486.352807][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.352833][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.353078][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.353286][ T8311] 0-536866815: 0000000000000000 [ 486.353308][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.353330][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.353352][ T8311] 553635840-553639935: 0000000000000000 [ 486.353373][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.353394][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.353413][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.353433][ T8311] 553652224-116813594623: 0000000000000000 [ 486.353452][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.353473][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.353494][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.353516][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.353538][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.353560][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.353801][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.353884][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.353909][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.353933][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.353957][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.353981][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.354005][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.354311][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.354331][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.354351][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.354374][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.354396][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.354420][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.354445][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.354469][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.354696][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.354720][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.354745][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.354767][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.354788][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.354810][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.354841][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.354864][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.354888][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.354910][ T8311] Pass: 10513362 Run:10513463 [ 486.354924][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.354949][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.354964][ T8311] Call Trace: [ 486.354972][ T8311] [ 486.354983][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.355020][ T8311] mt_find.cold+0x8b/0x90 [ 486.355059][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.355106][ T8311] find_vma+0x10c/0x1b0 [ 486.355131][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.355163][ T8311] ? walk_page_test+0x78/0x180 [ 486.355198][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.355239][ T8311] ? __walk_page_range+0x780/0x780 [ 486.355292][ T8311] mlock_fixup+0x650/0x810 [ 486.355342][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.355385][ T8311] ? mlock_fixup+0x810/0x810 [ 486.355434][ T8311] ? do_futex+0x132/0x360 [ 486.355475][ T8311] do_mlock+0x25a/0x6d0 [ 486.355512][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.355543][ T8311] ? folio_evictable+0x270/0x270 [ 486.355601][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.355643][ T8311] do_syscall_64+0x39/0xb0 [ 486.355680][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.355709][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.355729][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.355753][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.355777][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.355794][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.355811][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.355832][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.355848][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.355886][ T8311] [ 486.356076][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.356091][ T8311] BUG at mt_find:6473 (1) [ 486.356106][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.356125][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.356366][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.356585][ T8311] 0-536866815: 0000000000000000 [ 486.356607][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.356630][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.356654][ T8311] 553635840-553639935: 0000000000000000 [ 486.356677][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.356701][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.356736][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.356760][ T8311] 553652224-116813594623: 0000000000000000 [ 486.356783][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.356806][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.356835][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.356861][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.356884][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.356907][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.357329][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.357354][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.357379][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.357403][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.357427][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.357451][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.357474][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.357498][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.357521][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.357545][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.357567][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.357591][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.357615][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.357640][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.357664][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.357900][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.357925][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.357950][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.357975][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.357999][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.358024][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.358047][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.358071][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.358096][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.358120][ T8311] Pass: 10513362 Run:10513464 [ 486.358134][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.358162][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.358176][ T8311] Call Trace: [ 486.358185][ T8311] [ 486.358195][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.358235][ T8311] mt_find.cold+0x8b/0x90 [ 486.358273][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.358319][ T8311] find_vma+0x10c/0x1b0 [ 486.358346][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.358378][ T8311] ? walk_page_test+0x78/0x180 [ 486.358414][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.358452][ T8311] ? __walk_page_range+0x780/0x780 [ 486.358526][ T8311] mlock_fixup+0x650/0x810 [ 486.358577][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.358620][ T8311] ? mlock_fixup+0x810/0x810 [ 486.358670][ T8311] ? do_futex+0x132/0x360 [ 486.358713][ T8311] do_mlock+0x25a/0x6d0 [ 486.358751][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.358783][ T8311] ? folio_evictable+0x270/0x270 [ 486.358850][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.358892][ T8311] do_syscall_64+0x39/0xb0 [ 486.358930][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.358960][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.358980][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.359004][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.359026][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.359041][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.359057][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.359073][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.359088][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.359127][ T8311] [ 486.359315][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.359330][ T8311] BUG at mt_find:6473 (1) [ 486.359345][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.359365][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.359614][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.359850][ T8311] 0-536866815: 0000000000000000 [ 486.359873][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.359898][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.359921][ T8311] 553635840-553639935: 0000000000000000 [ 486.359944][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.359967][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.359990][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.360014][ T8311] 553652224-116813594623: 0000000000000000 [ 486.360037][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.360062][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.360085][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.360110][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.360133][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.360157][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.360582][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.360607][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.360632][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.360656][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.360680][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.360703][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.360727][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.360751][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.360774][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.360798][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.360828][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.360852][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.360877][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.360901][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.360925][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.361153][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.361177][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.361202][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.361227][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.361250][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.361275][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.361298][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.361322][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.361347][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.361372][ T8311] Pass: 10513362 Run:10513465 [ 486.361386][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.361419][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.361433][ T8311] Call Trace: [ 486.361444][ T8311] [ 486.361454][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.361493][ T8311] mt_find.cold+0x8b/0x90 [ 486.361531][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.361578][ T8311] find_vma+0x10c/0x1b0 [ 486.361605][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.361636][ T8311] ? walk_page_test+0x78/0x180 [ 486.361672][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.361710][ T8311] ? __walk_page_range+0x780/0x780 [ 486.361767][ T8311] mlock_fixup+0x650/0x810 [ 486.361822][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.361866][ T8311] ? mlock_fixup+0x810/0x810 [ 486.361916][ T8311] ? do_futex+0x132/0x360 [ 486.361959][ T8311] do_mlock+0x25a/0x6d0 [ 486.361997][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.362029][ T8311] ? folio_evictable+0x270/0x270 [ 486.362088][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.362129][ T8311] do_syscall_64+0x39/0xb0 [ 486.362163][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.362192][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.362212][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.362236][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.362261][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.362279][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.362295][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.362311][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.362326][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.362363][ T8311] [ 486.362552][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.362567][ T8311] BUG at mt_find:6473 (1) [ 486.362582][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.362602][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.362859][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.363089][ T8311] 0-536866815: 0000000000000000 [ 486.363111][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.363135][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.363158][ T8311] 553635840-553639935: 0000000000000000 [ 486.363182][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.363205][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.363228][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.363252][ T8311] 553652224-116813594623: 0000000000000000 [ 486.363275][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.363298][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.363320][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.363345][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.363369][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.363393][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.363820][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.363845][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.363870][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.363894][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.363919][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.363942][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.363966][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.363990][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.364464][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.364495][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.364521][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.364547][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.364569][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.364593][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.364617][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.365018][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.365042][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.365067][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.365091][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.365113][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.365139][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.365162][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.365184][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.365209][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.365233][ T8311] Pass: 10513362 Run:10513466 [ 486.365247][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.365270][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.365283][ T8311] Call Trace: [ 486.365291][ T8311] [ 486.365300][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.365337][ T8311] mt_find.cold+0x8b/0x90 [ 486.365379][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.365423][ T8311] find_vma+0x10c/0x1b0 [ 486.365449][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.365480][ T8311] ? walk_page_test+0x78/0x180 [ 486.365516][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.365553][ T8311] ? __walk_page_range+0x780/0x780 [ 486.365608][ T8311] mlock_fixup+0x650/0x810 [ 486.365659][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.365702][ T8311] ? mlock_fixup+0x810/0x810 [ 486.365752][ T8311] ? do_futex+0x132/0x360 [ 486.365794][ T8311] do_mlock+0x25a/0x6d0 [ 486.365838][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.365870][ T8311] ? folio_evictable+0x270/0x270 [ 486.365929][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.365970][ T8311] do_syscall_64+0x39/0xb0 [ 486.366009][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.366038][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.366058][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.366082][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.366105][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.366122][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.366138][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.366154][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.366170][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.366208][ T8311] [ 486.366390][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.366405][ T8311] BUG at mt_find:6473 (1) [ 486.366419][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.366439][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.366685][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.366918][ T8311] 0-536866815: 0000000000000000 [ 486.366941][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.366964][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.366987][ T8311] 553635840-553639935: 0000000000000000 [ 486.367009][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.367032][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.367054][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.367077][ T8311] 553652224-116813594623: 0000000000000000 [ 486.367100][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.367124][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.367147][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.367171][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.367194][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.367218][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.367631][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.367656][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.367680][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.367739][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.367765][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.367788][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.367817][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.367841][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.367865][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.367888][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.367912][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.367936][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.367960][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.367984][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.368005][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.368244][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.368266][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.368288][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.368310][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.368333][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.368357][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.368381][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.368406][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.368429][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.368453][ T8311] Pass: 10513362 Run:10513467 [ 486.368467][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.368493][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.368511][ T8311] Call Trace: [ 486.368519][ T8311] [ 486.368529][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.368567][ T8311] mt_find.cold+0x8b/0x90 [ 486.368605][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.368650][ T8311] find_vma+0x10c/0x1b0 [ 486.368677][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.368710][ T8311] ? walk_page_test+0x78/0x180 [ 486.368747][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.368786][ T8311] ? __walk_page_range+0x780/0x780 [ 486.368848][ T8311] mlock_fixup+0x650/0x810 [ 486.368895][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.368932][ T8311] ? mlock_fixup+0x810/0x810 [ 486.368979][ T8311] ? do_futex+0x132/0x360 [ 486.369022][ T8311] do_mlock+0x25a/0x6d0 [ 486.369059][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.369091][ T8311] ? folio_evictable+0x270/0x270 [ 486.369151][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.369194][ T8311] do_syscall_64+0x39/0xb0 [ 486.369232][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.369261][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.369282][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.369306][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.369331][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.369349][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.369366][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.369382][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.369398][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.369436][ T8311] [ 486.369627][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.369642][ T8311] BUG at mt_find:6473 (1) [ 486.369657][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.369677][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.369932][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.370160][ T8311] 0-536866815: 0000000000000000 [ 486.370184][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.370208][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.370232][ T8311] 553635840-553639935: 0000000000000000 [ 486.370255][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.370277][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.370298][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.370378][ T8311] 553652224-116813594623: 0000000000000000 [ 486.370401][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.370425][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.370448][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.370472][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.370495][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.370520][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.370943][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.370968][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.370993][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.371017][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.371041][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.371066][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.371089][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.371113][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.371137][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.371160][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.371184][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.371207][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.371230][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.371254][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.371278][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.371503][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.371527][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.371552][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.371576][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.371600][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.371624][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.371648][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.371672][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.371697][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.371721][ T8311] Pass: 10513362 Run:10513468 [ 486.371735][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.371763][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.371778][ T8311] Call Trace: [ 486.371787][ T8311] [ 486.371797][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.371841][ T8311] mt_find.cold+0x8b/0x90 [ 486.371880][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.371928][ T8311] find_vma+0x10c/0x1b0 [ 486.371954][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.371986][ T8311] ? walk_page_test+0x78/0x180 [ 486.372022][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.372061][ T8311] ? __walk_page_range+0x780/0x780 [ 486.372117][ T8311] mlock_fixup+0x650/0x810 [ 486.372169][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.372213][ T8311] ? mlock_fixup+0x810/0x810 [ 486.372264][ T8311] ? do_futex+0x132/0x360 [ 486.372307][ T8311] do_mlock+0x25a/0x6d0 [ 486.372344][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.372376][ T8311] ? folio_evictable+0x270/0x270 [ 486.372437][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.372480][ T8311] do_syscall_64+0x39/0xb0 [ 486.372518][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.372548][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.372568][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.372591][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.372616][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.372634][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.372650][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.372667][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.372683][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.372723][ T8311] [ 486.372908][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.372922][ T8311] BUG at mt_find:6473 (1) [ 486.372937][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.372957][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.373203][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.373432][ T8311] 0-536866815: 0000000000000000 [ 486.373454][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.373477][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.373500][ T8311] 553635840-553639935: 0000000000000000 [ 486.373523][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.373546][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.373570][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.373593][ T8311] 553652224-116813594623: 0000000000000000 [ 486.373616][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.373639][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.373663][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.373687][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.373711][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.373735][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.439806][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.439828][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.439846][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.439864][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.439890][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.439907][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.439925][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.439944][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.439962][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.439981][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.439998][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.440016][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.440035][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.440057][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.440082][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.440298][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.440322][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.440346][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.440369][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.440392][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.440424][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.440445][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.440466][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.440486][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.440505][ T8311] Pass: 10514195 Run:10514302 [ 486.440551][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.440576][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.440592][ T8311] Call Trace: [ 486.440601][ T8311] [ 486.440611][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.440655][ T8311] mt_find.cold+0x8b/0x90 [ 486.440696][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.440745][ T8311] find_vma+0x10c/0x1b0 [ 486.440772][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.440804][ T8311] ? walk_page_test+0x78/0x180 [ 486.440842][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.440889][ T8311] ? __walk_page_range+0x780/0x780 [ 486.440946][ T8311] mlock_fixup+0x650/0x810 [ 486.441000][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.441045][ T8311] ? mlock_fixup+0x810/0x810 [ 486.441096][ T8311] ? do_futex+0x132/0x360 [ 486.441140][ T8311] do_mlock+0x25a/0x6d0 [ 486.441180][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.441210][ T8311] ? folio_evictable+0x270/0x270 [ 486.441269][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.441312][ T8311] do_syscall_64+0x39/0xb0 [ 486.441351][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.441381][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.441403][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.441428][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.441454][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.441471][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.441487][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.441504][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.441520][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.441558][ T8311] [ 486.561845][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.561866][ T8311] BUG at mt_find:6473 (1) [ 486.561882][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.561904][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.562160][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.562392][ T8311] 0-536866815: 0000000000000000 [ 486.562415][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.562438][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.562462][ T8311] 553635840-553639935: 0000000000000000 [ 486.562485][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.562508][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.562531][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.562555][ T8311] 553652224-116813594623: 0000000000000000 [ 486.562577][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.562601][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.562624][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.562649][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.562672][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.562691][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.584875][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.584902][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.584926][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.584949][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.584975][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.584998][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.585022][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.585046][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.585070][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.585094][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.585117][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.585141][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.585163][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.585186][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.585210][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.585435][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.585459][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.585484][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.585509][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.585532][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.585557][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.585579][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.585603][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.585627][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.585651][ T8311] Pass: 10515529 Run:10515637 [ 486.585666][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.585692][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.585707][ T8311] Call Trace: [ 486.585716][ T8311] [ 486.585727][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.585768][ T8311] mt_find.cold+0x8b/0x90 [ 486.585812][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.585860][ T8311] find_vma+0x10c/0x1b0 [ 486.585887][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.585919][ T8311] ? walk_page_test+0x78/0x180 [ 486.585954][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.585993][ T8311] ? __walk_page_range+0x780/0x780 [ 486.586049][ T8311] mlock_fixup+0x650/0x810 [ 486.586097][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.586141][ T8311] ? mlock_fixup+0x810/0x810 [ 486.586190][ T8311] ? do_futex+0x132/0x360 [ 486.586233][ T8311] do_mlock+0x25a/0x6d0 [ 486.586269][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.586301][ T8311] ? folio_evictable+0x270/0x270 [ 486.586362][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.586404][ T8311] do_syscall_64+0x39/0xb0 [ 486.586441][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.586472][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.586492][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.586517][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.586542][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.586559][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.586575][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.586591][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.586605][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.586644][ T8311] [ 486.586661][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.586675][ T8311] BUG at mt_find:6473 (1) [ 486.586689][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.586709][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.586958][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.587185][ T8311] 0-536866815: 0000000000000000 [ 486.587207][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.587229][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.587251][ T8311] 553635840-553639935: 0000000000000000 [ 486.587271][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.587290][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.587310][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.587330][ T8311] 553652224-116813594623: 0000000000000000 [ 486.587350][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.587369][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.587390][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.587411][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.587432][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.587455][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.587663][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.587686][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.587710][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.587733][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.587757][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.587781][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.587813][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.587839][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.587864][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.587888][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.587911][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.587936][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.587960][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.587984][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.588008][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.588231][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.588254][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.588274][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.588296][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.588319][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.588340][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.588363][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.588389][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.588413][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.588435][ T8311] Pass: 10515529 Run:10515638 [ 486.588448][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.588472][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.588495][ T8311] Call Trace: [ 486.588504][ T8311] [ 486.588514][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.588554][ T8311] mt_find.cold+0x8b/0x90 [ 486.588592][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.588639][ T8311] find_vma+0x10c/0x1b0 [ 486.588666][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.588699][ T8311] ? walk_page_test+0x78/0x180 [ 486.588736][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.588774][ T8311] ? __walk_page_range+0x780/0x780 [ 486.588835][ T8311] mlock_fixup+0x650/0x810 [ 486.588886][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.588926][ T8311] ? mlock_fixup+0x810/0x810 [ 486.588971][ T8311] ? do_futex+0x132/0x360 [ 486.589010][ T8311] do_mlock+0x25a/0x6d0 [ 486.589046][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.589076][ T8311] ? folio_evictable+0x270/0x270 [ 486.589131][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.589169][ T8311] do_syscall_64+0x39/0xb0 [ 486.589205][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.589233][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.589252][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.589276][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.589300][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.589314][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.589329][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.589346][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.589361][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.589397][ T8311] [ 486.589413][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.589426][ T8311] BUG at mt_find:6473 (1) [ 486.589439][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.589459][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.589696][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.589926][ T8311] 0-536866815: 0000000000000000 [ 486.589948][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.589971][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.589993][ T8311] 553635840-553639935: 0000000000000000 [ 486.590014][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.590035][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.590059][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.590082][ T8311] 553652224-116813594623: 0000000000000000 [ 486.590105][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.590129][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.590152][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.590177][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.590200][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.590225][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.590461][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.590486][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.590510][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.590534][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.590558][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.590582][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.590606][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.590630][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.590654][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.590677][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.590700][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.590724][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.590749][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.590772][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.590796][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.591029][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.591053][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.591077][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.591101][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.591126][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.591148][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.591169][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.591191][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.591214][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.591238][ T8311] Pass: 10515532 Run:10515642 [ 486.591252][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.591279][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.591294][ T8311] Call Trace: [ 486.591302][ T8311] [ 486.591312][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.591354][ T8311] mt_find.cold+0x8b/0x90 [ 486.591393][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.591441][ T8311] find_vma+0x10c/0x1b0 [ 486.591468][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.591500][ T8311] ? walk_page_test+0x78/0x180 [ 486.591537][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.591576][ T8311] ? __walk_page_range+0x780/0x780 [ 486.591632][ T8311] mlock_fixup+0x650/0x810 [ 486.591683][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.591726][ T8311] ? mlock_fixup+0x810/0x810 [ 486.591775][ T8311] ? do_futex+0x132/0x360 [ 486.591820][ T8311] do_mlock+0x25a/0x6d0 [ 486.591853][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.591884][ T8311] ? folio_evictable+0x270/0x270 [ 486.591944][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.591986][ T8311] do_syscall_64+0x39/0xb0 [ 486.592023][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.592054][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.592075][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.592100][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.592126][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.592151][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.592167][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.592183][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.592198][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.592237][ T8311] [ 486.592253][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.592267][ T8311] BUG at mt_find:6473 (1) [ 486.592282][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.592302][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.592534][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.592757][ T8311] 0-536866815: 0000000000000000 [ 486.592777][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.592807][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.592830][ T8311] 553635840-553639935: 0000000000000000 [ 486.592852][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.592873][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.592895][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.592918][ T8311] 553652224-116813594623: 0000000000000000 [ 486.592939][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.592962][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.592983][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.593005][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.593027][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.593052][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.593277][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.593301][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.593326][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.593350][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.593373][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.593397][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.593421][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.593442][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.593466][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.593488][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.593510][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.593533][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.593557][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.593581][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.593605][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.593825][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.593849][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.593874][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.593899][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.593923][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.593947][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.593970][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.593995][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.644740][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.644852][ T8311] Pass: 10517389 Run:10517500 [ 486.644869][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.644894][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.644909][ T8311] Call Trace: [ 486.644917][ T8311] [ 486.644928][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.644968][ T8311] mt_find.cold+0x8b/0x90 [ 486.645008][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.645055][ T8311] find_vma+0x10c/0x1b0 [ 486.645082][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.645113][ T8311] ? walk_page_test+0x78/0x180 [ 486.645148][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.645185][ T8311] ? __walk_page_range+0x780/0x780 [ 486.645239][ T8311] mlock_fixup+0x650/0x810 [ 486.645290][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.645341][ T8311] ? mlock_fixup+0x810/0x810 [ 486.645392][ T8311] ? do_futex+0x132/0x360 [ 486.645436][ T8311] do_mlock+0x25a/0x6d0 [ 486.645478][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.645510][ T8311] ? folio_evictable+0x270/0x270 [ 486.645570][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.645612][ T8311] do_syscall_64+0x39/0xb0 [ 486.645647][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.645678][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.645700][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.645725][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.645749][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.645766][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.645783][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.645799][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.645814][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.645854][ T8311] [ 486.646166][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.646181][ T8311] BUG at mt_find:6473 (1) [ 486.646196][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.646216][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.646473][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.646695][ T8311] 0-536866815: 0000000000000000 [ 486.646717][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.646738][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.646760][ T8311] 553635840-553639935: 0000000000000000 [ 486.646780][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.646804][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.646827][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.646850][ T8311] 553652224-116813594623: 0000000000000000 [ 486.646873][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.646894][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.646916][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.646940][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.646963][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.647066][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.647275][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.647293][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.647320][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.647337][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.647353][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.647370][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.647386][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.647403][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.647420][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.647438][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.647457][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.647479][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.647500][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.647521][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.647543][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.647754][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.647776][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.647798][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.647820][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.647843][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.647866][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.647887][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.647908][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.647929][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.647950][ T8311] Pass: 10517391 Run:10517503 [ 486.647963][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.647988][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.648001][ T8311] Call Trace: [ 486.648009][ T8311] [ 486.648018][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.648059][ T8311] mt_find.cold+0x8b/0x90 [ 486.648099][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.648144][ T8311] find_vma+0x10c/0x1b0 [ 486.648168][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.648196][ T8311] ? walk_page_test+0x78/0x180 [ 486.648229][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.648264][ T8311] ? __walk_page_range+0x780/0x780 [ 486.648324][ T8311] mlock_fixup+0x650/0x810 [ 486.648376][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.648419][ T8311] ? mlock_fixup+0x810/0x810 [ 486.648465][ T8311] ? do_futex+0x132/0x360 [ 486.648507][ T8311] do_mlock+0x25a/0x6d0 [ 486.648542][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.648575][ T8311] ? folio_evictable+0x270/0x270 [ 486.648630][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.648672][ T8311] do_syscall_64+0x39/0xb0 [ 486.648710][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.648740][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.648760][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.648784][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.648809][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.648826][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.648841][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.648856][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.648871][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.648910][ T8311] [ 486.649011][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.649025][ T8311] BUG at mt_find:6473 (1) [ 486.649040][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.649061][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.649310][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.649579][ T8311] 0-536866815: 0000000000000000 [ 486.649647][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.649672][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.649696][ T8311] 553635840-553639935: 0000000000000000 [ 486.649719][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.649743][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.649766][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.649788][ T8311] 553652224-116813594623: 0000000000000000 [ 486.649810][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.649833][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.649856][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.649881][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.649905][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.649929][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.650253][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.650279][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.650310][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.650334][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.650358][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.650382][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.650406][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.650430][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.650454][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.650478][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.650502][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.650527][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.650551][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.650575][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.650600][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.650820][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.650844][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.650869][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.650892][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.650916][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.650940][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.650963][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.650988][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.651011][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.651034][ T8311] Pass: 10517394 Run:10517507 [ 486.651046][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.651072][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.651086][ T8311] Call Trace: [ 486.651095][ T8311] [ 486.651105][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.651144][ T8311] mt_find.cold+0x8b/0x90 [ 486.651184][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.651230][ T8311] find_vma+0x10c/0x1b0 [ 486.651256][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.651287][ T8311] ? walk_page_test+0x78/0x180 [ 486.651329][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.651368][ T8311] ? __walk_page_range+0x780/0x780 [ 486.651423][ T8311] mlock_fixup+0x650/0x810 [ 486.651473][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.651514][ T8311] ? mlock_fixup+0x810/0x810 [ 486.651561][ T8311] ? do_futex+0x132/0x360 [ 486.651604][ T8311] do_mlock+0x25a/0x6d0 [ 486.651640][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.651670][ T8311] ? folio_evictable+0x270/0x270 [ 486.651727][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.651766][ T8311] do_syscall_64+0x39/0xb0 [ 486.651801][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.651831][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.651853][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.651875][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.651900][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.651917][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.651933][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.651949][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.651964][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.652002][ T8311] [ 486.652105][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.652119][ T8311] BUG at mt_find:6473 (1) [ 486.652133][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.652154][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.652397][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.652615][ T8311] 0-536866815: 0000000000000000 [ 486.652639][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.652662][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.652684][ T8311] 553635840-553639935: 0000000000000000 [ 486.652704][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.652727][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.652750][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.652772][ T8311] 553652224-116813594623: 0000000000000000 [ 486.652794][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.652818][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.652841][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.652865][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.652889][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.652913][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.653219][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.653245][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.653269][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.653313][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.653339][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.653363][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.653386][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.653410][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.653433][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.653457][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.653480][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.653504][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.653529][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.653553][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.653577][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.653805][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.653830][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.653854][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.653879][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.653905][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.653930][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.653954][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.653978][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.654003][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.654140][ T8311] Pass: 10517395 Run:10517509 [ 486.654154][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.654180][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.654195][ T8311] Call Trace: [ 486.654203][ T8311] [ 486.654213][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.654254][ T8311] mt_find.cold+0x8b/0x90 [ 486.654288][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.654340][ T8311] find_vma+0x10c/0x1b0 [ 486.654366][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.654396][ T8311] ? walk_page_test+0x78/0x180 [ 486.654434][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.654471][ T8311] ? __walk_page_range+0x780/0x780 [ 486.654525][ T8311] mlock_fixup+0x650/0x810 [ 486.654575][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.654619][ T8311] ? mlock_fixup+0x810/0x810 [ 486.654668][ T8311] ? do_futex+0x132/0x360 [ 486.654713][ T8311] do_mlock+0x25a/0x6d0 [ 486.654749][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.654781][ T8311] ? folio_evictable+0x270/0x270 [ 486.654839][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.654880][ T8311] do_syscall_64+0x39/0xb0 [ 486.654917][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.654948][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.654968][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.654991][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.655016][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.655033][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.655049][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.655065][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.655081][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.655120][ T8311] [ 486.655218][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.655232][ T8311] BUG at mt_find:6473 (1) [ 486.655246][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.655267][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.655504][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.655724][ T8311] 0-536866815: 0000000000000000 [ 486.655746][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.655770][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.655793][ T8311] 553635840-553639935: 0000000000000000 [ 486.655815][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.655838][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.655862][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.655884][ T8311] 553652224-116813594623: 0000000000000000 [ 486.655907][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.655931][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.655954][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.655979][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.656002][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.656027][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.656348][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.656373][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.656398][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.656422][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.656446][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.656471][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.656495][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.656519][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.656542][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.656566][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.656589][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.656613][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.656638][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.656662][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.656686][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.656912][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.656936][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.656961][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.656986][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.657009][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.657031][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.657054][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.658110][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.658139][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.658164][ T8311] Pass: 10517395 Run:10517510 [ 486.658178][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.658204][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.658219][ T8311] Call Trace: [ 486.658227][ T8311] [ 486.658237][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.658275][ T8311] mt_find.cold+0x8b/0x90 [ 486.658319][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.658365][ T8311] find_vma+0x10c/0x1b0 [ 486.658390][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.658421][ T8311] ? walk_page_test+0x78/0x180 [ 486.658457][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.658515][ T8311] ? __walk_page_range+0x780/0x780 [ 486.658568][ T8311] mlock_fixup+0x650/0x810 [ 486.658619][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.658662][ T8311] ? mlock_fixup+0x810/0x810 [ 486.658710][ T8311] ? do_futex+0x132/0x360 [ 486.658754][ T8311] do_mlock+0x25a/0x6d0 [ 486.658789][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.658820][ T8311] ? folio_evictable+0x270/0x270 [ 486.658880][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.658920][ T8311] do_syscall_64+0x39/0xb0 [ 486.658957][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.658987][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.659007][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.659031][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.659056][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.659073][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.659089][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.659105][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.659121][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.659163][ T8311] [ 486.659258][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.659272][ T8311] BUG at mt_find:6473 (1) [ 486.659287][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.659314][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.659555][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.659780][ T8311] 0-536866815: 0000000000000000 [ 486.659802][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.659825][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.659848][ T8311] 553635840-553639935: 0000000000000000 [ 486.659869][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.659892][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.659913][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.659935][ T8311] 553652224-116813594623: 0000000000000000 [ 486.659957][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.659981][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.660003][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.660027][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.660051][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.660076][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.660366][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.660389][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.660411][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.660434][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.660454][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.660477][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.660498][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.660518][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.660540][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.660563][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.660584][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.660605][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.660625][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.660645][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.660665][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.660871][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.660893][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.660914][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.660937][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.660960][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.660981][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.661003][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.661028][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.661052][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.661076][ T8311] Pass: 10517395 Run:10517511 [ 486.661090][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.661115][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.661129][ T8311] Call Trace: [ 486.661137][ T8311] [ 486.661147][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.661185][ T8311] mt_find.cold+0x8b/0x90 [ 486.661222][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.661264][ T8311] find_vma+0x10c/0x1b0 [ 486.661289][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.661324][ T8311] ? walk_page_test+0x78/0x180 [ 486.661359][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.661398][ T8311] ? __walk_page_range+0x780/0x780 [ 486.661448][ T8311] mlock_fixup+0x650/0x810 [ 486.661496][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.661539][ T8311] ? mlock_fixup+0x810/0x810 [ 486.661588][ T8311] ? do_futex+0x132/0x360 [ 486.661631][ T8311] do_mlock+0x25a/0x6d0 [ 486.661669][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.661700][ T8311] ? folio_evictable+0x270/0x270 [ 486.661779][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.661819][ T8311] do_syscall_64+0x39/0xb0 [ 486.661856][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.661885][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.661905][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.661928][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.661952][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.661969][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.661984][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.661999][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.662015][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.662053][ T8311] [ 486.662150][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.662164][ T8311] BUG at mt_find:6473 (1) [ 486.662179][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.662200][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.662447][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.662668][ T8311] 0-536866815: 0000000000000000 [ 486.662691][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.662716][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.662739][ T8311] 553635840-553639935: 0000000000000000 [ 486.662762][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.662786][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.662809][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.662832][ T8311] 553652224-116813594623: 0000000000000000 [ 486.662856][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.662879][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.662903][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.662927][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.662950][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.662974][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.663286][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.663320][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.663345][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.663370][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.663393][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.663417][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.663441][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.663465][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.663488][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.663512][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.663535][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.663559][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.663583][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.663607][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.663632][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.663856][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.663880][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.663905][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.663929][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.663953][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.663979][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.664003][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.664124][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.664149][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.664174][ T8311] Pass: 10517395 Run:10517512 [ 486.664188][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.664214][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.664230][ T8311] Call Trace: [ 486.664237][ T8311] [ 486.664248][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.664288][ T8311] mt_find.cold+0x8b/0x90 [ 486.664334][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.664380][ T8311] find_vma+0x10c/0x1b0 [ 486.664406][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.664438][ T8311] ? walk_page_test+0x78/0x180 [ 486.664474][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.664511][ T8311] ? __walk_page_range+0x780/0x780 [ 486.664561][ T8311] mlock_fixup+0x650/0x810 [ 486.664608][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.664645][ T8311] ? mlock_fixup+0x810/0x810 [ 486.664693][ T8311] ? do_futex+0x132/0x360 [ 486.664735][ T8311] do_mlock+0x25a/0x6d0 [ 486.664772][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.664801][ T8311] ? folio_evictable+0x270/0x270 [ 486.664860][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.664902][ T8311] do_syscall_64+0x39/0xb0 [ 486.664938][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.664967][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.664987][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.665011][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.665036][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.665052][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.665069][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.665083][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.665098][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.665134][ T8311] [ 486.665222][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.665236][ T8311] BUG at mt_find:6473 (1) [ 486.665250][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.665269][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.665502][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.665732][ T8311] 0-536866815: 0000000000000000 [ 486.665755][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.665779][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.665802][ T8311] 553635840-553639935: 0000000000000000 [ 486.665825][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.665849][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.665872][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.665896][ T8311] 553652224-116813594623: 0000000000000000 [ 486.665919][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.665942][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.665965][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.665989][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.666013][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.666037][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.666437][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.667934][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.667964][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.667987][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.668011][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.668035][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.668059][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.668082][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.668107][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.668131][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.668155][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.668178][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.668202][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.668226][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.668251][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.668488][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.668513][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.668537][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.668563][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.668586][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.668611][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.668635][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.668659][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.668684][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.668708][ T8311] Pass: 10517723 Run:10517841 [ 486.668722][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.668749][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.668764][ T8311] Call Trace: [ 486.668772][ T8311] [ 486.668783][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.668824][ T8311] mt_find.cold+0x8b/0x90 [ 486.668863][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.668910][ T8311] find_vma+0x10c/0x1b0 [ 486.668936][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.668972][ T8311] ? walk_page_test+0x78/0x180 [ 486.669007][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.669040][ T8311] ? __walk_page_range+0x780/0x780 [ 486.669091][ T8311] mlock_fixup+0x650/0x810 [ 486.669138][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.669180][ T8311] ? mlock_fixup+0x810/0x810 [ 486.669228][ T8311] ? do_futex+0x132/0x360 [ 486.669269][ T8311] do_mlock+0x25a/0x6d0 [ 486.669309][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.669338][ T8311] ? folio_evictable+0x270/0x270 [ 486.669392][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.669431][ T8311] do_syscall_64+0x39/0xb0 [ 486.669467][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.669495][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.669515][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.669538][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.669562][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.669578][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.669593][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.669608][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.669623][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.669660][ T8311] [ 486.669751][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.669765][ T8311] BUG at mt_find:6473 (1) [ 486.669780][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.669800][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.670045][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.670273][ T8311] 0-536866815: 0000000000000000 [ 486.670301][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.670326][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.670349][ T8311] 553635840-553639935: 0000000000000000 [ 486.670371][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.670395][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.670417][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.670441][ T8311] 553652224-116813594623: 0000000000000000 [ 486.670464][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.670488][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.670511][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.670535][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.670559][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.670583][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.670891][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.670915][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.670938][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.670962][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.670985][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.671008][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.671031][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.671054][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.671078][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.671099][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.671122][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.671146][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.671171][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.671195][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.671219][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.671417][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.671439][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.671461][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.671483][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.671507][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.671531][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.671555][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.671580][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.671604][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.671628][ T8311] Pass: 10517723 Run:10517842 [ 486.671643][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.671669][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.671685][ T8311] Call Trace: [ 486.671693][ T8311] [ 486.671704][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.671742][ T8311] mt_find.cold+0x8b/0x90 [ 486.671781][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.671828][ T8311] find_vma+0x10c/0x1b0 [ 486.671854][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.671887][ T8311] ? walk_page_test+0x78/0x180 [ 486.671924][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.671960][ T8311] ? __walk_page_range+0x780/0x780 [ 486.672013][ T8311] mlock_fixup+0x650/0x810 [ 486.672058][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.672098][ T8311] ? mlock_fixup+0x810/0x810 [ 486.672144][ T8311] ? do_futex+0x132/0x360 [ 486.672186][ T8311] do_mlock+0x25a/0x6d0 [ 486.672220][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.672252][ T8311] ? folio_evictable+0x270/0x270 [ 486.672316][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.672360][ T8311] do_syscall_64+0x39/0xb0 [ 486.672398][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.672426][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.672447][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.672472][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.672497][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.672515][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.672531][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.672547][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.672563][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.672603][ T8311] [ 486.672699][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.672714][ T8311] BUG at mt_find:6473 (1) [ 486.672729][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.672748][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.672986][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.673213][ T8311] 0-536866815: 0000000000000000 [ 486.673234][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.673257][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.673281][ T8311] 553635840-553639935: 0000000000000000 [ 486.673310][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.673332][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.673356][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.673379][ T8311] 553652224-116813594623: 0000000000000000 [ 486.673402][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.673425][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.673449][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.673473][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.673497][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.673522][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.673815][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.673840][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.673864][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.673888][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.673913][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.673937][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.673960][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.673984][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.674008][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.674102][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.674124][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.674147][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.674171][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.674194][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.674218][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.674449][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.674473][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.674497][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.674522][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.674544][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.674568][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.674592][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.674617][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.674640][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.674663][ T8311] Pass: 10518032 Run:10518152 [ 486.674676][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.674700][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.674714][ T8311] Call Trace: [ 486.674721][ T8311] [ 486.674730][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.674768][ T8311] mt_find.cold+0x8b/0x90 [ 486.674804][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.674850][ T8311] find_vma+0x10c/0x1b0 [ 486.674874][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.674903][ T8311] ? walk_page_test+0x78/0x180 [ 486.674937][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.674973][ T8311] ? __walk_page_range+0x780/0x780 [ 486.675027][ T8311] mlock_fixup+0x650/0x810 [ 486.675073][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.675112][ T8311] ? mlock_fixup+0x810/0x810 [ 486.675159][ T8311] ? do_futex+0x132/0x360 [ 486.675200][ T8311] do_mlock+0x25a/0x6d0 [ 486.675235][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.675265][ T8311] ? folio_evictable+0x270/0x270 [ 486.675325][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.675367][ T8311] do_syscall_64+0x39/0xb0 [ 486.675405][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.675433][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.675452][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.675479][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.675504][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.675520][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.675535][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.675551][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.675567][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.675606][ T8311] [ 486.675953][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.675966][ T8311] BUG at mt_find:6473 (1) [ 486.675978][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.675994][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.676224][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.676452][ T8311] 0-536866815: 0000000000000000 [ 486.676474][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.676496][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.676519][ T8311] 553635840-553639935: 0000000000000000 [ 486.676539][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.676562][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.676584][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.676607][ T8311] 553652224-116813594623: 0000000000000000 [ 486.676628][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.676651][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.676674][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.676696][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.676719][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.676743][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.676973][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.677080][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.677104][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.677129][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.677153][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.677177][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.677201][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.677225][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.677249][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.677273][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.677301][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.677324][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.677346][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.677366][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.677385][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.677593][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.677617][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.677642][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.677666][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.677690][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.677715][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.677739][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.677764][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.677790][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.677814][ T8311] Pass: 10518035 Run:10518156 [ 486.677827][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.677854][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.677868][ T8311] Call Trace: [ 486.677876][ T8311] [ 486.677887][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.677923][ T8311] mt_find.cold+0x8b/0x90 [ 486.677962][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.678009][ T8311] find_vma+0x10c/0x1b0 [ 486.678036][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.678068][ T8311] ? walk_page_test+0x78/0x180 [ 486.678108][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.678146][ T8311] ? __walk_page_range+0x780/0x780 [ 486.678201][ T8311] mlock_fixup+0x650/0x810 [ 486.678253][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.678316][ T8311] ? mlock_fixup+0x810/0x810 [ 486.678367][ T8311] ? do_futex+0x132/0x360 [ 486.678408][ T8311] do_mlock+0x25a/0x6d0 [ 486.678444][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.678495][ T8311] ? folio_evictable+0x270/0x270 [ 486.678556][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.678597][ T8311] do_syscall_64+0x39/0xb0 [ 486.678635][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.678664][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.678684][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.678708][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.678733][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.678751][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.678767][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.678783][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.678798][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.678837][ T8311] [ 486.678931][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.678947][ T8311] BUG at mt_find:6473 (1) [ 486.678961][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.678981][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.679226][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.679461][ T8311] 0-536866815: 0000000000000000 [ 486.679483][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.679526][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.679550][ T8311] 553635840-553639935: 0000000000000000 [ 486.679573][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.679597][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.679620][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.679643][ T8311] 553652224-116813594623: 0000000000000000 [ 486.679665][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.679688][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.679711][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.679735][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.679757][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.679781][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.680098][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.680124][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.680148][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.680172][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.680197][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.680221][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.680245][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.680270][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.680301][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.680325][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.680349][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.680374][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.680398][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.680421][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.680445][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.680670][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.680694][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.680719][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.680743][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.680766][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.680790][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.680814][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.680839][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.680862][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.680886][ T8311] Pass: 10518035 Run:10518157 [ 486.680899][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.680924][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.680939][ T8311] Call Trace: [ 486.680947][ T8311] [ 486.680958][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.680996][ T8311] mt_find.cold+0x8b/0x90 [ 486.681034][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.681085][ T8311] find_vma+0x10c/0x1b0 [ 486.681112][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.681145][ T8311] ? walk_page_test+0x78/0x180 [ 486.681182][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.681220][ T8311] ? __walk_page_range+0x780/0x780 [ 486.681274][ T8311] mlock_fixup+0x650/0x810 [ 486.681331][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.681374][ T8311] ? mlock_fixup+0x810/0x810 [ 486.681424][ T8311] ? do_futex+0x132/0x360 [ 486.681467][ T8311] do_mlock+0x25a/0x6d0 [ 486.681503][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.681534][ T8311] ? folio_evictable+0x270/0x270 [ 486.681595][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.681638][ T8311] do_syscall_64+0x39/0xb0 [ 486.681676][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.681706][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.681726][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.681749][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.681775][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.681793][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.681808][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.681824][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.681840][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.681879][ T8311] [ 486.681970][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.681985][ T8311] BUG at mt_find:6473 (1) [ 486.682001][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.682021][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.682263][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.682495][ T8311] 0-536866815: 0000000000000000 [ 486.682519][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.682543][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.682566][ T8311] 553635840-553639935: 0000000000000000 [ 486.682589][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.682613][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.682637][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.682661][ T8311] 553652224-116813594623: 0000000000000000 [ 486.682685][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.682709][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.682733][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.682757][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.682780][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.682805][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.683115][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.683140][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.683164][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.683188][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.683213][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.683237][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.683260][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.683284][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.683310][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.683330][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.683347][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.683366][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.683385][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.683407][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.683429][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.683623][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.683642][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.683660][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.683679][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.683697][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.683715][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.683734][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.683755][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.683777][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.683796][ T8311] Pass: 10518035 Run:10518158 [ 486.683809][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.683831][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.683844][ T8311] Call Trace: [ 486.683851][ T8311] [ 486.683860][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.683890][ T8311] mt_find.cold+0x8b/0x90 [ 486.683920][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.683957][ T8311] find_vma+0x10c/0x1b0 [ 486.683978][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.684005][ T8311] ? walk_page_test+0x78/0x180 [ 486.684040][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.684071][ T8311] ? __walk_page_range+0x780/0x780 [ 486.684118][ T8311] mlock_fixup+0x650/0x810 [ 486.684162][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.684200][ T8311] ? mlock_fixup+0x810/0x810 [ 486.684247][ T8311] ? do_futex+0x132/0x360 [ 486.684286][ T8311] do_mlock+0x25a/0x6d0 [ 486.684326][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.684354][ T8311] ? folio_evictable+0x270/0x270 [ 486.684409][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.684447][ T8311] do_syscall_64+0x39/0xb0 [ 486.684483][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.684512][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.684531][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.684553][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.684579][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.684597][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.684614][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.684630][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.684645][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.684684][ T8311] [ 486.684841][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.684857][ T8311] BUG at mt_find:6473 (1) [ 486.684872][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.684892][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.685133][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.685365][ T8311] 0-536866815: 0000000000000000 [ 486.685388][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.685411][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.685434][ T8311] 553635840-553639935: 0000000000000000 [ 486.685459][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.685482][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.685503][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.685524][ T8311] 553652224-116813594623: 0000000000000000 [ 486.685544][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.685567][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.685589][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.685612][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.685633][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.685655][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.685949][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.685972][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.685995][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.686019][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.686044][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.686066][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.686089][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.686111][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.686135][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.686157][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.686180][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.686203][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.686227][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.686249][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.686272][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.686505][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.686529][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.686552][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.686577][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.686600][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.686625][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.686649][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.686674][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.686699][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.686722][ T8311] Pass: 10518035 Run:10518159 [ 486.686737][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.686763][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.686778][ T8311] Call Trace: [ 486.686786][ T8311] [ 486.686796][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.686834][ T8311] mt_find.cold+0x8b/0x90 [ 486.686873][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.686920][ T8311] find_vma+0x10c/0x1b0 [ 486.686946][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.686981][ T8311] ? walk_page_test+0x78/0x180 [ 486.687018][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.687056][ T8311] ? __walk_page_range+0x780/0x780 [ 486.687110][ T8311] mlock_fixup+0x650/0x810 [ 486.687160][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.687202][ T8311] ? mlock_fixup+0x810/0x810 [ 486.687250][ T8311] ? do_futex+0x132/0x360 [ 486.687298][ T8311] do_mlock+0x25a/0x6d0 [ 486.687335][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.687365][ T8311] ? folio_evictable+0x270/0x270 [ 486.687424][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.687465][ T8311] do_syscall_64+0x39/0xb0 [ 486.687502][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.687532][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.687551][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.687575][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.687601][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.687618][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.687635][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.687650][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.687664][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.687699][ T8311] [ 486.687794][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.687809][ T8311] BUG at mt_find:6473 (1) [ 486.687823][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.687844][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.688086][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.688319][ T8311] 0-536866815: 0000000000000000 [ 486.688341][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.688363][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.688387][ T8311] 553635840-553639935: 0000000000000000 [ 486.688409][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.688433][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.688458][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.688482][ T8311] 553652224-116813594623: 0000000000000000 [ 486.688505][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.688530][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.688554][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.688578][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.688601][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.688626][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.688928][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.688953][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.688976][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.689000][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.689024][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.689046][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.689070][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.689092][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.689115][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.689138][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.689161][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.689186][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.689210][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.689232][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.689256][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.689486][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.689510][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.689534][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.689559][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.689582][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.689605][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.689630][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.689654][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.689679][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.689702][ T8311] Pass: 10518035 Run:10518160 [ 486.689716][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.689742][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.689755][ T8311] Call Trace: [ 486.689763][ T8311] [ 486.689774][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.689811][ T8311] mt_find.cold+0x8b/0x90 [ 486.689850][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.689897][ T8311] find_vma+0x10c/0x1b0 [ 486.689924][ T8311] ? can_vma_merge_before+0x390/0x390 [ 486.689959][ T8311] ? walk_page_test+0x78/0x180 [ 486.689995][ T8311] walk_page_range+0x2b1/0x4a0 [ 486.690033][ T8311] ? __walk_page_range+0x780/0x780 [ 486.690089][ T8311] mlock_fixup+0x650/0x810 [ 486.690140][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 486.690183][ T8311] ? mlock_fixup+0x810/0x810 [ 486.690232][ T8311] ? do_futex+0x132/0x360 [ 486.690274][ T8311] do_mlock+0x25a/0x6d0 [ 486.690317][ T8311] ? xfd_validate_state+0x5d/0x180 [ 486.690347][ T8311] ? folio_evictable+0x270/0x270 [ 486.690405][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 486.690446][ T8311] do_syscall_64+0x39/0xb0 [ 486.690484][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.690512][ T8311] RIP: 0033:0x7fafb788c0c9 [ 486.690533][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 486.690555][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 486.690581][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 486.690599][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 486.690616][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 486.690632][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.690649][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 486.690690][ T8311] [ 486.690782][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 486.690797][ T8311] BUG at mt_find:6473 (1) [ 486.690811][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 486.690831][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 486.691075][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 486.691313][ T8311] 0-536866815: 0000000000000000 [ 486.691335][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 486.691360][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 486.691383][ T8311] 553635840-553639935: 0000000000000000 [ 486.691406][ T8311] 553639936-553635839: ffff88805ff72d20 [ 486.691430][ T8311] 553635840-553648127: ffff8880217871c0 [ 486.691453][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 486.691476][ T8311] 553652224-116813594623: 0000000000000000 [ 486.691499][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 486.691522][ T8311] 116817788928-93825015144447: 0000000000000000 [ 486.691545][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 486.691570][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 486.691592][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 486.691616][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 486.691931][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 486.691956][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 486.691980][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 486.692004][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 486.692028][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 486.692052][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 486.692077][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 486.692100][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 486.692124][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 486.692147][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 486.692171][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 486.692194][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 486.692217][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 486.692242][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 486.692267][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 486.692501][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 486.692526][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 486.692550][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 486.692574][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 486.692597][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 486.692621][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 486.692644][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 486.692668][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 486.692692][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 486.692715][ T8311] Pass: 10518035 Run:10518161 [ 486.692728][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 486.692755][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 486.692769][ T8311] Call Trace: [ 486.692777][ T8311] [ 486.692787][ T8311] dump_stack_lvl+0xd1/0x138 [ 486.692824][ T8311] mt_find.cold+0x8b/0x90 [ 486.692861][ T8311] ? mas_find+0x1d0/0x1d0 [ 486.692905][ T8311] find_vma+0x10c/0x1b0 [ 504.588733][ T8311] ? can_vma_merge_before+0x390/0x390 [ 504.594126][ T8311] ? walk_page_test+0x78/0x180 [ 504.598909][ T8311] walk_page_range+0x2b1/0x4a0 [ 504.603690][ T8311] ? __walk_page_range+0x780/0x780 [ 504.608834][ T8311] mlock_fixup+0x650/0x810 [ 504.613281][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 504.618504][ T8311] ? mlock_fixup+0x810/0x810 [ 504.623124][ T8311] ? do_futex+0x132/0x360 [ 504.627478][ T8311] do_mlock+0x25a/0x6d0 [ 504.631651][ T8311] ? xfd_validate_state+0x5d/0x180 [ 504.636773][ T8311] ? folio_evictable+0x270/0x270 [ 504.641762][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 504.646544][ T8311] do_syscall_64+0x39/0xb0 [ 504.650987][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 504.656889][ T8311] RIP: 0033:0x7fafb788c0c9 [ 504.661399][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 504.681013][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 504.689434][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 504.697409][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 504.705398][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 504.713420][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.721569][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 504.729565][ T8311] [ 504.733157][ C1] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'acpi_pm' as unstable because the skew is too large: [ 504.746049][ C1] clocksource: 'tsc' wd_nsec: 18369017746 wd_now: 1048979495e wd_last: fb2084ee18 mask: ffffffffffffffff [ 504.759262][ C1] clocksource: 'acpi_pm' cs_nsec: 0 cs_now: ab4a2a cs_last: bfe33f mask: ffffff [ 504.770273][ C1] clocksource: Clocksource 'acpi_pm' skewed -18369017746 ns (18446744055340 ms) over watchdog 'tsc' interval of 18369017746 ns (18369 ms) [ 504.786319][ C1] clocksource: 'tsc' (not 'acpi_pm') is current clocksource. [ 504.804662][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.811068][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 11:21:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000280)) 11:21:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000240)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77f18ff91be11c60bcefdadab4bae28e864ba5095bd738986700bcc83d2abdbb9f6c781c026ece61b3e7ed9269ca26b453920d09782289d71f781ee573c2b5f3", "22218545d94700857a83f18b30e9a80c07d90641eca542660e846849ef7cf281f055235f789ade7c743fe32b52eb90d10be0c16f806b9fc43836e25f25e6805e", "1053549d5ff74096ca1e29e8dcb077df1c86976119ee0665cd02808aff80b5a0"}}) syz_open_dev$loop(0x0, 0x0, 0x0) 11:21:04 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) 11:21:04 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) mlockall(0x1) 11:21:04 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x3, &(0x7f0000000000)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "23b422ebcea5b96cd7825b40495e8c7879ff88a2f98b440914c95c0f40fdb5f9ac2d65c0b9bbc89dabc2693b697b040b827bd321a3eba1d24cc7e76f9a46157d6fc817e3e2b491ffddb034cbfada5385"}, 0xd8) 11:21:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:04 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 504.972440][ T8311] index not increased! 20ffd000 <= 20ffd000 11:21:04 executing program 4: syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0) 11:21:04 executing program 0: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="90b3", 0x2, 0xfffffffffffffffd) [ 505.013832][ T8311] BUG at mt_find:6473 (1) 11:21:04 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000280)) [ 505.085932][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e 11:21:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000280)) 11:21:04 executing program 0: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="90b3", 0x2, 0xfffffffffffffffd) 11:21:05 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 505.213121][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:21:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 505.359135][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 505.417166][ T8311] 0-536866815: 0000000000000000 [ 505.422593][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 505.443375][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 505.458524][ T8311] 553635840-553639935: 0000000000000000 [ 505.504550][ T8311] 553639936-553635839: ffff88805ff72d20 [ 505.526980][ T8311] 553635840-553648127: ffff8880217871c0 [ 505.532955][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 505.538971][ T8311] 553652224-116813594623: 0000000000000000 [ 505.545499][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 505.551962][ T8311] 116817788928-93825015144447: 0000000000000000 [ 505.558675][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 505.565739][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 505.573221][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 505.580305][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 505.639909][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 505.648100][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 505.655538][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 505.662801][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 505.670248][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 505.677679][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 505.685526][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 505.692514][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 505.714229][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 505.731703][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 505.749027][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 505.760945][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 505.773429][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 505.794447][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 505.801461][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 505.882293][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 505.902515][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 505.934914][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 505.942062][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 505.952536][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 505.988008][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 506.023630][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 506.062622][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 506.098304][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 506.126958][ T8311] Pass: 10526449 Run:10526576 [ 506.140876][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 506.150831][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 506.160909][ T8311] Call Trace: [ 506.164212][ T8311] [ 506.167167][ T8311] dump_stack_lvl+0xd1/0x138 [ 506.171788][ T8311] mt_find.cold+0x8b/0x90 [ 506.176115][ T8311] ? mas_find+0x1d0/0x1d0 [ 506.180444][ T8311] find_vma+0x10c/0x1b0 [ 506.184607][ T8311] ? can_vma_merge_before+0x390/0x390 [ 506.190001][ T8311] ? walk_page_test+0x78/0x180 [ 506.194781][ T8311] walk_page_range+0x2b1/0x4a0 [ 506.199561][ T8311] ? __walk_page_range+0x780/0x780 [ 506.204704][ T8311] mlock_fixup+0x650/0x810 [ 506.209147][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 506.214364][ T8311] ? mlock_fixup+0x810/0x810 [ 506.218982][ T8311] ? do_futex+0x132/0x360 [ 506.223337][ T8311] do_mlock+0x25a/0x6d0 [ 506.227508][ T8311] ? xfd_validate_state+0x5d/0x180 [ 506.232649][ T8311] ? folio_evictable+0x270/0x270 [ 506.237629][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 506.242586][ T8311] do_syscall_64+0x39/0xb0 [ 506.247025][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.252948][ T8311] RIP: 0033:0x7fafb788c0c9 [ 506.257372][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 506.276993][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 506.285428][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 506.293421][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 506.301402][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 506.309383][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.317359][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 11:21:06 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff85}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:21:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) 11:21:06 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x2, &(0x7f0000000000)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "23b422ebcea5b96cd7825b40495e8c7879ff88a2f98b440914c95c0f40fdb5f9ac2d65c0b9bbc89dabc2693b697b040b827bd321a3eba1d24cc7e76f9a46157d6fc817e3e2b491ffddb034cbfada5385"}, 0xd8) 11:21:06 executing program 5: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) 11:21:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:06 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) [ 506.325355][ T8311] 11:21:06 executing program 5: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) 11:21:06 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000001ec0), 0x4) 11:21:06 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) write$fb(r0, &(0x7f0000000600)="a0", 0x1) 11:21:06 executing program 2: syz_usb_connect(0x0, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x53, 0x7e, 0xe1, 0x40, 0x5e0, 0x2008, 0x49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb4, 0x73, 0xf, 0x0, [@cdc_ncm={{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}]}}]}}]}}, 0x0) 11:21:06 executing program 5: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) 11:21:06 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) 11:21:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x40086602, &(0x7f0000000240)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77f18ff91be11c60bcefdadab4bae28e864ba5095bd738986700bcc83d2abdbb9f6c781c026ece61b3e7ed9269ca26b453920d09782289d71f781ee573c2b5f3", "22218545d94700857a83f18b30e9a80c07d90641eca542660e846849ef7cf281f055235f789ade7c743fe32b52ed8fd10be0c16f806b9fc43836e25f25e6805e", "1053549d5ff74096ca1e29e8dcb077df1c86976119ee0665cd02808aff80b5a0"}}) 11:21:06 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x541b, 0x0) 11:21:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c06, &(0x7f0000000000)) 11:21:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:06 executing program 4: getresuid(&(0x7f0000000480), &(0x7f00000004c0), 0x0) 11:21:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) 11:21:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000280)) 11:21:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 506.814193][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 506.826869][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 506.887920][ T8311] BUG at mt_find:6473 (1) [ 506.955001][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 506.986752][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 507.114584][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 507.268931][ T8311] 0-536866815: 0000000000000000 [ 507.281826][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 507.288743][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 507.299444][ T8311] 553635840-553639935: 0000000000000000 [ 507.305842][ T8311] 553639936-553635839: ffff88805ff72d20 [ 507.311880][ T8311] 553635840-553648127: ffff8880217871c0 [ 507.318392][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 507.324665][ T8311] 553652224-116813594623: 0000000000000000 [ 507.330949][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 507.337858][ T8311] 116817788928-93825015144447: 0000000000000000 [ 507.345725][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 507.352631][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 507.359961][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 507.367576][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 507.374397][ T14] usb 3-1: New USB device found, idVendor=05e0, idProduct=2008, bcdDevice= 0.49 [ 507.431996][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 507.432033][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 507.432057][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 507.455047][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 507.458923][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.462085][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 507.477806][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 507.479135][ T14] usb 3-1: Product: syz [ 507.485168][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 507.492818][ T14] usb 3-1: Manufacturer: syz [ 507.496646][ T8311] 140392674770944-140392675500031: [ 507.501113][ T14] usb 3-1: SerialNumber: syz [ 507.512369][ T8311] ffff8880284f88c0 [ 507.514602][ T14] usb 3-1: config 0 descriptor?? [ 507.517926][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 507.541121][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 507.552627][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 507.560586][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 507.568434][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 507.576280][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 507.583355][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 507.634090][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 507.641173][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 507.651544][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 507.659665][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 507.666893][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 507.673844][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 507.681289][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 507.688751][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 507.696027][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 507.703433][ T8311] Pass: 10535414 Run:10535542 [ 507.708581][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 507.718403][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 507.728460][ T8311] Call Trace: [ 507.731743][ T8311] [ 507.734685][ T8311] dump_stack_lvl+0xd1/0x138 [ 507.739311][ T8311] mt_find.cold+0x8b/0x90 [ 507.743641][ T8311] ? mas_find+0x1d0/0x1d0 [ 507.748000][ T8311] find_vma+0x10c/0x1b0 [ 507.752180][ T8311] ? can_vma_merge_before+0x390/0x390 [ 507.757576][ T8311] ? walk_page_test+0x78/0x180 [ 507.762358][ T8311] walk_page_range+0x2b1/0x4a0 [ 507.767162][ T8311] ? __walk_page_range+0x780/0x780 [ 507.767334][ T14] usb 3-1: USB disconnect, device number 2 [ 507.772305][ T8311] mlock_fixup+0x650/0x810 [ 507.782538][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 507.787788][ T8311] ? mlock_fixup+0x810/0x810 [ 507.792437][ T8311] ? do_futex+0x132/0x360 [ 507.796816][ T8311] do_mlock+0x25a/0x6d0 [ 507.801014][ T8311] ? xfd_validate_state+0x5d/0x180 [ 507.806162][ T8311] ? folio_evictable+0x270/0x270 [ 507.811142][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 507.815920][ T8311] do_syscall_64+0x39/0xb0 [ 507.820360][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 507.826263][ T8311] RIP: 0033:0x7fafb788c0c9 [ 507.830682][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 507.850293][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 507.858715][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 507.866703][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 507.874678][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 507.882651][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.890626][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 507.898619][ T8311] [ 507.913112][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 507.919162][ T8311] BUG at mt_find:6473 (1) [ 507.923558][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 507.932779][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 507.970742][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 508.028655][ T8311] 0-536866815: 0000000000000000 [ 508.038373][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 508.044693][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 508.050715][ T8311] 553635840-553639935: 0000000000000000 [ 508.057164][ T8311] 553639936-553635839: ffff88805ff72d20 [ 508.063721][ T8311] 553635840-553648127: ffff8880217871c0 [ 508.070183][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 508.076527][ T8311] 553652224-116813594623: 0000000000000000 [ 508.082851][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 508.089780][ T8311] 116817788928-93825015144447: 0000000000000000 [ 508.096846][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 508.103716][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 508.111093][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 508.118452][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 508.175803][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 508.182818][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 508.189905][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 508.196915][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 508.203852][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 508.210999][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 508.217994][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 508.226397][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 508.233368][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 508.240444][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 508.247613][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 508.254680][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 508.261834][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 508.270727][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 508.278137][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:21:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80), 0x10}, 0x80) syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11:21:08 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) 11:21:08 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:08 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x801000}) 11:21:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:08 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 508.331287][ T8311] 140392688107520-140392689405951: 0000000000000000 11:21:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001140)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_dellink={0x44, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x44}}, 0x0) [ 508.389165][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 11:21:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)={0x18, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4, 0x9}]}, 0x18}}, 0x0) [ 508.436378][ T8311] 140392689410048-140392689541119: ffff8880284f8700 11:21:08 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) 11:21:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellinkprop={0x20, 0x24, 0x3555}, 0x20}}, 0x0) [ 508.488341][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 508.506550][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 508.518958][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 508.526879][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 11:21:08 executing program 0: prctl$PR_SET_MM_AUXV(0x2f, 0xc, 0x0, 0x0) [ 508.534587][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 508.542163][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 508.552921][ T8311] Pass: 10540829 Run:10540958 [ 508.579652][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 508.589503][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 508.599820][ T8311] Call Trace: [ 508.603093][ T8311] [ 508.606014][ T8311] dump_stack_lvl+0xd1/0x138 [ 508.610602][ T8311] mt_find.cold+0x8b/0x90 [ 508.614929][ T8311] ? mas_find+0x1d0/0x1d0 [ 508.619259][ T8311] find_vma+0x10c/0x1b0 [ 508.623405][ T8311] ? can_vma_merge_before+0x390/0x390 [ 508.628779][ T8311] ? walk_page_test+0x78/0x180 [ 508.633539][ T8311] walk_page_range+0x2b1/0x4a0 [ 508.638305][ T8311] ? __walk_page_range+0x780/0x780 [ 508.643419][ T8311] mlock_fixup+0x650/0x810 [ 508.647864][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 508.653097][ T8311] ? mlock_fixup+0x810/0x810 [ 508.657688][ T8311] ? do_futex+0x132/0x360 [ 508.662017][ T8311] do_mlock+0x25a/0x6d0 [ 508.666175][ T8311] ? xfd_validate_state+0x5d/0x180 [ 508.671283][ T8311] ? folio_evictable+0x270/0x270 [ 508.676232][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 508.680997][ T8311] do_syscall_64+0x39/0xb0 [ 508.685415][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 508.691303][ T8311] RIP: 0033:0x7fafb788c0c9 [ 508.695709][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 508.715316][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 11:21:08 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 508.723738][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 508.731701][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 508.739676][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 508.747642][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.755625][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 508.763639][ T8311] [ 508.875922][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 508.883513][ T8311] BUG at mt_find:6473 (1) [ 508.888285][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 508.896942][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 508.994250][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.053050][ T8311] 0-536866815: 0000000000000000 11:21:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000280)) [ 509.163776][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.189347][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.213549][ T8311] 553635840-553639935: 0000000000000000 [ 509.273692][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.283877][ T8311] 553635840-553648127: ffff8880217871c0 11:21:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:09 executing program 0: ioprio_set$uid(0x0, 0x0, 0x4008) 11:21:09 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000700)={&(0x7f0000000600)=""/194, 0x0, 0x800, 0x0, 0x3}, 0x20) 11:21:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:09 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:09 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) [ 509.322943][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.336339][ T8311] 553652224-116813594623: 0000000000000000 [ 509.342682][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.363892][ T8311] 116817788928-93825015144447: 0000000000000000 11:21:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:09 executing program 2: bpf$PROG_LOAD_XDP(0x7, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 11:21:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) [ 509.417809][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.478836][ T8311] 93825015283712-140392653647871: 0000000000000000 11:21:09 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) [ 509.533252][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:21:09 executing program 2: syz_clone(0x40000000, 0x0, 0xfffffc93, 0x0, 0x0, 0x0) [ 509.542355][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.608944][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.629626][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.674645][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.712189][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.728300][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.728324][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.728338][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.728352][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.728365][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.728379][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.728391][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.728405][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.728418][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.728431][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.728445][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.728571][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.728584][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.728598][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.728611][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.728624][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.728637][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.728655][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.728669][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.728682][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.728695][ T8311] Pass: 10573332 Run:10573462 [ 509.728704][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.728719][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.728728][ T8311] Call Trace: [ 509.728733][ T8311] [ 509.728740][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.728765][ T8311] mt_find.cold+0x8b/0x90 [ 509.728787][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.728813][ T8311] find_vma+0x10c/0x1b0 [ 509.728829][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.728846][ T8311] ? walk_page_test+0x78/0x180 [ 509.728866][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.728887][ T8311] ? __walk_page_range+0x780/0x780 [ 509.728917][ T8311] mlock_fixup+0x650/0x810 [ 509.728945][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.728968][ T8311] ? mlock_fixup+0x810/0x810 [ 509.728994][ T8311] ? do_futex+0x132/0x360 [ 509.729018][ T8311] do_mlock+0x25a/0x6d0 [ 509.729038][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.729056][ T8311] ? folio_evictable+0x270/0x270 [ 509.729087][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.729110][ T8311] do_syscall_64+0x39/0xb0 [ 509.729130][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.729147][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.729159][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.729173][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.729187][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.729197][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.729207][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.729216][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.729225][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.729246][ T8311] [ 509.729256][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.729265][ T8311] BUG at mt_find:6473 (1) [ 509.729277][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.729296][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.730706][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.730837][ T8311] 0-536866815: 0000000000000000 [ 509.730849][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.730862][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.730876][ T8311] 553635840-553639935: 0000000000000000 [ 509.730888][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.730901][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.730914][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.730927][ T8311] 553652224-116813594623: 0000000000000000 [ 509.730939][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.730952][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.730965][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.730978][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.730991][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.731005][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.731133][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.731146][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.731159][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.731172][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.731185][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.731199][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.731212][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.731225][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.731240][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.731254][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.731267][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.731280][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.731292][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.731305][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.731319][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.731442][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.731456][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.731469][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.731482][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.731495][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.731509][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.731521][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.731534][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.731547][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.731562][ T8311] Pass: 10573332 Run:10573463 [ 509.733983][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.734001][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.734009][ T8311] Call Trace: [ 509.734019][ T8311] [ 509.734029][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.734065][ T8311] mt_find.cold+0x8b/0x90 [ 509.734100][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.734131][ T8311] find_vma+0x10c/0x1b0 [ 509.734146][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.734164][ T8311] ? walk_page_test+0x78/0x180 [ 509.734184][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.734205][ T8311] ? __walk_page_range+0x780/0x780 [ 509.734234][ T8311] mlock_fixup+0x650/0x810 [ 509.734262][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.734285][ T8311] ? mlock_fixup+0x810/0x810 [ 509.734312][ T8311] ? do_futex+0x132/0x360 [ 509.734336][ T8311] do_mlock+0x25a/0x6d0 [ 509.734356][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.734374][ T8311] ? folio_evictable+0x270/0x270 [ 509.734406][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.734429][ T8311] do_syscall_64+0x39/0xb0 [ 509.734449][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.734466][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.734479][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.734492][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.734508][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.734518][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.734527][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.734536][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.734545][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.734566][ T8311] [ 509.737371][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.737389][ T8311] BUG at mt_find:6473 (1) [ 509.737402][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.737424][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.737683][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.737916][ T8311] 0-536866815: 0000000000000000 [ 509.737939][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.737962][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.737986][ T8311] 553635840-553639935: 0000000000000000 [ 509.738008][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.738032][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.738055][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.738079][ T8311] 553652224-116813594623: 0000000000000000 [ 509.738103][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.738127][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.738150][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.738174][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.738198][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.738223][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.741966][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.741993][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.742019][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.742044][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.742068][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.742093][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.742119][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.742143][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.742167][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.742192][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.742216][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.742241][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.742266][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.742290][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.742314][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.742541][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.742564][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.742588][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.742612][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.742636][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.742666][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.742690][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.742715][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.742739][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.742762][ T8311] Pass: 10573978 Run:10574110 [ 509.742776][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.742803][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.742817][ T8311] Call Trace: [ 509.742825][ T8311] [ 509.742836][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.742879][ T8311] mt_find.cold+0x8b/0x90 [ 509.742917][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.742965][ T8311] find_vma+0x10c/0x1b0 [ 509.742992][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.743024][ T8311] ? walk_page_test+0x78/0x180 [ 509.743061][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.743101][ T8311] ? __walk_page_range+0x780/0x780 [ 509.743154][ T8311] mlock_fixup+0x650/0x810 [ 509.743208][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.743252][ T8311] ? mlock_fixup+0x810/0x810 [ 509.743302][ T8311] ? do_futex+0x132/0x360 [ 509.743344][ T8311] do_mlock+0x25a/0x6d0 [ 509.743382][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.743414][ T8311] ? folio_evictable+0x270/0x270 [ 509.743474][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.743517][ T8311] do_syscall_64+0x39/0xb0 [ 509.743555][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.743586][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.743609][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.743633][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.743665][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.743684][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.743701][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.743717][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.743732][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.743771][ T8311] [ 509.780023][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.780043][ T8311] BUG at mt_find:6473 (1) [ 509.780058][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.780080][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.780338][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.780570][ T8311] 0-536866815: 0000000000000000 [ 509.780593][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.780616][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.780639][ T8311] 553635840-553639935: 0000000000000000 [ 509.782197][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.782213][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.782226][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.782239][ T8311] 553652224-116813594623: 0000000000000000 [ 509.782251][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.782264][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.782277][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.782290][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.782303][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.782316][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.782445][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.782458][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.782472][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.782485][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.782498][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.782511][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.782525][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.782538][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.782551][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.782564][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.782578][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.782594][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.782607][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.782620][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.782634][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.782758][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.782770][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.782789][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.782813][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.788581][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.788603][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.788617][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.788630][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.788643][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.788656][ T8311] Pass: 10579713 Run:10579846 [ 509.788665][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.788680][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.788689][ T8311] Call Trace: [ 509.788693][ T8311] [ 509.788700][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.788724][ T8311] mt_find.cold+0x8b/0x90 [ 509.788745][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.788771][ T8311] find_vma+0x10c/0x1b0 [ 509.788786][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.788803][ T8311] ? walk_page_test+0x78/0x180 [ 509.788823][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.788843][ T8311] ? __walk_page_range+0x780/0x780 [ 509.788873][ T8311] mlock_fixup+0x650/0x810 [ 509.788900][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.788924][ T8311] ? mlock_fixup+0x810/0x810 [ 509.788950][ T8311] ? do_futex+0x132/0x360 [ 509.788973][ T8311] do_mlock+0x25a/0x6d0 [ 509.788993][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.789011][ T8311] ? folio_evictable+0x270/0x270 [ 509.789043][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.789065][ T8311] do_syscall_64+0x39/0xb0 [ 509.789091][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.789109][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.789121][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.789135][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.789150][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.789160][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.789169][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.789179][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.789188][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.789208][ T8311] [ 509.789218][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.789225][ T8311] BUG at mt_find:6473 (1) [ 509.789234][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.789245][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.789378][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.789503][ T8311] 0-536866815: 0000000000000000 [ 509.790795][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.790812][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.790825][ T8311] 553635840-553639935: 0000000000000000 [ 509.790838][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.790851][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.790864][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.790876][ T8311] 553652224-116813594623: 0000000000000000 [ 509.790889][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.790901][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.790914][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.790927][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.790940][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.790953][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.791081][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.791099][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.791113][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.791126][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.791139][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.791152][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.791166][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.791179][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.791192][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.791206][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.791219][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.791232][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.791245][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.791259][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.791272][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.791396][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.791408][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.791422][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.791435][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.791448][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.791461][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.791474][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.791487][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.791500][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.791513][ T8311] Pass: 10579945 Run:10580079 [ 509.791521][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.791535][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.791543][ T8311] Call Trace: [ 509.791548][ T8311] [ 509.791554][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.791576][ T8311] mt_find.cold+0x8b/0x90 [ 509.791598][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.791624][ T8311] find_vma+0x10c/0x1b0 [ 509.791638][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.791656][ T8311] ? walk_page_test+0x78/0x180 [ 509.791675][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.791696][ T8311] ? __walk_page_range+0x780/0x780 [ 509.791727][ T8311] mlock_fixup+0x650/0x810 [ 509.791755][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.791778][ T8311] ? mlock_fixup+0x810/0x810 [ 509.791809][ T8311] ? do_futex+0x132/0x360 [ 509.791851][ T8311] do_mlock+0x25a/0x6d0 [ 509.791889][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.791916][ T8311] ? folio_evictable+0x270/0x270 [ 509.791948][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.791971][ T8311] do_syscall_64+0x39/0xb0 [ 509.791991][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.792008][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.792020][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.792033][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.792048][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.792058][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.792067][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.792076][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.792089][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.792109][ T8311] [ 509.796449][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.796461][ T8311] BUG at mt_find:6473 (1) [ 509.796470][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.796482][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.796619][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.796744][ T8311] 0-536866815: 0000000000000000 [ 509.796756][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.796769][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.796782][ T8311] 553635840-553639935: 0000000000000000 [ 509.796795][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.796807][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.796820][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.796833][ T8311] 553652224-116813594623: 0000000000000000 [ 509.796845][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.796858][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.796870][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.796883][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.796896][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.796909][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.798224][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.798239][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.798253][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.798266][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.798279][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.798293][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.798306][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.798319][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.798333][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.798346][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.798359][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.798372][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.798386][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.798399][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.798412][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.798539][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.798552][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.798565][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.798585][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.798608][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.801579][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.801600][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.801614][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.801627][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.801641][ T8311] Pass: 10581509 Run:10581644 [ 509.801649][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.801665][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.801673][ T8311] Call Trace: [ 509.801678][ T8311] [ 509.801684][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.801707][ T8311] mt_find.cold+0x8b/0x90 [ 509.801728][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.801753][ T8311] find_vma+0x10c/0x1b0 [ 509.801769][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.801786][ T8311] ? walk_page_test+0x78/0x180 [ 509.801806][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.801827][ T8311] ? __walk_page_range+0x780/0x780 [ 509.801856][ T8311] mlock_fixup+0x650/0x810 [ 509.801883][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.801907][ T8311] ? mlock_fixup+0x810/0x810 [ 509.801933][ T8311] ? do_futex+0x132/0x360 [ 509.801956][ T8311] do_mlock+0x25a/0x6d0 [ 509.801977][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.801995][ T8311] ? folio_evictable+0x270/0x270 [ 509.802026][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.802049][ T8311] do_syscall_64+0x39/0xb0 [ 509.802069][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.802091][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.802103][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.802117][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.802131][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.802142][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.802151][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.802160][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.802169][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.802189][ T8311] [ 509.802199][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.802207][ T8311] BUG at mt_find:6473 (1) [ 509.802215][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.802227][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.802360][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.803744][ T8311] 0-536866815: 0000000000000000 [ 509.803759][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.803772][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.803785][ T8311] 553635840-553639935: 0000000000000000 [ 509.803797][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.803810][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.803823][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.803836][ T8311] 553652224-116813594623: 0000000000000000 [ 509.803848][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.803861][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.803874][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.803887][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.803900][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.803913][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.844425][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.844441][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.844455][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.844468][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.844481][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.844495][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.844508][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.844521][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.844534][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.844548][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.844560][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.844574][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.844587][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.844601][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.844615][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.844744][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.844757][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.844770][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.844783][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.844796][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.844809][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.844822][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.844836][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.844849][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.844862][ T8311] Pass: 10583263 Run:10583399 [ 509.844871][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.844886][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.844895][ T8311] Call Trace: [ 509.844900][ T8311] [ 509.844906][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.844930][ T8311] mt_find.cold+0x8b/0x90 [ 509.844952][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.844981][ T8311] find_vma+0x10c/0x1b0 [ 509.844996][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.845014][ T8311] ? walk_page_test+0x78/0x180 [ 509.845034][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.845055][ T8311] ? __walk_page_range+0x780/0x780 [ 509.845084][ T8311] mlock_fixup+0x650/0x810 [ 509.845112][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.845135][ T8311] ? mlock_fixup+0x810/0x810 [ 509.845167][ T8311] ? do_futex+0x132/0x360 [ 509.845191][ T8311] do_mlock+0x25a/0x6d0 [ 509.845211][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.845229][ T8311] ? folio_evictable+0x270/0x270 [ 509.845261][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.845284][ T8311] do_syscall_64+0x39/0xb0 [ 509.845306][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.845323][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.845335][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.845348][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.845362][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.845372][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.845382][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.845391][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.845400][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.845421][ T8311] [ 509.849027][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.849039][ T8311] BUG at mt_find:6473 (1) [ 509.849048][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.849060][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.849201][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.849327][ T8311] 0-536866815: 0000000000000000 [ 509.849340][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.849353][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.849366][ T8311] 553635840-553639935: 0000000000000000 [ 509.849378][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.849391][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.849404][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.849416][ T8311] 553652224-116813594623: 0000000000000000 [ 509.849429][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.849442][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.849455][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.849468][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.849480][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.849494][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.849622][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.849635][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.849650][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.849664][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.849677][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.849690][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.849703][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.849716][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.849729][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.849742][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.849755][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.849768][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.849781][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.849794][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.849807][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.849934][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.849948][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.849961][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.849977][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.849990][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.850003][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.850016][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.850029][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.850043][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.850056][ T8311] Pass: 10583263 Run:10583400 [ 509.850064][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.850079][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.850087][ T8311] Call Trace: [ 509.850092][ T8311] [ 509.850097][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.850121][ T8311] mt_find.cold+0x8b/0x90 [ 509.850145][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.850171][ T8311] find_vma+0x10c/0x1b0 [ 509.850187][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.850204][ T8311] ? walk_page_test+0x78/0x180 [ 509.850224][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.850245][ T8311] ? __walk_page_range+0x780/0x780 [ 509.850274][ T8311] mlock_fixup+0x650/0x810 [ 509.850302][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.850326][ T8311] ? mlock_fixup+0x810/0x810 [ 509.850352][ T8311] ? do_futex+0x132/0x360 [ 509.850375][ T8311] do_mlock+0x25a/0x6d0 [ 509.850396][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.850413][ T8311] ? folio_evictable+0x270/0x270 [ 509.850445][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.850468][ T8311] do_syscall_64+0x39/0xb0 [ 509.850488][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.850505][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.850517][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.850530][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.850545][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.850554][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.850563][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.850572][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.850581][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.850602][ T8311] [ 509.850610][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.850617][ T8311] BUG at mt_find:6473 (1) [ 509.850625][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.850637][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.850773][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.850898][ T8311] 0-536866815: 0000000000000000 [ 509.850910][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.850922][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.850935][ T8311] 553635840-553639935: 0000000000000000 [ 509.850947][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.850960][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.850972][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.850985][ T8311] 553652224-116813594623: 0000000000000000 [ 509.850997][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.851010][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.851023][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.851036][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.851048][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.851062][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.851197][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.851211][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.851224][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.851237][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.851250][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.851263][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.851276][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.851288][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.851301][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.851314][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.851327][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.851340][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.851353][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.851366][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.851379][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.851502][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.851515][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.851529][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.851542][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.851555][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.851568][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.851581][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.851594][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.851608][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.851620][ T8311] Pass: 10583263 Run:10583401 [ 509.851628][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.851644][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.851652][ T8311] Call Trace: [ 509.851656][ T8311] [ 509.851662][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.851682][ T8311] mt_find.cold+0x8b/0x90 [ 509.851702][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.851727][ T8311] find_vma+0x10c/0x1b0 [ 509.851741][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.851759][ T8311] ? walk_page_test+0x78/0x180 [ 509.851778][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.851799][ T8311] ? __walk_page_range+0x780/0x780 [ 509.851828][ T8311] mlock_fixup+0x650/0x810 [ 509.851855][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.851878][ T8311] ? mlock_fixup+0x810/0x810 [ 509.851905][ T8311] ? do_futex+0x132/0x360 [ 509.851927][ T8311] do_mlock+0x25a/0x6d0 [ 509.851947][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.851964][ T8311] ? folio_evictable+0x270/0x270 [ 509.851996][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.852018][ T8311] do_syscall_64+0x39/0xb0 [ 509.852038][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.852054][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.852065][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.852077][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.852091][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.852100][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.852109][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.852118][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.852127][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.852151][ T8311] [ 509.852159][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.852166][ T8311] BUG at mt_find:6473 (1) [ 509.852174][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.852185][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.852318][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.852442][ T8311] 0-536866815: 0000000000000000 [ 509.852454][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.852467][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.852479][ T8311] 553635840-553639935: 0000000000000000 [ 509.852491][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.852504][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.852516][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.852529][ T8311] 553652224-116813594623: 0000000000000000 [ 509.852541][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.852554][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.852567][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.852579][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.852592][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.852605][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.852735][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.852748][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.852761][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.852774][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.852787][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.852800][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.852813][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.852825][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.852838][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.852851][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.852864][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.852877][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.852890][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.852903][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.852916][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.853038][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.853051][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.853065][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.853078][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.853091][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.853104][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.853117][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.853130][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.853148][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.853161][ T8311] Pass: 10583263 Run:10583402 [ 509.853168][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.853182][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.853190][ T8311] Call Trace: [ 509.853194][ T8311] [ 509.853199][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.853219][ T8311] mt_find.cold+0x8b/0x90 [ 509.853239][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.853264][ T8311] find_vma+0x10c/0x1b0 [ 509.853278][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.853295][ T8311] ? walk_page_test+0x78/0x180 [ 509.853315][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.853336][ T8311] ? __walk_page_range+0x780/0x780 [ 509.853365][ T8311] mlock_fixup+0x650/0x810 [ 509.853392][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.853415][ T8311] ? mlock_fixup+0x810/0x810 [ 509.853442][ T8311] ? do_futex+0x132/0x360 [ 509.853464][ T8311] do_mlock+0x25a/0x6d0 [ 509.853484][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.853500][ T8311] ? folio_evictable+0x270/0x270 [ 509.853532][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.853554][ T8311] do_syscall_64+0x39/0xb0 [ 509.853575][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.853591][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.853601][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.853614][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.853627][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.853637][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.853648][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.853656][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.853665][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.853685][ T8311] [ 509.853692][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.853700][ T8311] BUG at mt_find:6473 (1) [ 509.853708][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.853719][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.853851][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.853974][ T8311] 0-536866815: 0000000000000000 [ 509.853986][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.853999][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.966338][ T8311] 553635840-553639935: 0000000000000000 [ 509.966358][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.966371][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.966384][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.966397][ T8311] 553652224-116813594623: 0000000000000000 [ 509.966409][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.966423][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.966436][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.966449][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.966461][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.966475][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.966604][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.966617][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.966630][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.966643][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.966656][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.966669][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.966682][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.966695][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.966708][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.966721][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.966734][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.966747][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.966760][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.966773][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.966786][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.971911][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.971927][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.971940][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.971954][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.971968][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.971981][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.971996][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.972020][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.972044][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.973584][ T8311] Pass: 10592190 Run:10592330 [ 509.973594][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.973610][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.973619][ T8311] Call Trace: [ 509.973623][ T8311] [ 509.973629][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.973654][ T8311] mt_find.cold+0x8b/0x90 [ 509.973675][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.973702][ T8311] find_vma+0x10c/0x1b0 [ 509.973717][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.973734][ T8311] ? walk_page_test+0x78/0x180 [ 509.973754][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.973775][ T8311] ? __walk_page_range+0x780/0x780 [ 509.973805][ T8311] mlock_fixup+0x650/0x810 [ 509.973833][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.973856][ T8311] ? mlock_fixup+0x810/0x810 [ 509.973883][ T8311] ? do_futex+0x132/0x360 [ 509.973907][ T8311] do_mlock+0x25a/0x6d0 [ 509.973928][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.973946][ T8311] ? folio_evictable+0x270/0x270 [ 509.973985][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.974028][ T8311] do_syscall_64+0x39/0xb0 [ 509.974062][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.974090][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.974109][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.974136][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.974161][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.974179][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.974196][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.974210][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.974225][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.974263][ T8311] [ 509.981885][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 509.981903][ T8311] BUG at mt_find:6473 (1) [ 509.981918][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 509.981937][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 509.982167][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 509.982385][ T8311] 0-536866815: 0000000000000000 [ 509.982407][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 509.982430][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 509.982451][ T8311] 553635840-553639935: 0000000000000000 [ 509.982472][ T8311] 553639936-553635839: ffff88805ff72d20 [ 509.982494][ T8311] 553635840-553648127: ffff8880217871c0 [ 509.982516][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 509.982540][ T8311] 553652224-116813594623: 0000000000000000 [ 509.982562][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 509.982586][ T8311] 116817788928-93825015144447: 0000000000000000 [ 509.982610][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 509.982632][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 509.982655][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 509.982680][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 509.994510][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 509.994526][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 509.994539][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 509.994552][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 509.994565][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 509.994578][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 509.994591][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 509.994604][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 509.994617][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 509.994630][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 509.994643][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 509.994656][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 509.994670][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 509.994683][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 509.994696][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 509.994821][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 509.994834][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 509.994848][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 509.994861][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 509.994874][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 509.994888][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 509.994901][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 509.994914][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 509.994927][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 509.994940][ T8311] Pass: 10592190 Run:10592331 [ 509.994949][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 509.994964][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 509.994973][ T8311] Call Trace: [ 509.994978][ T8311] [ 509.994984][ T8311] dump_stack_lvl+0xd1/0x138 [ 509.995009][ T8311] mt_find.cold+0x8b/0x90 [ 509.995029][ T8311] ? mas_find+0x1d0/0x1d0 [ 509.995055][ T8311] find_vma+0x10c/0x1b0 [ 509.995071][ T8311] ? can_vma_merge_before+0x390/0x390 [ 509.995088][ T8311] ? walk_page_test+0x78/0x180 [ 509.995108][ T8311] walk_page_range+0x2b1/0x4a0 [ 509.995134][ T8311] ? __walk_page_range+0x780/0x780 [ 509.995163][ T8311] mlock_fixup+0x650/0x810 [ 509.995192][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 509.995216][ T8311] ? mlock_fixup+0x810/0x810 [ 509.995242][ T8311] ? do_futex+0x132/0x360 [ 509.995265][ T8311] do_mlock+0x25a/0x6d0 [ 509.995286][ T8311] ? xfd_validate_state+0x5d/0x180 [ 509.995303][ T8311] ? folio_evictable+0x270/0x270 [ 509.995335][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 509.995358][ T8311] do_syscall_64+0x39/0xb0 [ 509.995379][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.995396][ T8311] RIP: 0033:0x7fafb788c0c9 [ 509.995409][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 509.995424][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 509.995438][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 509.995448][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 509.995459][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 509.995468][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.995477][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 509.995497][ T8311] [ 510.017401][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.017413][ T8311] BUG at mt_find:6473 (1) [ 510.017422][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.017435][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.017603][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.032981][ T8311] 0-536866815: 0000000000000000 [ 510.032995][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.033008][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.033021][ T8311] 553635840-553639935: 0000000000000000 [ 510.033033][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.033046][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.033059][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.033071][ T8311] 553652224-116813594623: 0000000000000000 [ 510.033084][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.033097][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.033110][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.033128][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.033142][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.033165][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 510.033335][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 510.033350][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 510.033363][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 510.033376][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 510.033389][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 510.033402][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 510.033415][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 510.033428][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 510.033441][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 510.033454][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 510.033467][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 510.033481][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 510.033494][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 510.033586][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 510.033601][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 510.033726][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 510.033740][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 510.033754][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 510.033767][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 510.033780][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 510.033794][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 510.033807][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 510.033820][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 510.033834][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 510.033847][ T8311] Pass: 10596134 Run:10596276 [ 510.033857][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 510.033872][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.033881][ T8311] Call Trace: [ 510.033886][ T8311] [ 510.033892][ T8311] dump_stack_lvl+0xd1/0x138 [ 510.033917][ T8311] mt_find.cold+0x8b/0x90 [ 510.033938][ T8311] ? mas_find+0x1d0/0x1d0 [ 510.033964][ T8311] find_vma+0x10c/0x1b0 [ 510.033980][ T8311] ? can_vma_merge_before+0x390/0x390 [ 510.033997][ T8311] ? walk_page_test+0x78/0x180 [ 510.034025][ T8311] walk_page_range+0x2b1/0x4a0 [ 510.034060][ T8311] ? __walk_page_range+0x780/0x780 [ 510.034111][ T8311] mlock_fixup+0x650/0x810 [ 510.034168][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 510.034210][ T8311] ? mlock_fixup+0x810/0x810 [ 510.034261][ T8311] ? do_futex+0x132/0x360 [ 510.034304][ T8311] do_mlock+0x25a/0x6d0 [ 510.034341][ T8311] ? xfd_validate_state+0x5d/0x180 [ 510.034371][ T8311] ? folio_evictable+0x270/0x270 [ 510.034404][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 510.034427][ T8311] do_syscall_64+0x39/0xb0 [ 510.034448][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.034466][ T8311] RIP: 0033:0x7fafb788c0c9 [ 510.034478][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.034492][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 510.034506][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 510.034516][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 510.034526][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 510.034535][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.034543][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 510.034564][ T8311] [ 510.039816][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.039829][ T8311] BUG at mt_find:6473 (1) [ 510.039838][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.039851][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.040130][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.040257][ T8311] 0-536866815: 0000000000000000 [ 510.040270][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.040283][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.040295][ T8311] 553635840-553639935: 0000000000000000 [ 510.040308][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.040320][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.040333][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.040346][ T8311] 553652224-116813594623: 0000000000000000 [ 510.040358][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.040372][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.040385][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.040398][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.040411][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.040424][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 510.040556][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 510.040569][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 510.040583][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 510.040596][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 510.040609][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 510.040622][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 510.040635][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 510.040648][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 510.040661][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 510.040674][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 510.040687][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 510.040700][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 510.040713][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 510.040727][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 510.040740][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 510.040865][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 510.040878][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 510.040892][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 510.040906][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 510.040919][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 510.040932][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 510.040946][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 510.040959][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 510.040973][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 510.040986][ T8311] Pass: 10596134 Run:10596277 [ 510.040994][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 510.041010][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.041018][ T8311] Call Trace: [ 510.041023][ T8311] [ 510.041029][ T8311] dump_stack_lvl+0xd1/0x138 [ 510.041060][ T8311] mt_find.cold+0x8b/0x90 [ 510.041098][ T8311] ? mas_find+0x1d0/0x1d0 [ 510.041153][ T8311] find_vma+0x10c/0x1b0 [ 510.041173][ T8311] ? can_vma_merge_before+0x390/0x390 [ 510.041191][ T8311] ? walk_page_test+0x78/0x180 [ 510.041211][ T8311] walk_page_range+0x2b1/0x4a0 [ 510.041232][ T8311] ? __walk_page_range+0x780/0x780 [ 510.041261][ T8311] mlock_fixup+0x650/0x810 [ 510.041289][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 510.041312][ T8311] ? mlock_fixup+0x810/0x810 [ 510.041339][ T8311] ? do_futex+0x132/0x360 [ 510.041363][ T8311] do_mlock+0x25a/0x6d0 [ 510.041383][ T8311] ? xfd_validate_state+0x5d/0x180 [ 510.041401][ T8311] ? folio_evictable+0x270/0x270 [ 510.041432][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 510.041456][ T8311] do_syscall_64+0x39/0xb0 [ 510.041477][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.041496][ T8311] RIP: 0033:0x7fafb788c0c9 [ 510.041508][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.041521][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 510.041536][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 510.041546][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 510.041555][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 510.041564][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.041572][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 510.041593][ T8311] [ 510.041676][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.041685][ T8311] BUG at mt_find:6473 (1) [ 510.041693][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.041704][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.041840][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.041965][ T8311] 0-536866815: 0000000000000000 [ 510.041978][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.041990][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.042003][ T8311] 553635840-553639935: 0000000000000000 [ 510.042015][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.042028][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.042041][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.042053][ T8311] 553652224-116813594623: 0000000000000000 [ 510.042066][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.042079][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.042092][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.042104][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.042117][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.042136][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 510.042316][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 510.042330][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 510.042344][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 510.042357][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 510.042370][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 510.042383][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 510.042396][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 510.042409][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 510.042422][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 510.042435][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 510.042448][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 510.042461][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 510.042475][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 510.042488][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 510.042501][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 510.042625][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 510.042638][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 510.042652][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 510.042665][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 510.042678][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 510.042766][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 510.042781][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 510.042795][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 510.042808][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 510.042822][ T8311] Pass: 10596134 Run:10596278 [ 510.042829][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 510.042844][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.042852][ T8311] Call Trace: [ 510.042856][ T8311] [ 510.042862][ T8311] dump_stack_lvl+0xd1/0x138 [ 510.042883][ T8311] mt_find.cold+0x8b/0x90 [ 510.042904][ T8311] ? mas_find+0x1d0/0x1d0 [ 510.042929][ T8311] find_vma+0x10c/0x1b0 [ 510.042943][ T8311] ? can_vma_merge_before+0x390/0x390 [ 510.042960][ T8311] ? walk_page_test+0x78/0x180 [ 510.042980][ T8311] walk_page_range+0x2b1/0x4a0 [ 510.043000][ T8311] ? __walk_page_range+0x780/0x780 [ 510.043030][ T8311] mlock_fixup+0x650/0x810 [ 510.043057][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 510.043080][ T8311] ? mlock_fixup+0x810/0x810 [ 510.043107][ T8311] ? do_futex+0x132/0x360 [ 510.043134][ T8311] do_mlock+0x25a/0x6d0 [ 510.043154][ T8311] ? xfd_validate_state+0x5d/0x180 [ 510.043171][ T8311] ? folio_evictable+0x270/0x270 [ 510.043203][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 510.043225][ T8311] do_syscall_64+0x39/0xb0 [ 510.043246][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.043262][ T8311] RIP: 0033:0x7fafb788c0c9 [ 510.043274][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.043286][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 510.043303][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 510.043320][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 510.043337][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 510.043352][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.043368][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 510.043403][ T8311] [ 510.043412][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.043420][ T8311] BUG at mt_find:6473 (1) [ 510.043428][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.043440][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.043575][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.043700][ T8311] 0-536866815: 0000000000000000 [ 510.043712][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.043725][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.043737][ T8311] 553635840-553639935: 0000000000000000 [ 510.043750][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.043762][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.043775][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.043860][ T8311] 553652224-116813594623: 0000000000000000 [ 510.043874][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.043887][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.043900][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.043913][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.043925][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.043939][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 510.069522][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 510.069549][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 510.069572][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 510.069594][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 510.069617][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 510.069640][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 510.069663][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 510.069687][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 510.069711][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 510.069733][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 510.069755][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 510.069778][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 510.069801][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 510.069824][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 510.069848][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 510.090074][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 510.090102][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 510.090134][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 510.090159][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 510.090185][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 510.090208][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 510.090232][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 510.090256][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 510.090279][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 510.090302][ T8311] Pass: 10596336 Run:10596481 [ 510.090317][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 510.090344][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.090359][ T8311] Call Trace: [ 510.090367][ T8311] [ 510.090378][ T8311] dump_stack_lvl+0xd1/0x138 [ 510.090419][ T8311] mt_find.cold+0x8b/0x90 [ 510.090459][ T8311] ? mas_find+0x1d0/0x1d0 [ 510.090506][ T8311] find_vma+0x10c/0x1b0 [ 510.090533][ T8311] ? can_vma_merge_before+0x390/0x390 [ 510.090566][ T8311] ? walk_page_test+0x78/0x180 [ 510.090602][ T8311] walk_page_range+0x2b1/0x4a0 [ 510.090640][ T8311] ? __walk_page_range+0x780/0x780 [ 510.090696][ T8311] mlock_fixup+0x650/0x810 [ 510.090750][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 510.090797][ T8311] ? mlock_fixup+0x810/0x810 [ 510.090847][ T8311] ? do_futex+0x132/0x360 [ 510.090890][ T8311] do_mlock+0x25a/0x6d0 [ 510.090929][ T8311] ? xfd_validate_state+0x5d/0x180 [ 510.090961][ T8311] ? folio_evictable+0x270/0x270 [ 510.091021][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 510.091064][ T8311] do_syscall_64+0x39/0xb0 [ 510.091102][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.091138][ T8311] RIP: 0033:0x7fafb788c0c9 [ 510.091159][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.091183][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 510.091209][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 510.091227][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 510.091245][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 510.091260][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.091276][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 510.091314][ T8311] [ 510.165427][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.165442][ T8311] BUG at mt_find:6473 (1) [ 510.165451][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.165466][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.165604][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.165737][ T8311] 0-536866815: 0000000000000000 [ 510.165749][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.165762][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.165775][ T8311] 553635840-553639935: 0000000000000000 [ 510.165787][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.165800][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.165812][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.165825][ T8311] 553652224-116813594623: 0000000000000000 [ 510.165837][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.165850][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.165863][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.165876][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.165889][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.165903][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 510.166032][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 510.166045][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 510.166058][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 510.166071][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 510.166084][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 510.166097][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 510.166110][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 510.166128][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 510.166141][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 510.166154][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 510.166167][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 510.166180][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 510.166194][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 510.166207][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 510.166220][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 510.166345][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 510.166360][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 510.166383][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 510.166408][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 510.168528][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 510.168694][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 510.168720][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 510.168879][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 510.168906][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 510.168928][ T8311] Pass: 10602275 Run:10602421 [ 510.168937][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 510.168953][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 510.168962][ T8311] Call Trace: [ 510.168966][ T8311] [ 510.168973][ T8311] dump_stack_lvl+0xd1/0x138 [ 510.168997][ T8311] mt_find.cold+0x8b/0x90 [ 510.169018][ T8311] ? mas_find+0x1d0/0x1d0 [ 510.169044][ T8311] find_vma+0x10c/0x1b0 [ 510.169060][ T8311] ? can_vma_merge_before+0x390/0x390 [ 510.169077][ T8311] ? walk_page_test+0x78/0x180 [ 510.169097][ T8311] walk_page_range+0x2b1/0x4a0 [ 510.169124][ T8311] ? __walk_page_range+0x780/0x780 [ 510.169154][ T8311] mlock_fixup+0x650/0x810 [ 510.169183][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 510.169206][ T8311] ? mlock_fixup+0x810/0x810 [ 510.169233][ T8311] ? do_futex+0x132/0x360 [ 510.169259][ T8311] do_mlock+0x25a/0x6d0 [ 510.169279][ T8311] ? xfd_validate_state+0x5d/0x180 [ 510.169297][ T8311] ? folio_evictable+0x270/0x270 [ 510.169329][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 510.169351][ T8311] do_syscall_64+0x39/0xb0 [ 510.169372][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.169390][ T8311] RIP: 0033:0x7fafb788c0c9 [ 510.169403][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 510.169416][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 510.169431][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 510.169441][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 510.169450][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 510.169459][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.169468][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 510.169488][ T8311] [ 510.173441][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 510.173454][ T8311] BUG at mt_find:6473 (1) [ 510.173463][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 510.173476][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 510.173619][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 510.173745][ T8311] 0-536866815: 0000000000000000 [ 510.173757][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 510.173770][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 510.173783][ T8311] 553635840-553639935: 0000000000000000 [ 510.173796][ T8311] 553639936-553635839: ffff88805ff72d20 [ 510.173809][ T8311] 553635840-553648127: ffff8880217871c0 [ 510.173822][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 510.173834][ T8311] 553652224-116813594623: 0000000000000000 [ 510.173847][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 510.173860][ T8311] 116817788928-93825015144447: 0000000000000000 [ 510.173873][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 510.173886][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 510.173899][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 510.173912][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 521.347082][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 521.371556][ T8311] 140392662040576-140392664137727: ffff8880668dc380 11:21:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f00000000c0)) 11:21:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:21 executing program 2: syz_clone(0x40000000, 0x0, 0xfffffc93, 0x0, 0x0, 0x0) 11:21:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)) 11:21:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) [ 521.399469][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 11:21:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) [ 521.476566][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 521.562290][ T8311] 140392668332032-140392670429183: ffff8880668dc700 11:21:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, 0x0) [ 521.644602][ T8311] 140392670429184-140392674623487: ffff8880668dc620 11:21:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.733141][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 521.792617][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 11:21:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) [ 521.888102][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 521.925988][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 521.957797][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 11:21:21 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$rfkill(r0, 0x0, 0x0) 11:21:21 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 522.069184][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 522.132474][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 522.226144][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 522.325290][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 522.534350][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 522.541380][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 522.576229][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 522.643311][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 522.651409][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 522.697154][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 522.707005][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 522.713996][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 522.722963][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 522.738359][ T8311] Pass: 10683485 Run:10683632 [ 522.755763][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 522.765718][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 522.775791][ T8311] Call Trace: [ 522.779070][ T8311] [ 522.781991][ T8311] dump_stack_lvl+0xd1/0x138 [ 522.786593][ T8311] mt_find.cold+0x8b/0x90 [ 522.790923][ T8311] ? mas_find+0x1d0/0x1d0 [ 522.795258][ T8311] find_vma+0x10c/0x1b0 [ 522.799406][ T8311] ? can_vma_merge_before+0x390/0x390 [ 522.804789][ T8311] ? walk_page_test+0x78/0x180 [ 522.809590][ T8311] walk_page_range+0x2b1/0x4a0 [ 522.814373][ T8311] ? __walk_page_range+0x780/0x780 [ 522.819517][ T8311] mlock_fixup+0x650/0x810 [ 522.823951][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 522.829152][ T8311] ? mlock_fixup+0x810/0x810 [ 522.833775][ T8311] ? do_futex+0x132/0x360 [ 522.838153][ T8311] do_mlock+0x25a/0x6d0 [ 522.842353][ T8311] ? xfd_validate_state+0x5d/0x180 [ 522.847506][ T8311] ? folio_evictable+0x270/0x270 [ 522.852485][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 522.857341][ T8311] do_syscall_64+0x39/0xb0 [ 522.861757][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 522.867651][ T8311] RIP: 0033:0x7fafb788c0c9 [ 522.872249][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 522.891854][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 522.900348][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 522.908316][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 522.916281][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 522.924256][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.932250][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 522.940238][ T8311] 11:21:22 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, 0x0) 11:21:22 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000000c0)) 11:21:22 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:22 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x0, "b242fdfcda6c7f02ee940f8c1df2f9e7b2877eaa03b863806ea39d51d00501fd82b3e8204cf94570423f2f97a094de05e42a1001771d8eb9d027678100"}, 0x48, 0xfffffffffffffffc) keyctl$search(0xb, r0, 0x0, 0x0, 0x0) [ 523.087045][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 523.093259][ T8311] BUG at mt_find:6473 (1) [ 523.106511][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 523.203511][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:21:23 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x5450, 0x0) 11:21:23 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000480)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) getgroups(0x6, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x5, &(0x7f00000031c0)={[0x2]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 11:21:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b45, 0x0) 11:21:23 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) [ 523.319322][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:21:23 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x28, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x0) 11:21:23 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) [ 523.707910][ T8311] 0-536866815: 0000000000000000 [ 523.713314][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 523.719904][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 523.728018][ T8311] 553635840-553639935: 0000000000000000 [ 523.734562][ T8311] 553639936-553635839: ffff88805ff72d20 [ 523.740660][ T8311] 553635840-553648127: ffff8880217871c0 [ 523.747493][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 523.768860][ T8311] 553652224-116813594623: 0000000000000000 [ 523.782317][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 523.798677][ T8311] 116817788928-93825015144447: 0000000000000000 [ 523.808863][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 523.816181][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 523.823261][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 523.832669][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.134218][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.174313][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.225164][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.244478][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.244514][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.244538][ T8311] 140392670429184-140392674623487: ffff8880668dc620 11:21:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:24 executing program 0: syz_clone3(&(0x7f0000000340)={0x40000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) 11:21:24 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000480)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) getgroups(0x6, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x5, &(0x7f00000031c0)={[0x2]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 11:21:24 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:24 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGUNIT(r0, 0x80047456, 0x0) [ 524.244560][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.244584][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 11:21:24 executing program 0: write$capi20_data(0xffffffffffffffff, 0x0, 0x0) 11:21:24 executing program 5: mount$fuseblk(&(0x7f0000006c40), &(0x7f0000006c80)='./file0\x00', &(0x7f0000006cc0), 0x0, &(0x7f000000ad80)) [ 524.244610][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.244635][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.244659][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.244677][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.244696][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.244718][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 ** 121 printk messages dropped ** [ 524.255511][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.255737][ T8311] 0-536866815: 0000000000000000 [ 524.255760][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.255782][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.255805][ T8311] 553635840-553639935: 0000000000000000 [ 524.255828][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.255851][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.255875][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.255898][ T8311] 553652224-116813594623: 0000000000000000 [ 524.255920][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.255942][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.255966][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.255990][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.256014][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.256039][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.283573][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.283600][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.283625][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.283650][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.283674][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.283698][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.283722][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.283746][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.283770][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.283794][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.283818][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.283842][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.283867][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.283891][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.283915][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.284356][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.284381][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.284407][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.284431][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.284456][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.284480][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.284504][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.284529][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.284644][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.284667][ T8311] Pass: 10716281 Run:10716431 [ 524.284681][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.284706][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.284720][ T8311] Call Trace: [ 524.284728][ T8311] [ 524.284738][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.284776][ T8311] mt_find.cold+0x8b/0x90 [ 524.284810][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.284855][ T8311] find_vma+0x10c/0x1b0 [ 524.284881][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.284911][ T8311] ? walk_page_test+0x78/0x180 [ 524.284946][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.284983][ T8311] ? __walk_page_range+0x780/0x780 [ 524.285034][ T8311] mlock_fixup+0x650/0x810 [ 524.285085][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.285125][ T8311] ? mlock_fixup+0x810/0x810 [ 524.285169][ T8311] ? do_futex+0x132/0x360 [ 524.285218][ T8311] do_mlock+0x25a/0x6d0 [ 524.285255][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.285288][ T8311] ? folio_evictable+0x270/0x270 [ 524.285349][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.285391][ T8311] do_syscall_64+0x39/0xb0 [ 524.285430][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.285466][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.285487][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.285512][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.285539][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.285557][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.285574][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.285590][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.285606][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.285644][ T8311] [ 524.286415][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.286432][ T8311] BUG at mt_find:6473 (1) [ 524.286447][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.286467][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.286709][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.287034][ T8311] 0-536866815: 0000000000000000 [ 524.287057][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.287080][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.287103][ T8311] 553635840-553639935: 0000000000000000 [ 524.287125][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.287148][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.287170][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.287193][ T8311] 553652224-116813594623: 0000000000000000 [ 524.287224][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.287248][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.287272][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.287296][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.287319][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.287344][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.287654][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.287679][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.287703][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.287727][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.287751][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.287775][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.287799][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.287823][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.287847][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.287871][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.287894][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.287998][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.288023][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.288045][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.288069][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.288299][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.288324][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.288349][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.288374][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.288397][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.288421][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.288445][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.288470][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.288494][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.288519][ T8311] Pass: 10716304 Run:10716455 [ 524.288533][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.288563][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.288579][ T8311] Call Trace: [ 524.288588][ T8311] [ 524.288598][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.288639][ T8311] mt_find.cold+0x8b/0x90 [ 524.288677][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.288724][ T8311] find_vma+0x10c/0x1b0 [ 524.288752][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.288784][ T8311] ? walk_page_test+0x78/0x180 [ 524.288822][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.288860][ T8311] ? __walk_page_range+0x780/0x780 [ 524.288916][ T8311] mlock_fixup+0x650/0x810 [ 524.288969][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.289011][ T8311] ? mlock_fixup+0x810/0x810 [ 524.289059][ T8311] ? do_futex+0x132/0x360 [ 524.289098][ T8311] do_mlock+0x25a/0x6d0 [ 524.289132][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.289162][ T8311] ? folio_evictable+0x270/0x270 [ 524.289228][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.289269][ T8311] do_syscall_64+0x39/0xb0 [ 524.289308][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.289339][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.289360][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.289384][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.289408][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.289425][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.289442][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.289458][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.289474][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.289513][ T8311] [ 524.289648][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.289661][ T8311] BUG at mt_find:6473 (1) [ 524.289674][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.289693][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.289938][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.290164][ T8311] 0-536866815: 0000000000000000 [ 524.290186][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.290216][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.290239][ T8311] 553635840-553639935: 0000000000000000 [ 524.290261][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.290284][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.290307][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.290331][ T8311] 553652224-116813594623: 0000000000000000 [ 524.290354][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.290379][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.290402][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.290426][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.290450][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.290474][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.314335][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.314362][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.314387][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.314411][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.314434][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.314459][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.314483][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.314506][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.314530][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.314554][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.314578][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.314602][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.314626][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.314650][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.314673][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.314894][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.314920][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.314964][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.314989][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.315013][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.315037][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.315102][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.315127][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.315151][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.315174][ T8311] Pass: 10716353 Run:10716505 [ 524.315189][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.315225][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.315240][ T8311] Call Trace: [ 524.315251][ T8311] [ 524.315262][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.315303][ T8311] mt_find.cold+0x8b/0x90 [ 524.315341][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.315390][ T8311] find_vma+0x10c/0x1b0 [ 524.315418][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.315450][ T8311] ? walk_page_test+0x78/0x180 [ 524.315491][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.315530][ T8311] ? __walk_page_range+0x780/0x780 [ 524.315586][ T8311] mlock_fixup+0x650/0x810 [ 524.315640][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.315684][ T8311] ? mlock_fixup+0x810/0x810 [ 524.315731][ T8311] ? do_futex+0x132/0x360 [ 524.315771][ T8311] do_mlock+0x25a/0x6d0 [ 524.315808][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.315841][ T8311] ? folio_evictable+0x270/0x270 [ 524.315903][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.315947][ T8311] do_syscall_64+0x39/0xb0 [ 524.315986][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.316015][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.316037][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.316060][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.316086][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.316103][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.316120][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.316136][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.316152][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.316192][ T8311] [ 524.316998][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.317015][ T8311] BUG at mt_find:6473 (1) [ 524.317030][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.317052][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.317307][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.317538][ T8311] 0-536866815: 0000000000000000 [ 524.317561][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.317584][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.317606][ T8311] 553635840-553639935: 0000000000000000 [ 524.317631][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.317655][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.317679][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.317701][ T8311] 553652224-116813594623: 0000000000000000 [ 524.317725][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.317749][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.317772][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.317796][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.317820][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.317845][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.318213][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.318238][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.318263][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.318287][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.318310][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.318334][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.318357][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.318381][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.318405][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.318428][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.318452][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.318476][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.318501][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.318525][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.318550][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.318778][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.318802][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.318827][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.318852][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.318876][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.318900][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.318924][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.318948][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.318972][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.318996][ T8311] Pass: 10716357 Run:10716510 [ 524.319010][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.319038][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.319053][ T8311] Call Trace: [ 524.319061][ T8311] [ 524.319071][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.319109][ T8311] mt_find.cold+0x8b/0x90 [ 524.319150][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.319203][ T8311] find_vma+0x10c/0x1b0 [ 524.319231][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.319264][ T8311] ? walk_page_test+0x78/0x180 [ 524.319301][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.319340][ T8311] ? __walk_page_range+0x780/0x780 [ 524.319396][ T8311] mlock_fixup+0x650/0x810 [ 524.319448][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.319491][ T8311] ? mlock_fixup+0x810/0x810 [ 524.319540][ T8311] ? do_futex+0x132/0x360 [ 524.319583][ T8311] do_mlock+0x25a/0x6d0 [ 524.319619][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.319650][ T8311] ? folio_evictable+0x270/0x270 [ 524.319706][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.319748][ T8311] do_syscall_64+0x39/0xb0 [ 524.319786][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.319816][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.319837][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.319861][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.319887][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.319905][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.319922][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.319938][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.319953][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.319992][ T8311] [ 524.320131][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.320146][ T8311] BUG at mt_find:6473 (1) [ 524.320160][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.320181][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.320433][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.320663][ T8311] 0-536866815: 0000000000000000 [ 524.320685][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.320708][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.320731][ T8311] 553635840-553639935: 0000000000000000 [ 524.320753][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.320776][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.320800][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.320823][ T8311] 553652224-116813594623: 0000000000000000 [ 524.320846][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.320871][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.320895][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.320919][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.320942][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.320967][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.321334][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.321359][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.321382][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.321407][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.321431][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.321455][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.321479][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.321503][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.321527][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.321552][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.321575][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.321598][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.321621][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.321643][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.321667][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.321893][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.321917][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.321942][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.321966][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.321987][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.322008][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.322030][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.322052][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.322074][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.322097][ T8311] Pass: 10716358 Run:10716512 [ 524.322111][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.322136][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.322151][ T8311] Call Trace: [ 524.322159][ T8311] [ 524.322169][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.322216][ T8311] mt_find.cold+0x8b/0x90 [ 524.322254][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.322305][ T8311] find_vma+0x10c/0x1b0 [ 524.322332][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.322365][ T8311] ? walk_page_test+0x78/0x180 [ 524.322400][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.322437][ T8311] ? __walk_page_range+0x780/0x780 [ 524.322491][ T8311] mlock_fixup+0x650/0x810 [ 524.322545][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.322590][ T8311] ? mlock_fixup+0x810/0x810 [ 524.322639][ T8311] ? do_futex+0x132/0x360 [ 524.322683][ T8311] do_mlock+0x25a/0x6d0 [ 524.322720][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.322752][ T8311] ? folio_evictable+0x270/0x270 [ 524.322814][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.322856][ T8311] do_syscall_64+0x39/0xb0 [ 524.322895][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.322925][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.322946][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.322970][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.322996][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.323014][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.323031][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.323047][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.323061][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.323100][ T8311] [ 524.345931][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.345952][ T8311] BUG at mt_find:6473 (1) [ 524.345966][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.345986][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.346244][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.346470][ T8311] 0-536866815: 0000000000000000 [ 524.346494][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.346518][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.346542][ T8311] 553635840-553639935: 0000000000000000 [ 524.346564][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.346587][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.346611][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.346635][ T8311] 553652224-116813594623: 0000000000000000 [ 524.346658][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.346683][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.346706][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.346730][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.346754][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.346778][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.347136][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.347160][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.347185][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.347216][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.347240][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.347264][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.347287][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.347312][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.347336][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.347360][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.347383][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.347408][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.347432][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.347456][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.347480][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.347705][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.347730][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.347754][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.347779][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.347803][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.347824][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.347846][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.347871][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.347895][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.347919][ T8311] Pass: 10716401 Run:10716556 [ 524.347934][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.347961][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.347976][ T8311] Call Trace: [ 524.347984][ T8311] [ 524.347995][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.348036][ T8311] mt_find.cold+0x8b/0x90 [ 524.348076][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.348124][ T8311] find_vma+0x10c/0x1b0 [ 524.348152][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.348185][ T8311] ? walk_page_test+0x78/0x180 [ 524.348228][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.348267][ T8311] ? __walk_page_range+0x780/0x780 [ 524.348324][ T8311] mlock_fixup+0x650/0x810 [ 524.348380][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.348425][ T8311] ? mlock_fixup+0x810/0x810 [ 524.348476][ T8311] ? do_futex+0x132/0x360 [ 524.348520][ T8311] do_mlock+0x25a/0x6d0 [ 524.348558][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.348590][ T8311] ? folio_evictable+0x270/0x270 [ 524.348654][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.348697][ T8311] do_syscall_64+0x39/0xb0 [ 524.348733][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.348764][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.348786][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.348809][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.348834][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.348852][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.348869][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.348885][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.348900][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.348940][ T8311] [ 524.354800][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.354819][ T8311] BUG at mt_find:6473 (1) [ 524.354833][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.354854][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.355130][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.356105][ T8311] 0-536866815: 0000000000000000 [ 524.356129][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.356150][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.356174][ T8311] 553635840-553639935: 0000000000000000 [ 524.356210][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.356234][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.356257][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.356280][ T8311] 553652224-116813594623: 0000000000000000 [ 524.356303][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.356327][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.356352][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.356377][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.356401][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.356426][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.356660][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.356686][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.356710][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.356734][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.356758][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.356783][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.356807][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.356831][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.356855][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.356880][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.356903][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.356928][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.356951][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.356973][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.356996][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.358431][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.358456][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.358480][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.358505][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.358529][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.358553][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.358577][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.358602][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.358626][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.358651][ T8311] Pass: 10716413 Run:10716569 [ 524.358666][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.358692][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.358706][ T8311] Call Trace: [ 524.358714][ T8311] [ 524.358725][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.358767][ T8311] mt_find.cold+0x8b/0x90 [ 524.358806][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.358854][ T8311] find_vma+0x10c/0x1b0 [ 524.358882][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.358915][ T8311] ? walk_page_test+0x78/0x180 [ 524.358952][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.358990][ T8311] ? __walk_page_range+0x780/0x780 [ 524.359046][ T8311] mlock_fixup+0x650/0x810 [ 524.359100][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.359143][ T8311] ? mlock_fixup+0x810/0x810 [ 524.359199][ T8311] ? do_futex+0x132/0x360 [ 524.359243][ T8311] do_mlock+0x25a/0x6d0 [ 524.359282][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.359316][ T8311] ? folio_evictable+0x270/0x270 [ 524.359375][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.359417][ T8311] do_syscall_64+0x39/0xb0 [ 524.359457][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.359487][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.359509][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.359532][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.359558][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.359576][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.359593][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.359609][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.359625][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.359665][ T8311] [ 524.424262][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.424285][ T8311] BUG at mt_find:6473 (1) [ 524.424300][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.424322][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.424570][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.424806][ T8311] 0-536866815: 0000000000000000 [ 524.424829][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.424853][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.424877][ T8311] 553635840-553639935: 0000000000000000 [ 524.424899][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.424921][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.424942][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.424964][ T8311] 553652224-116813594623: 0000000000000000 [ 524.424984][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.425007][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.425029][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.425052][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.425074][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.425098][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.425452][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.425478][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.425503][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.425526][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.425548][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.425570][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.425594][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.425618][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.425642][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.425665][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.425695][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.425719][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.425742][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.425765][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.425789][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.426015][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.426040][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.426064][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.426089][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.426113][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.426138][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.426161][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.426185][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.426208][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.426232][ T8311] Pass: 10717786 Run:10717943 [ 524.426247][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.426273][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.426289][ T8311] Call Trace: [ 524.426297][ T8311] [ 524.426307][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.426347][ T8311] mt_find.cold+0x8b/0x90 [ 524.426384][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.426431][ T8311] find_vma+0x10c/0x1b0 [ 524.426460][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.426489][ T8311] ? walk_page_test+0x78/0x180 [ 524.426527][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.426566][ T8311] ? __walk_page_range+0x780/0x780 [ 524.426622][ T8311] mlock_fixup+0x650/0x810 [ 524.426675][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.426725][ T8311] ? mlock_fixup+0x810/0x810 [ 524.426776][ T8311] ? do_futex+0x132/0x360 [ 524.426820][ T8311] do_mlock+0x25a/0x6d0 [ 524.426858][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.426891][ T8311] ? folio_evictable+0x270/0x270 [ 524.426952][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.426994][ T8311] do_syscall_64+0x39/0xb0 [ 524.427032][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.427063][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.427084][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.427108][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.427133][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.427151][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.427172][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.427188][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.427204][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.427243][ T8311] [ 524.427332][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.427347][ T8311] BUG at mt_find:6473 (1) [ 524.427362][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.427382][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.427619][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.427850][ T8311] 0-536866815: 0000000000000000 [ 524.427873][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.427897][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.427920][ T8311] 553635840-553639935: 0000000000000000 [ 524.427942][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.427964][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.427987][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.428009][ T8311] 553652224-116813594623: 0000000000000000 [ 524.428030][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.428050][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.428071][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.428093][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.428116][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.428140][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.428448][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.428473][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.428497][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.428520][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.428543][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.428564][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.428587][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.428611][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.428633][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.428656][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.428679][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.428709][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.428734][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.428757][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.428781][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.428992][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.429016][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.429040][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.429063][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.429086][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.429110][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.429133][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.429156][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.429180][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.429203][ T8311] Pass: 10717795 Run:10717953 [ 524.429217][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.429243][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.429257][ T8311] Call Trace: [ 524.429266][ T8311] [ 524.429276][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.429317][ T8311] mt_find.cold+0x8b/0x90 [ 524.429355][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.429404][ T8311] find_vma+0x10c/0x1b0 [ 524.429430][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.429461][ T8311] ? walk_page_test+0x78/0x180 [ 524.429498][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.429532][ T8311] ? __walk_page_range+0x780/0x780 [ 524.429588][ T8311] mlock_fixup+0x650/0x810 [ 524.429640][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.429685][ T8311] ? mlock_fixup+0x810/0x810 [ 524.429741][ T8311] ? do_futex+0x132/0x360 [ 524.429784][ T8311] do_mlock+0x25a/0x6d0 [ 524.429823][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.429854][ T8311] ? folio_evictable+0x270/0x270 [ 524.429912][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.429953][ T8311] do_syscall_64+0x39/0xb0 [ 524.429992][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.430022][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.430042][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.430066][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.430091][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.430109][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.430126][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.430142][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.430158][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.430196][ T8311] [ 524.464342][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.464362][ T8311] BUG at mt_find:6473 (1) [ 524.464377][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.464398][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.464641][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.469113][ T8311] 0-536866815: 0000000000000000 [ 524.469138][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.469161][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.469185][ T8311] 553635840-553639935: 0000000000000000 [ 524.469207][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.469230][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.469253][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.469276][ T8311] 553652224-116813594623: 0000000000000000 [ 524.469299][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.469324][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.469347][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.469371][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.469395][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.469420][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.469658][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.469683][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.469714][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.469738][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.469762][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.469786][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.469810][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.469834][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.469858][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.469882][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.477966][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.477995][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.478021][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.478045][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.478071][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.478302][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.478324][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.478348][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.478373][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.478397][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.478421][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.478445][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.478468][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.478491][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.478510][ T8311] Pass: 10718191 Run:10718350 [ 524.478523][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.478548][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.478564][ T8311] Call Trace: [ 524.478572][ T8311] [ 524.478581][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.478620][ T8311] mt_find.cold+0x8b/0x90 [ 524.478657][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.478710][ T8311] find_vma+0x10c/0x1b0 [ 524.478738][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.478771][ T8311] ? walk_page_test+0x78/0x180 [ 524.478809][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.478849][ T8311] ? __walk_page_range+0x780/0x780 [ 524.478907][ T8311] mlock_fixup+0x650/0x810 [ 524.478966][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.479011][ T8311] ? mlock_fixup+0x810/0x810 [ 524.479065][ T8311] ? do_futex+0x132/0x360 [ 524.479110][ T8311] do_mlock+0x25a/0x6d0 [ 524.479150][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.479182][ T8311] ? folio_evictable+0x270/0x270 [ 524.479245][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.479289][ T8311] do_syscall_64+0x39/0xb0 [ 524.479328][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.479360][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.479381][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.479404][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.479430][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.479447][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.479464][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.479481][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.479497][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.479538][ T8311] [ 524.500237][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.500258][ T8311] BUG at mt_find:6473 (1) [ 524.500273][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.500293][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.500534][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.517380][ T8311] 0-536866815: 0000000000000000 [ 524.517394][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.517407][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.517420][ T8311] 553635840-553639935: 0000000000000000 [ 524.517433][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.517447][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.517462][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.517475][ T8311] 553652224-116813594623: 0000000000000000 [ 524.517487][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.517500][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.517513][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.517526][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.517539][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.517553][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.517691][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.517704][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.517717][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.517730][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.517743][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.517756][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.517769][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.517782][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.517796][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.517812][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.524496][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.524513][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.524527][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.524540][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.524554][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.525490][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.525505][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.528292][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.528325][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.528350][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.528375][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.528399][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.528424][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.528450][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.528475][ T8311] Pass: 10718923 Run:10719083 [ 524.528490][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.528517][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.528532][ T8311] Call Trace: [ 524.528541][ T8311] [ 524.528551][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.528594][ T8311] mt_find.cold+0x8b/0x90 [ 524.528635][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.528690][ T8311] find_vma+0x10c/0x1b0 [ 524.528719][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.528752][ T8311] ? walk_page_test+0x78/0x180 [ 524.528790][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.528829][ T8311] ? __walk_page_range+0x780/0x780 [ 524.528887][ T8311] mlock_fixup+0x650/0x810 [ 524.528942][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.528987][ T8311] ? mlock_fixup+0x810/0x810 [ 524.529039][ T8311] ? do_futex+0x132/0x360 [ 524.529085][ T8311] do_mlock+0x25a/0x6d0 [ 524.529127][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.529158][ T8311] ? folio_evictable+0x270/0x270 [ 524.529220][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.529264][ T8311] do_syscall_64+0x39/0xb0 [ 524.529303][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.529335][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.529356][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.529380][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.529406][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.529423][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.529440][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.529456][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.529472][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.529513][ T8311] [ 524.561298][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.561312][ T8311] BUG at mt_find:6473 (1) [ 524.561322][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.561334][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.561472][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.561596][ T8311] 0-536866815: 0000000000000000 [ 524.561608][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.561621][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.561634][ T8311] 553635840-553639935: 0000000000000000 [ 524.561646][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.561658][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.561671][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.561689][ T8311] 553652224-116813594623: 0000000000000000 [ 524.561701][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.561714][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.561727][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.561740][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.561753][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.561766][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.561896][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.561909][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.561922][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.561935][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.561948][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.561961][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.561973][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.561986][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.561999][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.562013][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.562025][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.562039][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.562052][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.562064][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.562077][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.562201][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.562214][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.562228][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.562241][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.562254][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.562267][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.562285][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.562309][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.586954][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.586983][ T8311] Pass: 10719335 Run:10719496 [ 524.586998][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.587023][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.587038][ T8311] Call Trace: [ 524.587046][ T8311] [ 524.587056][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.587098][ T8311] mt_find.cold+0x8b/0x90 [ 524.587136][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.587182][ T8311] find_vma+0x10c/0x1b0 [ 524.587209][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.587240][ T8311] ? walk_page_test+0x78/0x180 [ 524.587276][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.587313][ T8311] ? __walk_page_range+0x780/0x780 [ 524.587366][ T8311] mlock_fixup+0x650/0x810 [ 524.587417][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.587459][ T8311] ? mlock_fixup+0x810/0x810 [ 524.587508][ T8311] ? do_futex+0x132/0x360 [ 524.587552][ T8311] do_mlock+0x25a/0x6d0 [ 524.587589][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.587620][ T8311] ? folio_evictable+0x270/0x270 [ 524.587684][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.587725][ T8311] do_syscall_64+0x39/0xb0 [ 524.587762][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.587792][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.587812][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.587834][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.587860][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.587876][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.587892][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.587908][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.587923][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.587964][ T8311] [ 524.588053][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.588068][ T8311] BUG at mt_find:6473 (1) [ 524.588082][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.588102][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.588340][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.588560][ T8311] 0-536866815: 0000000000000000 [ 524.588582][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.588604][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.588626][ T8311] 553635840-553639935: 0000000000000000 [ 524.588648][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.588670][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.588699][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.588721][ T8311] 553652224-116813594623: 0000000000000000 [ 524.588744][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.588767][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.588790][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.588813][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.588835][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.588859][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.594122][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.594153][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.594174][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.594197][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.594219][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.594242][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.594264][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.594288][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.594313][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.594337][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.594361][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.594385][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.594410][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.594434][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.594459][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.594695][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.594720][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.594744][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.594769][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.594793][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.594818][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.594842][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.594866][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.594891][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.594934][ T8311] Pass: 10719337 Run:10719499 [ 524.594949][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.594975][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.594990][ T8311] Call Trace: [ 524.594999][ T8311] [ 524.595010][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.595051][ T8311] mt_find.cold+0x8b/0x90 [ 524.595091][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.595140][ T8311] find_vma+0x10c/0x1b0 [ 524.595172][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.595205][ T8311] ? walk_page_test+0x78/0x180 [ 524.595243][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.595283][ T8311] ? __walk_page_range+0x780/0x780 [ 524.595341][ T8311] mlock_fixup+0x650/0x810 [ 524.595396][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.595442][ T8311] ? mlock_fixup+0x810/0x810 [ 524.595494][ T8311] ? do_futex+0x132/0x360 [ 524.595539][ T8311] do_mlock+0x25a/0x6d0 [ 524.595578][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.595611][ T8311] ? folio_evictable+0x270/0x270 [ 524.595680][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.595723][ T8311] do_syscall_64+0x39/0xb0 [ 524.595764][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.595795][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.595816][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.595839][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.595865][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.595883][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.595899][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.595915][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.595931][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.595972][ T8311] [ 524.622037][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.622051][ T8311] BUG at mt_find:6473 (1) [ 524.622061][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.622074][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.622214][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.622339][ T8311] 0-536866815: 0000000000000000 [ 524.622352][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.622364][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.622377][ T8311] 553635840-553639935: 0000000000000000 [ 524.622389][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.622402][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.622415][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.622427][ T8311] 553652224-116813594623: 0000000000000000 [ 524.622440][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.622453][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.622466][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.622479][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.622491][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.622505][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.622633][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.622646][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.622660][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.622678][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.622691][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.622704][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.622717][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.622730][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.622743][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.628855][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.628877][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.628891][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.628904][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.628917][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.628931][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.629057][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.629070][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.629084][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.629097][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.629110][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.629124][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.629137][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.629150][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.629163][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.629179][ T8311] Pass: 10719590 Run:10719753 [ 524.629188][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.629203][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.629211][ T8311] Call Trace: [ 524.629216][ T8311] [ 524.629223][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.629248][ T8311] mt_find.cold+0x8b/0x90 [ 524.629269][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.629294][ T8311] find_vma+0x10c/0x1b0 [ 524.629311][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.629328][ T8311] ? walk_page_test+0x78/0x180 [ 524.629348][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.629369][ T8311] ? __walk_page_range+0x780/0x780 [ 524.629398][ T8311] mlock_fixup+0x650/0x810 [ 524.629426][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.629449][ T8311] ? mlock_fixup+0x810/0x810 [ 524.629476][ T8311] ? do_futex+0x132/0x360 [ 524.629499][ T8311] do_mlock+0x25a/0x6d0 [ 524.629519][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.629538][ T8311] ? folio_evictable+0x270/0x270 [ 524.629569][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.629591][ T8311] do_syscall_64+0x39/0xb0 [ 524.629612][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.629629][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.629642][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.629655][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.629674][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.629684][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.629693][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.629702][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.629711][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.629731][ T8311] [ 524.629742][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.629750][ T8311] BUG at mt_find:6473 (1) [ 524.629758][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.629770][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.640070][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.640200][ T8311] 0-536866815: 0000000000000000 [ 524.640212][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.640225][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.640238][ T8311] 553635840-553639935: 0000000000000000 [ 524.640250][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.640263][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.640275][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.640288][ T8311] 553652224-116813594623: 0000000000000000 [ 524.640301][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.640314][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.640327][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.640340][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.640352][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.640365][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.640494][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.640507][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.640520][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.640533][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.640546][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.640559][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.640571][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.640584][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.640602][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.640625][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.697868][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.697890][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.697904][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.697917][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.697931][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.698059][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.698072][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.698086][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.698099][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.698113][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.698126][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.698139][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.698152][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.698168][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.698181][ T8311] Pass: 10720474 Run:10720638 [ 524.698190][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.698206][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.698214][ T8311] Call Trace: [ 524.698219][ T8311] [ 524.698225][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.698250][ T8311] mt_find.cold+0x8b/0x90 [ 524.698271][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.698297][ T8311] find_vma+0x10c/0x1b0 [ 524.698313][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.698330][ T8311] ? walk_page_test+0x78/0x180 [ 524.698353][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.698373][ T8311] ? __walk_page_range+0x780/0x780 [ 524.698403][ T8311] mlock_fixup+0x650/0x810 [ 524.698431][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.698455][ T8311] ? mlock_fixup+0x810/0x810 [ 524.698482][ T8311] ? do_futex+0x132/0x360 [ 524.698506][ T8311] do_mlock+0x25a/0x6d0 [ 524.698526][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.698544][ T8311] ? folio_evictable+0x270/0x270 [ 524.698576][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.698598][ T8311] do_syscall_64+0x39/0xb0 [ 524.698619][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.698636][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.698649][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.698667][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.698681][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.698691][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.698701][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.698710][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.698719][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.698740][ T8311] [ 524.700182][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.700200][ T8311] BUG at mt_find:6473 (1) [ 524.700215][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.700236][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.700475][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.700709][ T8311] 0-536866815: 0000000000000000 [ 524.700732][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.700755][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.700780][ T8311] 553635840-553639935: 0000000000000000 [ 524.700802][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.700826][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.700849][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.700873][ T8311] 553652224-116813594623: 0000000000000000 [ 524.700896][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.700921][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.700945][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.702363][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.709093][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.709113][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.709246][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.709260][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.709273][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.709286][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.709299][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.709312][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.709325][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.709338][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.709352][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.709365][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.709378][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.709391][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.709404][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.709417][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.709430][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.709556][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.709570][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.709584][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.709597][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.709610][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.709624][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.709637][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.709650][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.709670][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.709683][ T8311] Pass: 10720852 Run:10721017 [ 524.709692][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.709707][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.709716][ T8311] Call Trace: [ 524.709721][ T8311] [ 524.709727][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.709751][ T8311] mt_find.cold+0x8b/0x90 [ 524.709773][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.709799][ T8311] find_vma+0x10c/0x1b0 [ 524.709815][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.709832][ T8311] ? walk_page_test+0x78/0x180 [ 524.709852][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.709873][ T8311] ? __walk_page_range+0x780/0x780 [ 524.709902][ T8311] mlock_fixup+0x650/0x810 [ 524.709932][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.709956][ T8311] ? mlock_fixup+0x810/0x810 [ 524.709982][ T8311] ? do_futex+0x132/0x360 [ 524.710009][ T8311] do_mlock+0x25a/0x6d0 [ 524.710029][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.710048][ T8311] ? folio_evictable+0x270/0x270 [ 524.710086][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.710127][ T8311] do_syscall_64+0x39/0xb0 [ 524.710164][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.710193][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.710212][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.710232][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.710258][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.710274][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.710289][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.710303][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.710319][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.710354][ T8311] [ 524.711556][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.711568][ T8311] BUG at mt_find:6473 (1) [ 524.711577][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.711589][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.711733][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.711857][ T8311] 0-536866815: 0000000000000000 [ 524.711870][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.711882][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.711895][ T8311] 553635840-553639935: 0000000000000000 [ 524.711907][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.711920][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.711933][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.711945][ T8311] 553652224-116813594623: 0000000000000000 [ 524.711958][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.711972][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.711985][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.711998][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.712011][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.712024][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.712153][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.712168][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.712182][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.712194][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.712207][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.712220][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.712233][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.712246][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.712259][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.712273][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.712286][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.712299][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.712312][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.712325][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.712345][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.727769][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.727795][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.727820][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.727841][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.727864][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.727886][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.727908][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.727931][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.727956][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.727980][ T8311] Pass: 10720949 Run:10721115 [ 524.727994][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.728019][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.728033][ T8311] Call Trace: [ 524.728041][ T8311] [ 524.728051][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.728094][ T8311] mt_find.cold+0x8b/0x90 [ 524.728131][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.728178][ T8311] find_vma+0x10c/0x1b0 [ 524.728205][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.728235][ T8311] ? walk_page_test+0x78/0x180 [ 524.728270][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.728306][ T8311] ? __walk_page_range+0x780/0x780 [ 524.728357][ T8311] mlock_fixup+0x650/0x810 [ 524.728408][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.728448][ T8311] ? mlock_fixup+0x810/0x810 [ 524.728497][ T8311] ? do_futex+0x132/0x360 [ 524.728540][ T8311] do_mlock+0x25a/0x6d0 [ 524.728578][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.728610][ T8311] ? folio_evictable+0x270/0x270 [ 524.728676][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.728716][ T8311] do_syscall_64+0x39/0xb0 [ 524.728753][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.728782][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.728803][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.728826][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.728852][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.728869][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.728886][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.728901][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.728915][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.728952][ T8311] [ 524.743299][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.743320][ T8311] BUG at mt_find:6473 (1) [ 524.743336][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.743357][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.743609][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.743847][ T8311] 0-536866815: 0000000000000000 [ 524.743870][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.743894][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.743918][ T8311] 553635840-553639935: 0000000000000000 [ 524.743941][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.743964][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.743987][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.745842][ T8311] 553652224-116813594623: 0000000000000000 [ 524.745870][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.745895][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.745918][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.745943][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.745966][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.745991][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.747633][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.747669][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.747693][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.747718][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.747743][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.747767][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.747792][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.747816][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.747841][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.747866][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.807183][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.807207][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.807221][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.807234][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.807248][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.807373][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.807386][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.807399][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.807413][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.807426][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.807439][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.807452][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.807465][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.807478][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.807491][ T8311] Pass: 10722548 Run:10722715 [ 524.807500][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.807516][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.807525][ T8311] Call Trace: [ 524.807531][ T8311] [ 524.807537][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.807562][ T8311] mt_find.cold+0x8b/0x90 [ 524.807583][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.807609][ T8311] find_vma+0x10c/0x1b0 [ 524.807625][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.807643][ T8311] ? walk_page_test+0x78/0x180 [ 524.807668][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.807689][ T8311] ? __walk_page_range+0x780/0x780 [ 524.807719][ T8311] mlock_fixup+0x650/0x810 [ 524.807747][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.807771][ T8311] ? mlock_fixup+0x810/0x810 [ 524.807798][ T8311] ? do_futex+0x132/0x360 [ 524.807822][ T8311] do_mlock+0x25a/0x6d0 [ 524.807842][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.807860][ T8311] ? folio_evictable+0x270/0x270 [ 524.807892][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.807915][ T8311] do_syscall_64+0x39/0xb0 [ 524.807935][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.807953][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.807967][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.807980][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.807995][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.808005][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.808015][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.808024][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.808033][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.808054][ T8311] [ 524.811239][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.811258][ T8311] BUG at mt_find:6473 (1) [ 524.811272][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.811294][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.812855][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.812981][ T8311] 0-536866815: 0000000000000000 [ 524.812993][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.813007][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.813019][ T8311] 553635840-553639935: 0000000000000000 [ 524.813032][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.813045][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.813058][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.813071][ T8311] 553652224-116813594623: 0000000000000000 [ 524.813084][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.813097][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.813110][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.813123][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.813135][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.813149][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.813278][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.813292][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.813305][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.813318][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.813332][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.813345][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.813358][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.813371][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.813385][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.813398][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.813411][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.813424][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.813438][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.813451][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.813464][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.813587][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.813600][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.813614][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.820020][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.820050][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.820077][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.820099][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.820121][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.820145][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.820169][ T8311] Pass: 10722750 Run:10722918 [ 524.820181][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.820208][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.820223][ T8311] Call Trace: [ 524.820233][ T8311] [ 524.820243][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.820281][ T8311] mt_find.cold+0x8b/0x90 [ 524.820321][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.820370][ T8311] find_vma+0x10c/0x1b0 [ 524.820398][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.820431][ T8311] ? walk_page_test+0x78/0x180 [ 524.820468][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.820507][ T8311] ? __walk_page_range+0x780/0x780 [ 524.820563][ T8311] mlock_fixup+0x650/0x810 [ 524.820615][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.820666][ T8311] ? mlock_fixup+0x810/0x810 [ 524.820719][ T8311] ? do_futex+0x132/0x360 [ 524.820762][ T8311] do_mlock+0x25a/0x6d0 [ 524.820801][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.820837][ T8311] ? folio_evictable+0x270/0x270 [ 524.820898][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.820941][ T8311] do_syscall_64+0x39/0xb0 [ 524.820979][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.821011][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.821033][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.821057][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.821084][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.821102][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.821119][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.821136][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.821152][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.821189][ T8311] [ 524.837791][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.837811][ T8311] BUG at mt_find:6473 (1) [ 524.837828][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.837850][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.838089][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.838297][ T8311] 0-536866815: 0000000000000000 [ 524.838318][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.838340][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.838362][ T8311] 553635840-553639935: 0000000000000000 [ 524.838385][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.838408][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.838431][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.838453][ T8311] 553652224-116813594623: 0000000000000000 [ 524.838475][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.838500][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.838521][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.838545][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.838568][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.841121][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.841256][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.841269][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.841282][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.841295][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.841309][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.841322][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.841335][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.841348][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.841362][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.841375][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.841388][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.841401][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.841414][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.841427][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.841441][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.841564][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.841577][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.841590][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.841604][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.841617][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.841630][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.841643][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.841662][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.841675][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.841688][ T8311] Pass: 10723164 Run:10723333 [ 524.841697][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.841713][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.841721][ T8311] Call Trace: [ 524.841727][ T8311] [ 524.841733][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.841758][ T8311] mt_find.cold+0x8b/0x90 [ 524.841779][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.841805][ T8311] find_vma+0x10c/0x1b0 [ 524.841822][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.841839][ T8311] ? walk_page_test+0x78/0x180 [ 524.841859][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.841880][ T8311] ? __walk_page_range+0x780/0x780 [ 524.841910][ T8311] mlock_fixup+0x650/0x810 [ 524.841938][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.841964][ T8311] ? mlock_fixup+0x810/0x810 [ 524.841991][ T8311] ? do_futex+0x132/0x360 [ 524.842014][ T8311] do_mlock+0x25a/0x6d0 [ 524.842035][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.842053][ T8311] ? folio_evictable+0x270/0x270 [ 524.842084][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.842107][ T8311] do_syscall_64+0x39/0xb0 [ 524.842128][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.842146][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.842160][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.842174][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.842189][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.842199][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.842208][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.842217][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.842226][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.842247][ T8311] [ 524.843598][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.843614][ T8311] BUG at mt_find:6473 (1) [ 524.843628][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.843654][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.843889][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.855588][ T8311] 0-536866815: 0000000000000000 [ 524.855613][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.855633][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.855661][ T8311] 553635840-553639935: 0000000000000000 [ 524.855682][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.855707][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.855731][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.855754][ T8311] 553652224-116813594623: 0000000000000000 [ 524.855778][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.855803][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.855825][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.855849][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.855873][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.855898][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.856127][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.856151][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.856171][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.856194][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.856214][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.856235][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.856257][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.856279][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.856301][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.856322][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.856344][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.856366][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.856390][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.858962][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.858985][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.859110][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.859123][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.859137][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.859152][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.859165][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.859178][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.859191][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.859204][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.859218][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.859231][ T8311] Pass: 10723393 Run:10723563 [ 524.859240][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.859255][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.859264][ T8311] Call Trace: [ 524.859269][ T8311] [ 524.859275][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.859300][ T8311] mt_find.cold+0x8b/0x90 [ 524.859321][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.859347][ T8311] find_vma+0x10c/0x1b0 [ 524.859363][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.859381][ T8311] ? walk_page_test+0x78/0x180 [ 524.859401][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.859422][ T8311] ? __walk_page_range+0x780/0x780 [ 524.859451][ T8311] mlock_fixup+0x650/0x810 [ 524.859479][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.859503][ T8311] ? mlock_fixup+0x810/0x810 [ 524.859530][ T8311] ? do_futex+0x132/0x360 [ 524.859553][ T8311] do_mlock+0x25a/0x6d0 [ 524.859574][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.859592][ T8311] ? folio_evictable+0x270/0x270 [ 524.859625][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.859653][ T8311] do_syscall_64+0x39/0xb0 [ 524.859674][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.859692][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.859704][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.859718][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.859733][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.859743][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.859752][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.859762][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.859770][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.859791][ T8311] [ 524.896853][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.896878][ T8311] BUG at mt_find:6473 (1) [ 524.896889][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.896903][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.897041][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.897165][ T8311] 0-536866815: 0000000000000000 [ 524.897177][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.897190][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.897203][ T8311] 553635840-553639935: 0000000000000000 [ 524.897216][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.897229][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.897242][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.897254][ T8311] 553652224-116813594623: 0000000000000000 [ 524.897267][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.897280][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.897293][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.897307][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.897319][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.897333][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.897461][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.897474][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.897487][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.897501][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.897514][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.897527][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.897540][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.897553][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.897567][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.897580][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.897593][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.897606][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.897619][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.897632][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.897651][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.899245][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.899260][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.899273][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.899287][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.899300][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.899313][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.899326][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.899340][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.899353][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.899366][ T8311] Pass: 10724071 Run:10724242 [ 524.899375][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.899390][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.899399][ T8311] Call Trace: [ 524.899404][ T8311] [ 524.899411][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.899435][ T8311] mt_find.cold+0x8b/0x90 [ 524.899456][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.899482][ T8311] find_vma+0x10c/0x1b0 [ 524.899499][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.899514][ T8311] ? walk_page_test+0x1b/0x180 [ 524.899532][ T8311] ? walk_page_test+0x78/0x180 [ 524.899552][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.899573][ T8311] ? __walk_page_range+0x780/0x780 [ 524.899602][ T8311] mlock_fixup+0x650/0x810 [ 524.899631][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.899661][ T8311] ? mlock_fixup+0x810/0x810 [ 524.899688][ T8311] ? do_futex+0x132/0x360 [ 524.899712][ T8311] do_mlock+0x25a/0x6d0 [ 524.899732][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.899751][ T8311] ? folio_evictable+0x270/0x270 [ 524.899782][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.899805][ T8311] do_syscall_64+0x39/0xb0 [ 524.899826][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.899844][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.899856][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.899870][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.899884][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.899894][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.899903][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.899913][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.899922][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.899944][ T8311] [ 524.901386][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.901406][ T8311] BUG at mt_find:6473 (1) [ 524.901418][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.901431][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.901567][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.901696][ T8311] 0-536866815: 0000000000000000 [ 524.901708][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.901721][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.901734][ T8311] 553635840-553639935: 0000000000000000 [ 524.901747][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.901760][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.901773][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.901786][ T8311] 553652224-116813594623: 0000000000000000 [ 524.901798][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.901812][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.901824][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.901838][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.901851][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.901864][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.901992][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.902005][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.902019][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.902032][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.902045][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.902059][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.902072][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.902085][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.902098][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.902111][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.902124][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.902137][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.902150][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.902163][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.902177][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.902618][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.902639][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.902670][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.902694][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.902717][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.902738][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.902762][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.902787][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.902812][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.902836][ T8311] Pass: 10724247 Run:10724419 [ 524.902850][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.902878][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.902892][ T8311] Call Trace: [ 524.902900][ T8311] [ 524.902910][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.902949][ T8311] mt_find.cold+0x8b/0x90 [ 524.902988][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.903036][ T8311] find_vma+0x10c/0x1b0 [ 524.903065][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.903094][ T8311] ? walk_page_test+0x1b/0x180 [ 524.903126][ T8311] ? walk_page_test+0x78/0x180 [ 524.903159][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.903197][ T8311] ? __walk_page_range+0x780/0x780 [ 524.903253][ T8311] mlock_fixup+0x650/0x810 [ 524.903304][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.903354][ T8311] ? mlock_fixup+0x810/0x810 [ 524.903404][ T8311] ? do_futex+0x132/0x360 [ 524.903449][ T8311] do_mlock+0x25a/0x6d0 [ 524.903487][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.903520][ T8311] ? folio_evictable+0x270/0x270 [ 524.903581][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.903622][ T8311] do_syscall_64+0x39/0xb0 [ 524.903665][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.903695][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.903713][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.903735][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.903756][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.903773][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.903788][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.903804][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.903819][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.903858][ T8311] [ 524.925888][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.925912][ T8311] BUG at mt_find:6473 (1) [ 524.925929][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.925951][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.926202][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.926431][ T8311] 0-536866815: 0000000000000000 [ 524.926453][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.926478][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.926502][ T8311] 553635840-553639935: 0000000000000000 [ 524.926525][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.926549][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.926573][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.926597][ T8311] 553652224-116813594623: 0000000000000000 [ 524.926620][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.926651][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.926675][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.926699][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.926723][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.926748][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.930506][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.930521][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.930535][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.930548][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.930561][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.930574][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.930588][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.930601][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.930615][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.930628][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.930646][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.930660][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.930673][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.930686][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.930699][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.930824][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.930837][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.930850][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.930864][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.930876][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.930890][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.930903][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.930916][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.930929][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.930942][ T8311] Pass: 10724584 Run:10724757 [ 524.930951][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.930967][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.930975][ T8311] Call Trace: [ 524.930981][ T8311] [ 524.930987][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.931012][ T8311] mt_find.cold+0x8b/0x90 [ 524.931034][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.931060][ T8311] find_vma+0x10c/0x1b0 [ 524.931076][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.931092][ T8311] ? walk_page_test+0x1b/0x180 [ 524.931110][ T8311] ? walk_page_test+0x78/0x180 [ 524.931130][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.931151][ T8311] ? __walk_page_range+0x780/0x780 [ 524.931180][ T8311] mlock_fixup+0x650/0x810 [ 524.931210][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.931234][ T8311] ? mlock_fixup+0x810/0x810 [ 524.931260][ T8311] ? do_futex+0x132/0x360 [ 524.931284][ T8311] do_mlock+0x25a/0x6d0 [ 524.931304][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.931322][ T8311] ? folio_evictable+0x270/0x270 [ 524.931354][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.931376][ T8311] do_syscall_64+0x39/0xb0 [ 524.931397][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.931415][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.931427][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.931441][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.931455][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.931465][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.931475][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.931484][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.931493][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.931514][ T8311] [ 524.932897][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.932914][ T8311] BUG at mt_find:6473 (1) [ 524.932928][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.932949][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.933842][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.941557][ T8311] 0-536866815: 0000000000000000 [ 524.941583][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.941608][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.941632][ T8311] 553635840-553639935: 0000000000000000 [ 524.941661][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.941685][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.941710][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.941733][ T8311] 553652224-116813594623: 0000000000000000 [ 524.941757][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.941782][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.941805][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.941830][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.941854][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.941879][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.942115][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.970310][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.970347][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.970373][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.970399][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.970424][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.970449][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.970473][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.970498][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.970522][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.970547][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.970572][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.970597][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.970621][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.970652][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.970884][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.970908][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.970933][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.970958][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.970982][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.971007][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.972393][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.972425][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.972449][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.972473][ T8311] Pass: 10725197 Run:10725371 [ 524.972485][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.972511][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.972525][ T8311] Call Trace: [ 524.972534][ T8311] [ 524.972545][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.972585][ T8311] mt_find.cold+0x8b/0x90 [ 524.972626][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.972678][ T8311] find_vma+0x10c/0x1b0 [ 524.972707][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.972736][ T8311] ? walk_page_test+0x1b/0x180 [ 524.972770][ T8311] ? walk_page_test+0x78/0x180 [ 524.972807][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.972844][ T8311] ? __walk_page_range+0x780/0x780 [ 524.972900][ T8311] mlock_fixup+0x650/0x810 [ 524.972953][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.972993][ T8311] ? mlock_fixup+0x810/0x810 [ 524.973043][ T8311] ? do_futex+0x132/0x360 [ 524.973088][ T8311] do_mlock+0x25a/0x6d0 [ 524.973127][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.973158][ T8311] ? folio_evictable+0x270/0x270 [ 524.973221][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.973266][ T8311] do_syscall_64+0x39/0xb0 [ 524.973305][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.973336][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.973358][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.973382][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.973408][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.973426][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.973443][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.973460][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.973477][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.973515][ T8311] [ 524.982621][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.982649][ T8311] BUG at mt_find:6473 (1) [ 524.982660][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.982673][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.982810][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.983162][ T8311] 0-536866815: 0000000000000000 [ 524.983176][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.983189][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.983202][ T8311] 553635840-553639935: 0000000000000000 [ 524.983215][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.983228][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.983241][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.983254][ T8311] 553652224-116813594623: 0000000000000000 [ 524.983266][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.983280][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.983293][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.983306][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 524.983319][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 524.983332][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 524.983460][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 524.983474][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 524.983487][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 524.988825][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 524.988854][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 524.988868][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 524.988881][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 524.988895][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 524.988908][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 524.988921][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 524.988934][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 524.988948][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 524.988961][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 524.988974][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 524.988988][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 524.989112][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 524.989125][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 524.989139][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 524.989152][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 524.989165][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 524.989178][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 524.989191][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 524.989205][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 524.989218][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 524.989231][ T8311] Pass: 10725680 Run:10725855 [ 524.989240][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 524.989255][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 524.989264][ T8311] Call Trace: [ 524.989270][ T8311] [ 524.989276][ T8311] dump_stack_lvl+0xd1/0x138 [ 524.989301][ T8311] mt_find.cold+0x8b/0x90 [ 524.989322][ T8311] ? mas_find+0x1d0/0x1d0 [ 524.989349][ T8311] find_vma+0x10c/0x1b0 [ 524.989364][ T8311] ? can_vma_merge_before+0x390/0x390 [ 524.989380][ T8311] ? walk_page_test+0x1b/0x180 [ 524.989398][ T8311] ? walk_page_test+0x78/0x180 [ 524.989418][ T8311] walk_page_range+0x2b1/0x4a0 [ 524.989439][ T8311] ? __walk_page_range+0x780/0x780 [ 524.989468][ T8311] mlock_fixup+0x650/0x810 [ 524.989496][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 524.989520][ T8311] ? mlock_fixup+0x810/0x810 [ 524.989546][ T8311] ? do_futex+0x132/0x360 [ 524.989571][ T8311] do_mlock+0x25a/0x6d0 [ 524.989591][ T8311] ? xfd_validate_state+0x5d/0x180 [ 524.989609][ T8311] ? folio_evictable+0x270/0x270 [ 524.989646][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 524.989671][ T8311] do_syscall_64+0x39/0xb0 [ 524.989692][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 524.989710][ T8311] RIP: 0033:0x7fafb788c0c9 [ 524.989722][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 524.989735][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 524.989750][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 524.989760][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 524.989769][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 524.989779][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.989788][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 524.989808][ T8311] [ 524.992353][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 524.992373][ T8311] BUG at mt_find:6473 (1) [ 524.992389][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 524.992411][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 524.992669][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 524.992900][ T8311] 0-536866815: 0000000000000000 [ 524.992923][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 524.992947][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 524.992971][ T8311] 553635840-553639935: 0000000000000000 [ 524.992994][ T8311] 553639936-553635839: ffff88805ff72d20 [ 524.993018][ T8311] 553635840-553648127: ffff8880217871c0 [ 524.993042][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 524.993066][ T8311] 553652224-116813594623: 0000000000000000 [ 524.993090][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 524.993114][ T8311] 116817788928-93825015144447: 0000000000000000 [ 524.993137][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 524.993162][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.001810][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.001832][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.001962][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.001975][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.001989][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.002002][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.002015][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.002029][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.002042][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.002056][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.002069][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.002082][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.002095][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.002108][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.002122][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.002135][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.002148][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.002271][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.002285][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.002298][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.002312][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.002325][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.002338][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.002351][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.002364][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.002378][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.002391][ T8311] Pass: 10726104 Run:10726280 [ 525.002400][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.002415][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.002424][ T8311] Call Trace: [ 525.002430][ T8311] [ 525.002436][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.002461][ T8311] mt_find.cold+0x8b/0x90 [ 525.002483][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.002509][ T8311] find_vma+0x10c/0x1b0 [ 525.002524][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.002540][ T8311] ? walk_page_test+0x1b/0x180 [ 525.002559][ T8311] ? walk_page_test+0x78/0x180 [ 525.002578][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.002599][ T8311] ? __walk_page_range+0x780/0x780 [ 525.002628][ T8311] mlock_fixup+0x650/0x810 [ 525.002664][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.002688][ T8311] ? mlock_fixup+0x810/0x810 [ 525.002714][ T8311] ? do_futex+0x132/0x360 [ 525.002738][ T8311] do_mlock+0x25a/0x6d0 [ 525.002759][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.002777][ T8311] ? folio_evictable+0x270/0x270 [ 525.002809][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.002831][ T8311] do_syscall_64+0x39/0xb0 [ 525.002852][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.002870][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.002883][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.002896][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.002911][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.002921][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.002930][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.002939][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.002948][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.002969][ T8311] [ 525.010701][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.010715][ T8311] BUG at mt_find:6473 (1) [ 525.010724][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.010738][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.010874][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.010998][ T8311] 0-536866815: 0000000000000000 [ 525.011011][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.011024][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.011037][ T8311] 553635840-553639935: 0000000000000000 [ 525.011049][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.011062][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.011075][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.011088][ T8311] 553652224-116813594623: 0000000000000000 [ 525.011100][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.011114][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.011126][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.011139][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.011152][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.011165][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.011292][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.011306][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.011319][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.011332][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.011345][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.011358][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.011371][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.011384][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.011397][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.011411][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.011424][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.011437][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.011450][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.011463][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.011476][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.022601][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.022628][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.022659][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.022684][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.022708][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.022732][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.022756][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.022781][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.022805][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.022830][ T8311] Pass: 10727097 Run:10727274 [ 525.022844][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.022870][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.022887][ T8311] Call Trace: [ 525.022896][ T8311] [ 525.022907][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.022949][ T8311] mt_find.cold+0x8b/0x90 [ 525.022990][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.023040][ T8311] find_vma+0x10c/0x1b0 [ 525.023069][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.023098][ T8311] ? walk_page_test+0x1b/0x180 [ 525.023132][ T8311] ? walk_page_test+0x78/0x180 [ 525.023169][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.023210][ T8311] ? __walk_page_range+0x780/0x780 [ 525.023268][ T8311] mlock_fixup+0x650/0x810 [ 525.023327][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.023373][ T8311] ? mlock_fixup+0x810/0x810 [ 525.023425][ T8311] ? do_futex+0x132/0x360 [ 525.023471][ T8311] do_mlock+0x25a/0x6d0 [ 525.023511][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.023544][ T8311] ? folio_evictable+0x270/0x270 [ 525.023609][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.023658][ T8311] do_syscall_64+0x39/0xb0 [ 525.023698][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.023729][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.023750][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.023775][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.023801][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.023819][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.023836][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.023853][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.023870][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.023911][ T8311] [ 525.036373][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.036417][ T8311] BUG at mt_find:6473 (1) [ 525.036432][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.036446][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.036583][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.036713][ T8311] 0-536866815: 0000000000000000 [ 525.036725][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.036739][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.036751][ T8311] 553635840-553639935: 0000000000000000 [ 525.036764][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.036777][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.036790][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.036803][ T8311] 553652224-116813594623: 0000000000000000 [ 525.036815][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.036829][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.036841][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.036855][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.036868][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.036881][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.037009][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.037023][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.037036][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.037050][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.037063][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.037077][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.037090][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.037103][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.037117][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.041623][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.043847][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.051287][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.051305][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.051318][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.051332][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.051458][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.051471][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.051484][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.051498][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.051511][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.051524][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.051537][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.051550][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.051564][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.051577][ T8311] Pass: 10729488 Run:10729666 [ 525.051586][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.051601][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.051610][ T8311] Call Trace: [ 525.051615][ T8311] [ 525.051621][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.051653][ T8311] mt_find.cold+0x8b/0x90 [ 525.051674][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.051700][ T8311] find_vma+0x10c/0x1b0 [ 525.051716][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.051732][ T8311] ? walk_page_test+0x1b/0x180 [ 525.051750][ T8311] ? walk_page_test+0x78/0x180 [ 525.051770][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.051791][ T8311] ? __walk_page_range+0x780/0x780 [ 525.051821][ T8311] mlock_fixup+0x650/0x810 [ 525.051849][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.051873][ T8311] ? mlock_fixup+0x810/0x810 [ 525.051899][ T8311] ? do_futex+0x132/0x360 [ 525.051923][ T8311] do_mlock+0x25a/0x6d0 [ 525.051944][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.051962][ T8311] ? folio_evictable+0x270/0x270 [ 525.051994][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.052017][ T8311] do_syscall_64+0x39/0xb0 [ 525.052037][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.052055][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.052067][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.052081][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.052096][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.052106][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.052117][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.052127][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.052136][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.052157][ T8311] [ 525.061596][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.061620][ T8311] BUG at mt_find:6473 (1) [ 525.061637][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.061650][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.061786][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.061910][ T8311] 0-536866815: 0000000000000000 [ 525.061923][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.061936][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.061949][ T8311] 553635840-553639935: 0000000000000000 [ 525.061961][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.061974][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.061987][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.062000][ T8311] 553652224-116813594623: 0000000000000000 [ 525.062013][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.062026][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.062039][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.062052][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.062065][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.062078][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.062206][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.062219][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.062232][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.076259][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.076295][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.076320][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.076345][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.076370][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.076395][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.076420][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.076444][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.076468][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.076493][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.076517][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.076542][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.076777][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.076802][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.076827][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.082657][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.082679][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.082693][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.082706][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.082719][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.082733][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.082746][ T8311] Pass: 10732294 Run:10732473 [ 525.082755][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.082771][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.082780][ T8311] Call Trace: [ 525.082785][ T8311] [ 525.082791][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.082816][ T8311] mt_find.cold+0x8b/0x90 [ 525.082837][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.082864][ T8311] find_vma+0x10c/0x1b0 [ 525.082880][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.082895][ T8311] ? walk_page_test+0x1b/0x180 [ 525.082914][ T8311] ? walk_page_test+0x78/0x180 [ 525.082934][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.082954][ T8311] ? __walk_page_range+0x780/0x780 [ 525.082984][ T8311] mlock_fixup+0x650/0x810 [ 525.083012][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.083036][ T8311] ? mlock_fixup+0x810/0x810 [ 525.083062][ T8311] ? do_futex+0x132/0x360 [ 525.083086][ T8311] do_mlock+0x25a/0x6d0 [ 525.083107][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.083125][ T8311] ? folio_evictable+0x270/0x270 [ 525.083156][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.083179][ T8311] do_syscall_64+0x39/0xb0 [ 525.083200][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.083217][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.083230][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.083244][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.083259][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.083269][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.083278][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.083288][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.083297][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.083317][ T8311] [ 525.083328][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.083336][ T8311] BUG at mt_find:6473 (1) [ 525.083344][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.083355][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.083490][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.093416][ T8311] 0-536866815: 0000000000000000 [ 525.093431][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.093444][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.093458][ T8311] 553635840-553639935: 0000000000000000 [ 525.093470][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.093483][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.093497][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.093510][ T8311] 553652224-116813594623: 0000000000000000 [ 525.093522][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.093535][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.093548][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.093561][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.093574][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.093588][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.093721][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.093735][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.093748][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.093761][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.093774][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.093788][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.093801][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.093814][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.093828][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.093841][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.093854][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.093867][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.093880][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.093893][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.093906][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.100470][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.100486][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.100500][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.100513][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.100526][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.100540][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.100553][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.100567][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.100580][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.100593][ T8311] Pass: 10732534 Run:10732714 [ 525.100602][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.100618][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.100632][ T8311] Call Trace: [ 525.100637][ T8311] [ 525.100643][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.100668][ T8311] mt_find.cold+0x8b/0x90 [ 525.100689][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.100715][ T8311] find_vma+0x10c/0x1b0 [ 525.100731][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.100747][ T8311] ? walk_page_test+0x1b/0x180 [ 525.100765][ T8311] ? walk_page_test+0x78/0x180 [ 525.100785][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.100806][ T8311] ? __walk_page_range+0x780/0x780 [ 525.100835][ T8311] mlock_fixup+0x650/0x810 [ 525.100864][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.100888][ T8311] ? mlock_fixup+0x810/0x810 [ 525.100914][ T8311] ? do_futex+0x132/0x360 [ 525.100939][ T8311] do_mlock+0x25a/0x6d0 [ 525.100959][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.100977][ T8311] ? folio_evictable+0x270/0x270 [ 525.101009][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.101031][ T8311] do_syscall_64+0x39/0xb0 [ 525.101052][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.101070][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.101083][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.101096][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.101111][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.101121][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.101130][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.101139][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.101149][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.101169][ T8311] [ 525.101180][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.101187][ T8311] BUG at mt_find:6473 (1) [ 525.101195][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.101207][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.110326][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.110454][ T8311] 0-536866815: 0000000000000000 [ 525.110467][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.110480][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.110493][ T8311] 553635840-553639935: 0000000000000000 [ 525.110506][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.110519][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.110532][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.110544][ T8311] 553652224-116813594623: 0000000000000000 [ 525.110557][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.110570][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.110583][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.110596][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.110609][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.110628][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.110756][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.110769][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.110783][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.110796][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.110810][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.110823][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.110836][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.110850][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.110863][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.110876][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.110889][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.110903][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.110915][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.110928][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.110941][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.111066][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.111079][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.111092][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.111105][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.111118][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.117856][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.117884][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.117910][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.117935][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.117959][ T8311] Pass: 10732591 Run:10732772 [ 525.117974][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.118002][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.118018][ T8311] Call Trace: [ 525.118027][ T8311] [ 525.118037][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.118080][ T8311] mt_find.cold+0x8b/0x90 [ 525.118120][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.118169][ T8311] find_vma+0x10c/0x1b0 [ 525.118198][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.118227][ T8311] ? walk_page_test+0x1b/0x180 [ 525.118262][ T8311] ? walk_page_test+0x78/0x180 [ 525.118301][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.118341][ T8311] ? __walk_page_range+0x780/0x780 [ 525.118400][ T8311] mlock_fixup+0x650/0x810 [ 525.118455][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.118500][ T8311] ? mlock_fixup+0x810/0x810 [ 525.118552][ T8311] ? do_futex+0x132/0x360 [ 525.118597][ T8311] do_mlock+0x25a/0x6d0 [ 525.118643][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.118675][ T8311] ? folio_evictable+0x270/0x270 [ 525.118741][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.118784][ T8311] do_syscall_64+0x39/0xb0 [ 525.118824][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.118855][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.118876][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.118901][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.118927][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.118945][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.118963][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.118980][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.118996][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.119037][ T8311] [ 525.136728][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.136751][ T8311] BUG at mt_find:6473 (1) [ 525.136763][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.136776][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.136913][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.137038][ T8311] 0-536866815: 0000000000000000 [ 525.137051][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.137064][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.137077][ T8311] 553635840-553639935: 0000000000000000 [ 525.140180][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.140200][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.140213][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.140226][ T8311] 553652224-116813594623: 0000000000000000 [ 525.140239][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.140252][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.140265][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.140278][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.140291][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.140305][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.141759][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.141786][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.141811][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.141835][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.141860][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.141885][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.141910][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.141934][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.141958][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.141983][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.142008][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.142032][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.142056][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.142080][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.142104][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.150130][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.150145][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.150159][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.150172][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.150185][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.150198][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.150212][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.150225][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.150238][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.150252][ T8311] Pass: 10733294 Run:10733476 [ 525.150261][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.150276][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.150285][ T8311] Call Trace: [ 525.150290][ T8311] [ 525.150297][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.150321][ T8311] mt_find.cold+0x8b/0x90 [ 525.150342][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.150368][ T8311] find_vma+0x10c/0x1b0 [ 525.150384][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.150400][ T8311] ? walk_page_test+0x1b/0x180 [ 525.150418][ T8311] ? walk_page_test+0x78/0x180 [ 525.150438][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.150459][ T8311] ? __walk_page_range+0x780/0x780 [ 525.150488][ T8311] mlock_fixup+0x650/0x810 [ 525.150516][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.150539][ T8311] ? mlock_fixup+0x810/0x810 [ 525.150566][ T8311] ? do_futex+0x132/0x360 [ 525.150590][ T8311] do_mlock+0x25a/0x6d0 [ 525.150610][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.150634][ T8311] ? folio_evictable+0x270/0x270 [ 525.150666][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.150688][ T8311] do_syscall_64+0x39/0xb0 [ 525.150708][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.150726][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.150739][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.150753][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.150767][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.150777][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.150787][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.150796][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.150805][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.150826][ T8311] [ 525.157680][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.157739][ T8311] BUG at mt_find:6473 (1) [ 525.157751][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.157763][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.157900][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.162047][ T8311] 0-536866815: 0000000000000000 [ 525.162073][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.162096][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.162120][ T8311] 553635840-553639935: 0000000000000000 [ 525.162143][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.162167][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.162191][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.162214][ T8311] 553652224-116813594623: 0000000000000000 [ 525.162237][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.162262][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.162285][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.162309][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.162333][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.162357][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.168734][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.168750][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.168764][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.168777][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.168791][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.168804][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.168817][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.168830][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.168843][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.168857][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.168870][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.168883][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.168896][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.168909][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.168922][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.169048][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.169061][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.169075][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.169088][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.169101][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.169114][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.169127][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.169141][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.169154][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.169167][ T8311] Pass: 10734096 Run:10734279 [ 525.169176][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.169191][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.169200][ T8311] Call Trace: [ 525.169205][ T8311] [ 525.169211][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.169236][ T8311] mt_find.cold+0x8b/0x90 [ 525.169257][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.169284][ T8311] find_vma+0x10c/0x1b0 [ 525.169299][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.169315][ T8311] ? walk_page_test+0x1b/0x180 [ 525.169336][ T8311] ? walk_page_test+0x78/0x180 [ 525.169355][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.169376][ T8311] ? __walk_page_range+0x780/0x780 [ 525.169405][ T8311] mlock_fixup+0x650/0x810 [ 525.169433][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.169457][ T8311] ? mlock_fixup+0x810/0x810 [ 525.169483][ T8311] ? do_futex+0x132/0x360 [ 525.169507][ T8311] do_mlock+0x25a/0x6d0 [ 525.169528][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.169546][ T8311] ? folio_evictable+0x270/0x270 [ 525.169577][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.169600][ T8311] do_syscall_64+0x39/0xb0 [ 525.169625][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.169643][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.169656][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.169669][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.169684][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.169694][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.169703][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.169713][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.169722][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.169742][ T8311] [ 525.180496][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.181550][ T8311] BUG at mt_find:6473 (1) [ 525.181562][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.181575][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.181717][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.181844][ T8311] 0-536866815: 0000000000000000 [ 525.181856][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.181869][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.181882][ T8311] 553635840-553639935: 0000000000000000 [ 525.181895][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.181908][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.181921][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.181934][ T8311] 553652224-116813594623: 0000000000000000 [ 525.181946][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.181959][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.181972][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.181985][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.181997][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.182011][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.182139][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.182152][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.182165][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.182179][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.182192][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.182205][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.182219][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.182232][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.182245][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.182258][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.182271][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.182284][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.182297][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.182310][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.182323][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.190534][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.190550][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.190563][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.190577][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.190590][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.190604][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.190623][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.190637][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.190650][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.190664][ T8311] Pass: 10735861 Run:10736045 [ 525.190673][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.190688][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.190697][ T8311] Call Trace: [ 525.190703][ T8311] [ 525.190709][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.190734][ T8311] mt_find.cold+0x8b/0x90 [ 525.190756][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.190782][ T8311] find_vma+0x10c/0x1b0 [ 525.190798][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.190814][ T8311] ? walk_page_test+0x1b/0x180 [ 525.190832][ T8311] ? walk_page_test+0x78/0x180 [ 525.190852][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.190873][ T8311] ? __walk_page_range+0x780/0x780 [ 525.190902][ T8311] mlock_fixup+0x650/0x810 [ 525.190930][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.190954][ T8311] ? mlock_fixup+0x810/0x810 [ 525.190980][ T8311] ? do_futex+0x132/0x360 [ 525.191004][ T8311] do_mlock+0x25a/0x6d0 [ 525.191024][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.191042][ T8311] ? folio_evictable+0x270/0x270 [ 525.191073][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.191096][ T8311] do_syscall_64+0x39/0xb0 [ 525.191117][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.191134][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.191147][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.191161][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.191175][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.191185][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.191195][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.191204][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.191213][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.191233][ T8311] [ 525.191244][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.191252][ T8311] BUG at mt_find:6473 (1) [ 525.191260][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.191272][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.201132][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.201370][ T8311] 0-536866815: 0000000000000000 [ 525.201393][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.201417][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.201441][ T8311] 553635840-553639935: 0000000000000000 [ 525.201465][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.201489][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.201513][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.201537][ T8311] 553652224-116813594623: 0000000000000000 [ 525.201560][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.201584][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.201607][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.201638][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.201662][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.201687][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.207469][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.207484][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.207498][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.207511][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.207525][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.207538][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.207552][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.207565][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.207578][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.207592][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.207604][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.207623][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.207636][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.207649][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.207662][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.207787][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.207801][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.207814][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.207828][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.207841][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.207854][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.207867][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.207880][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.207894][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.207907][ T8311] Pass: 10737241 Run:10737426 [ 525.207916][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.207931][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.207940][ T8311] Call Trace: [ 525.207945][ T8311] [ 525.207952][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.207977][ T8311] mt_find.cold+0x8b/0x90 [ 525.207999][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.208025][ T8311] find_vma+0x10c/0x1b0 [ 525.208041][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.208056][ T8311] ? walk_page_test+0x1b/0x180 [ 525.208075][ T8311] ? walk_page_test+0x78/0x180 [ 525.208095][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.208116][ T8311] ? __walk_page_range+0x780/0x780 [ 525.208145][ T8311] mlock_fixup+0x650/0x810 [ 525.208174][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.208197][ T8311] ? mlock_fixup+0x810/0x810 [ 525.208224][ T8311] ? do_futex+0x132/0x360 [ 525.208248][ T8311] do_mlock+0x25a/0x6d0 [ 525.208270][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.208288][ T8311] ? folio_evictable+0x270/0x270 [ 525.208320][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.208343][ T8311] do_syscall_64+0x39/0xb0 [ 525.208364][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.208382][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.208395][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.208409][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.208423][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.208434][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.208443][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.208453][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.208461][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.208482][ T8311] [ 525.220691][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.220712][ T8311] BUG at mt_find:6473 (1) [ 525.220722][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.220735][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.220871][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.220997][ T8311] 0-536866815: 0000000000000000 [ 525.221009][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.221022][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.221035][ T8311] 553635840-553639935: 0000000000000000 [ 525.221048][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.221061][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.221074][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.221086][ T8311] 553652224-116813594623: 0000000000000000 [ 525.221099][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.221112][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.221125][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.221138][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.221151][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.221164][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.221293][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.221306][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.221320][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.221333][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.221346][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.221359][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.221373][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.221387][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.221400][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.221413][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.221426][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.221439][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.221452][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.221465][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.221478][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.230003][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.230019][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.230032][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.230046][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.230059][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.230072][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.230085][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.230099][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.230112][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.230126][ T8311] Pass: 10739061 Run:10739247 [ 525.230135][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.230150][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.230159][ T8311] Call Trace: [ 525.230164][ T8311] [ 525.230170][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.230195][ T8311] mt_find.cold+0x8b/0x90 [ 525.230217][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.230243][ T8311] find_vma+0x10c/0x1b0 [ 525.230259][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.230274][ T8311] ? walk_page_test+0x1b/0x180 [ 525.230293][ T8311] ? walk_page_test+0x78/0x180 [ 525.230312][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.230333][ T8311] ? __walk_page_range+0x780/0x780 [ 525.230363][ T8311] mlock_fixup+0x650/0x810 [ 525.230391][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.230414][ T8311] ? mlock_fixup+0x810/0x810 [ 525.230441][ T8311] ? do_futex+0x132/0x360 [ 525.230464][ T8311] do_mlock+0x25a/0x6d0 [ 525.230485][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.230503][ T8311] ? folio_evictable+0x270/0x270 [ 525.230535][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.230557][ T8311] do_syscall_64+0x39/0xb0 [ 525.230578][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.230596][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.230608][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.230628][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.230643][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.230653][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.230663][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.230672][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.230680][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.230701][ T8311] [ 525.230710][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.230718][ T8311] BUG at mt_find:6473 (1) [ 525.230726][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.230738][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.241010][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.241139][ T8311] 0-536866815: 0000000000000000 [ 525.241152][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.241165][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.241178][ T8311] 553635840-553639935: 0000000000000000 [ 525.241191][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.241204][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.241217][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.241229][ T8311] 553652224-116813594623: 0000000000000000 [ 525.241242][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.241255][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.241267][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.241280][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.241293][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.241306][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.241435][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.241449][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.241462][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.241475][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.241489][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.241502][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.241515][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.241528][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.241541][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.241554][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.241567][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.241580][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.241593][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.241606][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.241624][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.249405][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.249425][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.249439][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.249453][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.249467][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.249480][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.249493][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.249507][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.249520][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.249534][ T8311] Pass: 10740677 Run:10740864 [ 525.249543][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.249558][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.249567][ T8311] Call Trace: [ 525.249572][ T8311] [ 525.249578][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.249603][ T8311] mt_find.cold+0x8b/0x90 [ 525.249630][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.249656][ T8311] find_vma+0x10c/0x1b0 [ 525.249671][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.249687][ T8311] ? walk_page_test+0x1b/0x180 [ 525.249706][ T8311] ? walk_page_test+0x78/0x180 [ 525.249725][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.249746][ T8311] ? __walk_page_range+0x780/0x780 [ 525.249775][ T8311] mlock_fixup+0x650/0x810 [ 525.249803][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.249827][ T8311] ? mlock_fixup+0x810/0x810 [ 525.249853][ T8311] ? do_futex+0x132/0x360 [ 525.249877][ T8311] do_mlock+0x25a/0x6d0 [ 525.249897][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.249915][ T8311] ? folio_evictable+0x270/0x270 [ 525.249947][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.249969][ T8311] do_syscall_64+0x39/0xb0 [ 525.249990][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.250008][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.250020][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.250034][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.250049][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.250059][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.250069][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.250077][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.250086][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.250107][ T8311] [ 525.250117][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.250124][ T8311] BUG at mt_find:6473 (1) [ 525.250133][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.250144][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.257715][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.257845][ T8311] 0-536866815: 0000000000000000 [ 525.257858][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.257871][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.257884][ T8311] 553635840-553639935: 0000000000000000 [ 525.257896][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.257909][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.257922][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.257935][ T8311] 553652224-116813594623: 0000000000000000 [ 525.257947][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.257960][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.257973][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.257986][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.257998][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.258011][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.258140][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.258153][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.258167][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.258180][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.258193][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.258206][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.258220][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.258233][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.258246][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.258259][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.258271][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.258284][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.258297][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.258310][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.258323][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.258447][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.258460][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.258474][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.258487][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.258500][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.258513][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.270503][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.270523][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.270537][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.270550][ T8311] Pass: 10742026 Run:10742214 [ 525.270559][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.270575][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.270584][ T8311] Call Trace: [ 525.270589][ T8311] [ 525.270595][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.270625][ T8311] mt_find.cold+0x8b/0x90 [ 525.270647][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.270673][ T8311] find_vma+0x10c/0x1b0 [ 525.270689][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.270705][ T8311] ? walk_page_test+0x1b/0x180 [ 525.270723][ T8311] ? walk_page_test+0x78/0x180 [ 525.270743][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.270764][ T8311] ? __walk_page_range+0x780/0x780 [ 525.270793][ T8311] mlock_fixup+0x650/0x810 [ 525.270821][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.270845][ T8311] ? mlock_fixup+0x810/0x810 [ 525.270871][ T8311] ? do_futex+0x132/0x360 [ 525.270895][ T8311] do_mlock+0x25a/0x6d0 [ 525.270915][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.270933][ T8311] ? folio_evictable+0x270/0x270 [ 525.270965][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.270987][ T8311] do_syscall_64+0x39/0xb0 [ 525.271008][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.271026][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.271038][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.271052][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.271067][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.271077][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.271086][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.271095][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.271104][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.271124][ T8311] [ 525.271134][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 525.271142][ T8311] BUG at mt_find:6473 (1) [ 525.271151][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 525.271162][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 525.271298][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 525.280064][ T8311] 0-536866815: 0000000000000000 [ 525.280078][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 525.280092][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 525.280105][ T8311] 553635840-553639935: 0000000000000000 [ 525.280117][ T8311] 553639936-553635839: ffff88805ff72d20 [ 525.280130][ T8311] 553635840-553648127: ffff8880217871c0 [ 525.280143][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 525.280156][ T8311] 553652224-116813594623: 0000000000000000 [ 525.280168][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 525.280181][ T8311] 116817788928-93825015144447: 0000000000000000 [ 525.280194][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 525.280207][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 525.280220][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 525.280233][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 525.280363][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 525.280377][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 525.280390][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 525.280404][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 525.280417][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 525.280431][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 525.280444][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 525.280457][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 525.280470][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 525.280484][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 525.280496][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 525.280510][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 525.280522][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 525.280535][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 525.280548][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 525.280679][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 525.280692][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 525.280705][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 525.280719][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 525.280731][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 525.280745][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 525.280758][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 525.280772][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 525.280785][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 525.280798][ T8311] Pass: 10743367 Run:10743556 [ 525.280808][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 525.280823][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 525.280835][ T8311] Call Trace: [ 525.280840][ T8311] [ 525.280847][ T8311] dump_stack_lvl+0xd1/0x138 [ 525.280872][ T8311] mt_find.cold+0x8b/0x90 [ 525.280909][ T8311] ? mas_find+0x1d0/0x1d0 [ 525.280939][ T8311] find_vma+0x10c/0x1b0 [ 525.280956][ T8311] ? can_vma_merge_before+0x390/0x390 [ 525.280977][ T8311] ? walk_page_test+0x1b/0x180 [ 525.280996][ T8311] ? walk_page_test+0x78/0x180 [ 525.281016][ T8311] walk_page_range+0x2b1/0x4a0 [ 525.281037][ T8311] ? __walk_page_range+0x780/0x780 [ 525.281066][ T8311] mlock_fixup+0x650/0x810 [ 525.281094][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 525.281118][ T8311] ? mlock_fixup+0x810/0x810 [ 525.281144][ T8311] ? do_futex+0x132/0x360 [ 525.281168][ T8311] do_mlock+0x25a/0x6d0 [ 525.281188][ T8311] ? xfd_validate_state+0x5d/0x180 [ 525.281207][ T8311] ? folio_evictable+0x270/0x270 [ 525.281238][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 525.281261][ T8311] do_syscall_64+0x39/0xb0 [ 525.281282][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 525.281300][ T8311] RIP: 0033:0x7fafb788c0c9 [ 525.281312][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 525.281326][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 525.281341][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 525.281351][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 525.281360][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 525.281369][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.281378][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 525.281398][ T8311] [ 525.304223][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 551.304079][ T8311] BUG at mt_find:6473 (1) [ 551.308484][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 551.334115][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 551.514289][ T9368] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 551.552654][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 551.632161][ T9368] CPU: 1 PID: 9368 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 551.642032][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 551.652112][ T9368] Call Trace: [ 551.655420][ T9368] [ 551.658373][ T9368] dump_stack_lvl+0xd1/0x138 [ 551.663024][ T9368] warn_alloc.cold+0x95/0x1a7 [ 551.667744][ T9368] ? zone_watermark_ok_safe+0x300/0x300 [ 551.673369][ T9368] __vmalloc_node_range+0xef7/0x12e0 [ 551.678704][ T9368] ? n_tty_open+0x1a/0x170 [ 551.683262][ T9368] ? __ldsem_down_write_nested+0xe8/0x850 [ 551.689023][ T9368] ? vfree_atomic+0xe0/0xe0 [ 551.693560][ T9368] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 551.699402][ T9368] ? __ldsem_down_read_nested+0x850/0x850 [ 551.705155][ T9368] ? __wake_up_common+0x650/0x650 [ 551.710467][ T9368] ? n_tty_open+0x1a/0x170 [ 551.714920][ T9368] vzalloc+0x6b/0x80 [ 551.718849][ T9368] ? n_tty_open+0x1a/0x170 [ 551.723393][ T9368] n_tty_open+0x1a/0x170 [ 551.727672][ T9368] ? n_tty_set_termios+0x1010/0x1010 [ 551.732991][ T9368] tty_ldisc_open+0x9b/0x110 [ 551.737636][ T9368] tty_ldisc_setup+0x47/0x100 [ 551.742339][ T9368] tty_init_dev.part.0+0x1f4/0x5d0 [ 551.747492][ T9368] tty_open+0xacc/0xfb0 [ 551.751693][ T9368] ? tty_init_dev+0x80/0x80 [ 551.754075][ T8311] 0-536866815: [ 551.756212][ T9368] ? rwlock_bug.part.0+0x90/0x90 [ 551.760018][ T8311] 0000000000000000 [ 551.764932][ T9368] ? lock_acquire+0x32/0xc0 [ 551.764955][ T9368] ? chrdev_open+0x80/0x770 [ 551.764985][ T9368] ? tty_init_dev+0x80/0x80 [ 551.782231][ T9368] chrdev_open+0x26a/0x770 [ 551.786686][ T9368] ? __unregister_chrdev+0x110/0x110 [ 551.792088][ T9368] ? fsnotify_perm.part.0+0x221/0x610 [ 551.797511][ T9368] do_dentry_open+0x6cc/0x13f0 [ 551.802332][ T9368] ? __unregister_chrdev+0x110/0x110 [ 551.802669][ T8311] 536866816-536870911: [ 551.807626][ T9368] ? may_open+0x1f6/0x420 [ 551.807665][ T9368] path_openat+0x1bc1/0x2b40 [ 551.807714][ T9368] ? path_lookupat+0x840/0x840 [ 551.825898][ T9368] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 551.831925][ T9368] do_filp_open+0x1ba/0x410 [ 551.834179][ T8311] ffff8880668dc9a0 [ 551.836445][ T9368] ? may_open_dev+0xf0/0xf0 [ 551.840149][ T8311] 536870912-553635839: [ 551.844629][ T9368] ? find_held_lock+0x2d/0x110 [ 551.844698][ T9368] ? _raw_spin_unlock+0x28/0x40 [ 551.858830][ T9368] ? alloc_fd+0x2e4/0x6e0 [ 551.863208][ T9368] do_sys_openat2+0x16d/0x4c0 [ 551.867919][ T9368] ? build_open_flags+0x6f0/0x6f0 [ 551.873243][ T9368] ? up_write+0x520/0x520 [ 551.874066][ T8311] ffff8880668dc0e0 [ 551.877603][ T9368] __x64_sys_openat+0x143/0x1f0 [ 551.881299][ T8311] 553635840-553639935: [ 551.886134][ T9368] ? __ia32_sys_open+0x1c0/0x1c0 [ 551.886166][ T9368] ? syscall_enter_from_user_mode+0x26/0xb0 [ 551.886204][ T9368] do_syscall_64+0x39/0xb0 [ 551.886236][ T9368] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 551.886266][ T9368] RIP: 0033:0x7fb25a63e254 [ 551.886294][ T9368] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 551.886320][ T9368] RSP: 002b:00007fb25b366ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 551.886345][ T9368] RAX: ffffffffffffffda RBX: 00007fb25a7abf80 RCX: 00007fb25a63e254 [ 551.886362][ T9368] RDX: 0000000000000002 RSI: 00007fb25b366d40 RDI: 00000000ffffff9c [ 551.886378][ T9368] RBP: 00007fb25b366d40 R08: 0000000000000000 R09: 000000000000000d [ 551.886394][ T9368] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 551.886410][ T9368] R13: 00007fff898e334f R14: 00007fb25b367300 R15: 0000000000022000 [ 551.886452][ T9368] [ 551.953807][ T9368] Mem-Info: [ 552.033782][ T9368] active_anon:8625 inactive_anon:180750 isolated_anon:0 [ 552.033782][ T9368] active_file:12672 inactive_file:5495 isolated_file:0 [ 552.033782][ T9368] unevictable:768 dirty:1719 writeback:1800 [ 552.033782][ T9368] slab_reclaimable:17122 slab_unreclaimable:102052 [ 552.033782][ T9368] mapped:21601 shmem:13620 pagetables:909 [ 552.033782][ T9368] sec_pagetables:0 bounce:0 [ 552.033782][ T9368] kernel_misc_reclaimable:0 [ 552.033782][ T9368] free:1222639 free_pcp:11318 free_cma:0 [ 552.114383][ T8311] 0000000000000000 [ 552.118245][ T9368] Node 0 active_anon:34500kB inactive_anon:723000kB active_file:50616kB inactive_file:21680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86404kB dirty:76kB writeback:10600kB shmem:52944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 26624kB writeback_tmp:0kB kernel_stack:11320kB pagetables:3636kB sec_pagetables:0kB all_unreclaimable? no [ 552.155694][ T8311] 553639936-553635839: ffff88805ff72d20 [ 552.161733][ T8311] 553635840-553648127: ffff8880217871c0 [ 552.174234][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 552.184473][ T8311] 553652224-116813594623: 0000000000000000 [ 552.204137][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 552.210724][ T9368] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 552.278015][ T8311] 116817788928-93825015144447: 0000000000000000 [ 552.291675][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 552.301161][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 552.308654][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 552.316092][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 552.373476][ T9368] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 552.452641][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 552.454507][ T9368] lowmem_reserve[]: 0 2619 2621 2621 2621 [ 552.480999][ T9368] Node 0 DMA32 free:954752kB boost:0kB min:35456kB low:44320kB high:53184kB reserved_highatomic:0KB active_anon:34500kB inactive_anon:723100kB active_file:50616kB inactive_file:2080kB unevictable:1536kB writepending:176kB present:3129332kB managed:2686572kB mlocked:0kB bounce:0kB free_pcp:35788kB local_pcp:20824kB free_cma:0kB [ 552.483238][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 552.526012][ T9368] lowmem_reserve[]: 0 0 1 1 1 [ 552.531761][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 552.554102][ T9368] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1868kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 552.560593][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 552.600753][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 552.605515][ T9368] lowmem_reserve[]: 0 0 0 0 0 [ 552.620824][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 552.623852][ T9368] Node 1 [ 552.631123][ T8311] 140392674623488-140392674770943: [ 552.633874][ T9368] Normal free:3936300kB boost:0kB min:54424kB low:68028kB high:81632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:8288kB free_cma:0kB [ 552.640843][ T8311] ffff8880284f8380 [ 552.683206][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 552.690357][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 552.690771][ T9368] lowmem_reserve[]: [ 552.698170][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 552.707073][ T9368] 0 0 0 0 0 [ 552.710551][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 552.713939][ T9368] Node 0 [ 552.729227][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 552.737373][ T9368] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 552.743530][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 552.761145][ T9368] Node 0 DMA32: 6282*4kB (ME) 6113*8kB (UME) 3368*16kB (UME) 1470*32kB (UME) 489*64kB (UME) 120*128kB (UME) 48*256kB (UME) 30*512kB (UME) 17*1024kB (ME) 4*2048kB (UM) 166*4096kB (UM) = 954800kB [ 552.770623][ T8311] 140392676261888-140392688107519: [ 552.789056][ T9368] Node 0 [ 552.798742][ T8311] ffff8880284f89a0 [ 552.798762][ T9368] Normal: [ 552.801765][ T8311] 140392688107520-18446744073709551615: [ 552.805893][ T9368] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 552.820400][ T8311] node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 [ 552.826776][ T9368] Node 1 [ 552.829161][ T8311] contents: [ 552.834748][ T9368] Normal: 165*4kB (UME) 41*8kB (UME) 35*16kB (UME) 111*32kB (UME) 33*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 958*4096kB (UM) = 3936300kB [ 552.843971][ T8311] 0000000000000000 140392689405951 [ 552.862684][ T9368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.867263][ T8311] ffff88802bb0fd20 140392689410047 [ 552.868375][ T9368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.882512][ T8311] ffff8880284f8700 140392689541119 [ 552.883804][ T9368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 552.902738][ T8311] 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 552.909884][ T9368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 552.951375][ T9368] 26786 total pagecache pages [ 552.952584][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 552.958060][ T9368] 0 pages in swap cache [ 552.971216][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 552.971687][ T9368] Free swap = 0kB [ 552.980387][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 552.983680][ T9368] Total swap = 0kB [ 552.994380][ T9368] 2097051 pages RAM [ 552.998290][ T9368] 0 pages HighMem/MovableOnly [ 552.999261][ T8311] 140392689541120-140727980978175: 0000000000000000 11:21:52 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r1) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ff0f2dbd7000fddbdf2505"], 0x5c}}, 0x0) 11:21:52 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000480)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) getgroups(0x6, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x5, &(0x7f00000031c0)={[0x2]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 11:21:52 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:52 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x2, &(0x7f0000000080)) 11:21:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:52 executing program 3: clock_gettime(0x7, &(0x7f00000006c0)) [ 553.003027][ T9368] 391698 pages reserved [ 553.017554][ T9368] 0 pages cma reserved [ 553.021808][ T9368] tty tty1: ldisc open failed (-12), clearing slot 0 [ 553.023176][ T8311] 140727980978176-140727981113343: ffff8880284f8460 11:21:52 executing program 5: bpf$OBJ_GET_MAP(0x15, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) [ 553.090023][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 553.113720][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 11:21:52 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000480)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) getgroups(0x6, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) getpgrp(0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = epoll_create(0x9) epoll_pwait(r4, &(0x7f0000003140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x5, &(0x7f00000031c0)={[0x2]}, 0x8) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14}, 0x14}}, 0x0) 11:21:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) [ 553.137964][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 553.158983][ T8311] 140727981912064-18446744073709551615: 0000000000000000 11:21:53 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x66, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000600)=0x3) 11:21:53 executing program 3: socketpair(0x7bbdc7de2557b1e0, 0x0, 0x0, &(0x7f00000006c0)) 11:21:53 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_clone(0x40009000, &(0x7f0000000700), 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) [ 553.268729][ T8311] Pass: 10755850 Run:10756040 [ 553.304842][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 553.314724][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 553.324837][ T8311] Call Trace: [ 553.328135][ T8311] [ 553.331087][ T8311] dump_stack_lvl+0xd1/0x138 [ 553.335733][ T8311] mt_find.cold+0x8b/0x90 [ 553.340067][ T8311] ? mas_find+0x1d0/0x1d0 [ 553.344403][ T8311] find_vma+0x10c/0x1b0 [ 553.348551][ T8311] ? can_vma_merge_before+0x390/0x390 [ 553.353914][ T8311] ? walk_page_test+0x1b/0x180 [ 553.358672][ T8311] ? walk_page_test+0x78/0x180 [ 553.363430][ T8311] walk_page_range+0x2b1/0x4a0 [ 553.368191][ T8311] ? __walk_page_range+0x780/0x780 [ 553.373307][ T8311] mlock_fixup+0x650/0x810 [ 553.377725][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 553.382923][ T8311] ? mlock_fixup+0x810/0x810 [ 553.387519][ T8311] ? do_futex+0x132/0x360 [ 553.391851][ T8311] do_mlock+0x25a/0x6d0 [ 553.396004][ T8311] ? xfd_validate_state+0x5d/0x180 [ 553.401109][ T8311] ? folio_evictable+0x270/0x270 [ 553.406051][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 553.410829][ T8311] do_syscall_64+0x39/0xb0 [ 553.415254][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 553.421160][ T8311] RIP: 0033:0x7fafb788c0c9 [ 553.425574][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 553.445172][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 11:21:53 executing program 5: r0 = io_uring_setup(0x18d9, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0x8, 0x0, 0x0) [ 553.453583][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 553.461541][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 553.469501][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 553.477459][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.485417][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 553.493390][ T8311] 11:21:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) 11:21:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 553.589018][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 553.695515][ T8311] BUG at mt_find:6473 (1) [ 553.858378][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 553.921763][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 554.029041][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:21:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc0205649, &(0x7f0000000080)) 11:21:53 executing program 5: syz_clone(0x81011400, 0x0, 0x0, 0x0, 0x0, 0x0) 11:21:53 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x100000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1013}) 11:21:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:21:53 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 554.097761][ T8311] 0-536866815: 0000000000000000 [ 554.103058][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 554.113793][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 554.121852][ T8311] 553635840-553639935: 0000000000000000 [ 554.128901][ T8311] 553639936-553635839: ffff88805ff72d20 11:21:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x0, 0x705, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRES16], 0xfd79) 11:21:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 554.155588][ T8311] 553635840-553648127: ffff8880217871c0 [ 554.194236][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 554.243170][ T8311] 553652224-116813594623: 0000000000000000 [ 554.270085][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 554.473760][ T8311] 116817788928-93825015144447: 0000000000000000 [ 554.565892][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 554.619861][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 554.696119][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 554.734210][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 554.850427][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 554.878308][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 554.887457][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 554.900493][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 554.909483][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 554.923992][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 554.953104][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 554.978736][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 555.000261][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 555.036619][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 555.053147][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 555.061472][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 555.068803][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 555.076529][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 555.083519][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 555.136421][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 555.164151][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 555.185006][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 555.192007][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 555.225212][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 555.232224][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 555.251284][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 555.259864][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 555.281328][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 555.293942][ T8311] Pass: 10809945 Run:10810136 [ 555.312952][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 555.322815][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 555.332891][ T8311] Call Trace: [ 555.336188][ T8311] [ 555.339138][ T8311] dump_stack_lvl+0xd1/0x138 [ 555.343772][ T8311] mt_find.cold+0x8b/0x90 [ 555.348139][ T8311] ? mas_find+0x1d0/0x1d0 [ 555.352519][ T8311] find_vma+0x10c/0x1b0 [ 555.356699][ T8311] ? can_vma_merge_before+0x390/0x390 [ 555.362094][ T8311] ? walk_page_test+0x1b/0x180 [ 555.366896][ T8311] ? walk_page_test+0x78/0x180 [ 555.371703][ T8311] walk_page_range+0x2b1/0x4a0 [ 555.376511][ T8311] ? __walk_page_range+0x780/0x780 [ 555.381678][ T8311] mlock_fixup+0x650/0x810 [ 555.386147][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 555.391392][ T8311] ? mlock_fixup+0x810/0x810 [ 555.396035][ T8311] ? do_futex+0x132/0x360 [ 555.400406][ T8311] do_mlock+0x25a/0x6d0 [ 555.404600][ T8311] ? xfd_validate_state+0x5d/0x180 [ 555.409749][ T8311] ? folio_evictable+0x270/0x270 [ 555.414749][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 555.419575][ T8311] do_syscall_64+0x39/0xb0 [ 555.424218][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 555.430244][ T8311] RIP: 0033:0x7fafb788c0c9 [ 555.434682][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 555.454321][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 555.462765][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 555.470785][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 555.478799][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 555.486798][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.494794][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 555.502817][ T8311] [ 555.521293][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 555.530476][ T8311] BUG at mt_find:6473 (1) [ 555.542032][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 555.553532][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 555.601741][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 555.666858][ T8311] 0-536866815: 0000000000000000 [ 555.672223][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 555.692113][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 555.702410][ T8311] 553635840-553639935: 0000000000000000 [ 555.717957][ T8311] 553639936-553635839: ffff88805ff72d20 [ 555.723911][ T8311] 553635840-553648127: ffff8880217871c0 [ 555.739335][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 555.749403][ T8311] 553652224-116813594623: 0000000000000000 [ 555.761324][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 555.779254][ T8311] 116817788928-93825015144447: 0000000000000000 [ 555.786112][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 555.792929][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 555.799921][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 555.806994][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 555.862435][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 555.869524][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 555.876735][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 555.889174][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 555.904170][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 555.918984][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 555.934145][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 555.948952][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 555.964080][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 555.977778][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 555.997974][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 556.012848][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 556.028009][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 556.043433][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 556.068273][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 556.132591][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 556.142890][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 556.160623][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 556.168372][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 556.175852][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 556.182911][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 556.192018][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 556.200236][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 556.207616][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 556.216539][ T8311] Pass: 10809945 Run:10810137 [ 556.225752][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 556.235590][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 556.245663][ T8311] Call Trace: [ 556.248961][ T8311] [ 556.251923][ T8311] dump_stack_lvl+0xd1/0x138 [ 556.256579][ T8311] mt_find.cold+0x8b/0x90 [ 556.260961][ T8311] ? mas_find+0x1d0/0x1d0 [ 556.265350][ T8311] find_vma+0x10c/0x1b0 [ 556.269539][ T8311] ? can_vma_merge_before+0x390/0x390 [ 556.274941][ T8311] ? walk_page_test+0x1b/0x180 [ 556.279734][ T8311] ? walk_page_test+0x78/0x180 [ 556.284525][ T8311] walk_page_range+0x2b1/0x4a0 [ 556.289310][ T8311] ? __walk_page_range+0x780/0x780 [ 556.294476][ T8311] mlock_fixup+0x650/0x810 [ 556.299110][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 556.304331][ T8311] ? mlock_fixup+0x810/0x810 [ 556.308950][ T8311] ? do_futex+0x132/0x360 [ 556.313303][ T8311] do_mlock+0x25a/0x6d0 [ 556.317475][ T8311] ? xfd_validate_state+0x5d/0x180 [ 556.322611][ T8311] ? folio_evictable+0x270/0x270 [ 556.327583][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 556.332370][ T8311] do_syscall_64+0x39/0xb0 [ 556.336810][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 556.342713][ T8311] RIP: 0033:0x7fafb788c0c9 [ 556.347134][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 556.366747][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 556.375167][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 556.383167][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 556.391248][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 556.399232][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.407216][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 556.415215][ T8311] [ 556.455398][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 556.461360][ T8311] BUG at mt_find:6473 (1) [ 556.465915][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 556.474547][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 556.514204][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 556.564414][ T8311] 0-536866815: 0000000000000000 [ 556.579739][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 556.590097][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 556.598706][ T8311] 553635840-553639935: 0000000000000000 [ 556.604888][ T8311] 553639936-553635839: ffff88805ff72d20 [ 556.610942][ T8311] 553635840-553648127: ffff8880217871c0 [ 556.617278][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 556.623292][ T8311] 553652224-116813594623: 0000000000000000 [ 556.629887][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 556.636584][ T8311] 116817788928-93825015144447: 0000000000000000 [ 556.643285][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 556.650359][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 556.657415][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 556.666078][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 556.725519][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 556.739256][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 556.754192][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 556.763554][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 556.780826][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 556.791043][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 556.814165][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 556.821179][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 556.838523][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 556.850287][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 556.863555][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 556.884008][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 556.891360][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 556.900301][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 556.909477][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 556.960596][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 556.968006][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 556.975499][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 556.982482][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 556.992865][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 557.000312][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 557.009508][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 557.016853][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 557.023825][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 557.040402][ T8311] Pass: 10809947 Run:10810140 [ 557.048306][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 557.058225][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 557.068297][ T8311] Call Trace: [ 557.071588][ T8311] [ 557.074534][ T8311] dump_stack_lvl+0xd1/0x138 [ 557.079170][ T8311] mt_find.cold+0x8b/0x90 [ 557.083538][ T8311] ? mas_find+0x1d0/0x1d0 [ 557.087914][ T8311] find_vma+0x10c/0x1b0 [ 557.092097][ T8311] ? can_vma_merge_before+0x390/0x390 [ 557.097498][ T8311] ? walk_page_test+0x1b/0x180 [ 557.102551][ T8311] ? walk_page_test+0x78/0x180 [ 557.107351][ T8311] walk_page_range+0x2b1/0x4a0 [ 557.112162][ T8311] ? __walk_page_range+0x780/0x780 [ 557.117332][ T8311] mlock_fixup+0x650/0x810 [ 557.121803][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 557.127046][ T8311] ? mlock_fixup+0x810/0x810 [ 557.131684][ T8311] ? do_futex+0x132/0x360 [ 557.136056][ T8311] do_mlock+0x25a/0x6d0 [ 557.140253][ T8311] ? xfd_validate_state+0x5d/0x180 [ 557.145394][ T8311] ? folio_evictable+0x270/0x270 [ 557.150396][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 557.155200][ T8311] do_syscall_64+0x39/0xb0 [ 557.159654][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 557.165574][ T8311] RIP: 0033:0x7fafb788c0c9 [ 557.170010][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.189690][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 557.198129][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 557.206126][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 557.214113][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 557.222092][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.230067][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 557.238067][ T8311] [ 557.254126][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 557.260071][ T8311] BUG at mt_find:6473 (1) [ 557.264531][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 557.272994][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 557.310258][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 557.363051][ T8311] 0-536866815: 0000000000000000 [ 557.368493][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 557.374504][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 557.380456][ T8311] 553635840-553639935: 0000000000000000 [ 557.386467][ T8311] 553639936-553635839: ffff88805ff72d20 [ 557.392402][ T8311] 553635840-553648127: ffff8880217871c0 [ 557.398434][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 557.404495][ T8311] 553652224-116813594623: 0000000000000000 [ 557.410687][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 557.418123][ T8311] 116817788928-93825015144447: 0000000000000000 [ 557.424826][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 557.431627][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 557.438617][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 557.445898][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 557.503947][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 557.511043][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 557.520744][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 557.538831][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 557.546067][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 557.553070][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 557.560165][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 557.567302][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 557.574354][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 557.581323][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 557.588363][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 557.595436][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 557.602398][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 557.613288][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 557.621263][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 557.671324][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 557.678393][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 557.685483][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 557.692450][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 557.699541][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 557.706574][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 557.713542][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 557.725920][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 557.732908][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 557.740400][ T8311] Pass: 10809980 Run:10810174 [ 557.745140][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 557.754965][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 557.765036][ T8311] Call Trace: [ 557.768330][ T8311] [ 557.771279][ T8311] dump_stack_lvl+0xd1/0x138 [ 557.775910][ T8311] mt_find.cold+0x8b/0x90 [ 557.780276][ T8311] ? mas_find+0x1d0/0x1d0 [ 557.784656][ T8311] find_vma+0x10c/0x1b0 [ 557.788839][ T8311] ? can_vma_merge_before+0x390/0x390 [ 557.794232][ T8311] ? walk_page_test+0x1b/0x180 [ 557.799033][ T8311] ? walk_page_test+0x78/0x180 [ 557.803826][ T8311] walk_page_range+0x2b1/0x4a0 [ 557.808603][ T8311] ? __walk_page_range+0x780/0x780 [ 557.813747][ T8311] mlock_fixup+0x650/0x810 [ 557.818191][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 557.823409][ T8311] ? mlock_fixup+0x810/0x810 [ 557.828028][ T8311] ? do_futex+0x132/0x360 [ 557.832378][ T8311] do_mlock+0x25a/0x6d0 [ 557.836555][ T8311] ? xfd_validate_state+0x5d/0x180 [ 557.841681][ T8311] ? folio_evictable+0x270/0x270 [ 557.846654][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 557.851439][ T8311] do_syscall_64+0x39/0xb0 [ 557.855877][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 557.861781][ T8311] RIP: 0033:0x7fafb788c0c9 [ 557.866202][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.885811][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 557.894231][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 557.902217][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 557.910195][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 557.918169][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.926229][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 557.934219][ T8311] [ 557.944691][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 557.950631][ T8311] BUG at mt_find:6473 (1) [ 557.955147][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 557.963595][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 558.000826][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 558.049754][ T8311] 0-536866815: 0000000000000000 11:21:57 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) syz_clone(0x40009000, &(0x7f0000000700), 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) 11:21:57 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:21:57 executing program 0: syz_clone3(&(0x7f0000000300)={0x82084500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:21:57 executing program 5: pipe2$watch_queue(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 11:21:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:21:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) [ 558.065514][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 558.071479][ T8311] 536870912-553635839: ffff8880668dc0e0 11:21:57 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) syz_clone(0x40009000, &(0x7f0000000700), 0x0, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r0, 0x0, 0x0) [ 558.120607][ T8311] 553635840-553639935: 0000000000000000 11:21:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 558.195557][ T8311] 553639936-553635839: ffff88805ff72d20 [ 558.201772][ T8311] 553635840-553648127: ffff8880217871c0 [ 558.212988][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 558.220332][ T8311] 553652224-116813594623: 0000000000000000 [ 558.226827][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 558.233559][ T8311] 116817788928-93825015144447: 0000000000000000 [ 558.247325][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 558.258599][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 558.265911][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:21:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 558.273213][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d 11:21:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:21:58 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 558.649597][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 11:21:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 558.766933][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 558.864278][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 558.967775][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 558.975060][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 558.982057][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 558.989184][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 558.996409][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 559.003390][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 559.010524][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 559.024161][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 559.031162][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 559.072116][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 559.079915][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 559.087559][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 559.145775][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 559.226840][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 559.294212][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 559.316808][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 559.324106][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 559.331245][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 559.338476][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 559.354661][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 559.381658][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 559.392913][ T8311] Pass: 10848753 Run:10848948 [ 559.405082][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 559.414951][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 559.425034][ T8311] Call Trace: [ 559.428332][ T8311] [ 559.431283][ T8311] dump_stack_lvl+0xd1/0x138 [ 559.435918][ T8311] mt_find.cold+0x8b/0x90 [ 559.440295][ T8311] ? mas_find+0x1d0/0x1d0 [ 559.444679][ T8311] find_vma+0x10c/0x1b0 [ 559.448890][ T8311] ? can_vma_merge_before+0x390/0x390 [ 559.454395][ T8311] ? walk_page_test+0x1b/0x180 [ 559.459205][ T8311] ? walk_page_test+0x78/0x180 [ 559.464035][ T8311] walk_page_range+0x2b1/0x4a0 [ 559.468846][ T8311] ? __walk_page_range+0x780/0x780 [ 559.474018][ T8311] mlock_fixup+0x650/0x810 [ 559.478485][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 559.483733][ T8311] ? mlock_fixup+0x810/0x810 [ 559.488377][ T8311] ? do_futex+0x132/0x360 [ 559.492756][ T8311] do_mlock+0x25a/0x6d0 [ 559.496955][ T8311] ? xfd_validate_state+0x5d/0x180 [ 559.502100][ T8311] ? folio_evictable+0x270/0x270 [ 559.507101][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 559.511921][ T8311] do_syscall_64+0x39/0xb0 [ 559.516389][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 559.522322][ T8311] RIP: 0033:0x7fafb788c0c9 [ 559.526753][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.546376][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 559.554803][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 559.562779][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 559.570757][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 559.578736][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.586714][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 559.594708][ T8311] [ 559.630745][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 559.644203][ T8311] BUG at mt_find:6473 (1) [ 559.650980][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 559.670125][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 559.721423][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 559.773240][ T8311] 0-536866815: 0000000000000000 [ 559.778912][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 559.785265][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 559.791244][ T8311] 553635840-553639935: 0000000000000000 [ 559.797685][ T8311] 553639936-553635839: ffff88805ff72d20 [ 559.803662][ T8311] 553635840-553648127: ffff8880217871c0 [ 559.810033][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 559.819091][ T8311] 553652224-116813594623: 0000000000000000 [ 559.825688][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 559.832224][ T8311] 116817788928-93825015144447: 0000000000000000 [ 559.839360][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 559.846555][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 559.853454][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 559.860964][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 559.928415][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 559.941313][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 559.952777][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 559.969822][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 559.983042][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 559.999974][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 560.010523][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 560.018807][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 560.027468][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 560.057573][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 560.065372][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 560.072658][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 560.081767][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 560.089158][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 560.096756][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 560.156913][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 560.163917][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 560.184114][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 560.204293][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 560.211304][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 560.222703][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 560.231932][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 560.243397][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 560.261639][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 560.304850][ T8311] Pass: 10854776 Run:10854972 [ 560.309586][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 560.319419][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 560.329496][ T8311] Call Trace: [ 560.332796][ T8311] [ 560.335743][ T8311] dump_stack_lvl+0xd1/0x138 [ 560.340376][ T8311] mt_find.cold+0x8b/0x90 [ 560.344750][ T8311] ? mas_find+0x1d0/0x1d0 [ 560.349131][ T8311] find_vma+0x10c/0x1b0 [ 560.353316][ T8311] ? can_vma_merge_before+0x390/0x390 [ 560.358717][ T8311] ? walk_page_test+0x1b/0x180 [ 560.363523][ T8311] ? walk_page_test+0x78/0x180 [ 560.368331][ T8311] walk_page_range+0x2b1/0x4a0 [ 560.373139][ T8311] ? __walk_page_range+0x780/0x780 [ 560.378295][ T8311] mlock_fixup+0x650/0x810 [ 560.382765][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 560.388015][ T8311] ? mlock_fixup+0x810/0x810 [ 560.392661][ T8311] ? do_futex+0x132/0x360 [ 560.397037][ T8311] do_mlock+0x25a/0x6d0 [ 560.401234][ T8311] ? xfd_validate_state+0x5d/0x180 [ 560.406388][ T8311] ? folio_evictable+0x270/0x270 [ 560.411406][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 560.416319][ T8311] do_syscall_64+0x39/0xb0 [ 560.420797][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 560.426733][ T8311] RIP: 0033:0x7fafb788c0c9 [ 560.431170][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 560.450808][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 560.459256][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 560.467252][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 560.475244][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 560.483235][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.491232][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 560.499273][ T8311] [ 560.508890][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 560.514892][ T8311] BUG at mt_find:6473 (1) [ 560.519247][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 560.527745][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 560.574099][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 560.704182][ T8311] 0-536866815: 0000000000000000 [ 560.709456][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 560.724627][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 560.730767][ T8311] 553635840-553639935: 0000000000000000 [ 560.772659][ T8311] 553639936-553635839: ffff88805ff72d20 [ 560.794111][ T8311] 553635840-553648127: ffff8880217871c0 [ 560.833274][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 560.839337][ T8311] 553652224-116813594623: 0000000000000000 [ 560.873005][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 560.894074][ T8311] 116817788928-93825015144447: 0000000000000000 [ 560.903195][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 560.924105][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 560.931018][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 560.944151][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 561.060816][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 561.075742][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 561.090553][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 561.119386][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 561.164075][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 561.171080][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 561.216996][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 561.224003][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 561.251151][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 561.267751][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 561.280580][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 561.292156][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 561.308506][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 561.322844][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 561.342830][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 561.393793][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 561.401733][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 561.411299][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 561.418625][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 561.425731][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 561.432986][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 561.440973][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 561.451400][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 561.465234][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 561.481585][ T8311] Pass: 10854825 Run:10855022 [ 561.490875][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 561.501406][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 561.511494][ T8311] Call Trace: [ 561.514790][ T8311] [ 561.517736][ T8311] dump_stack_lvl+0xd1/0x138 [ 561.522366][ T8311] mt_find.cold+0x8b/0x90 [ 561.526737][ T8311] ? mas_find+0x1d0/0x1d0 [ 561.531113][ T8311] find_vma+0x10c/0x1b0 [ 561.535379][ T8311] ? can_vma_merge_before+0x390/0x390 [ 561.540779][ T8311] ? walk_page_test+0x1b/0x180 [ 561.545609][ T8311] ? walk_page_test+0x78/0x180 [ 561.550392][ T8311] walk_page_range+0x2b1/0x4a0 [ 561.555172][ T8311] ? __walk_page_range+0x780/0x780 [ 561.560327][ T8311] mlock_fixup+0x650/0x810 [ 561.564776][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 561.569996][ T8311] ? mlock_fixup+0x810/0x810 [ 561.574612][ T8311] ? do_futex+0x132/0x360 [ 561.578963][ T8311] do_mlock+0x25a/0x6d0 [ 561.583135][ T8311] ? xfd_validate_state+0x5d/0x180 [ 561.588255][ T8311] ? folio_evictable+0x270/0x270 [ 561.593231][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 561.598018][ T8311] do_syscall_64+0x39/0xb0 [ 561.602452][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 561.608355][ T8311] RIP: 0033:0x7fafb788c0c9 [ 561.612776][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.632396][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 561.640820][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 561.648794][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 561.656766][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 561.664745][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.672728][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 561.680720][ T8311] [ 561.944077][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 561.950029][ T8311] BUG at mt_find:6473 (1) [ 561.974078][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 561.982549][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 562.074139][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 562.123138][ T8311] 0-536866815: 0000000000000000 [ 562.130007][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 562.136627][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 562.142575][ T8311] 553635840-553639935: 0000000000000000 [ 562.169502][ T8311] 553639936-553635839: ffff88805ff72d20 [ 562.175654][ T8311] 553635840-553648127: ffff8880217871c0 [ 562.181578][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 562.187619][ T8311] 553652224-116813594623: 0000000000000000 [ 562.193807][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 562.200346][ T8311] 116817788928-93825015144447: 0000000000000000 [ 562.207092][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 562.213979][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 562.220931][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 562.227978][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 562.287282][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 562.294401][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 562.301390][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 562.309153][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 562.316282][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 562.323267][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 562.330399][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 562.342654][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 562.357229][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 562.372014][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 562.383011][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 562.400916][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 562.413461][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 562.428941][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 562.438762][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 562.489385][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 562.496738][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 562.503712][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 562.511203][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 562.520115][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 562.527421][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 562.534747][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 562.542833][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 562.550249][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 562.557948][ T8311] Pass: 10855570 Run:10855768 [ 562.562641][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 562.572464][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 562.582537][ T8311] Call Trace: [ 562.585828][ T8311] [ 562.588773][ T8311] dump_stack_lvl+0xd1/0x138 [ 562.593488][ T8311] mt_find.cold+0x8b/0x90 [ 562.597858][ T8311] ? mas_find+0x1d0/0x1d0 [ 562.602238][ T8311] find_vma+0x10c/0x1b0 [ 562.606437][ T8311] ? can_vma_merge_before+0x390/0x390 [ 562.611836][ T8311] ? walk_page_test+0x1b/0x180 [ 562.616643][ T8311] ? walk_page_test+0x78/0x180 [ 562.621458][ T8311] walk_page_range+0x2b1/0x4a0 [ 562.626261][ T8311] ? __walk_page_range+0x780/0x780 [ 562.631429][ T8311] mlock_fixup+0x650/0x810 [ 562.635901][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 562.641150][ T8311] ? mlock_fixup+0x810/0x810 [ 562.645801][ T8311] ? do_futex+0x132/0x360 [ 562.650166][ T8311] do_mlock+0x25a/0x6d0 [ 562.654353][ T8311] ? xfd_validate_state+0x5d/0x180 [ 562.659479][ T8311] ? folio_evictable+0x270/0x270 [ 562.664449][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 562.669238][ T8311] do_syscall_64+0x39/0xb0 [ 562.673679][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 562.679581][ T8311] RIP: 0033:0x7fafb788c0c9 [ 562.684002][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.703622][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 562.712043][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 562.720304][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 562.728282][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 562.738255][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.746229][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 562.754227][ T8311] [ 562.775282][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 562.781233][ T8311] BUG at mt_find:6473 (1) [ 562.785684][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 562.794510][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 562.832261][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 562.899421][ T8311] 0-536866815: 0000000000000000 [ 562.913061][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 562.920520][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 562.934601][ T8311] 553635840-553639935: 0000000000000000 [ 562.940565][ T8311] 553639936-553635839: ffff88805ff72d20 [ 562.948071][ T8311] 553635840-553648127: ffff8880217871c0 [ 562.954116][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 562.960046][ T8311] 553652224-116813594623: 0000000000000000 [ 562.966344][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 562.972779][ T8311] 116817788928-93825015144447: 0000000000000000 [ 562.979477][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 562.986949][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 562.993842][ T8311] 140392653647872-140392653651967: ffff8880668dc540 11:22:02 executing program 0: r0 = io_uring_setup(0x18d9, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES2(r0, 0x6, 0x0, 0x0) 11:22:02 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:22:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffa00000000000, 0x0, 0x0) 11:22:02 executing program 5: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) 11:22:02 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 563.002128][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 563.059920][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 563.068446][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 563.080831][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 11:22:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 563.122793][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 563.152193][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 563.164347][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 563.204288][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 563.213001][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 563.221442][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 563.228953][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 563.236562][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 563.243619][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 563.250961][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 563.260356][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 11:22:03 executing program 5: r0 = socket(0x10, 0x3, 0x9) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 11:22:03 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 563.267688][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 563.295262][ T27] audit: type=1326 audit(1673263323.046:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9523 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb25a68c0c9 code=0x0 [ 563.323405][ T8311] 140392688107520-140392689405951: 0000000000000000 11:22:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:22:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}], 0x1, 0x0) [ 563.514421][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 563.521590][ T8311] 140392689410048-140392689541119: ffff8880284f8700 11:22:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}], 0x1, 0x0) [ 563.559368][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 563.593454][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 563.627680][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 563.678966][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 563.714916][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 563.766334][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 563.784500][ T8311] Pass: 10876011 Run:10876210 [ 563.816457][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 563.826345][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 563.836431][ T8311] Call Trace: [ 563.839735][ T8311] [ 563.843039][ T8311] dump_stack_lvl+0xd1/0x138 [ 563.847677][ T8311] mt_find.cold+0x8b/0x90 [ 563.852056][ T8311] ? mas_find+0x1d0/0x1d0 [ 563.856436][ T8311] find_vma+0x10c/0x1b0 [ 563.860623][ T8311] ? can_vma_merge_before+0x390/0x390 [ 563.866035][ T8311] ? walk_page_test+0x1b/0x180 [ 563.870845][ T8311] ? walk_page_test+0x78/0x180 [ 563.875647][ T8311] walk_page_range+0x2b1/0x4a0 [ 563.880456][ T8311] ? __walk_page_range+0x780/0x780 [ 563.885630][ T8311] mlock_fixup+0x650/0x810 [ 563.890106][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 563.895450][ T8311] ? mlock_fixup+0x810/0x810 [ 563.900186][ T8311] ? do_futex+0x132/0x360 [ 563.904745][ T8311] do_mlock+0x25a/0x6d0 [ 563.908943][ T8311] ? xfd_validate_state+0x5d/0x180 [ 563.914090][ T8311] ? folio_evictable+0x270/0x270 [ 563.919099][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 563.923911][ T8311] do_syscall_64+0x39/0xb0 [ 563.928374][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 563.934298][ T8311] RIP: 0033:0x7fafb788c0c9 [ 563.938743][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.958469][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 563.966920][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 563.975015][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 563.983009][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 563.991008][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.998990][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 564.006973][ T8311] [ 564.067635][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 564.079395][ T8311] BUG at mt_find:6473 (1) [ 564.099613][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e 11:22:03 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:22:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x2, &(0x7f0000002bc0), &(0x7f0000000140)=0x8) 11:22:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:22:03 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000002bc0), &(0x7f0000000140)=0x8) 11:22:03 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:03 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) pidfd_send_signal(r0, 0x2e, &(0x7f0000000180)={0x9, 0xe, 0x2}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xc1002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x5, 0x3000000000000000, 0x8000000000000000, 0xf75, 0x7, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xffff, 0xbf, 0x8, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r0, 0xfffffffc, 0x80000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) pidfd_send_signal(r1, 0x35, &(0x7f0000000380)={0x20, 0x0, 0x80}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = socket(0x6, 0x80000, 0x7) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000640)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r7) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2b8, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x8, 0x8, {0x4e24, 0x4e23, [0x9, 0x8, 0x8, 0x7a5], [0xcbd, 0x7, 0x690], 0x0, [0x7ff, 0x2]}, 0xb7b, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "624a23c4b7755f34c82e64f1d787a9e06541c35f9505a998fe0a823d2ffb30c2e6ffe8e8f5b90d6019612900f7d6b32a50aaacb24be906ccecfde829325eff91a92d5f42c7a4b0e25830483c8818cdf01befce14b129c259520b829113b721bfb96aa494174f054547a56e8306b3b89d38c03d0fdac9de7d2fc7b57236d8e4bf11d632a29c82"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "f283cf3029d8fc6ad239f719360bb1175227003041e0b0fe8ba78fa3c5e901cf0bc280d913ae4905b6e36ab70e3ae8632718ac17a7e79e2fc21e4e89bd60960f3c17cd3d0a8ebdf4ab5347"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "34ea5a86aae546b893d83ef1d1e5cd7486f369fe99643c966c4b35e4b96982e19becad3b5f9c7b9e475651498abda835b72361d64b29c53bb09041838441e8716c82601cf4b1765002090074b13a3a3567f029431b7b52cd353dd5c3a3d1bebbfdfd046f0775608324a2ff057796023bbf7bae7600f31f3f49c276b713536496c4f3e6c48ee2cf332661544747ff4cee058194fd3ce27997859d58291d9a"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "7ada2b8e27c68750d87838d88261105e1971215e973ef0308c41fb975e1e113d320f28df89cdd302459bf4514f1ca4d67ba3d474714b22ac02f45699595392bfbafef125729fa10cb3ab40716f9d17333e9f40acdf640cf61ad29457804c499a87cf06c1f14f96e8d4816fbc451c967a14ed81c80e0e2066e0e02665fa364e3e280297cd18712da134b7215b8a262d3cf54ba399ce3bbd60ac6296feeb7b41a635d92c206d21bfe57cdae9b65c212662bb6a1be70bfa84773103d829b27b1bd294c03d6d44ae652c913ca8faeac9494e7b35f93d32419e243173be181546ddf89ac4ab959f7d"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x28000000}, 0x200400c4) openat$cgroup_devices(r2, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) r8 = syz_clone3(&(0x7f0000000e40)={0x204000800, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), {0x30}, &(0x7f0000000cc0)=""/9, 0x9, &(0x7f0000000d00)=""/247, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r7}}, 0x58) r9 = syz_clone3(&(0x7f00000010c0)={0x200070000, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40), {0xb}, &(0x7f0000000f80)=""/161, 0xa1, &(0x7f0000001040)=""/20, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r7}}, 0x58) syz_clone3(&(0x7f0000001180)={0x41000000, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0x31}, &(0x7f0000000b40)=""/58, 0x3a, &(0x7f0000000b80)=""/70, &(0x7f0000001140)=[r8, r9], 0x2, {r5}}, 0x58) lseek(0xffffffffffffffff, 0x8708, 0x2) [ 564.108905][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:22:04 executing program 0: clock_nanosleep(0x9ad1fb37ff5a3f44, 0x0, &(0x7f0000000080), 0x0) 11:22:04 executing program 5: r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(r0, 0x402, 0x0) [ 564.193755][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:22:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) close(r3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 564.318795][ T8311] 0-536866815: 0000000000000000 11:22:04 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x6, &(0x7f0000002b40)) close(r0) 11:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x300}, 0x0) 11:22:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x20]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 564.359000][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 564.461498][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 564.499940][ T8311] 553635840-553639935: 0000000000000000 [ 564.564428][ T8311] 553639936-553635839: ffff88805ff72d20 [ 564.570514][ T8311] 553635840-553648127: ffff8880217871c0 [ 564.577044][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 564.583096][ T8311] 553652224-116813594623: 0000000000000000 [ 564.593377][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 564.600281][ T8311] 116817788928-93825015144447: 0000000000000000 [ 564.607470][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 564.615475][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 564.622406][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 564.630057][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 564.702867][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 564.859663][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 564.875111][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 564.904195][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 564.911413][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 564.921657][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 564.929230][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 564.936676][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 564.943826][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 564.957531][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 564.965283][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 564.972659][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 564.980233][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 564.987724][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 565.005415][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 565.094222][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 565.109839][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 565.119921][ T8311] 140392689410048-140392689541119: ffff8880284f8700 11:22:04 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:22:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:22:04 executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x6, &(0x7f0000002b40)) close(r0) 11:22:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x2000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 11:22:04 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:04 executing program 3: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) pidfd_send_signal(r0, 0x2e, &(0x7f0000000180)={0x9, 0xe, 0x2}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xc1002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x5, 0x3000000000000000, 0x8000000000000000, 0xf75, 0x7, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xffff, 0xbf, 0x8, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r0, 0xfffffffc, 0x80000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) pidfd_send_signal(r1, 0x35, &(0x7f0000000380)={0x20, 0x0, 0x80}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = socket(0x6, 0x80000, 0x7) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000640)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r7) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2b8, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x8, 0x8, {0x4e24, 0x4e23, [0x9, 0x8, 0x8, 0x7a5], [0xcbd, 0x7, 0x690], 0x0, [0x7ff, 0x2]}, 0xb7b, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "624a23c4b7755f34c82e64f1d787a9e06541c35f9505a998fe0a823d2ffb30c2e6ffe8e8f5b90d6019612900f7d6b32a50aaacb24be906ccecfde829325eff91a92d5f42c7a4b0e25830483c8818cdf01befce14b129c259520b829113b721bfb96aa494174f054547a56e8306b3b89d38c03d0fdac9de7d2fc7b57236d8e4bf11d632a29c82"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "f283cf3029d8fc6ad239f719360bb1175227003041e0b0fe8ba78fa3c5e901cf0bc280d913ae4905b6e36ab70e3ae8632718ac17a7e79e2fc21e4e89bd60960f3c17cd3d0a8ebdf4ab5347"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "34ea5a86aae546b893d83ef1d1e5cd7486f369fe99643c966c4b35e4b96982e19becad3b5f9c7b9e475651498abda835b72361d64b29c53bb09041838441e8716c82601cf4b1765002090074b13a3a3567f029431b7b52cd353dd5c3a3d1bebbfdfd046f0775608324a2ff057796023bbf7bae7600f31f3f49c276b713536496c4f3e6c48ee2cf332661544747ff4cee058194fd3ce27997859d58291d9a"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "7ada2b8e27c68750d87838d88261105e1971215e973ef0308c41fb975e1e113d320f28df89cdd302459bf4514f1ca4d67ba3d474714b22ac02f45699595392bfbafef125729fa10cb3ab40716f9d17333e9f40acdf640cf61ad29457804c499a87cf06c1f14f96e8d4816fbc451c967a14ed81c80e0e2066e0e02665fa364e3e280297cd18712da134b7215b8a262d3cf54ba399ce3bbd60ac6296feeb7b41a635d92c206d21bfe57cdae9b65c212662bb6a1be70bfa84773103d829b27b1bd294c03d6d44ae652c913ca8faeac9494e7b35f93d32419e243173be181546ddf89ac4ab959f7d"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x28000000}, 0x200400c4) openat$cgroup_devices(r2, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) r8 = syz_clone3(&(0x7f0000000e40)={0x204000800, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), {0x30}, &(0x7f0000000cc0)=""/9, 0x9, &(0x7f0000000d00)=""/247, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r7}}, 0x58) r9 = syz_clone3(&(0x7f00000010c0)={0x200070000, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40), {0xb}, &(0x7f0000000f80)=""/161, 0xa1, &(0x7f0000001040)=""/20, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r7}}, 0x58) syz_clone3(&(0x7f0000001180)={0x41000000, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0x31}, &(0x7f0000000b40)=""/58, 0x3a, &(0x7f0000000b80)=""/70, &(0x7f0000001140)=[r8, r9], 0x2, {r5}}, 0x58) lseek(0xffffffffffffffff, 0x8708, 0x2) [ 565.140249][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 565.149442][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 565.156975][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 565.163955][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 11:22:05 executing program 0: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) pidfd_send_signal(r0, 0x2e, &(0x7f0000000180)={0x9, 0xe, 0x2}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xc1002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x5, 0x3000000000000000, 0x8000000000000000, 0xf75, 0x7, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xffff, 0xbf, 0x8, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r0, 0xfffffffc, 0x80000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) pidfd_send_signal(r1, 0x35, &(0x7f0000000380)={0x20, 0x0, 0x80}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = socket(0x6, 0x80000, 0x7) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000640)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r7) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2b8, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x8, 0x8, {0x4e24, 0x4e23, [0x9, 0x8, 0x8, 0x7a5], [0xcbd, 0x7, 0x690], 0x0, [0x7ff, 0x2]}, 0xb7b, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "624a23c4b7755f34c82e64f1d787a9e06541c35f9505a998fe0a823d2ffb30c2e6ffe8e8f5b90d6019612900f7d6b32a50aaacb24be906ccecfde829325eff91a92d5f42c7a4b0e25830483c8818cdf01befce14b129c259520b829113b721bfb96aa494174f054547a56e8306b3b89d38c03d0fdac9de7d2fc7b57236d8e4bf11d632a29c82"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "f283cf3029d8fc6ad239f719360bb1175227003041e0b0fe8ba78fa3c5e901cf0bc280d913ae4905b6e36ab70e3ae8632718ac17a7e79e2fc21e4e89bd60960f3c17cd3d0a8ebdf4ab5347"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "34ea5a86aae546b893d83ef1d1e5cd7486f369fe99643c966c4b35e4b96982e19becad3b5f9c7b9e475651498abda835b72361d64b29c53bb09041838441e8716c82601cf4b1765002090074b13a3a3567f029431b7b52cd353dd5c3a3d1bebbfdfd046f0775608324a2ff057796023bbf7bae7600f31f3f49c276b713536496c4f3e6c48ee2cf332661544747ff4cee058194fd3ce27997859d58291d9a"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "7ada2b8e27c68750d87838d88261105e1971215e973ef0308c41fb975e1e113d320f28df89cdd302459bf4514f1ca4d67ba3d474714b22ac02f45699595392bfbafef125729fa10cb3ab40716f9d17333e9f40acdf640cf61ad29457804c499a87cf06c1f14f96e8d4816fbc451c967a14ed81c80e0e2066e0e02665fa364e3e280297cd18712da134b7215b8a262d3cf54ba399ce3bbd60ac6296feeb7b41a635d92c206d21bfe57cdae9b65c212662bb6a1be70bfa84773103d829b27b1bd294c03d6d44ae652c913ca8faeac9494e7b35f93d32419e243173be181546ddf89ac4ab959f7d"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x28000000}, 0x200400c4) openat$cgroup_devices(r2, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) r8 = syz_clone3(&(0x7f0000000e40)={0x204000800, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), {0x30}, &(0x7f0000000cc0)=""/9, 0x9, &(0x7f0000000d00)=""/247, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r7}}, 0x58) r9 = syz_clone3(&(0x7f00000010c0)={0x200070000, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40), {0xb}, &(0x7f0000000f80)=""/161, 0xa1, &(0x7f0000001040)=""/20, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r7}}, 0x58) syz_clone3(&(0x7f0000001180)={0x41000000, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0x31}, &(0x7f0000000b40)=""/58, 0x3a, &(0x7f0000000b80)=""/70, &(0x7f0000001140)=[r8, r9], 0x2, {r5}}, 0x58) lseek(0xffffffffffffffff, 0x8708, 0x2) [ 565.245854][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 565.269597][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 565.288320][ T8311] Pass: 10918325 Run:10918525 [ 565.293626][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 565.303475][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 565.313895][ T8311] Call Trace: [ 565.317183][ T8311] [ 565.320211][ T8311] dump_stack_lvl+0xd1/0x138 [ 565.324824][ T8311] mt_find.cold+0x8b/0x90 [ 565.329182][ T8311] ? mas_find+0x1d0/0x1d0 [ 565.333536][ T8311] find_vma+0x10c/0x1b0 [ 565.337703][ T8311] ? can_vma_merge_before+0x390/0x390 [ 565.343177][ T8311] ? walk_page_test+0x1b/0x180 [ 565.347953][ T8311] ? walk_page_test+0x78/0x180 [ 565.352734][ T8311] walk_page_range+0x2b1/0x4a0 [ 565.357517][ T8311] ? __walk_page_range+0x780/0x780 [ 565.362660][ T8311] mlock_fixup+0x650/0x810 [ 565.367108][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 565.372327][ T8311] ? mlock_fixup+0x810/0x810 [ 565.376949][ T8311] ? do_futex+0x132/0x360 [ 565.381300][ T8311] do_mlock+0x25a/0x6d0 [ 565.385473][ T8311] ? xfd_validate_state+0x5d/0x180 [ 565.390598][ T8311] ? folio_evictable+0x270/0x270 [ 565.395608][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 565.400395][ T8311] do_syscall_64+0x39/0xb0 [ 565.404831][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 565.410735][ T8311] RIP: 0033:0x7fafb788c0c9 [ 565.415158][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.434857][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 11:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 565.443285][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 565.451439][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 565.459428][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 565.467432][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.475418][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 565.483434][ T8311] 11:22:05 executing program 5: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x442000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x1000000, &(0x7f00000000c0)) pidfd_send_signal(r0, 0x2e, &(0x7f0000000180)={0x9, 0xe, 0x2}, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xc1002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x5, 0x3000000000000000, 0x8000000000000000, 0xf75, 0x7, 0x5}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xffff, 0xbf, 0x8, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000300)={0x0, 0x0, r0, 0xfffffffc, 0x80000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) pidfd_send_signal(r1, 0x35, &(0x7f0000000380)={0x20, 0x0, 0x80}, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) r5 = socket(0x6, 0x80000, 0x7) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000640)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(r7) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2b8, 0x13, 0x8, 0x70bd26, 0x25dfdbfc, {0x29, 0x0, 0x8, 0x8, {0x4e24, 0x4e23, [0x9, 0x8, 0x8, 0x7a5], [0xcbd, 0x7, 0x690], 0x0, [0x7ff, 0x2]}, 0xb7b, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "624a23c4b7755f34c82e64f1d787a9e06541c35f9505a998fe0a823d2ffb30c2e6ffe8e8f5b90d6019612900f7d6b32a50aaacb24be906ccecfde829325eff91a92d5f42c7a4b0e25830483c8818cdf01befce14b129c259520b829113b721bfb96aa494174f054547a56e8306b3b89d38c03d0fdac9de7d2fc7b57236d8e4bf11d632a29c82"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "f283cf3029d8fc6ad239f719360bb1175227003041e0b0fe8ba78fa3c5e901cf0bc280d913ae4905b6e36ab70e3ae8632718ac17a7e79e2fc21e4e89bd60960f3c17cd3d0a8ebdf4ab5347"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "34ea5a86aae546b893d83ef1d1e5cd7486f369fe99643c966c4b35e4b96982e19becad3b5f9c7b9e475651498abda835b72361d64b29c53bb09041838441e8716c82601cf4b1765002090074b13a3a3567f029431b7b52cd353dd5c3a3d1bebbfdfd046f0775608324a2ff057796023bbf7bae7600f31f3f49c276b713536496c4f3e6c48ee2cf332661544747ff4cee058194fd3ce27997859d58291d9a"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "7ada2b8e27c68750d87838d88261105e1971215e973ef0308c41fb975e1e113d320f28df89cdd302459bf4514f1ca4d67ba3d474714b22ac02f45699595392bfbafef125729fa10cb3ab40716f9d17333e9f40acdf640cf61ad29457804c499a87cf06c1f14f96e8d4816fbc451c967a14ed81c80e0e2066e0e02665fa364e3e280297cd18712da134b7215b8a262d3cf54ba399ce3bbd60ac6296feeb7b41a635d92c206d21bfe57cdae9b65c212662bb6a1be70bfa84773103d829b27b1bd294c03d6d44ae652c913ca8faeac9494e7b35f93d32419e243173be181546ddf89ac4ab959f7d"}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x28000000}, 0x200400c4) openat$cgroup_devices(r2, &(0x7f0000000a40)='devices.deny\x00', 0x2, 0x0) r8 = syz_clone3(&(0x7f0000000e40)={0x204000800, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80), {0x30}, &(0x7f0000000cc0)=""/9, 0x9, &(0x7f0000000d00)=""/247, &(0x7f0000000e00)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r7}}, 0x58) r9 = syz_clone3(&(0x7f00000010c0)={0x200070000, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40), {0xb}, &(0x7f0000000f80)=""/161, 0xa1, &(0x7f0000001040)=""/20, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x7, {r7}}, 0x58) syz_clone3(&(0x7f0000001180)={0x41000000, &(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00), {0x31}, &(0x7f0000000b40)=""/58, 0x3a, &(0x7f0000000b80)=""/70, &(0x7f0000001140)=[r8, r9], 0x2, {r5}}, 0x58) lseek(0xffffffffffffffff, 0x8708, 0x2) 11:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x2, 0x3, 0xff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 565.521732][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 565.548178][ T8311] BUG at mt_find:6473 (1) [ 565.579530][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 565.655796][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 11:22:05 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 565.704908][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c 11:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) [ 565.874803][ T8311] 0-536866815: 0000000000000000 [ 565.880543][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 565.890259][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 565.896748][ T8311] 553635840-553639935: 0000000000000000 [ 565.903159][ T8311] 553639936-553635839: ffff88805ff72d20 [ 565.910382][ T8311] 553635840-553648127: ffff8880217871c0 [ 565.919803][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 565.926567][ T8311] 553652224-116813594623: 0000000000000000 [ 565.933142][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 565.952943][ T8311] 116817788928-93825015144447: 0000000000000000 [ 565.981392][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 566.350771][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 566.475876][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 566.554254][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d 11:22:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:22:06 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 11:22:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x9, 0x0, 0x80000000}, 0x48) 11:22:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) dup3(r2, r1, 0x80000) [ 566.630116][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 566.714181][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 566.721209][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 566.764511][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 566.794882][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 566.801886][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 566.810886][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 566.817951][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 566.825254][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 566.832345][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 566.848670][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 566.856047][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 566.863090][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 566.878835][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 566.901828][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 567.064318][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 567.071337][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 567.155125][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 567.162150][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 567.194131][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 567.228176][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 567.266077][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 567.280328][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 567.366791][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 567.398067][ T8311] Pass: 10972914 Run:10973115 [ 567.406008][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 567.415827][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 567.425870][ T8311] Call Trace: [ 567.429142][ T8311] [ 567.432062][ T8311] dump_stack_lvl+0xd1/0x138 [ 567.436652][ T8311] mt_find.cold+0x8b/0x90 [ 567.440981][ T8311] ? mas_find+0x1d0/0x1d0 [ 567.445397][ T8311] find_vma+0x10c/0x1b0 [ 567.449543][ T8311] ? can_vma_merge_before+0x390/0x390 [ 567.454926][ T8311] ? walk_page_test+0x1b/0x180 [ 567.459736][ T8311] ? walk_page_test+0x78/0x180 [ 567.465063][ T8311] walk_page_range+0x2b1/0x4a0 [ 567.469864][ T8311] ? __walk_page_range+0x780/0x780 [ 567.475012][ T8311] mlock_fixup+0x650/0x810 [ 567.479464][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 567.484695][ T8311] ? mlock_fixup+0x810/0x810 [ 567.489321][ T8311] ? do_futex+0x132/0x360 [ 567.493762][ T8311] do_mlock+0x25a/0x6d0 [ 567.497961][ T8311] ? xfd_validate_state+0x5d/0x180 [ 567.503085][ T8311] ? folio_evictable+0x270/0x270 [ 567.508058][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 567.512842][ T8311] do_syscall_64+0x39/0xb0 [ 567.517277][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 567.523181][ T8311] RIP: 0033:0x7fafb788c0c9 [ 567.527604][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.547308][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 567.555733][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 567.563710][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 567.571688][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 567.579675][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.587648][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 567.595735][ T8311] [ 567.624581][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 567.634387][ T8311] BUG at mt_find:6473 (1) [ 567.640860][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 567.684492][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 567.742217][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 567.804384][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.810726][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.830732][ T8311] 0-536866815: 0000000000000000 [ 567.894977][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 567.901063][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 567.910025][ T8311] 553635840-553639935: 0000000000000000 [ 567.916908][ T8311] 553639936-553635839: ffff88805ff72d20 [ 567.922928][ T8311] 553635840-553648127: ffff8880217871c0 [ 567.932960][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 567.943720][ T8311] 553652224-116813594623: 0000000000000000 [ 567.950877][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 567.957930][ T8311] 116817788928-93825015144447: 0000000000000000 [ 567.965811][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 567.972700][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 567.981092][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 567.988449][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 568.048572][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 568.055989][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 568.063655][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 568.086549][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 568.093631][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 568.114992][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 568.122081][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 568.139926][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 568.165026][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 568.184368][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 568.203007][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 568.210467][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 568.228145][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 568.241551][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 568.274625][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 568.358611][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 568.382296][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 568.399802][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 568.412188][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 568.437794][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 568.452330][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 568.462436][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 568.482436][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 568.503485][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 568.512862][ T8311] Pass: 10973025 Run:10973227 [ 568.531071][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 568.541023][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 568.551108][ T8311] Call Trace: [ 568.554405][ T8311] [ 568.557355][ T8311] dump_stack_lvl+0xd1/0x138 [ 568.562137][ T8311] mt_find.cold+0x8b/0x90 [ 568.566504][ T8311] ? mas_find+0x1d0/0x1d0 [ 568.570879][ T8311] find_vma+0x10c/0x1b0 [ 568.575056][ T8311] ? can_vma_merge_before+0x390/0x390 [ 568.580456][ T8311] ? walk_page_test+0x1b/0x180 [ 568.585254][ T8311] ? walk_page_test+0x78/0x180 [ 568.590051][ T8311] walk_page_range+0x2b1/0x4a0 [ 568.594855][ T8311] ? __walk_page_range+0x780/0x780 [ 568.600024][ T8311] mlock_fixup+0x650/0x810 [ 568.604491][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 568.609730][ T8311] ? mlock_fixup+0x810/0x810 [ 568.614887][ T8311] ? do_futex+0x132/0x360 [ 568.619256][ T8311] do_mlock+0x25a/0x6d0 [ 568.623454][ T8311] ? xfd_validate_state+0x5d/0x180 [ 568.628600][ T8311] ? folio_evictable+0x270/0x270 [ 568.633600][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 568.638404][ T8311] do_syscall_64+0x39/0xb0 [ 568.642866][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 568.648786][ T8311] RIP: 0033:0x7fafb788c0c9 [ 568.653223][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 568.672938][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 568.681377][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 568.689369][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 568.697360][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 568.705346][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.713334][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 568.721352][ T8311] [ 568.747513][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 568.753459][ T8311] BUG at mt_find:6473 (1) [ 568.773043][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 568.794272][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 568.843724][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 568.904317][ T8311] 0-536866815: 0000000000000000 [ 568.909587][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 568.934139][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 568.940091][ T8311] 553635840-553639935: 0000000000000000 [ 568.949004][ T8311] 553639936-553635839: ffff88805ff72d20 [ 568.955384][ T8311] 553635840-553648127: ffff8880217871c0 [ 568.961318][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 568.967692][ T8311] 553652224-116813594623: 0000000000000000 [ 568.973883][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 568.980449][ T8311] 116817788928-93825015144447: 0000000000000000 [ 568.988622][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 568.995757][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 569.002756][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 569.020594][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 569.106939][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 569.121862][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 569.129108][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 569.137641][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 569.152921][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 569.160240][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 569.168234][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 569.175561][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 569.182536][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 569.190361][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 569.198956][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 569.208756][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 569.222708][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 569.232973][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 569.252561][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 569.332524][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 569.341329][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 569.354389][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 569.372932][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 569.394121][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 569.404136][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 569.411170][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 569.418262][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 569.425304][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 569.432719][ T8311] Pass: 10973025 Run:10973228 [ 569.437528][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 569.447356][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 569.457433][ T8311] Call Trace: [ 569.460730][ T8311] [ 569.463683][ T8311] dump_stack_lvl+0xd1/0x138 [ 569.468327][ T8311] mt_find.cold+0x8b/0x90 [ 569.472694][ T8311] ? mas_find+0x1d0/0x1d0 [ 569.477070][ T8311] find_vma+0x10c/0x1b0 [ 569.481248][ T8311] ? can_vma_merge_before+0x390/0x390 [ 569.486643][ T8311] ? walk_page_test+0x1b/0x180 [ 569.491438][ T8311] ? walk_page_test+0x78/0x180 [ 569.496354][ T8311] walk_page_range+0x2b1/0x4a0 [ 569.501174][ T8311] ? __walk_page_range+0x780/0x780 [ 569.506347][ T8311] mlock_fixup+0x650/0x810 [ 569.510813][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 569.516048][ T8311] ? mlock_fixup+0x810/0x810 [ 569.520687][ T8311] ? do_futex+0x132/0x360 [ 569.525060][ T8311] do_mlock+0x25a/0x6d0 [ 569.529256][ T8311] ? xfd_validate_state+0x5d/0x180 [ 569.534396][ T8311] ? folio_evictable+0x270/0x270 [ 569.539393][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 569.544370][ T8311] do_syscall_64+0x39/0xb0 [ 569.548825][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 569.554746][ T8311] RIP: 0033:0x7fafb788c0c9 [ 569.559189][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.578820][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 569.587256][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 569.595246][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 569.603237][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 569.611230][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.619220][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 569.627241][ T8311] [ 569.644684][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 569.650625][ T8311] BUG at mt_find:6473 (1) [ 569.663145][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 569.673324][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 569.713027][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 569.767857][ T8311] 0-536866815: 0000000000000000 [ 569.780162][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 569.796401][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 569.802345][ T8311] 553635840-553639935: 0000000000000000 [ 569.817259][ T8311] 553639936-553635839: ffff88805ff72d20 [ 569.823209][ T8311] 553635840-553648127: ffff8880217871c0 [ 569.837019][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 569.842964][ T8311] 553652224-116813594623: 0000000000000000 [ 569.871603][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 569.883416][ T8311] 116817788928-93825015144447: 0000000000000000 [ 569.890537][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 569.903173][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 569.912082][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 569.919432][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 569.975556][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 569.987702][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 569.999497][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 570.006871][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 570.015326][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 570.022393][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 570.030808][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 570.045502][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 570.052595][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 570.060026][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 570.067325][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 570.075111][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 570.082166][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 570.091407][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 570.099083][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 570.160327][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 570.173231][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 570.190288][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 570.202704][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 570.222484][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 570.232303][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 570.254166][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 570.261168][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 570.278542][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 570.292109][ T8311] Pass: 10973025 Run:10973229 [ 570.301225][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 570.311064][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 570.321147][ T8311] Call Trace: [ 570.324440][ T8311] [ 570.327386][ T8311] dump_stack_lvl+0xd1/0x138 [ 570.332017][ T8311] mt_find.cold+0x8b/0x90 [ 570.336387][ T8311] ? mas_find+0x1d0/0x1d0 [ 570.340765][ T8311] find_vma+0x10c/0x1b0 [ 570.344945][ T8311] ? can_vma_merge_before+0x390/0x390 [ 570.350343][ T8311] ? walk_page_test+0x1b/0x180 [ 570.355133][ T8311] ? walk_page_test+0x78/0x180 [ 570.359934][ T8311] walk_page_range+0x2b1/0x4a0 [ 570.364736][ T8311] ? __walk_page_range+0x780/0x780 [ 570.369900][ T8311] mlock_fixup+0x650/0x810 [ 570.374381][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 570.379624][ T8311] ? mlock_fixup+0x810/0x810 [ 570.384267][ T8311] ? do_futex+0x132/0x360 [ 570.388642][ T8311] do_mlock+0x25a/0x6d0 [ 570.392855][ T8311] ? xfd_validate_state+0x5d/0x180 [ 570.398017][ T8311] ? folio_evictable+0x270/0x270 [ 570.403027][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 570.407838][ T8311] do_syscall_64+0x39/0xb0 [ 570.412294][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 570.418218][ T8311] RIP: 0033:0x7fafb788c0c9 [ 570.422653][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 570.442372][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 570.450812][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 570.458803][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 570.466793][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 570.474781][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.482768][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 570.490783][ T8311] [ 570.534152][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 570.540104][ T8311] BUG at mt_find:6473 (1) [ 570.564065][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 570.572527][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 570.669509][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 570.725581][ T8311] 0-536866815: 0000000000000000 [ 570.746086][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 570.752042][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 570.784866][ T8311] 553635840-553639935: 0000000000000000 [ 570.790826][ T8311] 553639936-553635839: ffff88805ff72d20 [ 570.804269][ T8311] 553635840-553648127: ffff8880217871c0 [ 570.810210][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 570.825239][ T8311] 553652224-116813594623: 0000000000000000 [ 570.842938][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 570.851185][ T8311] 116817788928-93825015144447: 0000000000000000 [ 570.868593][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 570.880716][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 570.895050][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 570.912449][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 570.986387][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 11:22:10 executing program 3: setrlimit(0xe, &(0x7f0000000380)={0xbe, 0x7fff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x802, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x510, &(0x7f0000000f40)="$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") 11:22:10 executing program 0: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xba88d0, &(0x7f0000000300)=ANY=[], 0x1, 0x4fe, &(0x7f0000000f00)="$eJzs3c9vFG8ZAPBnpvTnt1BQDmpUENFqCNt2gYZwwovGEBIj8eQBars0TXe7TXeLtHIo/4OJJJ70aDx5MPFgwsm7N715wUQTVKKhJB7G7I/W0u7SH7TdfrufTzLZmXk7+zwvzczLPLudN4CudTki1iKiLyIeRcRIc3/SXOJuY6n93Ns3z6bX3zybTiLLHvwzqbfX9sWWY2o+ab7nQER8/zsRP0p2xq2srM5PFYuFpeb2r/9WWhyrrKxenytNzRZmCwv5/OTE5PjtG7fyh9bXS6XfvP723L0f/P53X3r1x7Vv/qSW1nCzbWs/DlOj672bcWrORMS9owjWAT3N/vR1OhEOJI2Iz0TElfr5PxI99d/m7nqPPDMA4Khk2UhkI1u3AYDTLq3XwJI016wFDEea5nKNGt7FGEqL5Ur12uPy8sJMo1Z2PnrTx3PFwnizVng+epPa9kR9/f/b+W3bNyLiQkT8tH+wvp2bLhdnOvkfHwDoYp9sG///098Y/wGAU26g0wkAAMeuxfj/4e/3Zf1HlwwAcCzc/wNA9zH+A0D3Mf4DQPc56Pi/dsh5AADHx/0/AHSV792/X1uy9ebzr2eerCzPl59cnylU5nOl5encdHlpMTdbLs/Wn9lT2u39iuXy4sTNWH46Vi1UqmOVldWHpfLyQvVh/bneDwueGwwAnXfh0ss/JxGxdmewvsSWuRyM1XC6pZ1OAOiYnk4nAHTM3mb7Ak6j/d/j9x38UOBEajFF73sGImKwVcOLNgf4bjCceKOfV/+HbqX+D91L/R+6l/o/dK8sS8z5DwBdRo0f2OXz/1+1fUTIzs//lRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoGhvz/+aac4EPR5rmchFnI+J89CaP54qF8Yg4FxF/6u/tr21PdDhnAOBjpX9PmvN/jY5cHd7e2pe866+/RsSPf/7gZ0+nqtWlidr+f23ur75o7s/vN/ZalmWDWZYdUlcAgJY2xumNcXzD2zfPpjeW48zn9bciYqARf725NFrONCcSHYjeiBj6d/LexKLJltrFx1h7HhGfa9X/JIbrNZDGzKfb49dinz3W+Ol78dN6W+O19m/x2UPIBbrNy9r1526r8y+Ny/XX1uf/wCFNdNy8/tXeatv1L928/vW0uf5d3muMm3/4btu25xFfOBOxvuP6m2zGT9rEv7rH+H/54pevtGvLfhExGq3jb401Vi0tjlVWVq/PlaZmC7OFhXx+cmJy/PaNW/mxeo16bKNSvdM/7lw796H+D7WJP7BL/7+2x/7/8r+PfviV1r2v3/l+46ut4qdx8QPxa2Pi1/cYf2rot22n7671f6ZN/3f7/V/bY/xXf12d2eOPAgDHoLKyOj9VLBaWPg0rcTLSsHJKVkYvRJyANPa70hf7OirLDhSr3RXjMKpuwEmwedJHxLtOJwMAAAAAAAAAAAAAALR0HH+x1Cpu2wcSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD78LwAA//9Zi+B9") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0xff, 0x20000000c0000001, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfb]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="66b8cf008ee00f01f8680d0000000f20c035040000000f22c0c744240000000000c7442402784e0000c7442406000000000f011424f3440f090f06440f086645dee9c40239094f00", 0x48}], 0x1, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:10 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='mountinfo\x00') ppoll(&(0x7f0000000100)=[{r0, 0x8209}], 0x1, 0x0, 0x0, 0x0) 11:22:10 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:22:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 11:22:10 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) [ 570.993566][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 571.000639][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 571.009197][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 571.016760][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 571.033747][ T8311] 140392670429184-140392674623487: ffff8880668dc620 11:22:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x4}}]}, 0x68}}, 0x0) [ 571.083557][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 571.110411][ T9660] loop0: detected capacity change from 0 to 512 [ 571.122340][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 571.129691][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 571.137034][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 571.145373][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 571.152742][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 571.160760][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 571.169567][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 571.182438][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 11:22:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) [ 571.237744][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 571.250936][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 571.269700][ T8311] 140392689410048-140392689541119: ffff8880284f8700 11:22:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x5, 0x0, 0x0) [ 571.316427][ T8311] 140392689541120-140727980978175: 0000000000000000 11:22:11 executing program 1: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x1}, @phonet={0x23, 0x99, 0xf9, 0x4}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 571.367162][ T9670] loop3: detected capacity change from 0 to 512 [ 571.378587][ T8311] 140727980978176-140727981113343: ffff8880284f8460 11:22:11 executing program 0: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffd95, 0x0) [ 571.435440][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 571.461441][ T9670] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1095: group 0, block bitmap and bg descriptor inconsistent: 106 vs 41 free clusters [ 571.478270][ T9670] Quota error (device loop3): write_blk: dquota write failed [ 571.486256][ T9670] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 571.496670][ T9670] Quota error (device loop3): write_blk: dquota write failed [ 571.504225][ T9670] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 571.523718][ T9670] Quota error (device loop3): write_blk: dquota write failed [ 571.532199][ T9670] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 571.542465][ T9670] EXT4-fs (loop3): 1 orphan inode deleted [ 571.549176][ T9670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 571.561431][ T9670] ext4 filesystem being mounted at /root/syzkaller-testdir1805371848/syzkaller.ns3hQ3/53/file0 supports timestamps until 2038 (0x7fffffff) 11:22:11 executing program 5: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0xffffff7f, 0x0) [ 571.604419][ T28] INFO: task syz-executor.3:8309 blocked for more than 153 seconds. [ 571.612544][ T28] Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 11:22:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="11000003000004002cbd7000fbdbdf250000dfa861bec05300"], 0x14}, 0x1, 0x0, 0x0, 0x881}, 0x40) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x9, 0xfffffffffffffffc}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x200, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x848}, 0x24004000) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {}, 0x3}) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x5105, 0x0, 0x0, {{'ecb(xeta-generic)\x00'}}}, 0xe0}}, 0x0) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000029fc3667", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x35, 0x2004, @fd_index=0x1, 0x8, 0xffff, 0x3, 0x6, 0x0, {0x3}}, 0x7ebc) r3 = socket(0x2, 0x3, 0xff) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) 11:22:11 executing program 0: request_key(&(0x7f0000000280)='blacklist\x00', 0x0, 0x0, 0x0) 11:22:11 executing program 3: syz_clone3(&(0x7f0000001700)={0x1125000, 0x0, 0x0, &(0x7f0000001540), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:22:11 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) [ 571.672181][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 11:22:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001780)=0x7) [ 571.722485][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 571.740981][ T28] task:syz-executor.3 state:D stack:28256 pid:8309 ppid:5112 flags:0x00000004 [ 571.759877][ T9693] caif:caif_disconnect_client(): nothing to disconnect [ 571.788456][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 571.837005][ T28] Call Trace: [ 571.847450][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 571.863347][ T28] [ 571.889252][ T28] __schedule+0x25d0/0x5a70 [ 571.913767][ T8311] Pass: 11005747 Run:11005952 [ 571.922834][ T28] ? lock_chain_count+0x20/0x20 [ 571.945129][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 571.953181][ T28] ? io_schedule_timeout+0x150/0x150 [ 571.954973][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 571.954989][ T8311] Call Trace: [ 571.954997][ T8311] [ 571.955007][ T8311] dump_stack_lvl+0xd1/0x138 [ 571.955045][ T8311] mt_find.cold+0x8b/0x90 [ 571.955082][ T8311] ? mas_find+0x1d0/0x1d0 [ 571.955126][ T8311] find_vma+0x10c/0x1b0 [ 571.955152][ T8311] ? can_vma_merge_before+0x390/0x390 [ 571.955177][ T8311] ? walk_page_test+0x1b/0x180 [ 571.955205][ T8311] ? walk_page_test+0x78/0x180 [ 571.955240][ T8311] walk_page_range+0x2b1/0x4a0 [ 572.013698][ T8311] ? __walk_page_range+0x780/0x780 [ 572.018848][ T8311] mlock_fixup+0x650/0x810 [ 572.023292][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 572.028518][ T8311] ? mlock_fixup+0x810/0x810 [ 572.033136][ T8311] ? do_futex+0x132/0x360 [ 572.037490][ T8311] do_mlock+0x25a/0x6d0 [ 572.041663][ T8311] ? xfd_validate_state+0x5d/0x180 [ 572.046787][ T8311] ? folio_evictable+0x270/0x270 [ 572.051789][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 572.056576][ T8311] do_syscall_64+0x39/0xb0 [ 572.061016][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 572.066930][ T8311] RIP: 0033:0x7fafb788c0c9 [ 572.071355][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.090982][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 572.099410][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 572.107399][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 572.115377][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 572.123352][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.131326][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 572.139318][ T8311] [ 572.181154][ T9701] sp0: Synchronizing with TNC [ 572.192515][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 11:22:12 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = dup(r0) open_tree(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x56f, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x6903, 0x0, 0x9, 0x0, 0x0) 11:22:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 572.237113][ T28] schedule+0xde/0x1b0 [ 572.252582][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 572.298479][ T28] ? down_write+0x220/0x220 11:22:12 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu], &(0x7f0000000080)='GPL\x00', 0x0, 0x2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 572.318921][ T28] ? lock_release+0x810/0x810 [ 572.338632][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 572.383498][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 572.402398][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 572.414312][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 572.427961][ T8311] BUG at mt_find:6473 (1) 11:22:12 executing program 5: syz_clone3(&(0x7f0000000240)={0x10c100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 572.441664][ T28] ? lock_acquire+0x32/0xc0 [ 572.451079][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 572.471954][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 572.499197][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 572.544285][ T28] down_read+0xe6/0x450 [ 572.564852][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 572.611437][ T28] do_user_addr_fault+0xa51/0x1210 [ 572.653738][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 572.683760][ T28] exc_page_fault+0x98/0x170 [ 572.704304][ T28] asm_exc_page_fault+0x26/0x30 [ 572.727146][ T28] RIP: 0033:0x7fafb78276c6 [ 572.745833][ T28] RSP: 002b:00007ffdc952ec38 EFLAGS: 00010287 [ 572.755751][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 572.830138][ T28] RAX: 0000001b32a22000 RBX: 00007fafb79ac018 RCX: 0000001b32a20000 [ 572.889879][ T28] RDX: 0000001b32a22004 RSI: 0000001b32a21ca8 RDI: 00000000f48f0ce5 [ 572.935845][ T28] RBP: 00000000f48f0ce5 R08: 0000001b32e20000 R09: 00000000f48f0ce9 [ 572.989804][ T28] R10: 00007ffdc95ed090 R11: 000000000001356c R12: 00007fafb79a0000 [ 573.045596][ T8311] 0-536866815: 0000000000000000 [ 573.048611][ T28] R13: 0000000000000001 R14: 000000000000233a R15: ffffffff89b848a0 [ 573.050839][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 573.050869][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 573.050893][ T8311] 553635840-553639935: 0000000000000000 [ 573.076911][ T8311] 553639936-553635839: ffff88805ff72d20 [ 573.084688][ T8311] 553635840-553648127: ffff8880217871c0 [ 573.090639][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 573.097358][ T8311] 553652224-116813594623: 0000000000000000 [ 573.103666][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 573.110249][ T8311] 116817788928-93825015144447: 0000000000000000 [ 573.139619][ T28] ? number+0x6d0/0xad0 [ 573.179368][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 573.198762][ T28] [ 573.206860][ T28] [ 573.206860][ T28] Showing all threads with locks held in the system: [ 573.217521][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 573.248085][ T8370] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.276002][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 573.289660][ T28] task:rcu_tasks_kthre state:I stack:29056 pid:12 ppid:2 flags:0x00004000 [ 573.303339][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 573.365645][ T28] Call Trace: [ 573.374527][ T28] [ 573.380878][ T28] __schedule+0x25d0/0x5a70 [ 573.408661][ T28] ? lock_chain_count+0x20/0x20 [ 573.413780][ T28] ? find_held_lock+0x2d/0x110 [ 573.421679][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 573.442445][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 573.442935][ T28] ? io_schedule_timeout+0x150/0x150 [ 573.468203][ T28] ? mark_held_locks+0x9f/0xe0 [ 573.473328][ T28] schedule+0xde/0x1b0 [ 573.475250][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 573.488064][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 573.496099][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 573.502512][ T28] rcu_tasks_kthread+0x77/0xa0 [ 573.503642][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 573.516053][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 573.516742][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 573.533224][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 573.541565][ T28] kthread+0x2e8/0x3a0 [ 573.547619][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 573.555336][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.562367][ T28] ret_from_fork+0x1f/0x30 [ 573.573955][ T28] [ 573.577803][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 573.580020][ T28] 1 lock held by rcu_tasks_kthre/12: [ 573.590221][ T28] #0: ffffffff8c7929f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 573.593003][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 573.617047][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 573.624200][ T28] task:rcu_tasks_trace state:I stack:29224 pid:13 ppid:2 flags:0x00004000 [ 573.628570][ T8311] 140392676204544-140392676241407: [ 573.633432][ T28] Call Trace: [ 573.633443][ T28] [ 573.633459][ T28] __schedule+0x25d0/0x5a70 [ 573.633489][ T28] ? lock_chain_count+0x20/0x20 [ 573.639868][ T8311] ffff8880284f87e0 [ 573.651320][ T28] ? find_held_lock+0x2d/0x110 [ 573.655587][ T8311] 140392676241408-140392676261887: [ 573.661674][ T28] ? io_schedule_timeout+0x150/0x150 [ 573.663793][ T8311] 0000000000000000 [ 573.669385][ T28] ? mark_held_locks+0x9f/0xe0 [ 573.669422][ T28] schedule+0xde/0x1b0 [ 573.675489][ T8311] 140392676261888-140392688107519: [ 573.687530][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 573.687596][ T28] rcu_tasks_kthread+0x77/0xa0 [ 573.687617][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 573.687642][ T28] kthread+0x2e8/0x3a0 [ 573.687665][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 573.687695][ T28] ret_from_fork+0x1f/0x30 [ 573.687890][ T28] [ 573.687902][ T28] 1 lock held by rcu_tasks_trace/13: [ 573.687918][ T28] #0: ffffffff8c7926f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 573.706785][ T8311] ffff8880284f89a0 [ 573.721462][ T28] task:dhcpcd state:D [ 573.726488][ T8311] 140392688107520-18446744073709551615: [ 573.730605][ T28] stack:22968 pid:4650 ppid:4649 flags:0x00000000 [ 573.733410][ T8311] node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 [ 573.760283][ T28] Call Trace: [ 573.766849][ T8311] contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 573.818182][ T28] [ 573.818204][ T28] __schedule+0x25d0/0x5a70 [ 573.818233][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.818282][ T28] ? io_schedule_timeout+0x150/0x150 [ 573.818308][ T28] ? __mutex_lock+0xa43/0x1360 [ 573.818348][ T28] schedule+0xde/0x1b0 [ 573.818374][ T28] schedule_preempt_disabled+0x13/0x20 [ 573.818399][ T28] __mutex_lock+0xa48/0x1360 [ 573.818426][ T28] ? __rhashtable_lookup.constprop.0+0x314/0x630 [ 573.818516][ T28] ? __netlink_dump_start+0x16e/0x910 [ 573.818545][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 573.818583][ T28] ? __rhashtable_lookup.constprop.0+0x630/0x630 [ 573.818614][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 573.818638][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 573.818670][ T28] __netlink_dump_start+0x16e/0x910 [ 573.818705][ T28] rtnetlink_rcv_msg+0x761/0xd50 [ 573.818739][ T28] ? rtnl_fill_ifinfo+0x4790/0x4790 [ 573.818768][ T28] ? rtnl_fdb_dump+0x9b0/0x9b0 [ 573.818793][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 573.818820][ T28] ? rtnl_fill_ifinfo+0x4790/0x4790 [ 573.818847][ T28] ? kasan_set_track+0x25/0x30 [ 573.818908][ T28] ? __kasan_kmalloc+0xa2/0xb0 [ 573.818933][ T28] ? __kmalloc_node_track_caller+0x5b/0xc0 [ 573.818973][ T28] ? __alloc_skb+0xe9/0x310 [ 573.819003][ T28] ? netlink_sendmsg+0x9b0/0xe20 [ 573.819027][ T28] ? sock_sendmsg+0xd3/0x120 [ 573.819079][ T28] netlink_rcv_skb+0x165/0x440 [ 573.819109][ T28] ? rtnl_fdb_dump+0x9b0/0x9b0 [ 573.819135][ T28] ? netlink_ack+0x1370/0x1370 [ 573.828661][ T8311] 140392688107520-140392689405951: [ 573.834395][ T28] ? netlink_deliver_tap+0x1b1/0xcf0 [ 573.852381][ T8311] 0000000000000000 [ 573.855318][ T28] netlink_unicast+0x547/0x7f0 [ 573.859481][ T8311] 140392689405952-140392689410047: [ 573.882291][ T28] ? netlink_attachskb+0x890/0x890 [ 573.887611][ T8311] ffff88802bb0fd20 [ 573.901578][ T28] ? __virt_addr_valid+0x61/0x2e0 [ 573.904135][ T8311] 140392689410048-140392689541119: [ 573.909076][ T28] ? __phys_addr_symbol+0x30/0x70 [ 573.913830][ T8311] ffff8880284f8700 [ 573.938016][ T28] ? __check_object_size+0x2e2/0x5a0 [ 573.942950][ T8311] 140392689541120-140727980978175: [ 573.953262][ T28] netlink_sendmsg+0x925/0xe20 [ 573.956838][ T8311] 0000000000000000 [ 573.962796][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 573.965047][ T8311] 140727980978176-140727981113343: [ 573.975810][ T28] ? __might_fault+0xa9/0x180 [ 573.980930][ T8311] ffff8880284f8460 [ 574.000989][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 574.005425][ T8311] 140727981113344-140727981887487: [ 574.038927][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 574.043158][ T8311] 0000000000000000 [ 574.049930][ T28] sock_sendmsg+0xd3/0x120 [ 574.055389][ T8311] 140727981887488-140727981903871: [ 574.065563][ T28] __sys_sendto+0x23a/0x340 [ 574.070149][ T8311] ffff8880284f8a80 [ 574.073342][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 574.073396][ T28] ? __sys_getsockname+0x159/0x1f0 [ 574.078715][ T8311] 140727981903872-140727981912063: [ 574.093840][ T28] ? __ia32_sys_connect+0xb0/0xb0 [ 574.097985][ T8311] ffff8880284f8c40 [ 574.101064][ T28] ? __ia32_sys_socketpair+0x100/0x100 [ 574.107432][ T8311] 140727981912064-18446744073709551615: [ 574.122943][ T28] ? fd_install+0x201/0x6f0 [ 574.126434][ T8311] 0000000000000000 [ 574.134423][ T28] ? __sys_socket+0x8e/0x250 [ 574.138067][ T8311] Pass: 11010700 Run:11010906 [ 574.142340][ T28] __x64_sys_sendto+0xe1/0x1b0 [ 574.146310][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 574.170414][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 574.180476][ T8311] Call Trace: [ 574.183760][ T8311] [ 574.186695][ T8311] dump_stack_lvl+0xd1/0x138 [ 574.191311][ T8311] mt_find.cold+0x8b/0x90 [ 574.195664][ T8311] ? mas_find+0x1d0/0x1d0 [ 574.200022][ T8311] find_vma+0x10c/0x1b0 [ 574.204192][ T8311] ? can_vma_merge_before+0x390/0x390 [ 574.209586][ T8311] ? walk_page_test+0x1b/0x180 [ 574.214382][ T8311] ? walk_page_test+0x78/0x180 [ 574.219259][ T8311] walk_page_range+0x2b1/0x4a0 [ 574.224056][ T8311] ? __walk_page_range+0x780/0x780 [ 574.229213][ T8311] mlock_fixup+0x650/0x810 [ 574.233678][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 574.238911][ T8311] ? mlock_fixup+0x810/0x810 [ 574.243539][ T8311] ? do_futex+0x132/0x360 [ 574.247898][ T8311] do_mlock+0x25a/0x6d0 [ 574.252077][ T8311] ? xfd_validate_state+0x5d/0x180 [ 574.257211][ T8311] ? folio_evictable+0x270/0x270 [ 574.262182][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 574.266970][ T8311] do_syscall_64+0x39/0xb0 [ 574.271407][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.277311][ T8311] RIP: 0033:0x7fafb788c0c9 [ 574.281731][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 574.301344][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 574.309784][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 574.317758][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 574.325732][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 574.333702][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.341678][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 574.349675][ T8311] [ 574.355388][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 574.361411][ T8311] BUG at mt_find:6473 (1) [ 574.365949][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 574.366181][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 574.374479][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 574.390376][ T28] do_syscall_64+0x39/0xb0 [ 574.420038][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 574.432563][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 574.473173][ T8311] 0-536866815: 0000000000000000 [ 574.483550][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 574.489679][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 574.495752][ T8311] 553635840-553639935: 0000000000000000 [ 574.497197][ T28] RIP: 0033:0x7f93d0823206 [ 574.501743][ T8311] 553639936-553635839: ffff88805ff72d20 [ 574.512330][ T8311] 553635840-553648127: ffff8880217871c0 [ 574.515516][ T28] RSP: 002b:00007ffc8d819708 EFLAGS: 00000246 [ 574.519408][ T8311] 553648128-553652223: [ 574.520350][ T28] ORIG_RAX: 000000000000002c [ 574.526535][ T8311] ffff8880668dc1c0 [ 574.540066][ T8311] 553652224-116813594623: 0000000000000000 [ 574.540321][ T28] RAX: ffffffffffffffda RBX: 00007ffc8d81a840 RCX: 00007f93d0823206 [ 574.546406][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 574.561411][ T8311] 116817788928-93825015144447: 0000000000000000 [ 574.563794][ T28] RDX: 0000000000000014 RSI: 00007ffc8d81a760 RDI: 000000000000000f [ 574.576214][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 574.576246][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 574.576271][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 574.576297][ T8311] 140392653651968-140392688107519: [ 574.599709][ T28] RBP: 00007ffc8d81a7d0 R08: 00007ffc8d81a744 R09: 000000000000000c [ 574.613430][ T8311] node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 574.623744][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8d81a760 [ 574.668613][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 574.681214][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 574.681297][ T28] R13: 00007ffc8d81a744 R14: 0000000000000000 R15: 00007ffc8d819710 [ 574.688675][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 574.703603][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 574.707839][ T28] [ 574.712612][ T8311] 140392668332032-140392670429183: [ 574.713645][ T28] 1 lock held by dhcpcd/4650: [ 574.713663][ T28] #0: ffffffff8e0c6128 [ 574.719612][ T8311] ffff8880668dc700 [ 574.741009][ T28] (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x16e/0x910 [ 574.742029][ T8311] 140392670429184-140392674623487: [ 574.749529][ T28] task:getty state:S [ 574.751431][ T8311] ffff8880668dc620 [ 574.755758][ T28] stack:23336 pid:4746 ppid:1 flags:0x00000000 [ 574.766352][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 574.771016][ T28] Call Trace: [ 574.781383][ T28] [ 574.784648][ T28] __schedule+0x25d0/0x5a70 [ 574.785251][ T8311] 140392674770944-140392675500031: [ 574.789266][ T28] ? __flush_work+0x8b8/0xb60 [ 574.790911][ T8311] ffff8880284f88c0 [ 574.795807][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 574.806230][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 574.809933][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 574.826117][ T28] ? io_schedule_timeout+0x150/0x150 [ 574.827410][ T8311] 140392675835904-140392675839999: [ 574.831545][ T28] schedule+0xde/0x1b0 [ 574.834301][ T8311] 0000000000000000 [ 574.838482][ T28] schedule_timeout+0x1e1/0x2a0 [ 574.841286][ T8311] 140392675840000-140392676204543: [ 574.845291][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 574.861860][ T28] ? __up_read+0x192/0x720 [ 574.864195][ T8311] ffff8880284f8ee0 [ 574.866730][ T28] ? down_read+0x19c/0x450 [ 574.870187][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 574.874903][ T28] ? up_write+0x520/0x520 [ 574.886670][ T28] wait_woken+0x197/0x200 [ 574.888576][ T8311] 140392676241408-140392676261887: [ 574.891171][ T28] n_tty_read+0x1055/0x13e0 [ 574.894519][ T8311] 0000000000000000 [ 574.897545][ T28] ? n_tty_receive_buf_closing+0x5b0/0x5b0 [ 574.902041][ T8311] 140392676261888-140392688107519: [ 574.905380][ T28] ? __init_waitqueue_head+0x150/0x150 [ 574.919755][ T8311] ffff8880284f89a0 [ 574.923015][ T28] tty_read+0x30e/0x5a0 [ 574.927950][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 574.932146][ T28] ? do_SAK+0x70/0x70 [ 574.983783][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 574.995952][ T28] ? fsnotify_perm.part.0+0x221/0x610 [ 575.001540][ T28] ? apparmor_file_permission+0x272/0x4e0 [ 575.006046][ T8311] 140392689405952-140392689410047: [ 575.007920][ T28] ? security_file_permission+0xaf/0xd0 [ 575.009722][ T8311] ffff88802bb0fd20 [ 575.013579][ T28] vfs_read+0x681/0x930 [ 575.022361][ T8311] 140392689410048-140392689541119: [ 575.023595][ T28] ? kernel_read+0x1c0/0x1c0 [ 575.036849][ T8311] ffff8880284f8700 [ 575.040011][ T28] ? __fget_light+0x20a/0x270 [ 575.041636][ T8311] 140392689541120-140727980978175: [ 575.046976][ T28] ksys_read+0x12b/0x250 [ 575.054150][ T8311] 0000000000000000 [ 575.057698][ T28] ? vfs_write+0xe10/0xe10 [ 575.062856][ T8311] 140727980978176-140727981113343: [ 575.065383][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 575.067503][ T8311] ffff8880284f8460 [ 575.071036][ T28] do_syscall_64+0x39/0xb0 [ 575.081558][ T8311] 140727981113344-140727981887487: [ 575.085732][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 575.090575][ T8311] 0000000000000000 [ 575.091375][ T28] RIP: 0033:0x7f04e27f98fe [ 575.102377][ T8311] 140727981887488-140727981903871: [ 575.108344][ T28] RSP: 002b:00007ffca24a29b8 EFLAGS: 00000246 [ 575.109995][ T8311] ffff8880284f8a80 [ 575.114872][ T28] ORIG_RAX: 0000000000000000 [ 575.125527][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 575.129158][ T28] RAX: ffffffffffffffda RBX: 000055fd7806a910 RCX: 00007f04e27f98fe [ 575.146209][ T28] RDX: 0000000000000001 RSI: 00007ffca24a29d0 RDI: 0000000000000000 [ 575.146498][ T8311] 140727981912064-18446744073709551615: [ 575.154591][ T28] RBP: 000055fd7806a970 R08: 0000000000000007 R09: 000055fd7806bcd0 [ 575.161529][ T8311] 0000000000000000 [ 575.169114][ T28] R10: 0000000000000063 R11: 0000000000000246 R12: 000055fd7806a9ac [ 575.173870][ T8311] Pass: 11010721 Run:11010928 [ 575.181165][ T28] R13: 00007ffca24a29d0 R14: 0000000000000000 R15: 000055fd7806a9ac [ 575.193597][ T28] [ 575.194186][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 575.197026][ T28] 2 locks held by getty/4746: [ 575.206395][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 575.206412][ T8311] Call Trace: [ 575.206420][ T8311] [ 575.206430][ T8311] dump_stack_lvl+0xd1/0x138 [ 575.206470][ T8311] mt_find.cold+0x8b/0x90 [ 575.211803][ T28] #0: [ 575.221193][ T8311] ? mas_find+0x1d0/0x1d0 [ 575.221243][ T8311] find_vma+0x10c/0x1b0 [ 575.221269][ T8311] ? can_vma_merge_before+0x390/0x390 [ 575.221293][ T8311] ? walk_page_test+0x1b/0x180 [ 575.221326][ T8311] ? walk_page_test+0x78/0x180 [ 575.221360][ T8311] walk_page_range+0x2b1/0x4a0 [ 575.227446][ T28] ffff88802a878098 [ 575.227570][ T8311] ? __walk_page_range+0x780/0x780 [ 575.232204][ T28] ( [ 575.236466][ T8311] mlock_fixup+0x650/0x810 [ 575.236517][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 575.236557][ T8311] ? mlock_fixup+0x810/0x810 [ 575.236601][ T8311] ? do_futex+0x132/0x360 [ 575.236641][ T8311] do_mlock+0x25a/0x6d0 [ 575.236675][ T8311] ? xfd_validate_state+0x5d/0x180 [ 575.236706][ T8311] ? folio_evictable+0x270/0x270 [ 575.236766][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 575.236807][ T8311] do_syscall_64+0x39/0xb0 [ 575.236846][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 575.236875][ T8311] RIP: 0033:0x7fafb788c0c9 [ 575.236897][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 575.236921][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 575.236947][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 575.236965][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 575.236980][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 575.237002][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.237017][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 575.237056][ T8311] [ 575.269612][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 575.276825][ T28] &tty->ldisc_sem [ 575.285337][ T8311] BUG at mt_find:6473 (1) [ 575.289739][ T28] ){++++}-{0:0} [ 575.302118][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 575.302931][ T28] , at: tty_ldisc_ref_wait+0x26/0x80 [ 575.309491][ T8311] 0-18446744073709551615: [ 575.313001][ T28] #1: [ 575.317638][ T8311] node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 [ 575.322320][ T28] ffffc900015b02f0 [ 575.339371][ T8311] contents: [ 575.355605][ T28] ( [ 575.376859][ T8311] 93708197355520 [ 575.377398][ T28] &ldata->atomic_read_lock [ 575.408651][ T8311] 20480 [ 575.411639][ T28] ){+.+.}-{3:3} [ 575.415924][ T8311] 18446603345727639552 [ 575.418677][ T28] , at: n_tty_read+0xef4/0x13e0 [ 575.421811][ T8311] 0 [ 575.430578][ T28] task:kworker/1:7 state:D [ 575.446694][ T8311] 0 [ 575.469357][ T28] stack:27184 pid:5213 ppid:2 flags:0x00004000 [ 575.473384][ T8311] 0 [ 575.476682][ T28] Workqueue: events pwq_unbound_release_workfn [ 575.483426][ T8311] 0 [ 575.484957][ T28] [ 575.487290][ T8311] 0 [ 575.491895][ T28] Call Trace: [ 575.491906][ T28] [ 575.491922][ T28] __schedule+0x25d0/0x5a70 [ 575.499659][ T8311] 0 [ 575.501548][ T28] ? io_schedule_timeout+0x150/0x150 [ 575.503807][ T8311] 0 [ 575.510934][ T28] ? preempt_schedule_common+0x59/0xc0 [ 575.517081][ T8311] | 02 02| [ 575.518674][ T28] schedule+0xde/0x1b0 [ 575.521009][ T8311] ffff8880775c880c 140392653651967 [ 575.523835][ T28] synchronize_rcu_expedited+0x706/0x770 [ 575.523876][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 575.534221][ T8311] ffff8880775c8e0c 140392688107519 [ 575.537354][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 575.544214][ T8311] ffff888072a30e0c 18446744073709551615 [ 575.546347][ T28] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 575.550959][ T8311] 0000000000000000 0 [ 575.551776][ T28] ? mark_lock.part.0+0xee/0x1910 [ 575.562159][ T8311] 0000000000000000 0 [ 575.563301][ T28] ? __schedule+0x25d8/0x5a70 [ 575.581064][ T8311] 0000000000000000 0 [ 575.586774][ T28] ? lock_chain_count+0x20/0x20 [ 575.595450][ T8311] 0000000000000000 0 [ 575.600623][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 575.614430][ T8311] 0000000000000000 0 [ 575.617691][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 575.627340][ T8311] 0000000000000000 0 [ 575.632190][ T28] synchronize_rcu+0x302/0x3b0 [ 575.644415][ T8311] 0000000000000000 [ 575.644431][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 575.646595][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 575.648561][ T8311] 0-536866815: [ 575.698749][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.704382][ T8311] 0000000000000000 [ 575.706964][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 575.722659][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.723137][ T8311] 536866816-536870911: [ 575.729190][ T28] lockdep_unregister_key+0x282/0x460 [ 575.739154][ T8311] ffff8880668dc9a0 [ 575.739170][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 575.739193][ T8311] 553635840-553639935: 0000000000000000 [ 575.739216][ T8311] 553639936-553635839: ffff88805ff72d20 [ 575.739239][ T8311] 553635840-553648127: ffff8880217871c0 [ 575.739261][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 575.739285][ T8311] 553652224-116813594623: 0000000000000000 [ 575.745923][ T28] ? lockdep_register_key+0x410/0x410 [ 575.766732][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 575.766764][ T8311] 116817788928-93825015144447: 0000000000000000 [ 575.766786][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 575.766808][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 575.766959][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 575.767072][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e [ 575.777505][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 575.779921][ T8311] contents: [ 575.793711][ T28] pwq_unbound_release_workfn+0x258/0x340 [ 575.797661][ T8311] ffff8880668dc8c0 140392662040575 [ 575.815577][ T28] process_one_work+0x9bf/0x1750 [ 575.819742][ T8311] ffff8880668dc380 140392664137727 [ 575.838721][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 575.843474][ T8311] ffff8880668dc7e0 140392666234879 [ 575.853674][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 575.860887][ T8311] ffff8880668dca80 140392668332031 [ 575.875740][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 575.875778][ T28] ? lock_acquire+0x32/0xc0 [ 575.875801][ T28] ? worker_thread+0x16d/0x1090 [ 575.875840][ T28] worker_thread+0x669/0x1090 [ 575.875883][ T28] ? process_one_work+0x1750/0x1750 [ 575.891144][ T8311] ffff8880668dc700 140392670429183 [ 575.899450][ T28] kthread+0x2e8/0x3a0 [ 575.901137][ T8311] ffff8880668dc620 140392674623487 [ 575.905606][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 575.905646][ T28] ret_from_fork+0x1f/0x30 [ 575.905700][ T28] [ 575.914594][ T8311] ffff8880284f8380 140392674770943 [ 575.915211][ T28] 2 locks held by kworker/1:7/5213: [ 575.924571][ T8311] ffff8880284f88c0 140392675500031 [ 575.928200][ T28] #0: [ 575.932868][ T8311] ffff8880284f80e0 140392675835903 [ 575.933259][ T28] ffff888012470d38 [ 575.948457][ T8311] 0000000000000000 140392675839999 [ 575.949164][ T28] ( [ 575.952846][ T8311] ffff8880284f8ee0 140392676204543 [ 575.957930][ T28] (wq_completion)events [ 575.973422][ T8311] ffff8880284f87e0 140392676241407 [ 575.978170][ T28] ){+.+.}-{0:0} [ 575.979523][ T8311] 0000000000000000 140392676261887 [ 575.984462][ T28] , at: process_one_work+0x86d/0x1750 [ 575.988309][ T8311] ffff8880284f89a0 140392688107519 [ 575.993209][ T28] #1: ffffc90004757da8 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 576.007576][ T8311] 0000000000000000 0 [ 576.017036][ T28] task:kworker/1:13 state:D stack:26640 pid:5255 ppid:2 flags:0x00004000 [ 576.017079][ T28] Workqueue: rcu_gp wait_rcu_exp_gp [ 576.017114][ T28] Call Trace: [ 576.017122][ T28] [ 576.017137][ T28] __schedule+0x25d0/0x5a70 [ 576.017165][ T28] ? mark_held_locks+0x9f/0xe0 [ 576.017196][ T28] ? find_held_lock+0x2d/0x110 [ 576.017243][ T28] ? io_schedule_timeout+0x150/0x150 [ 576.031267][ T8311] 000000000000000d [ 576.055963][ T28] ? mark_held_locks+0x9f/0xe0 [ 576.060440][ T8311] 140392653651968-140392662040575: [ 576.061722][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 576.065750][ T8311] ffff8880668dc8c0 [ 576.074241][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.076603][ T8311] 140392662040576-140392664137727: [ 576.080867][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 576.084877][ T8311] ffff8880668dc380 [ 576.094187][ T28] schedule+0xde/0x1b0 [ 576.096064][ T8311] 140392664137728-140392666234879: [ 576.100590][ T28] schedule_timeout+0x14e/0x2a0 [ 576.104629][ T8311] ffff8880668dc7e0 [ 576.123266][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 576.124175][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 576.130718][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 576.143055][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 576.150125][ T28] ? __next_timer_interrupt+0x2a0/0x2a0 [ 576.150767][ T8311] 140392674623488-140392674770943: [ 576.159486][ T28] ? __ipv6_ifa_notify.cold+0x43/0x48 [ 576.164139][ T8311] ffff8880284f8380 [ 576.165250][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 576.173843][ T8311] 140392674770944-140392675500031: [ 576.174256][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 576.174301][ T28] rcu_exp_wait_wake+0x28f/0x11c0 [ 576.174340][ T28] ? rcu_exp_handler+0x390/0x390 [ 576.174382][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 576.174417][ T28] ? rcu_gp_kthread+0x360/0x360 [ 576.174452][ T28] ? sync_rcu_exp_select_cpus+0x3de/0xab0 [ 576.174495][ T28] process_one_work+0x9bf/0x1750 [ 576.187942][ T8311] ffff8880284f88c0 [ 576.191186][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 576.202150][ T8311] 140392675500032-140392675835903: [ 576.207884][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 576.216645][ T8311] ffff8880284f80e0 [ 576.217973][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 576.222794][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 576.222822][ T8311] 140392675840000-140392676204543: [ 576.226618][ T28] ? lock_acquire+0x32/0xc0 [ 576.226645][ T28] ? worker_thread+0x16d/0x1090 [ 576.226684][ T28] worker_thread+0x669/0x1090 [ 576.226728][ T28] ? process_one_work+0x1750/0x1750 [ 576.226761][ T28] kthread+0x2e8/0x3a0 [ 576.226786][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 576.226817][ T28] ret_from_fork+0x1f/0x30 [ 576.242609][ T8311] ffff8880284f8ee0 [ 576.243453][ T28] [ 576.251257][ T8311] 140392676204544-140392676241407: [ 576.252133][ T28] 2 locks held by kworker/1:13/5255: [ 576.262529][ T8311] ffff8880284f87e0 [ 576.283848][ T28] #0: [ 576.286949][ T8311] 140392676241408-140392676261887: [ 576.289137][ T28] ffff888012472538 [ 576.303789][ T8311] 0000000000000000 [ 576.306213][ T28] ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 576.312467][ T8311] 140392676261888-140392688107519: [ 576.317763][ T28] #1: [ 576.329832][ T8311] ffff8880284f89a0 [ 576.333097][ T28] ffffc900048e7da8 [ 576.344115][ T8311] 140392688107520-18446744073709551615: [ 576.345408][ T28] ( [ 576.351679][ T8311] node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 [ 576.353661][ T28] (work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 576.368683][ T8311] contents: [ 576.370399][ T28] task:kworker/u4:10 state:D [ 576.378384][ T8311] 0000000000000000 140392689405951 [ 576.395545][ T28] stack:26112 pid:7099 ppid:2 flags:0x00004000 [ 576.395570][ T28] Workqueue: events_unbound io_ring_exit_work [ 576.395658][ T28] Call Trace: [ 576.395667][ T28] [ 576.395683][ T28] __schedule+0x25d0/0x5a70 [ 576.412702][ T8311] ffff88802bb0fd20 140392689410047 [ 576.421260][ T28] ? mark_held_locks+0x9f/0xe0 [ 576.425658][ T8311] ffff8880284f8700 140392689541119 [ 576.430999][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 576.444242][ T8311] 0000000000000000 140727980978175 [ 576.446270][ T28] ? io_schedule_timeout+0x150/0x150 [ 576.451488][ T8311] ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 [ 576.456898][ T28] ? add_timer_on+0x4e0/0x4e0 [ 576.456970][ T28] ? debug_object_free+0x360/0x360 [ 576.481954][ T28] schedule+0xde/0x1b0 [ 576.482455][ T8311] 0000000000000000 18446744073709551615 [ 576.486338][ T28] schedule_timeout+0x14e/0x2a0 [ 576.494606][ T8311] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 576.498958][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 576.517308][ T28] ? __wait_for_common+0x1c4/0x5c0 [ 576.522542][ T28] ? __next_timer_interrupt+0x2a0/0x2a0 [ 576.523431][ T8311] 140392688107520-140392689405951: [ 576.528644][ T28] ? 0xffffffff81000000 [ 576.529796][ T8311] 0000000000000000 [ 576.542360][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.542640][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 576.554171][ T28] __wait_for_common+0x1ce/0x5c0 [ 576.555367][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 576.560607][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 576.571000][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 576.582771][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 576.585849][ T28] ? bit_wait_timeout+0x160/0x160 [ 576.602535][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 576.610344][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 576.619280][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 576.623362][ T28] ? io_req_caches_free+0x30/0x1e6 [ 576.627094][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 576.634221][ T28] ? _raw_spin_unlock+0x28/0x40 [ 576.639629][ T8311] Pass: 11011982 Run:11012190 [ 576.644004][ T28] ? io_req_caches_free+0x1d3/0x1e6 [ 576.653986][ T28] io_ring_exit_work+0x342/0xc84 [ 576.659059][ T28] ? io_uring_try_cancel_requests+0xa21/0xa21 [ 576.664207][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 576.674943][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 576.685004][ T8311] Call Trace: [ 576.688285][ T8311] [ 576.691220][ T8311] dump_stack_lvl+0xd1/0x138 [ 576.695831][ T8311] mt_find.cold+0x8b/0x90 [ 576.700182][ T8311] ? mas_find+0x1d0/0x1d0 [ 576.704535][ T8311] find_vma+0x10c/0x1b0 [ 576.708787][ T8311] ? can_vma_merge_before+0x390/0x390 [ 576.714168][ T8311] ? walk_page_test+0x1b/0x180 [ 576.718947][ T8311] ? walk_page_test+0x78/0x180 [ 576.723727][ T8311] walk_page_range+0x2b1/0x4a0 [ 576.728508][ T8311] ? __walk_page_range+0x780/0x780 [ 576.733649][ T8311] mlock_fixup+0x650/0x810 [ 576.738095][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 576.743313][ T8311] ? mlock_fixup+0x810/0x810 [ 576.747928][ T8311] ? do_futex+0x132/0x360 [ 576.752316][ T8311] do_mlock+0x25a/0x6d0 [ 576.756490][ T8311] ? xfd_validate_state+0x5d/0x180 [ 576.761613][ T8311] ? folio_evictable+0x270/0x270 [ 576.766585][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 576.771384][ T8311] do_syscall_64+0x39/0xb0 [ 576.775829][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 576.781737][ T8311] RIP: 0033:0x7fafb788c0c9 [ 576.786166][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 576.805782][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 576.814213][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 576.822188][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 576.830162][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 576.838137][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.846111][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 576.854116][ T8311] [ 576.864553][ T28] ? lock_release+0x810/0x810 [ 576.869684][ T28] ? process_one_work+0x8a1/0x1750 [ 576.874979][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 576.874997][ T8311] BUG at mt_find:6473 (1) [ 576.875012][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 576.875032][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 576.875275][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 576.875509][ T8311] 0-536866815: 0000000000000000 [ 576.875532][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 576.875555][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 576.875578][ T8311] 553635840-553639935: 0000000000000000 [ 576.875600][ T8311] 553639936-553635839: ffff88805ff72d20 [ 576.875624][ T8311] 553635840-553648127: ffff8880217871c0 [ 576.875646][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 576.875669][ T8311] 553652224-116813594623: [ 576.894162][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 576.895613][ T8311] 0000000000000000 [ 576.948472][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 576.983590][ T8311] 116813594624-116817788927: [ 577.004083][ T28] process_one_work+0x9bf/0x1750 [ 577.010097][ T8311] ffff8880668dc2a0 [ 577.024081][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 577.025634][ T8311] 116817788928-93825015144447: [ 577.031227][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 577.034880][ T8311] 0000000000000000 [ 577.041057][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 577.044919][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 577.044949][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 577.044973][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 577.044998][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 [ 577.054628][ T28] ? lock_acquire+0x32/0xc0 [ 577.059578][ T8311] ffff8880668dca80 140392668332031 [ 577.074062][ T28] ? worker_thread+0x16d/0x1090 [ 577.080835][ T8311] ffff8880668dc700 140392670429183 [ 577.095651][ T28] worker_thread+0x669/0x1090 [ 577.103034][ T8311] ffff8880668dc620 140392674623487 [ 577.122312][ T28] ? process_one_work+0x1750/0x1750 [ 577.135189][ T8311] ffff8880284f8380 140392674770943 [ 577.154143][ T28] kthread+0x2e8/0x3a0 [ 577.164932][ T8311] ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 577.173561][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 577.191998][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 577.207870][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 577.215349][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 577.215576][ T28] ret_from_fork+0x1f/0x30 [ 577.222408][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 577.234837][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 577.235566][ T28] [ 577.241914][ T8311] 140392670429184-140392674623487: ffff8880668dc620 [ 577.253077][ T28] 2 locks held by kworker/u4:10/7099: [ 577.253401][ T8311] 140392674623488-140392674770943: [ 577.259075][ T28] #0: [ 577.259417][ T8311] ffff8880284f8380 [ 577.264669][ T28] ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 577.264747][ T28] #1: ffffc9000b13fda8 [ 577.268129][ T8311] 140392674770944-140392675500031: [ 577.271211][ T28] ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 577.283295][ T8311] ffff8880284f88c0 [ 577.302153][ T28] task:kworker/u4:13 state:D stack:25608 pid:7203 ppid:2 flags:0x00004000 [ 577.315836][ T28] Workqueue: netns cleanup_net [ 577.319604][ T8311] 140392675500032-140392675835903: [ 577.320658][ T28] Call Trace: [ 577.320668][ T28] [ 577.320684][ T28] __schedule+0x25d0/0x5a70 [ 577.332610][ T8311] ffff8880284f80e0 [ 577.337435][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.347410][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 577.348483][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 577.360056][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 577.360662][ T28] ? ____kasan_slab_free+0x80/0x1c0 [ 577.367660][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 577.376101][ T28] ? cleanup_net+0x4ee/0xb10 [ 577.380018][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 577.393192][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 577.395683][ T28] ? io_schedule_timeout+0x150/0x150 [ 577.400292][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 [ 577.405709][ T28] ? __mutex_lock+0xa43/0x1360 [ 577.405763][ T28] schedule+0xde/0x1b0 [ 577.435138][ T8311] 0000000000000000 140727981887487 [ 577.441665][ T28] schedule_preempt_disabled+0x13/0x20 [ 577.444373][ T8311] ffff8880284f8a80 140727981903871 [ 577.452709][ T28] __mutex_lock+0xa48/0x1360 [ 577.454403][ T8311] ffff8880284f8c40 140727981912063 [ 577.459522][ T28] ? mark_held_locks+0x9f/0xe0 [ 577.462772][ T8311] 0000000000000000 18446744073709551615 [ 577.467942][ T28] ? cangw_pernet_exit_batch+0x15/0xa0 [ 577.481092][ T8311] 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 [ 577.483920][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 577.483956][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 577.504214][ T8311] 0000000000000000 0 0000000000000008 [ 577.506993][ T28] ? cgw_remove_all_jobs+0x350/0x350 [ 577.513804][ T8311] 140392688107520-140392689405951: [ 577.517181][ T28] cangw_pernet_exit_batch+0x15/0xa0 [ 577.517220][ T28] ? cgw_remove_all_jobs+0x350/0x350 [ 577.517255][ T28] ops_exit_list+0x125/0x170 [ 577.517296][ T28] cleanup_net+0x4ee/0xb10 [ 577.517331][ T28] ? unregister_pernet_device+0x80/0x80 [ 577.532604][ T8311] 0000000000000000 [ 577.534083][ T28] process_one_work+0x9bf/0x1750 [ 577.539909][ T8311] 140392689405952-140392689410047: [ 577.542733][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 577.551618][ T8311] ffff88802bb0fd20 [ 577.562741][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 577.568259][ T8311] 140392689410048-140392689541119: [ 577.577627][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 577.577665][ T28] ? lock_acquire+0x32/0xc0 [ 577.586982][ T8311] ffff8880284f8700 [ 577.598326][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 577.600626][ T28] ? worker_thread+0x16d/0x1090 [ 577.605943][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 577.617612][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 577.617644][ T28] worker_thread+0x669/0x1090 [ 577.624952][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 577.636963][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 577.637003][ T28] ? __kthread_parkme+0x163/0x220 [ 577.643982][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 577.656827][ T28] ? process_one_work+0x1750/0x1750 [ 577.659713][ T8311] Pass: 11011982 Run:11012191 [ 577.663438][ T28] kthread+0x2e8/0x3a0 [ 577.670691][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 577.681006][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 577.682035][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 577.687718][ T28] ret_from_fork+0x1f/0x30 [ 577.697685][ T8311] Call Trace: [ 577.697696][ T8311] [ 577.697706][ T8311] dump_stack_lvl+0xd1/0x138 [ 577.697741][ T8311] mt_find.cold+0x8b/0x90 [ 577.697775][ T8311] ? mas_find+0x1d0/0x1d0 [ 577.697818][ T8311] find_vma+0x10c/0x1b0 [ 577.697843][ T8311] ? can_vma_merge_before+0x390/0x390 [ 577.697870][ T8311] ? walk_page_test+0x1b/0x180 [ 577.697903][ T8311] ? walk_page_test+0x78/0x180 [ 577.697938][ T8311] walk_page_range+0x2b1/0x4a0 [ 577.697976][ T8311] ? __walk_page_range+0x780/0x780 [ 577.698030][ T8311] mlock_fixup+0x650/0x810 [ 577.698082][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 577.698124][ T8311] ? mlock_fixup+0x810/0x810 [ 577.698173][ T8311] ? do_futex+0x132/0x360 [ 577.698215][ T8311] do_mlock+0x25a/0x6d0 [ 577.698252][ T8311] ? xfd_validate_state+0x5d/0x180 [ 577.698289][ T8311] ? folio_evictable+0x270/0x270 [ 577.698348][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 577.698389][ T8311] do_syscall_64+0x39/0xb0 [ 577.698423][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 577.698449][ T8311] RIP: 0033:0x7fafb788c0c9 [ 577.698469][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.698493][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 577.698519][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 577.698536][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 577.698552][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 577.698568][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.698584][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 577.698622][ T8311] [ 577.700199][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 577.714007][ T28] [ 577.728986][ T8311] BUG at mt_find:6473 (1) [ 577.740878][ T28] 4 locks held by kworker/u4:13/7203: [ 577.742550][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 577.747353][ T28] #0: [ 577.755806][ T8311] 0-18446744073709551615: [ 577.756776][ T28] ffff8880125df938 [ 577.771187][ T8311] node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 [ 577.777672][ T28] ( [ 577.780208][ T8311] contents: [ 577.791149][ T28] (wq_completion)netns [ 577.795365][ T8311] 93708197355520 [ 577.804246][ T28] ){+.+.}-{0:0} [ 577.805695][ T8311] 20480 [ 577.827200][ T28] , at: process_one_work+0x86d/0x1750 [ 577.843066][ T8311] 18446603345727639552 [ 577.850253][ T28] #1: [ 577.890663][ T8311] 0 [ 577.898451][ T28] ffffc9001555fda8 [ 577.915667][ T8311] 0 [ 577.916869][ T28] ( [ 577.923743][ T8311] 0 [ 577.926717][ T28] net_cleanup_work [ 577.943425][ T8311] 0 [ 577.946491][ T28] ){+.+.}-{0:0} [ 577.957867][ T8311] 0 [ 577.959547][ T28] , at: process_one_work+0x8a1/0x1750 [ 577.962977][ T8311] 0 [ 577.965726][ T28] #2: [ 577.971811][ T8311] 0 [ 577.975171][ T28] ffffffff8e0b2490 [ 577.983376][ T8311] | 02 02| [ 577.988750][ T28] ( [ 577.996396][ T8311] ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 [ 578.001479][ T28] pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9f/0xb10 [ 578.024146][ T8311] ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 578.024647][ T28] #3: ffffffff8e0c6128 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x15/0xa0 [ 578.051465][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 578.052079][ T28] task:syz-executor.3 state:D stack:28256 pid:8309 ppid:5112 flags:0x00000004 [ 578.114114][ T8311] 0-536866815: 0000000000000000 [ 578.114997][ T28] Call Trace: [ 578.119337][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 578.119373][ T8311] 536870912-553635839: [ 578.122692][ T28] [ 578.128727][ T8311] ffff8880668dc0e0 [ 578.140061][ T8311] 553635840-553639935: [ 578.140058][ T28] __schedule+0x25d0/0x5a70 [ 578.144647][ T8311] 0000000000000000 [ 578.144660][ T8311] 553639936-553635839: ffff88805ff72d20 [ 578.144683][ T8311] 553635840-553648127: ffff8880217871c0 [ 578.144706][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 578.144729][ T8311] 553652224-116813594623: [ 578.159834][ T28] ? lock_chain_count+0x20/0x20 [ 578.174127][ T8311] 0000000000000000 [ 578.176670][ T28] ? io_schedule_timeout+0x150/0x150 [ 578.190246][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 578.194189][ T8311] 116813594624-116817788927: [ 578.196385][ T28] schedule+0xde/0x1b0 [ 578.196624][ T8311] ffff8880668dc2a0 [ 578.201427][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 578.217015][ T8311] 116817788928-93825015144447: 0000000000000000 [ 578.218568][ T28] ? down_write+0x220/0x220 [ 578.223634][ T8311] 93825015144448-93825015283711: [ 578.229461][ T28] ? lock_release+0x810/0x810 [ 578.236585][ T8311] ffff8880668dc460 [ 578.240475][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 578.243366][ T8311] 93825015283712-140392653647871: [ 578.249121][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 578.260685][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 578.264201][ T8311] 0000000000000000 [ 578.266511][ T28] ? lock_acquire+0x32/0xc0 [ 578.269808][ T8311] 140392653647872-140392653651967: [ 578.274578][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 578.282960][ T8311] ffff8880668dc540 [ 578.286605][ T28] down_read+0xe6/0x450 [ 578.289232][ T8311] 140392653651968-140392688107519: [ 578.293369][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 578.293414][ T28] do_user_addr_fault+0xa51/0x1210 [ 578.304583][ T8311] node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 [ 578.312753][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 578.320229][ T8311] ffff8880668dca80 140392668332031 [ 578.331684][ T28] exc_page_fault+0x98/0x170 [ 578.346105][ T28] asm_exc_page_fault+0x26/0x30 [ 578.346789][ T8311] ffff8880668dc700 140392670429183 [ 578.350988][ T28] RIP: 0033:0x7fafb78276c6 [ 578.351013][ T28] RSP: 002b:00007ffdc952ec38 EFLAGS: 00010287 [ 578.363747][ T8311] ffff8880668dc620 140392674623487 [ 578.368658][ T28] RAX: 0000001b32a22000 RBX: 00007fafb79ac018 RCX: 0000001b32a20000 [ 578.368753][ T8311] ffff8880284f8380 140392674770943 [ 578.387437][ T28] RDX: 0000001b32a22004 RSI: 0000001b32a21ca8 RDI: 00000000f48f0ce5 [ 578.390607][ T8311] ffff8880284f88c0 140392675500031 [ 578.394783][ T28] RBP: 00000000f48f0ce5 R08: 0000001b32e20000 R09: 00000000f48f0ce9 [ 578.402155][ T8311] ffff8880284f80e0 140392675835903 [ 578.406575][ T28] R10: 00007ffdc95ed090 R11: 000000000001356c R12: 00007fafb79a0000 [ 578.429154][ T28] R13: 0000000000000001 R14: 000000000000233a R15: ffffffff89b848a0 [ 578.438948][ T28] ? number+0x6d0/0xad0 [ 578.439861][ T8311] 0000000000000000 140392675839999 [ 578.443240][ T28] [ 578.443243][ T8311] ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 [ 578.448909][ T28] 1 lock held by syz-executor.3/8309: [ 578.463160][ T8311] 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 578.466421][ T28] #0: ffff8880269d7698 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0xa51/0x1210 [ 578.485835][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 578.487465][ T28] task:syz-executor.3 state:R [ 578.493657][ T8311] 140392662040576-140392664137727: ffff8880668dc380 [ 578.498830][ T28] running task stack:27208 pid:8311 ppid:5112 flags:0x00004006 [ 578.515893][ T28] Call Trace: [ 578.516398][ T8311] 140392664137728-140392666234879: [ 578.519193][ T28] [ 578.519235][ T28] ? console_flush_all+0x547/0x6e0 [ 578.531098][ T8311] ffff8880668dc7e0 [ 578.533098][ T28] ? console_flush_all+0x547/0x6e0 [ 578.539063][ T8311] 140392666234880-140392668332031: ffff8880668dca80 [ 578.542617][ T28] ? console_unlock+0xb8/0x1f0 [ 578.553590][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 578.561316][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 578.563717][ T8311] 140392670429184-140392674623487: [ 578.567246][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 578.578517][ T8311] ffff8880668dc620 [ 578.579424][ T28] ? kmsg_dump+0x250/0x290 [ 578.582802][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 578.587180][ T28] ? vprintk+0x84/0xa0 [ 578.598538][ T28] ? vprintk_emit+0x1e9/0x600 [ 578.602554][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 578.603306][ T28] ? vprintk_emit+0x1bd/0x600 [ 578.610257][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 578.624934][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 578.625606][ T28] ? vprintk+0x84/0xa0 [ 578.631875][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 578.631902][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 578.643783][ T28] ? _printk+0xbe/0xf1 [ 578.650351][ T8311] 140392676241408-140392676261887: 0000000000000000 [ 578.661120][ T8311] 140392676261888-140392688107519: ffff8880284f89a0 [ 578.667095][ T28] ? record_print_text.cold+0x16/0x16 [ 578.668430][ T8311] 140392688107520-18446744073709551615: node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 contents: 0000000000000000 140392689405951 ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 578.673755][ T28] ? _printk+0xbe/0xf1 [ 578.729642][ T28] ? record_print_text.cold+0x16/0x16 [ 578.735621][ T28] ? mt_dump_node+0x25a/0x927 [ 578.738038][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 578.740490][ T28] ? mt_dump_node+0x851/0x927 [ 578.752261][ T28] ? mt_dump.cold+0xf2/0x115 [ 578.755932][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 578.756952][ T28] ? mt_find.cold+0x48/0x90 [ 578.764186][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 578.769892][ T28] ? mas_find+0x1d0/0x1d0 [ 578.779703][ T28] ? find_vma+0x10c/0x1b0 [ 578.783941][ T8311] 140392689541120-140727980978175: 0000000000000000 [ 578.784911][ T28] ? can_vma_merge_before+0x390/0x390 [ 578.791035][ T8311] 140727980978176-140727981113343: [ 578.796662][ T28] ? walk_page_test+0x1b/0x180 [ 578.804494][ T8311] ffff8880284f8460 [ 578.807471][ T28] ? walk_page_test+0x78/0x180 [ 578.810692][ T8311] 140727981113344-140727981887487: [ 578.815688][ T28] ? walk_page_range+0x2b1/0x4a0 [ 578.827027][ T8311] 0000000000000000 [ 578.827043][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 578.827071][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 578.827095][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 578.827119][ T8311] Pass: 11012068 Run:11012278 [ 578.827133][ T8311] CPU: 1 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 578.827159][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 578.827173][ T8311] Call Trace: [ 578.827181][ T8311] [ 578.827192][ T8311] dump_stack_lvl+0xd1/0x138 [ 578.827231][ T8311] mt_find.cold+0x8b/0x90 [ 578.827269][ T8311] ? mas_find+0x1d0/0x1d0 [ 578.833280][ T28] ? __walk_page_range+0x780/0x780 [ 578.837926][ T8311] find_vma+0x10c/0x1b0 [ 578.837955][ T8311] ? can_vma_merge_before+0x390/0x390 [ 578.845313][ T28] ? mlock_fixup+0x650/0x810 [ 578.852228][ T8311] ? walk_page_test+0x1b/0x180 [ 578.857262][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 578.866709][ T8311] ? walk_page_test+0x78/0x180 [ 578.866751][ T8311] walk_page_range+0x2b1/0x4a0 [ 578.935792][ T8311] ? __walk_page_range+0x780/0x780 [ 578.940940][ T8311] mlock_fixup+0x650/0x810 [ 578.945385][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 578.950606][ T8311] ? mlock_fixup+0x810/0x810 [ 578.955222][ T8311] ? do_futex+0x132/0x360 [ 578.959581][ T8311] do_mlock+0x25a/0x6d0 [ 578.963751][ T8311] ? xfd_validate_state+0x5d/0x180 [ 578.968874][ T8311] ? folio_evictable+0x270/0x270 [ 578.973845][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 578.978630][ T8311] do_syscall_64+0x39/0xb0 [ 578.983066][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 578.988968][ T8311] RIP: 0033:0x7fafb788c0c9 [ 578.993386][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.013090][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 579.021509][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 579.029484][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 579.037456][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 579.045427][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.053402][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 579.061399][ T8311] [ 579.080567][ T28] ? mlock_fixup+0x810/0x810 [ 579.085312][ T28] ? do_futex+0x132/0x360 [ 579.086929][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 579.089850][ T28] ? do_mlock+0x25a/0x6d0 [ 579.100380][ T28] ? xfd_validate_state+0x5d/0x180 [ 579.104071][ T8311] BUG at mt_find:6473 (1) [ 579.105899][ T28] ? folio_evictable+0x270/0x270 [ 579.109835][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 579.115136][ T28] ? __x64_sys_mlock2+0xc1/0x100 [ 579.129891][ T8311] 0-18446744073709551615: node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 contents: 93708197355520 20480 18446603345727639552 0 0 0 0 0 0 0 | 02 02| ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 579.133303][ T28] ? do_syscall_64+0x39/0xb0 [ 579.167632][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 ffff8880668dc0e0 553635839 0000000000000000 553639935 ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 579.184437][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.223686][ T8311] 0-536866815: 0000000000000000 [ 579.235897][ T8311] 536866816-536870911: ffff8880668dc9a0 [ 579.241831][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 579.244181][ T28] [ 579.248197][ T8311] 553635840-553639935: [ 579.250747][ T28] 3 locks held by syz-executor.3/8311: [ 579.250770][ T28] task:kvm-nx-lpage-re state:D [ 579.255736][ T8311] 0000000000000000 [ 579.269873][ T8311] 553639936-553635839: ffff88805ff72d20 [ 579.272727][ T28] stack:28880 pid:9689 ppid:2 flags:0x00024000 [ 579.276177][ T8311] 553635840-553648127: [ 579.282619][ T28] Call Trace: [ 579.282631][ T28] [ 579.282648][ T28] __schedule+0x25d0/0x5a70 [ 579.288139][ T8311] ffff8880217871c0 [ 579.302807][ T28] ? io_schedule_timeout+0x150/0x150 [ 579.302905][ T8311] 553648128-553652223: [ 579.308174][ T28] ? mark_held_locks+0x9f/0xe0 [ 579.308207][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 579.313367][ T8311] ffff8880668dc1c0 [ 579.327797][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 579.328816][ T8311] 553652224-116813594623: 0000000000000000 [ 579.339753][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 579.341722][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 579.351427][ T28] schedule+0xde/0x1b0 [ 579.355186][ T8311] 116817788928-93825015144447: 0000000000000000 [ 579.363911][ T28] synchronize_rcu_expedited+0x5e2/0x770 [ 579.366073][ T8311] 93825015144448-93825015283711: [ 579.371399][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 579.377213][ T8311] ffff8880668dc460 [ 579.385821][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 579.390351][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 579.392706][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 579.399905][ T28] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 579.406720][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 ffff8880668dc380 140392664137727 ffff8880668dc7e0 140392666234879 ffff8880668dca80 140392668332031 ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 ffff8880284f87e0 140392676241407 0000000000000000 140392676261887 ffff8880284f89a0 140392688107519 0000000000000000 0 000000000000000d [ 579.416787][ T28] ? rcu_exp_wait_wake+0x11c0/0x11c0 [ 579.476146][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 579.483087][ T28] ? mark_lock.part.0+0xee/0x1910 [ 579.483143][ T28] synchronize_rcu+0x302/0x3b0 [ 579.489426][ T8311] 140392662040576-140392664137727: [ 579.492979][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 579.498933][ T8311] ffff8880668dc380 [ 579.508628][ T8311] 140392664137728-140392666234879: ffff8880668dc7e0 [ 579.513139][ T28] ? find_held_lock+0x2d/0x110 [ 579.515947][ T8311] 140392666234880-140392668332031: [ 579.520432][ T28] ? rcu_sync_enter+0x146/0x2e0 [ 579.520468][ T28] ? mark_held_locks+0x9f/0xe0 [ 579.526390][ T8311] ffff8880668dca80 [ 579.526404][ T8311] 140392668332032-140392670429183: [ 579.543908][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 579.543927][ T8311] ffff8880668dc700 [ 579.543953][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.550172][ T8311] 140392670429184-140392674623487: [ 579.562785][ T28] rcu_sync_enter+0x14b/0x2e0 [ 579.563950][ T8311] ffff8880668dc620 [ 579.569220][ T28] ? rcu_sync_enter_start+0x70/0x70 [ 579.569253][ T28] ? cgroup_attach_lock+0x35/0x40 [ 579.573991][ T8311] 140392674623488-140392674770943: [ 579.577886][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 579.592289][ T8311] ffff8880284f8380 [ 579.593923][ T28] percpu_down_write+0x68/0x390 [ 579.610087][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 579.615279][ T28] ? cgroup_attach_lock+0x35/0x40 [ 579.622141][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 579.624519][ T28] cgroup_attach_lock+0x35/0x40 [ 579.629386][ T8311] 140392675835904-140392675839999: 0000000000000000 [ 579.642777][ T28] cgroup_attach_task_all+0x2f/0x140 [ 579.646488][ T8311] 140392675840000-140392676204543: ffff8880284f8ee0 [ 579.649195][ T28] kvm_vm_worker_thread+0x306/0x5f0 [ 579.660717][ T28] ? mmu_shrink_scan+0x6d0/0x6d0 [ 579.663770][ T8311] 140392676204544-140392676241407: ffff8880284f87e0 [ 579.666646][ T28] ? kvm_vcpu_check_block+0x280/0x280 [ 579.673029][ T8311] 140392676241408-140392676261887: [ 579.678831][ T28] kthread+0x2e8/0x3a0 [ 579.687404][ T8311] 0000000000000000 [ 579.689203][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 579.692626][ T8311] 140392676261888-140392688107519: [ 579.698629][ T28] ret_from_fork+0x1f/0x30 [ 579.706164][ T8311] ffff8880284f89a0 [ 579.709205][ T28] [ 579.712409][ T8311] 140392688107520-18446744073709551615: [ 579.715820][ T28] 4 locks held by kvm-nx-lpage-re/9689: [ 579.715841][ T28] #0: [ 579.725366][ T8311] node ffff888072a30e00 depth 1 type 1 parent ffff8880775c9216 [ 579.727667][ T28] ffffffff8c7da5a8 [ 579.729916][ T8311] contents: 0000000000000000 140392689405951 [ 579.743581][ T28] ( [ 579.743829][ T8311] ffff88802bb0fd20 140392689410047 ffff8880284f8700 140392689541119 0000000000000000 140727980978175 ffff8880284f8460 140727981113343 0000000000000000 140727981887487 ffff8880284f8a80 140727981903871 ffff8880284f8c40 140727981912063 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 579.760788][ T28] cgroup_mutex [ 579.790785][ T8311] 140392688107520-140392689405951: 0000000000000000 [ 579.799649][ T28] ){+.+.}-{3:3} [ 579.801804][ T8311] 140392689405952-140392689410047: ffff88802bb0fd20 [ 579.809084][ T28] , at: cgroup_attach_task_all+0x25/0x140 [ 579.812721][ T8311] 140392689410048-140392689541119: ffff8880284f8700 [ 579.823119][ T28] #1: [ 579.827932][ T8311] 140392689541120-140727980978175: [ 579.829039][ T28] ffffffff8c63d810 [ 579.830710][ T8311] 0000000000000000 [ 579.842799][ T28] (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0x11/0x40 [ 579.845451][ T8311] 140727980978176-140727981113343: ffff8880284f8460 [ 579.859594][ T8311] 140727981113344-140727981887487: 0000000000000000 [ 579.867606][ T8311] 140727981887488-140727981903871: ffff8880284f8a80 [ 579.875028][ T8311] 140727981903872-140727981912063: ffff8880284f8c40 [ 579.878301][ T28] #2: [ 579.881979][ T8311] 140727981912064-18446744073709551615: 0000000000000000 [ 579.889853][ T28] ffffffff8c7da370 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_lock+0x35/0x40 [ 579.892571][ T8311] Pass: 11012068 Run:11012279 [ 579.908021][ T8311] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 579.911968][ T28] #3: [ 579.917832][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 579.917847][ T8311] Call Trace: [ 579.917855][ T8311] [ 579.917864][ T8311] dump_stack_lvl+0xd1/0x138 [ 579.917902][ T8311] mt_find.cold+0x8b/0x90 [ 579.917937][ T8311] ? mas_find+0x1d0/0x1d0 [ 579.917979][ T8311] find_vma+0x10c/0x1b0 [ 579.921951][ T28] ffffffff8c79e6b8 [ 579.930744][ T8311] ? can_vma_merge_before+0x390/0x390 [ 579.930774][ T8311] ? walk_page_test+0x1b/0x180 [ 579.930805][ T8311] ? walk_page_test+0x78/0x180 [ 579.930840][ T8311] walk_page_range+0x2b1/0x4a0 [ 579.930879][ T8311] ? __walk_page_range+0x780/0x780 [ 579.930930][ T8311] mlock_fixup+0x650/0x810 [ 579.942784][ T28] ( [ 579.946017][ T8311] apply_vma_lock_flags+0x23d/0x350 [ 579.946062][ T8311] ? mlock_fixup+0x810/0x810 [ 579.946106][ T8311] ? do_futex+0x132/0x360 [ 579.946145][ T8311] do_mlock+0x25a/0x6d0 [ 579.946181][ T8311] ? xfd_validate_state+0x5d/0x180 [ 579.946212][ T8311] ? folio_evictable+0x270/0x270 [ 579.946272][ T8311] __x64_sys_mlock2+0xc1/0x100 [ 579.946313][ T8311] do_syscall_64+0x39/0xb0 [ 579.946353][ T8311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 579.946382][ T8311] RIP: 0033:0x7fafb788c0c9 [ 579.946406][ T8311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 579.946429][ T8311] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 579.946455][ T8311] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 579.946472][ T8311] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 579.946488][ T8311] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 579.946504][ T8311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.946519][ T8311] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 579.946558][ T8311] [ 579.953563][ T8311] index not increased! 20ffd000 <= 20ffd000 [ 579.965872][ T28] rcu_state.exp_mutex [ 579.969441][ T8311] BUG at mt_find:6473 (1) [ 579.976260][ T28] ){+.+.}-{3:3} [ 579.991584][ T8311] maple_tree(ffff8880269d7500) flags 309, height 2 root ffff8880775c921e [ 580.003839][ T28] , at: synchronize_rcu_expedited+0x658/0x770 [ 580.024068][ T8311] 0-18446744073709551615: [ 580.026477][ T28] task:syz-executor.0 state:D [ 580.030127][ T8311] node ffff8880775c9200 depth 0 type 3 parent ffff8880269d7501 [ 580.036086][ T28] stack:27832 pid:9699 ppid:5115 flags:0x00004004 [ 580.036108][ T28] Call Trace: [ 580.036117][ T28] [ 580.036133][ T28] __schedule+0x25d0/0x5a70 [ 580.036159][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 580.036261][ T28] ? io_schedule_timeout+0x150/0x150 [ 580.036307][ T28] ? __mutex_lock+0xa43/0x1360 [ 580.052109][ T8311] contents: [ 580.061852][ T28] schedule+0xde/0x1b0 [ 580.080326][ T8311] 93708197355520 [ 580.102873][ T28] schedule_preempt_disabled+0x13/0x20 [ 580.119934][ T8311] 20480 [ 580.123685][ T28] __mutex_lock+0xa48/0x1360 [ 580.128534][ T8311] 18446603345727639552 [ 580.140363][ T28] ? synchronize_rcu_expedited+0x400/0x770 [ 580.157267][ T8311] 0 [ 580.188535][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 580.195268][ T8311] 0 [ 580.199447][ T28] ? synchronize_rcu_expedited+0x3cd/0x770 [ 580.204387][ T8311] 0 [ 580.204833][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 580.208637][ T8311] 0 [ 580.213743][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 580.225027][ T8311] 0 [ 580.225482][ T28] ? lock_acquire+0x32/0xc0 [ 580.231178][ T8311] 0 [ 580.233663][ T28] ? synchronize_rcu_expedited+0x398/0x770 [ 580.239422][ T8311] 0 [ 580.255784][ T28] synchronize_rcu_expedited+0x400/0x770 [ 580.255834][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 580.255867][ T28] ? netif_reset_xps_queues+0x64/0x90 [ 580.255902][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 580.255927][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 580.255953][ T28] ? trace_contention_end+0x173/0x1e0 [ 580.255988][ T28] ? __mutex_lock+0x231/0x1360 [ 580.256022][ T28] ? find_held_lock+0x2d/0x110 [ 580.256066][ T28] ? netif_reset_xps_queues+0x69/0x90 [ 580.256096][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 580.260123][ T8311] | 02 02| [ 580.263559][ T28] ? clean_xps_maps+0x4b/0x510 [ 580.266069][ T8311] ffff8880775c880c 140392653651967 ffff8880775c8e0c 140392688107519 ffff888072a30e0c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 580.266186][ T8311] 0-140392653651967: node ffff8880775c8800 depth 1 type 1 parent ffff8880775c9206 contents: 0000000000000000 536866815 ffff8880668dc9a0 536870911 [ 580.274159][ T28] unregister_netdevice_many_notify+0xe94/0x19e0 [ 580.279068][ T8311] ffff8880668dc0e0 553635839 [ 580.281506][ T28] ? __mutex_lock+0xfff/0x1360 [ 580.287188][ T8311] 0000000000000000 553639935 [ 580.292600][ T28] ? netdev_freemem+0x60/0x60 [ 580.307768][ T8311] ffff88805ff72d20 553635839 ffff8880217871c0 553648127 ffff8880668dc1c0 553652223 0000000000000000 116813594623 ffff8880668dc2a0 116817788927 0000000000000000 93825015144447 ffff8880668dc460 93825015283711 0000000000000000 140392653647871 ffff8880668dc540 140392653651967 0000000000000000 0 0000000000000000 0 000000000000000c [ 580.307913][ T8311] 0-536866815: [ 580.334206][ T28] ? unregister_netdev+0x12/0x30 [ 580.365265][ T8311] 0000000000000000 [ 580.394980][ T28] ? find_held_lock+0x2d/0x110 [ 580.395455][ T8311] 536866816-536870911: [ 580.400032][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 580.404737][ T8311] ffff8880668dc9a0 [ 580.404750][ T8311] 536870912-553635839: ffff8880668dc0e0 [ 580.404772][ T8311] 553635840-553639935: 0000000000000000 [ 580.447585][ T28] unregister_netdevice_queue+0x2e5/0x3c0 [ 580.449953][ T8311] 553639936-553635839: [ 580.453077][ T28] ? unregister_netdevice_many+0x20/0x20 [ 580.467354][ T8311] ffff88805ff72d20 [ 580.470715][ T28] unregister_netdev+0x1c/0x30 [ 580.473399][ T8311] 553635840-553648127: [ 580.495447][ T28] sixpack_close+0x170/0x270 [ 580.508035][ T8311] ffff8880217871c0 [ 580.513121][ T28] ? sp_get+0xf0/0xf0 [ 580.517400][ T8311] 553648128-553652223: ffff8880668dc1c0 [ 580.527644][ T8311] 553652224-116813594623: 0000000000000000 [ 580.530164][ T28] tty_ldisc_close+0x110/0x190 [ 580.533811][ T8311] 116813594624-116817788927: ffff8880668dc2a0 [ 580.541462][ T28] tty_ldisc_kill+0x94/0x150 [ 580.545200][ T8311] 116817788928-93825015144447: 0000000000000000 [ 580.545227][ T8311] 93825015144448-93825015283711: ffff8880668dc460 [ 580.545250][ T8311] 93825015283712-140392653647871: 0000000000000000 [ 580.545274][ T8311] 140392653647872-140392653651967: ffff8880668dc540 [ 580.545299][ T8311] 140392653651968-140392688107519: node ffff8880775c8e00 depth 1 type 1 parent ffff8880775c920e contents: ffff8880668dc8c0 140392662040575 [ 580.562588][ T28] tty_ldisc_release+0x1f3/0x2a0 [ 580.566793][ T8311] ffff8880668dc380 140392664137727 [ 580.577323][ T28] tty_release_struct+0x24/0xf0 [ 580.577482][ T28] tty_release+0xc14/0x11b0 [ 580.577528][ T28] __fput+0x27c/0xa90 [ 580.577557][ T28] ? tty_release_struct+0xf0/0xf0 [ 580.577597][ T28] task_work_run+0x16f/0x270 [ 580.593212][ T8311] ffff8880668dc7e0 140392666234879 [ 580.607431][ T28] ? task_work_cancel+0x30/0x30 [ 580.607684][ T8311] ffff8880668dca80 140392668332031 [ 580.612045][ T28] exit_to_user_mode_prepare+0x210/0x240 [ 580.616040][ T8311] ffff8880668dc700 140392670429183 ffff8880668dc620 140392674623487 ffff8880284f8380 140392674770943 ffff8880284f88c0 140392675500031 ffff8880284f80e0 140392675835903 0000000000000000 140392675839999 ffff8880284f8ee0 140392676204543 [ 580.641485][ T28] syscall_exit_to_user_mode+0x1d/0x50 [ 580.678659][ T28] do_syscall_64+0x46/0xb0 [ 580.683137][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 580.683164][ T8311] ffff8880284f87e0 140392676241407 [ 580.689443][ T28] RIP: 0033:0x7f6693a3df7b [ 580.691746][ T8311] 0000000000000000 140392676261887 [ 580.695083][ T28] RSP: 002b:00007ffe7942fd00 EFLAGS: 00000293 [ 580.704125][ T8311] ffff8880284f89a0 140392688107519 [ 580.705426][ T28] ORIG_RAX: 0000000000000003 [ 580.710473][ T8311] 0000000000000000 0 [ 580.716028][ T28] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f6693a3df7b [ 580.728130][ T8311] 000000000000000d [ 580.732811][ T28] RDX: 0000000000000000 RSI: 0000001b32923580 RDI: 0000000000000003 [ 580.744252][ T8311] 140392653651968-140392662040575: ffff8880668dc8c0 [ 580.745017][ T28] RBP: 00007f6693bad980 R08: 0000000000000000 R09: 00000000ccafed55 [ 580.751338][ T8311] 140392662040576-140392664137727: [ 580.759601][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008bcff [ 580.770174][ T8311] ffff8880668dc380 [ 580.775352][ T28] R13: 00007ffe7942fe00 R14: 00007ffe7942fe20 R15: 0000000000000032 [ 580.781472][ T8311] 140392664137728-140392666234879: [ 580.788107][ T28] [ 580.792177][ T8311] ffff8880668dc7e0 [ 580.793650][ T28] 3 locks held by syz-executor.0/9699: [ 580.799638][ T8311] 140392666234880-140392668332031: [ 580.801637][ T28] #0: ffff88807bdc8098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x7d/0x2a0 [ 580.812250][ T8311] ffff8880668dca80 [ 580.822627][ T28] #1: ffffffff8e0c6128 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 [ 580.834392][ T8311] 140392668332032-140392670429183: ffff8880668dc700 [ 580.836847][ T28] #2: [ 580.843419][ T8311] 140392670429184-140392674623487: [ 580.846476][ T28] ffffffff8c79e6b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x400/0x770 [ 580.854098][ T8311] ffff8880668dc620 [ 580.869029][ T28] [ 580.880502][ T8311] 140392674623488-140392674770943: ffff8880284f8380 [ 580.903124][ T8311] 140392674770944-140392675500031: ffff8880284f88c0 [ 580.905531][ T28] ============================================= [ 580.905531][ T28] [ 580.950682][ T8311] 140392675500032-140392675835903: ffff8880284f80e0 [ 580.964137][ T28] NMI backtrace for cpu 1 [ 580.968511][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 580.970386][ T8311] 140392675835904-140392675839999: [ 580.977822][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 580.977838][ T28] Call Trace: [ 580.977846][ T28] [ 580.977855][ T28] dump_stack_lvl+0xd1/0x138 [ 580.977892][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 580.977937][ T28] nmi_trigger_cpumask_backtrace+0x32f/0x3c0 [ 580.977965][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 580.977992][ T28] watchdog+0xcae/0x1050 [ 580.978055][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 580.978096][ T28] kthread+0x2e8/0x3a0 [ 580.986141][ T8311] 0000000000000000 [ 580.993670][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 580.997321][ T8311] 140392675840000-140392676204543: [ 581.000215][ T28] ret_from_fork+0x1f/0x30 [ 581.004807][ T8311] ffff8880284f8ee0 [ 581.010148][ T28] [ 581.016122][ T8311] 140392676204544-140392676241407: [ 581.022148][ T28] Sending NMI from CPU 1 to CPUs 0: [ 581.062302][ T8311] ffff8880284f87e0 [ 581.067801][ C0] NMI backtrace for cpu 0 [ 581.067812][ C0] CPU: 0 PID: 8311 Comm: syz-executor.3 Not tainted 6.2.0-rc3-next-20230109-syzkaller #0 [ 581.067834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 581.067845][ C0] RIP: 0010:__lock_acquire+0x1709/0x5660 [ 581.067872][ C0] Code: 48 89 ea 48 8b 6c 24 08 eb 06 48 83 eb 08 74 42 48 8d 7b 18 48 89 f8 48 c1 e8 03 42 80 3c 30 00 0f 85 0d 3f 00 00 48 8b 43 18 <48> 39 c5 0f 84 99 f5 ff ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 80 [ 581.067892][ C0] RSP: 0018:ffffc90000007ab8 EFLAGS: 00000046 [ 581.067908][ C0] RAX: 9cc549aed7a5a811 RBX: ffffffff90211980 RCX: ffffffff8163bcce [ 581.067923][ C0] RDX: 0000000000019b9a RSI: 0000000000000008 RDI: ffffffff90211998 [ 581.067937][ C0] RBP: 9cc549aed7a5a811 R08: 0000000000000000 R09: ffffffff91350b47 [ 581.067950][ C0] R10: fffffbfff226a168 R11: 0000000000000001 R12: ffff8880211e6248 [ 581.067964][ C0] R13: ffff8880211e57c0 R14: dffffc0000000000 R15: 0000000000000000 [ 581.067978][ C0] FS: 00007fafb8639700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 581.067995][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.068009][ C0] CR2: 00007ffcf1887ff0 CR3: 000000002ae97000 CR4: 00000000003526f0 [ 581.068023][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 581.068034][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 581.068046][ C0] Call Trace: [ 581.068052][ C0] [ 581.068065][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.068088][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 581.068114][ C0] lock_acquire.part.0+0x11a/0x350 [ 581.068135][ C0] ? debug_object_deactivate+0x105/0x300 [ 581.068164][ C0] ? lock_release+0x810/0x810 [ 581.068184][ C0] ? debug_object_deactivate+0x105/0x300 [ 581.068211][ C0] ? rcu_read_lock_sched_held+0x3e/0x70 [ 581.068231][ C0] ? trace_lock_acquire+0x1f1/0x290 [ 581.068252][ C0] ? debug_object_deactivate+0x105/0x300 [ 581.068279][ C0] ? lock_acquire+0x32/0xc0 [ 581.068298][ C0] ? debug_object_deactivate+0x105/0x300 [ 581.068330][ C0] _raw_spin_lock_irqsave+0x3d/0x60 [ 581.068358][ C0] ? debug_object_deactivate+0x105/0x300 [ 581.068386][ C0] debug_object_deactivate+0x105/0x300 [ 581.068420][ C0] ? __free_object+0xe00/0xe00 [ 581.068447][ C0] ? lock_release+0x810/0x810 [ 581.068467][ C0] ? run_timer_softirq+0x125/0x910 [ 581.068496][ C0] ? rcu_read_lock_sched_held+0x3e/0x70 [ 581.068517][ C0] ? _find_next_bit+0x11b/0x140 [ 581.068563][ C0] expire_timers+0x12f/0x330 [ 581.068591][ C0] run_timer_softirq+0x326/0x910 [ 581.068619][ C0] ? expire_timers+0x330/0x330 [ 581.068651][ C0] __do_softirq+0x1fb/0xaf6 [ 581.068683][ C0] __irq_exit_rcu+0x123/0x180 [ 581.068710][ C0] irq_exit_rcu+0x9/0x20 [ 581.068729][ C0] sysvec_apic_timer_interrupt+0x97/0xc0 [ 581.068753][ C0] [ 581.068759][ C0] [ 581.068765][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.068792][ C0] RIP: 0010:vprintk_emit+0x3fe/0x600 [ 581.068815][ C0] Code: 32 1b 00 48 85 db 0f 85 da 01 00 00 e8 7b 35 1b 00 31 ff 4c 89 f6 e8 41 32 1b 00 4d 85 f6 74 06 e8 67 35 1b 00 fb f3 0f 1e fa 5d 35 1b 00 45 31 c9 41 b8 01 00 00 00 31 c9 68 ea 77 66 81 ba [ 581.068835][ C0] RSP: 0018:ffffc90014eff788 EFLAGS: 00000246 [ 581.068850][ C0] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000a679000 [ 581.068862][ C0] RDX: 0000000000040000 RSI: ffffffff816677e9 RDI: 0000000000000007 [ 581.068874][ C0] RBP: ffffc90014eff7c0 R08: 0000000000000007 R09: 0000000000000000 [ 581.068886][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000010 [ 581.068899][ C0] R13: ffff888017590000 R14: 0000000000000200 R15: ffffc90014eff810 [ 581.068916][ C0] ? vprintk_emit+0x3f9/0x600 [ 581.068940][ C0] ? vprintk_emit+0x3f9/0x600 [ 581.068963][ C0] vprintk+0x84/0xa0 [ 581.068985][ C0] _printk+0xbe/0xf1 [ 581.069011][ C0] ? record_print_text.cold+0x16/0x16 [ 581.069039][ C0] ? record_print_text.cold+0x16/0x16 [ 581.069070][ C0] mt_dump_entry+0xb3/0xf4 [ 581.069100][ C0] mt_dump_node+0x3ec/0x927 [ 581.069131][ C0] mt_dump_node+0x851/0x927 [ 581.069164][ C0] mt_dump.cold+0xf2/0x115 [ 581.069192][ C0] mt_find.cold+0x48/0x90 [ 581.069221][ C0] ? mas_find+0x1d0/0x1d0 [ 581.069248][ C0] find_vma+0x10c/0x1b0 [ 581.069269][ C0] ? can_vma_merge_before+0x390/0x390 [ 581.069291][ C0] ? walk_page_test+0x1b/0x180 [ 581.069318][ C0] ? walk_page_test+0x78/0x180 [ 581.069346][ C0] walk_page_range+0x2b1/0x4a0 [ 581.069374][ C0] ? __walk_page_range+0x780/0x780 [ 581.069412][ C0] mlock_fixup+0x650/0x810 [ 581.069448][ C0] apply_vma_lock_flags+0x23d/0x350 [ 581.069482][ C0] ? mlock_fixup+0x810/0x810 [ 581.069516][ C0] ? do_futex+0x132/0x360 [ 581.069547][ C0] do_mlock+0x25a/0x6d0 [ 581.069577][ C0] ? xfd_validate_state+0x5d/0x180 [ 581.069600][ C0] ? folio_evictable+0x270/0x270 [ 581.069658][ C0] __x64_sys_mlock2+0xc1/0x100 [ 581.069692][ C0] do_syscall_64+0x39/0xb0 [ 581.069723][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 581.069748][ C0] RIP: 0033:0x7fafb788c0c9 [ 581.069763][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 581.069781][ C0] RSP: 002b:00007fafb8639168 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 581.069799][ C0] RAX: ffffffffffffffda RBX: 00007fafb79abf80 RCX: 00007fafb788c0c9 [ 581.069812][ C0] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 581.069825][ C0] RBP: 00007fafb78e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 581.069837][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.069849][ C0] R13: 00007ffdc952ec6f R14: 00007fafb8639300 R15: 0000000000022000 [ 581.069870][ C0] [ 581.097195][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 581.097211][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230109-syzkaller #0