='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003540)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x2}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 14:32:43 executing program 3: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0) 14:32:43 executing program 5: syz_emit_ethernet(0x16, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, "e7", '@t('}}}}}, 0x0) 14:32:43 executing program 4: syz_emit_ethernet(0x3e, 0x0, 0x0) 14:32:43 executing program 4: syz_emit_ethernet(0x3e, 0x0, 0x0) 14:32:43 executing program 0: pipe2$watch_queue(0x0, 0x80) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x5646, 0x0) [ 978.686986][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 978.789069][T22784] 140647127171072-140647128055807: 0000000000000000 14:32:43 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[], 0x0) 14:32:43 executing program 3: futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0) [ 979.842070][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 979.916915][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 979.950108][T22784] 140647128190976-140732348923903: 0000000000000000 [ 979.957140][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 979.979091][T22784] 140732349059072-140732349100031: 0000000000000000 [ 979.992001][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 980.016006][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 980.029059][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 980.036496][T22784] Pass: 20607332 Run:20607437 [ 980.059020][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 980.068977][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 980.079060][T22784] Call Trace: [ 980.082359][T22784] [ 980.085310][T22784] dump_stack_lvl+0xd1/0x138 [ 980.089954][T22784] mt_find.cold+0x8b/0x90 [ 980.094334][T22784] ? mas_find+0x1d0/0x1d0 [ 980.098725][T22784] find_vma+0x10c/0x1b0 [ 980.102918][T22784] ? can_vma_merge_before+0x390/0x390 [ 980.108332][T22784] ? walk_page_test+0x78/0x180 [ 980.113146][T22784] walk_page_range+0x2b1/0x4a0 [ 980.117970][T22784] ? __walk_page_range+0x780/0x780 [ 980.123230][T22784] mlock_fixup+0x650/0x810 [ 980.127710][T22784] apply_vma_lock_flags+0x23d/0x350 [ 980.132950][T22784] ? mlock_fixup+0x810/0x810 [ 980.137583][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 980.143594][T22784] do_mlock+0x25a/0x6d0 [ 980.147783][T22784] ? folio_evictable+0x270/0x270 [ 980.152766][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 980.158687][T22784] __x64_sys_mlock+0x59/0x80 [ 980.163296][T22784] do_syscall_64+0x39/0xb0 [ 980.167743][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 980.173657][T22784] RIP: 0033:0x7feaf548c0c9 [ 980.178086][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 980.197709][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 980.206150][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 980.214134][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 980.222116][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 980.230098][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 980.238078][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 980.246083][T22784] [ 980.253863][T22784] index not increased! 20ffc000 <= 20ffc000 [ 980.259949][T22784] BUG at mt_find:6473 (1) [ 980.264410][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 980.273041][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 980.310216][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 980.363838][T22784] 0-536866815: 0000000000000000 [ 980.369303][T22784] 536866816-536870911: ffff888094eb2460 [ 980.375340][T22784] 536870912-553631743: ffff888094eb2540 [ 980.381445][T22784] 553631744-553644031: 0000000000000000 [ 980.387465][T22784] 553644032-553631743: ffff888076c687e0 [ 980.393565][T22784] 553631744-553648127: ffff888076c689a0 [ 980.402362][T22784] 553648128-553652223: ffff888094eb2620 [ 980.408384][T22784] 553652224-116820934655: 0000000000000000 [ 980.414704][T22784] 116820934656-116825128959: ffff888094eb2700 [ 980.421302][T22784] 116825128960-93824997462015: 0000000000000000 [ 980.428039][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 980.440474][T22784] 93824997601280-140647092711423: 0000000000000000 [ 980.447405][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 980.454550][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 980.514256][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 980.523764][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 980.532138][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 980.544891][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 980.554486][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 980.563944][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 980.573471][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 980.584067][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 980.594323][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 980.603869][T22784] 140647114899456-140647114903551: 0000000000000000 [ 980.611150][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 980.618215][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 980.627853][T22784] 140647115304960-140647115325439: 0000000000000000 [ 980.635235][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 980.644000][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 980.695335][T22784] 140647127171072-140647128055807: 0000000000000000 [ 980.709038][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 980.716043][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 980.732711][T22784] 140647128190976-140732348923903: 0000000000000000 [ 980.749092][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 980.756174][T22784] 140732349059072-140732349100031: 0000000000000000 [ 980.779024][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 980.786052][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 980.799037][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 980.806476][T22784] Pass: 20608851 Run:20608957 [ 980.838031][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 980.848020][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 980.858112][T22784] Call Trace: [ 980.861413][T22784] [ 980.864364][T22784] dump_stack_lvl+0xd1/0x138 [ 980.869003][T22784] mt_find.cold+0x8b/0x90 [ 980.873383][T22784] ? mas_find+0x1d0/0x1d0 [ 980.877768][T22784] find_vma+0x10c/0x1b0 [ 980.881971][T22784] ? can_vma_merge_before+0x390/0x390 [ 980.887382][T22784] ? walk_page_test+0x78/0x180 [ 980.892200][T22784] walk_page_range+0x2b1/0x4a0 [ 980.897023][T22784] ? __walk_page_range+0x780/0x780 [ 980.902196][T22784] mlock_fixup+0x650/0x810 [ 980.906673][T22784] apply_vma_lock_flags+0x23d/0x350 [ 980.911922][T22784] ? mlock_fixup+0x810/0x810 [ 980.916588][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 980.922536][T22784] do_mlock+0x25a/0x6d0 [ 980.926748][T22784] ? folio_evictable+0x270/0x270 [ 980.931756][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 980.937694][T22784] __x64_sys_mlock+0x59/0x80 [ 980.942310][T22784] do_syscall_64+0x39/0xb0 [ 980.946759][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 980.952679][T22784] RIP: 0033:0x7feaf548c0c9 [ 980.957108][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 980.976743][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 980.985195][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 980.993200][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 981.001197][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 981.009190][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.017178][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 981.025185][T22784] [ 981.036422][T22784] index not increased! 20ffc000 <= 20ffc000 [ 981.042680][T22784] BUG at mt_find:6473 (1) [ 981.049674][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 981.058249][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 981.095755][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 981.146854][T22784] 0-536866815: 0000000000000000 [ 981.157790][T22784] 536866816-536870911: ffff888094eb2460 [ 981.163936][T22784] 536870912-553631743: ffff888094eb2540 [ 981.170391][T22784] 553631744-553644031: 0000000000000000 [ 981.176328][T22784] 553644032-553631743: ffff888076c687e0 [ 981.182315][T22784] 553631744-553648127: ffff888076c689a0 [ 981.188235][T22784] 553648128-553652223: ffff888094eb2620 [ 981.194261][T22784] 553652224-116820934655: 0000000000000000 [ 981.200498][T22784] 116820934656-116825128959: ffff888094eb2700 [ 981.206953][T22784] 116825128960-93824997462015: 0000000000000000 [ 981.217898][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 981.224739][T22784] 93824997601280-140647092711423: 0000000000000000 [ 981.231957][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 981.239051][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 981.294916][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 981.306663][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 981.314205][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 981.321435][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 981.328377][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 981.335451][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 981.346670][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 981.354807][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 981.362744][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 981.370071][T22784] 140647114899456-140647114903551: 0000000000000000 [ 981.377033][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 981.384395][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 981.391730][T22784] 140647115304960-140647115325439: 0000000000000000 [ 981.398716][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 981.408514][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 981.461049][T22784] 140647127171072-140647128055807: 0000000000000000 [ 981.468044][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 981.475234][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 981.482559][T22784] 140647128190976-140732348923903: 0000000000000000 [ 981.489593][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 981.496555][T22784] 140732349059072-140732349100031: 0000000000000000 [ 981.503595][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 981.514558][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 981.524150][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 981.541316][T22784] Pass: 20610047 Run:20610154 [ 981.546033][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 981.555939][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 981.566015][T22784] Call Trace: [ 981.569304][T22784] [ 981.572243][T22784] dump_stack_lvl+0xd1/0x138 [ 981.576864][T22784] mt_find.cold+0x8b/0x90 [ 981.581227][T22784] ? mas_find+0x1d0/0x1d0 [ 981.585933][T22784] find_vma+0x10c/0x1b0 [ 981.590107][T22784] ? can_vma_merge_before+0x390/0x390 [ 981.595504][T22784] ? walk_page_test+0x78/0x180 [ 981.600291][T22784] walk_page_range+0x2b1/0x4a0 [ 981.605083][T22784] ? __walk_page_range+0x780/0x780 [ 981.610266][T22784] mlock_fixup+0x650/0x810 [ 981.614721][T22784] apply_vma_lock_flags+0x23d/0x350 [ 981.619951][T22784] ? mlock_fixup+0x810/0x810 [ 981.624590][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 981.630607][T22784] do_mlock+0x25a/0x6d0 [ 981.634793][T22784] ? folio_evictable+0x270/0x270 [ 981.639786][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 981.645719][T22784] __x64_sys_mlock+0x59/0x80 [ 981.650329][T22784] do_syscall_64+0x39/0xb0 [ 981.654770][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 981.660686][T22784] RIP: 0033:0x7feaf548c0c9 [ 981.665118][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 981.684739][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 981.693170][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 981.701160][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 981.709141][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 981.717126][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.725107][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 981.733117][T22784] [ 981.748928][T22784] index not increased! 20ffc000 <= 20ffc000 [ 981.754983][T22784] BUG at mt_find:6473 (1) [ 981.759848][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 981.769601][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 981.807014][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 981.861741][T22784] 0-536866815: 0000000000000000 [ 981.868171][T22784] 536866816-536870911: ffff888094eb2460 [ 981.874605][T22784] 536870912-553631743: ffff888094eb2540 [ 981.883802][T22784] 553631744-553644031: 0000000000000000 [ 981.890061][T22784] 553644032-553631743: ffff888076c687e0 [ 981.896177][T22784] 553631744-553648127: ffff888076c689a0 [ 981.902437][T22784] 553648128-553652223: ffff888094eb2620 [ 981.908392][T22784] 553652224-116820934655: 0000000000000000 [ 981.918198][T22784] 116820934656-116825128959: ffff888094eb2700 [ 981.924848][T22784] 116825128960-93824997462015: 0000000000000000 [ 981.931923][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 981.938737][T22784] 93824997601280-140647092711423: 0000000000000000 [ 981.945878][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 981.957774][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 982.014080][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 982.021569][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 982.028559][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 982.035856][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 982.043123][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 982.050397][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 982.057374][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 982.064428][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 982.072069][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 982.079125][T22784] 140647114899456-140647114903551: 0000000000000000 [ 982.086250][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 982.093305][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 982.100472][T22784] 140647115304960-140647115325439: 0000000000000000 [ 982.107444][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 982.117589][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 982.167610][T22784] 140647127171072-140647128055807: 0000000000000000 [ 982.184784][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 982.191950][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 982.199441][T22784] 140647128190976-140732348923903: 0000000000000000 [ 982.206412][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 982.213586][T22784] 140732349059072-140732349100031: 0000000000000000 [ 982.222746][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 982.229822][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 982.236817][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 982.244817][T22784] Pass: 20610100 Run:20610208 [ 982.249608][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 982.259530][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 982.269610][T22784] Call Trace: [ 982.272902][T22784] [ 982.275852][T22784] dump_stack_lvl+0xd1/0x138 [ 982.280494][T22784] mt_find.cold+0x8b/0x90 [ 982.284860][T22784] ? mas_find+0x1d0/0x1d0 [ 982.289256][T22784] find_vma+0x10c/0x1b0 [ 982.293443][T22784] ? can_vma_merge_before+0x390/0x390 [ 982.298837][T22784] ? walk_page_test+0x78/0x180 [ 982.303634][T22784] walk_page_range+0x2b1/0x4a0 [ 982.308442][T22784] ? __walk_page_range+0x780/0x780 [ 982.313602][T22784] mlock_fixup+0x650/0x810 [ 982.318058][T22784] apply_vma_lock_flags+0x23d/0x350 [ 982.323294][T22784] ? mlock_fixup+0x810/0x810 [ 982.327941][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 982.333869][T22784] do_mlock+0x25a/0x6d0 [ 982.338059][T22784] ? folio_evictable+0x270/0x270 [ 982.343038][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 982.348960][T22784] __x64_sys_mlock+0x59/0x80 [ 982.353573][T22784] do_syscall_64+0x39/0xb0 [ 982.358021][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 982.363993][T22784] RIP: 0033:0x7feaf548c0c9 [ 982.368419][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 982.388131][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 982.396563][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 982.404544][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 982.412529][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 982.420510][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.428490][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 982.436521][T22784] [ 982.442253][T22784] index not increased! 20ffc000 <= 20ffc000 [ 982.448194][T22784] BUG at mt_find:6473 (1) [ 982.452609][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 982.461166][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 982.499969][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 982.548422][T22784] 0-536866815: 0000000000000000 [ 982.556160][T22784] 536866816-536870911: ffff888094eb2460 [ 982.562192][T22784] 536870912-553631743: ffff888094eb2540 [ 982.568123][T22784] 553631744-553644031: 0000000000000000 [ 982.574157][T22784] 553644032-553631743: ffff888076c687e0 [ 982.580156][T22784] 553631744-553648127: ffff888076c689a0 [ 982.587618][T22784] 553648128-553652223: ffff888094eb2620 [ 982.593702][T22784] 553652224-116820934655: 0000000000000000 [ 982.599992][T22784] 116820934656-116825128959: ffff888094eb2700 [ 982.606445][T22784] 116825128960-93824997462015: 0000000000000000 [ 982.613156][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 982.620016][T22784] 93824997601280-140647092711423: 0000000000000000 [ 982.626896][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 982.633945][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 982.703587][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 982.714979][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 982.727700][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 982.744605][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 982.754438][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 982.768512][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 982.778595][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 982.788870][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 982.796007][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 982.805221][T22784] 140647114899456-140647114903551: 0000000000000000 [ 982.812299][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 982.819337][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 982.826316][T22784] 140647115304960-140647115325439: 0000000000000000 [ 982.834358][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 982.843013][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 982.894681][T22784] 140647127171072-140647128055807: 0000000000000000 [ 982.901779][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 982.919132][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 982.926147][T22784] 140647128190976-140732348923903: 0000000000000000 [ 982.935786][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 982.942997][T22784] 140732349059072-140732349100031: 0000000000000000 [ 982.950171][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 982.957294][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 982.964516][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 982.972156][T22784] Pass: 20610100 Run:20610209 [ 982.976854][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 982.986775][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 982.996857][T22784] Call Trace: [ 983.000154][T22784] [ 983.003107][T22784] dump_stack_lvl+0xd1/0x138 [ 983.007740][T22784] mt_find.cold+0x8b/0x90 [ 983.012115][T22784] ? mas_find+0x1d0/0x1d0 [ 983.016497][T22784] find_vma+0x10c/0x1b0 [ 983.025719][T22784] ? can_vma_merge_before+0x390/0x390 [ 983.031132][T22784] ? walk_page_test+0x78/0x180 [ 983.036983][T22784] walk_page_range+0x2b1/0x4a0 [ 983.041790][T22784] ? __walk_page_range+0x780/0x780 [ 983.046964][T22784] mlock_fixup+0x650/0x810 [ 983.051436][T22784] apply_vma_lock_flags+0x23d/0x350 [ 983.056684][T22784] ? mlock_fixup+0x810/0x810 [ 983.061339][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 983.067277][T22784] do_mlock+0x25a/0x6d0 [ 983.071482][T22784] ? folio_evictable+0x270/0x270 [ 983.076475][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 983.082408][T22784] __x64_sys_mlock+0x59/0x80 [ 983.087020][T22784] do_syscall_64+0x39/0xb0 [ 983.091574][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 983.097585][T22784] RIP: 0033:0x7feaf548c0c9 [ 983.102016][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 983.121644][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 983.130076][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 983.138062][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 983.146097][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 983.154080][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.162061][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 983.170065][T22784] [ 983.180460][T22784] index not increased! 20ffc000 <= 20ffc000 [ 983.186398][T22784] BUG at mt_find:6473 (1) [ 983.190830][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 983.202381][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 983.239955][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 983.291761][T22784] 0-536866815: 0000000000000000 [ 983.297012][T22784] 536866816-536870911: ffff888094eb2460 [ 983.305902][T22784] 536870912-553631743: ffff888094eb2540 [ 983.311936][T22784] 553631744-553644031: 0000000000000000 [ 983.318032][T22784] 553644032-553631743: ffff888076c687e0 [ 983.324035][T22784] 553631744-553648127: ffff888076c689a0 [ 983.330188][T22784] 553648128-553652223: ffff888094eb2620 [ 983.336121][T22784] 553652224-116820934655: 0000000000000000 [ 983.342390][T22784] 116820934656-116825128959: ffff888094eb2700 [ 983.349033][T22784] 116825128960-93824997462015: 0000000000000000 [ 983.355660][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 983.362770][T22784] 93824997601280-140647092711423: 0000000000000000 [ 983.369765][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 983.376875][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 983.443433][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 983.451995][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 983.467465][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 983.476440][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 983.493676][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 983.506243][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 983.523194][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 983.534460][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 983.549356][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 983.556354][T22784] 140647114899456-140647114903551: 0000000000000000 [ 983.563492][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 983.570552][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 983.577531][T22784] 140647115304960-140647115325439: 0000000000000000 [ 983.584589][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 983.592426][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 983.644648][T22784] 140647127171072-140647128055807: 0000000000000000 [ 983.653126][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 983.661020][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 983.668005][T22784] 140647128190976-140732348923903: 0000000000000000 [ 983.675154][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 983.682193][T22784] 140732349059072-140732349100031: 0000000000000000 [ 983.689239][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 983.696214][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 983.703455][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 983.713198][T22784] Pass: 20610100 Run:20610210 [ 983.717905][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 983.727853][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 983.737965][T22784] Call Trace: [ 983.741268][T22784] [ 983.744218][T22784] dump_stack_lvl+0xd1/0x138 [ 983.748859][T22784] mt_find.cold+0x8b/0x90 [ 983.753233][T22784] ? mas_find+0x1d0/0x1d0 [ 983.757623][T22784] find_vma+0x10c/0x1b0 [ 983.761811][T22784] ? can_vma_merge_before+0x390/0x390 [ 983.767218][T22784] ? walk_page_test+0x78/0x180 [ 983.772027][T22784] walk_page_range+0x2b1/0x4a0 [ 983.776845][T22784] ? __walk_page_range+0x780/0x780 [ 983.782028][T22784] mlock_fixup+0x650/0x810 [ 983.786511][T22784] apply_vma_lock_flags+0x23d/0x350 [ 983.791756][T22784] ? mlock_fixup+0x810/0x810 [ 983.796409][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 983.802353][T22784] do_mlock+0x25a/0x6d0 [ 983.806558][T22784] ? folio_evictable+0x270/0x270 [ 983.811549][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 983.817487][T22784] __x64_sys_mlock+0x59/0x80 [ 983.822113][T22784] do_syscall_64+0x39/0xb0 [ 983.826574][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 983.832506][T22784] RIP: 0033:0x7feaf548c0c9 [ 983.836953][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 983.856598][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 983.865047][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 983.873222][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 983.881216][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 983.889211][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.897209][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 983.905211][T22784] [ 983.915719][T22784] index not increased! 20ffc000 <= 20ffc000 [ 983.927659][T22784] BUG at mt_find:6473 (1) [ 983.932157][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 983.940793][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 983.978118][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 984.031543][T22784] 0-536866815: 0000000000000000 [ 984.036995][T22784] 536866816-536870911: ffff888094eb2460 [ 984.043439][T22784] 536870912-553631743: ffff888094eb2540 [ 984.057817][T22784] 553631744-553644031: 0000000000000000 14:32:48 executing program 5: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/86, 0x56}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0) 14:32:48 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[], 0x0) 14:32:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xe5f0000, 0x4, 0x0, 0x280, 0xffffffffffffffff, 0x80003, '\x00', 0x0, r5, 0x1, 0x0, 0x0, 0x7}, 0x48) getrlimit(0xb, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568908000000f798393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b617130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107cc03d40224edc5465a932377a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f5700000000978bc229413300000000000000000003000000800000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b1c7095cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae4814f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec900000d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f68cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b0e5f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbb92bf73468785805f3dc186dba36c28df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000200000000000000000000003802000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b606009684d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005faa6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a817f2f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a0051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b2f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d87bffd8f65d776ea4fe4f556eaa11e05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d7c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdf069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd185c74c91cc4d71b0f76e2c2e4825106aa7ce2a3192ec7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e900000000000000000000000000000000c3f7a46c482ac85b3f93b13576e1d10c3f6d24551c7502ce657b640c60205d4c3037ebe4954e3aafb41738185908356a179f08eee00ffb47bf8d02e89d183126f1fec0d0643ba19b8b1b9e60f99044eb0da77e04"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003540)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x2}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 14:32:48 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) 14:32:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x8202, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={@rand_addr, 0x0, 0x2f, 0x7}}) fallocate(r2, 0x21, 0x0, 0x80000000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000006440)={0x0, @aes256, 0x0, @desc1}) sendto$inet6(r3, &(0x7f0000000580)="49e6b17a4400f34be58d3281fcf2381731e7da3b20579b1d63b15f6cdae58f18ee3fa2ee88a13f8dbb3f3e5382c3712b2c506487b9dcae424e09cf199fae8694679668b604db9e6fb8da8970c1bcd4b698aa9d7a647b6104a1e997d25e14cf1fd24264d6d87c638f7fe1b292bf797fa146e6aadac0bbf71d9cc2484c96ae6c328a8983a76ef84e194c", 0x89, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f00000004c0)={@rand_addr, @rand_addr, 0x29, 0xa5}}) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x125) ftruncate(r4, 0x0) 14:32:48 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, {0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) [ 984.065421][T22784] 553644032-553631743: ffff888076c687e0 14:32:48 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[], 0x0) 14:32:48 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @random="0afeb320a4d1", @val={@void}, {@mpls_mc={0x8100, {[], @ipv6=@tipc_packet={0x0, 0x6, "e9db9b", 0x2c, 0x6, 0x0, @remote, @mcast2, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}}}}}, 0x0) 14:32:48 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) [ 984.113188][T22784] 553631744-553648127: ffff888076c689a0 [ 984.279798][T22784] 553648128-553652223: ffff888094eb2620 [ 984.648471][T22784] 553652224-116820934655: 0000000000000000 14:32:49 executing program 5: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/86, 0x56}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0) 14:32:49 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 14:32:49 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 14:32:49 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) 14:32:49 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) [ 985.193172][T22784] 116820934656-116825128959: ffff888094eb2700 [ 985.245140][T22784] 116825128960-93824997462015: 0000000000000000 14:32:49 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 14:32:49 executing program 5: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/86, 0x56}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0) [ 985.322186][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 985.379091][T22784] 93824997601280-140647092711423: 0000000000000000 [ 985.427102][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 985.468159][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 985.563734][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 985.577461][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 985.587256][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 985.603454][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 985.614456][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 985.626691][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 985.637650][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 985.656440][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 985.663738][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 985.673164][T22784] 140647114899456-140647114903551: 0000000000000000 [ 985.680256][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 985.687240][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 985.694279][T22784] 140647115304960-140647115325439: 0000000000000000 [ 985.701384][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 985.708357][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 985.774034][T22784] 140647127171072-140647128055807: 0000000000000000 [ 985.783877][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 985.791326][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 985.798344][T22784] 140647128190976-140732348923903: 0000000000000000 [ 985.805810][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 985.813163][T22784] 140732349059072-140732349100031: 0000000000000000 [ 985.820520][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 985.827537][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 985.834972][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 985.842772][T22784] Pass: 20622360 Run:20622471 [ 985.847509][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 985.857429][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 985.867510][T22784] Call Trace: [ 985.870814][T22784] [ 985.873767][T22784] dump_stack_lvl+0xd1/0x138 [ 985.878407][T22784] mt_find.cold+0x8b/0x90 [ 985.882783][T22784] ? mas_find+0x1d0/0x1d0 [ 985.887187][T22784] find_vma+0x10c/0x1b0 [ 985.891475][T22784] ? can_vma_merge_before+0x390/0x390 [ 985.896902][T22784] ? walk_page_test+0x78/0x180 [ 985.901800][T22784] walk_page_range+0x2b1/0x4a0 [ 985.906616][T22784] ? __walk_page_range+0x780/0x780 [ 985.911792][T22784] mlock_fixup+0x650/0x810 [ 985.916264][T22784] apply_vma_lock_flags+0x23d/0x350 [ 985.921517][T22784] ? mlock_fixup+0x810/0x810 [ 985.926160][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 985.932089][T22784] do_mlock+0x25a/0x6d0 [ 985.936281][T22784] ? folio_evictable+0x270/0x270 [ 985.941261][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 985.947183][T22784] __x64_sys_mlock+0x59/0x80 [ 985.951792][T22784] do_syscall_64+0x39/0xb0 [ 985.956243][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 985.962161][T22784] RIP: 0033:0x7feaf548c0c9 [ 985.966591][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 985.986220][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 985.994654][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 986.002638][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 986.010622][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 986.018604][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.026585][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 986.034588][T22784] [ 986.052024][T22784] index not increased! 20ffc000 <= 20ffc000 [ 986.057977][T22784] BUG at mt_find:6473 (1) [ 986.069088][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 986.082241][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 986.127960][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 986.198451][T22784] 0-536866815: 0000000000000000 [ 986.210577][T22784] 536866816-536870911: ffff888094eb2460 [ 986.216531][T22784] 536870912-553631743: ffff888094eb2540 [ 986.229012][T22784] 553631744-553644031: 0000000000000000 [ 986.234961][T22784] 553644032-553631743: ffff888076c687e0 [ 986.241384][T22784] 553631744-553648127: ffff888076c689a0 [ 986.247410][T22784] 553648128-553652223: ffff888094eb2620 [ 986.253478][T22784] 553652224-116820934655: 0000000000000000 [ 986.260058][T22784] 116820934656-116825128959: ffff888094eb2700 [ 986.266605][T22784] 116825128960-93824997462015: 0000000000000000 [ 986.275024][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 986.282117][T22784] 93824997601280-140647092711423: 0000000000000000 [ 986.291434][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 986.298494][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 986.355382][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 986.362672][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 986.369842][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 986.377445][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 986.384891][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 986.392060][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 986.401385][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 986.408448][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 986.415597][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 986.422677][T22784] 140647114899456-140647114903551: 0000000000000000 [ 986.429850][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 986.436919][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 986.444096][T22784] 140647115304960-140647115325439: 0000000000000000 [ 986.451195][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 986.458249][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 986.518295][T22784] 140647127171072-140647128055807: 0000000000000000 [ 986.527549][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 986.544368][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 986.555443][T22784] 140647128190976-140732348923903: 0000000000000000 [ 986.562977][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 986.570128][T22784] 140732349059072-140732349100031: 0000000000000000 [ 986.577528][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 986.584717][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 986.592210][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 986.599727][T22784] Pass: 20623815 Run:20623927 [ 986.604459][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 986.614377][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 986.624454][T22784] Call Trace: [ 986.627747][T22784] [ 986.630687][T22784] dump_stack_lvl+0xd1/0x138 [ 986.635310][T22784] mt_find.cold+0x8b/0x90 [ 986.639671][T22784] ? mas_find+0x1d0/0x1d0 [ 986.644037][T22784] find_vma+0x10c/0x1b0 [ 986.648209][T22784] ? can_vma_merge_before+0x390/0x390 [ 986.653603][T22784] ? walk_page_test+0x78/0x180 [ 986.658391][T22784] walk_page_range+0x2b1/0x4a0 [ 986.663182][T22784] ? __walk_page_range+0x780/0x780 [ 986.668335][T22784] mlock_fixup+0x650/0x810 [ 986.672795][T22784] apply_vma_lock_flags+0x23d/0x350 [ 986.678026][T22784] ? mlock_fixup+0x810/0x810 [ 986.682662][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 986.688592][T22784] do_mlock+0x25a/0x6d0 [ 986.692788][T22784] ? folio_evictable+0x270/0x270 [ 986.697768][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 986.703690][T22784] __x64_sys_mlock+0x59/0x80 [ 986.709771][T22784] do_syscall_64+0x39/0xb0 [ 986.714226][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 986.720140][T22784] RIP: 0033:0x7feaf548c0c9 [ 986.724567][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 986.744297][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 986.752755][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 986.760775][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 986.768779][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 986.776773][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.784757][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 986.792761][T22784] [ 986.802943][T22784] index not increased! 20ffc000 <= 20ffc000 [ 986.809429][T22784] BUG at mt_find:6473 (1) [ 986.813800][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 986.822597][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 986.859932][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 986.910998][T22784] 0-536866815: 0000000000000000 [ 986.916270][T22784] 536866816-536870911: ffff888094eb2460 [ 986.922347][T22784] 536870912-553631743: ffff888094eb2540 [ 986.929987][T22784] 553631744-553644031: 0000000000000000 [ 986.935992][T22784] 553644032-553631743: ffff888076c687e0 [ 986.943329][T22784] 553631744-553648127: ffff888076c689a0 [ 986.953846][T22784] 553648128-553652223: ffff888094eb2620 [ 986.960134][T22784] 553652224-116820934655: 0000000000000000 [ 986.966398][T22784] 116820934656-116825128959: ffff888094eb2700 [ 986.975306][T22784] 116825128960-93824997462015: 0000000000000000 [ 986.982305][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 986.990431][T22784] 93824997601280-140647092711423: 0000000000000000 [ 986.997323][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 987.004488][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 987.062959][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 987.070327][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 987.077313][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 987.084658][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 987.093290][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 987.108765][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 987.117398][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 987.132650][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 987.139932][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 987.146906][T22784] 140647114899456-140647114903551: 0000000000000000 [ 987.159319][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 987.166353][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 987.173805][T22784] 140647115304960-140647115325439: 0000000000000000 [ 987.192541][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 987.209043][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 987.267703][T22784] 140647127171072-140647128055807: 0000000000000000 [ 987.275428][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 987.282979][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 987.290363][T22784] 140647128190976-140732348923903: 0000000000000000 [ 987.297868][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 987.307965][T22784] 140732349059072-140732349100031: 0000000000000000 [ 987.328528][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 987.349113][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 987.356106][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 987.364969][T22784] Pass: 20624066 Run:20624179 [ 987.370012][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 987.379934][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 987.390007][T22784] Call Trace: [ 987.393302][T22784] [ 987.396257][T22784] dump_stack_lvl+0xd1/0x138 [ 987.400896][T22784] mt_find.cold+0x8b/0x90 [ 987.405275][T22784] ? mas_find+0x1d0/0x1d0 [ 987.409659][T22784] find_vma+0x10c/0x1b0 [ 987.413859][T22784] ? can_vma_merge_before+0x390/0x390 [ 987.429857][T22784] ? walk_page_test+0x78/0x180 [ 987.434660][T22784] walk_page_range+0x2b1/0x4a0 [ 987.439455][T22784] ? __walk_page_range+0x780/0x780 [ 987.444618][T22784] mlock_fixup+0x650/0x810 [ 987.449081][T22784] apply_vma_lock_flags+0x23d/0x350 [ 987.454317][T22784] ? mlock_fixup+0x810/0x810 [ 987.458954][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 987.464885][T22784] do_mlock+0x25a/0x6d0 [ 987.469078][T22784] ? folio_evictable+0x270/0x270 [ 987.474056][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 987.480063][T22784] __x64_sys_mlock+0x59/0x80 [ 987.484672][T22784] do_syscall_64+0x39/0xb0 [ 987.489121][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 987.495036][T22784] RIP: 0033:0x7feaf548c0c9 [ 987.499466][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 987.519102][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 987.527535][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 987.535528][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 987.543508][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 987.551496][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.559477][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 987.567483][T22784] [ 987.572534][T22784] index not increased! 20ffc000 <= 20ffc000 [ 987.578473][T22784] BUG at mt_find:6473 (1) [ 987.584003][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 987.592624][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 987.632174][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 987.681556][T22784] 0-536866815: 0000000000000000 [ 987.686803][T22784] 536866816-536870911: ffff888094eb2460 [ 987.694303][T22784] 536870912-553631743: ffff888094eb2540 [ 987.700359][T22784] 553631744-553644031: 0000000000000000 [ 987.708563][T22784] 553644032-553631743: ffff888076c687e0 [ 987.717262][T22784] 553631744-553648127: ffff888076c689a0 [ 987.733252][T22784] 553648128-553652223: ffff888094eb2620 [ 987.739355][T22784] 553652224-116820934655: 0000000000000000 [ 987.745555][T22784] 116820934656-116825128959: ffff888094eb2700 [ 987.752346][T22784] 116825128960-93824997462015: 0000000000000000 [ 987.759064][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 987.766066][T22784] 93824997601280-140647092711423: 0000000000000000 [ 987.773055][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 987.780259][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 987.852234][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 987.864876][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 987.877288][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 987.895748][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 987.905638][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 987.915803][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 987.922919][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 987.929983][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 987.936953][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 987.943988][T22784] 140647114899456-140647114903551: 0000000000000000 [ 987.953408][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 987.961157][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 987.968139][T22784] 140647115304960-140647115325439: 0000000000000000 [ 987.975418][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 987.982714][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 988.034496][T22784] 140647127171072-140647128055807: 0000000000000000 [ 988.042240][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 988.049456][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 988.056431][T22784] 140647128190976-140732348923903: 0000000000000000 [ 988.065787][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 988.073028][T22784] 140732349059072-140732349100031: 0000000000000000 [ 988.080272][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 988.087312][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 988.094578][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 988.102265][T22784] Pass: 20624097 Run:20624211 [ 988.106977][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 988.116888][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 988.126956][T22784] Call Trace: [ 988.130245][T22784] [ 988.133184][T22784] dump_stack_lvl+0xd1/0x138 [ 988.137808][T22784] mt_find.cold+0x8b/0x90 [ 988.142171][T22784] ? mas_find+0x1d0/0x1d0 [ 988.146538][T22784] find_vma+0x10c/0x1b0 [ 988.150732][T22784] ? can_vma_merge_before+0x390/0x390 [ 988.156133][T22784] ? walk_page_test+0x78/0x180 [ 988.160925][T22784] walk_page_range+0x2b1/0x4a0 [ 988.165717][T22784] ? __walk_page_range+0x780/0x780 [ 988.170873][T22784] mlock_fixup+0x650/0x810 [ 988.175329][T22784] apply_vma_lock_flags+0x23d/0x350 [ 988.180564][T22784] ? mlock_fixup+0x810/0x810 [ 988.185200][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 988.191123][T22784] do_mlock+0x25a/0x6d0 [ 988.195320][T22784] ? folio_evictable+0x270/0x270 [ 988.200303][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 988.206222][T22784] __x64_sys_mlock+0x59/0x80 [ 988.210826][T22784] do_syscall_64+0x39/0xb0 [ 988.215273][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 988.221193][T22784] RIP: 0033:0x7feaf548c0c9 [ 988.225623][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 988.245247][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 988.253684][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 988.261755][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 988.269745][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 988.277738][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 988.285728][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 988.293746][T22784] [ 988.314771][T22784] index not increased! 20ffc000 <= 20ffc000 [ 988.322433][T22784] BUG at mt_find:6473 (1) [ 988.327369][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 988.336734][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 988.374878][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 988.431940][T22784] 0-536866815: 0000000000000000 [ 988.437208][T22784] 536866816-536870911: ffff888094eb2460 [ 988.444151][T22784] 536870912-553631743: ffff888094eb2540 [ 988.450463][T22784] 553631744-553644031: 0000000000000000 [ 988.456398][T22784] 553644032-553631743: ffff888076c687e0 [ 988.462720][T22784] 553631744-553648127: ffff888076c689a0 [ 988.468651][T22784] 553648128-553652223: ffff888094eb2620 [ 988.474937][T22784] 553652224-116820934655: 0000000000000000 [ 988.481432][T22784] 116820934656-116825128959: ffff888094eb2700 [ 988.487890][T22784] 116825128960-93824997462015: 0000000000000000 [ 988.494886][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 988.501991][T22784] 93824997601280-140647092711423: 0000000000000000 [ 988.508877][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 988.516408][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 988.575696][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 988.583782][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 988.591127][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 988.598100][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 988.605504][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 988.612810][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 988.620057][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 988.629589][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 988.636579][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 988.643907][T22784] 140647114899456-140647114903551: 0000000000000000 [ 988.651163][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 988.658142][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 988.665545][T22784] 140647115304960-140647115325439: 0000000000000000 [ 988.672998][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 988.682339][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 988.736772][T22784] 140647127171072-140647128055807: 0000000000000000 [ 988.759109][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 988.766099][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 988.791134][T22784] 140647128190976-140732348923903: 0000000000000000 [ 988.798128][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 988.816057][T22784] 140732349059072-140732349100031: 0000000000000000 [ 988.824835][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 988.843402][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 988.854939][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 988.862735][T22784] Pass: 20624097 Run:20624212 [ 988.867437][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 988.877374][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 988.887477][T22784] Call Trace: [ 988.890776][T22784] [ 988.893727][T22784] dump_stack_lvl+0xd1/0x138 [ 988.898362][T22784] mt_find.cold+0x8b/0x90 [ 988.902736][T22784] ? mas_find+0x1d0/0x1d0 [ 988.907118][T22784] find_vma+0x10c/0x1b0 [ 988.911318][T22784] ? can_vma_merge_before+0x390/0x390 [ 988.916752][T22784] ? walk_page_test+0x78/0x180 [ 988.921570][T22784] walk_page_range+0x2b1/0x4a0 [ 988.926378][T22784] ? __walk_page_range+0x780/0x780 [ 988.931540][T22784] mlock_fixup+0x650/0x810 [ 988.936007][T22784] apply_vma_lock_flags+0x23d/0x350 [ 988.941252][T22784] ? mlock_fixup+0x810/0x810 [ 988.945888][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 988.951824][T22784] do_mlock+0x25a/0x6d0 [ 988.956018][T22784] ? folio_evictable+0x270/0x270 [ 988.960997][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 988.966922][T22784] __x64_sys_mlock+0x59/0x80 [ 988.971530][T22784] do_syscall_64+0x39/0xb0 [ 988.975980][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 988.981897][T22784] RIP: 0033:0x7feaf548c0c9 [ 988.986330][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 989.005957][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 989.014388][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 989.022373][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 989.030356][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 989.038349][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.046338][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 989.054340][T22784] [ 989.086075][T22784] index not increased! 20ffc000 <= 20ffc000 [ 989.092187][T22784] BUG at mt_find:6473 (1) [ 989.096570][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 989.105162][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 989.142996][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 989.193930][T22784] 0-536866815: 0000000000000000 [ 989.199245][T22784] 536866816-536870911: ffff888094eb2460 [ 989.205167][T22784] 536870912-553631743: ffff888094eb2540 [ 989.211130][T22784] 553631744-553644031: 0000000000000000 [ 989.217046][T22784] 553644032-553631743: ffff888076c687e0 [ 989.223004][T22784] 553631744-553648127: ffff888076c689a0 [ 989.228917][T22784] 553648128-553652223: ffff888094eb2620 [ 989.234882][T22784] 553652224-116820934655: 0000000000000000 [ 989.242236][T22784] 116820934656-116825128959: ffff888094eb2700 [ 989.248688][T22784] 116825128960-93824997462015: 0000000000000000 [ 989.255355][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 989.262217][T22784] 93824997601280-140647092711423: 0000000000000000 [ 989.269152][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:32:53 executing program 3: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nobarrier}, {@subvolid}, {@ssd_spread}, {@space_cache_v2}, {@autodefrag}, {@enospc_debug}, {@space_cache_v2}, {@noflushoncommit}, {@usebackuproot}, {@datasum}]}, 0x1, 0x55a8, &(0x7f000000ac40)="$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") mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x848c20, 0x0) 14:32:53 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) 14:32:53 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f00000140fc0f7545390bb1836fa94d0c8a4121f100"], 0x0) 14:32:53 executing program 2: openat$incfs(0xffffffffffffff9c, 0x0, 0x241, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@nobarrier}, {@subvolid}, {@ssd_spread}, {@space_cache_v2}, {@autodefrag}, {@enospc_debug}, {@space_cache_v2}, {@noflushoncommit}, {@usebackuproot}, {@datasum}]}, 0x1, 0x55a8, &(0x7f000000ac40)="$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") mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 989.276132][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d 14:32:53 executing program 5: r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=""/86, 0x56}], 0x1, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0) 14:32:53 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) [ 989.350284][T22784] 140647092715520-140647101104127: ffff888094eb29a0 14:32:53 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) [ 989.409997][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 989.417023][T22784] 140647103201280-140647105298431: ffff888094eb2b60 14:32:53 executing program 1: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000280)={0x7, 0x0, 0x7}, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000018c0)) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = eventfd2(0x0, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000001ac0)=r0, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) socket$can_j1939(0x1d, 0x2, 0x7) [ 989.468402][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:32:53 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x5646, 0x0) 14:32:53 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 14:32:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f00000013c0)=[{{&(0x7f0000000d80)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="cb", 0x1}], 0x1}}], 0x1, 0x40050) [ 989.525841][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:32:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, &(0x7f0000000140)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0x7, &(0x7f0000000280)="9ae33c636253a1") [ 989.594960][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 989.686404][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 989.696125][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 989.721410][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 989.731212][T22784] 140647114899456-140647114903551: 0000000000000000 [ 989.769122][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 989.777434][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 989.808381][T22784] 140647115304960-140647115325439: 0000000000000000 [ 989.831590][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 989.859618][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 989.912685][T22784] 140647127171072-140647128055807: 0000000000000000 [ 989.920143][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 989.927340][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 989.934963][T22784] 140647128190976-140732348923903: 0000000000000000 [ 989.942220][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 989.949426][T22784] 140732349059072-140732349100031: 0000000000000000 [ 989.957034][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 989.964251][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 989.971490][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 989.979171][T22784] Pass: 20638312 Run:20638428 [ 989.984074][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 989.994005][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 990.004104][T22784] Call Trace: [ 990.007421][T22784] [ 990.010383][T22784] dump_stack_lvl+0xd1/0x138 [ 990.015021][T22784] mt_find.cold+0x8b/0x90 [ 990.019439][T22784] ? mas_find+0x1d0/0x1d0 [ 990.023827][T22784] find_vma+0x10c/0x1b0 [ 990.028017][T22784] ? can_vma_merge_before+0x390/0x390 [ 990.033430][T22784] ? walk_page_test+0x78/0x180 [ 990.038229][T22784] walk_page_range+0x2b1/0x4a0 [ 990.043025][T22784] ? __walk_page_range+0x780/0x780 [ 990.048182][T22784] mlock_fixup+0x650/0x810 [ 990.052653][T22784] apply_vma_lock_flags+0x23d/0x350 [ 990.057897][T22784] ? mlock_fixup+0x810/0x810 [ 990.062538][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 990.068467][T22784] do_mlock+0x25a/0x6d0 [ 990.072658][T22784] ? folio_evictable+0x270/0x270 [ 990.077645][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 990.083566][T22784] __x64_sys_mlock+0x59/0x80 [ 990.088176][T22784] do_syscall_64+0x39/0xb0 [ 990.092625][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 990.098541][T22784] RIP: 0033:0x7feaf548c0c9 [ 990.102967][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 990.122591][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 990.131022][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 990.139006][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 990.146989][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 990.154974][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.162956][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 990.170957][T22784] [ 990.193525][ T1731] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 990.229326][T22784] index not increased! 20ffc000 <= 20ffc000 [ 990.235362][T22784] BUG at mt_find:6473 (1) [ 990.249064][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 990.264341][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 990.399397][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:32:54 executing program 3: mount$9p_fd(0xff600000, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:32:54 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) 14:32:54 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x5646, 0x0) [ 990.461998][T22784] 0-536866815: 0000000000000000 [ 990.471439][T22784] 536866816-536870911: ffff888094eb2460 [ 990.477524][T22784] 536870912-553631743: ffff888094eb2540 [ 990.484014][T22784] 553631744-553644031: 0000000000000000 [ 990.490475][T22784] 553644032-553631743: ffff888076c687e0 [ 990.496542][T22784] 553631744-553648127: ffff888076c689a0 14:32:54 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0x0, 0x102402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002800)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) 14:32:54 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) ioctl$BLKPG(r0, 0x5452, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0}) [ 990.529309][T22784] 553648128-553652223: ffff888094eb2620 [ 990.553593][T22784] 553652224-116820934655: 0000000000000000 14:32:54 executing program 1: mount$9p_fd(0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff) 14:32:54 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x5646, 0x0) 14:32:54 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c00, 0x0) 14:32:54 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) [ 990.583821][T22784] 116820934656-116825128959: ffff888094eb2700 [ 990.621130][T22784] 116825128960-93824997462015: 0000000000000000 14:32:54 executing program 0: pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close$fd_v4l2_buffer(r0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x5646, 0x0) 14:32:54 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x89a3, &(0x7f0000000000)={'macvlan0\x00'}) [ 990.655866][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 990.678806][T22784] 93824997601280-140647092711423: 0000000000000000 [ 990.691776][ T1731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.708592][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 990.713016][ T1731] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 990.750904][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 990.778008][ T1731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.832532][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 990.846445][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 990.864164][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 990.874929][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 990.888116][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 990.891767][ T1731] usb 6-1: config 0 descriptor?? [ 990.906165][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 990.914541][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 990.922775][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 990.930935][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 990.937971][T22784] 140647114899456-140647114903551: 0000000000000000 [ 990.945375][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 990.952625][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 990.961567][T22784] 140647115304960-140647115325439: 0000000000000000 [ 990.968639][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 990.976546][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 991.027877][T22784] 140647127171072-140647128055807: 0000000000000000 [ 991.034961][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 991.041971][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 991.048923][T22784] 140647128190976-140732348923903: 0000000000000000 [ 991.055964][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 991.063001][T22784] 140732349059072-140732349100031: 0000000000000000 [ 991.070615][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 991.077647][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 991.095573][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 991.103350][T22784] Pass: 20644389 Run:20644506 [ 991.108056][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 991.117944][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 991.128081][T22784] Call Trace: [ 991.131354][T22784] [ 991.134281][T22784] dump_stack_lvl+0xd1/0x138 [ 991.138886][T22784] mt_find.cold+0x8b/0x90 [ 991.143307][T22784] ? mas_find+0x1d0/0x1d0 [ 991.147643][T22784] find_vma+0x10c/0x1b0 [ 991.151812][T22784] ? can_vma_merge_before+0x390/0x390 [ 991.157226][T22784] ? walk_page_test+0x78/0x180 [ 991.162021][T22784] walk_page_range+0x2b1/0x4a0 [ 991.166788][T22784] ? __walk_page_range+0x780/0x780 [ 991.171910][T22784] mlock_fixup+0x650/0x810 [ 991.176335][T22784] apply_vma_lock_flags+0x23d/0x350 [ 991.181538][T22784] ? mlock_fixup+0x810/0x810 [ 991.186145][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 991.192045][T22784] do_mlock+0x25a/0x6d0 [ 991.196208][T22784] ? folio_evictable+0x270/0x270 [ 991.201181][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 991.207123][T22784] __x64_sys_mlock+0x59/0x80 [ 991.211760][T22784] do_syscall_64+0x39/0xb0 [ 991.216183][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 991.222105][T22784] RIP: 0033:0x7feaf548c0c9 [ 991.226514][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 991.246147][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 991.254572][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 991.262593][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 991.270580][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 991.278549][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 991.286532][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 991.294533][T22784] [ 991.302322][T22784] index not increased! 20ffc000 <= 20ffc000 [ 991.308256][T22784] BUG at mt_find:6473 (1) [ 991.314630][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 991.323152][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 991.360641][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 991.413189][T22784] 0-536866815: 0000000000000000 [ 991.418581][T22784] 536866816-536870911: ffff888094eb2460 [ 991.424829][T22784] 536870912-553631743: ffff888094eb2540 [ 991.430845][T22784] 553631744-553644031: 0000000000000000 [ 991.436916][T22784] 553644032-553631743: ffff888076c687e0 [ 991.443227][T22784] 553631744-553648127: ffff888076c689a0 [ 991.449389][T22784] 553648128-553652223: ffff888094eb2620 [ 991.455320][T22784] 553652224-116820934655: 0000000000000000 [ 991.461524][T22784] 116820934656-116825128959: ffff888094eb2700 [ 991.467979][T22784] 116825128960-93824997462015: 0000000000000000 [ 991.476444][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 991.483852][T22784] 93824997601280-140647092711423: 0000000000000000 [ 991.492438][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 991.499769][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 991.557361][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 991.564728][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 991.572028][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 991.579283][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 991.580325][ T1731] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 991.586324][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 991.604085][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 991.610906][ T1731] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0005/input/input20 [ 991.611370][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 991.630353][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 991.637380][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 991.644426][T22784] 140647114899456-140647114903551: 0000000000000000 [ 991.651619][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 991.658684][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 991.665938][T22784] 140647115304960-140647115325439: 0000000000000000 [ 991.673332][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 991.680470][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 991.733766][T22784] 140647127171072-140647128055807: 0000000000000000 [ 991.741047][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 991.748536][ T1731] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 991.748537][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 991.748586][T22784] 140647128190976-140732348923903: 0000000000000000 [ 991.777990][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 991.791656][T22784] 140732349059072-140732349100031: 0000000000000000 [ 991.801703][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 991.808699][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 991.815839][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 991.823660][T22784] Pass: 20644447 Run:20644565 [ 991.828375][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 991.838301][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 991.848387][T22784] Call Trace: [ 991.851692][T22784] [ 991.854651][T22784] dump_stack_lvl+0xd1/0x138 [ 991.859296][T22784] mt_find.cold+0x8b/0x90 [ 991.863678][T22784] ? mas_find+0x1d0/0x1d0 [ 991.868074][T22784] find_vma+0x10c/0x1b0 [ 991.872277][T22784] ? can_vma_merge_before+0x390/0x390 [ 991.877697][T22784] ? walk_page_test+0x78/0x180 [ 991.882521][T22784] walk_page_range+0x2b1/0x4a0 [ 991.887342][T22784] ? __walk_page_range+0x780/0x780 [ 991.892524][T22784] mlock_fixup+0x650/0x810 [ 991.897002][T22784] apply_vma_lock_flags+0x23d/0x350 [ 991.902267][T22784] ? mlock_fixup+0x810/0x810 [ 991.906903][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 991.912822][T22784] do_mlock+0x25a/0x6d0 [ 991.917017][T22784] ? folio_evictable+0x270/0x270 [ 991.921988][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 991.927918][T22784] __x64_sys_mlock+0x59/0x80 [ 991.932521][T22784] do_syscall_64+0x39/0xb0 [ 991.936973][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 991.942877][T22784] RIP: 0033:0x7feaf548c0c9 [ 991.947313][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 991.966918][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 991.975330][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 991.983299][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 991.991280][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 991.999280][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.007285][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 992.015267][T22784] [ 992.022897][ T1731] usb 6-1: USB disconnect, device number 13 [ 992.031587][T22784] index not increased! 20ffc000 <= 20ffc000 [ 992.037520][T22784] BUG at mt_find:6473 (1) [ 992.043888][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 992.052595][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 992.089678][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 992.143832][T22784] 0-536866815: 0000000000000000 [ 992.152054][T22784] 536866816-536870911: ffff888094eb2460 [ 992.158308][T22784] 536870912-553631743: ffff888094eb2540 [ 992.164720][T22784] 553631744-553644031: 0000000000000000 [ 992.170941][T22784] 553644032-553631743: ffff888076c687e0 [ 992.176876][T22784] 553631744-553648127: ffff888076c689a0 [ 992.184763][T22784] 553648128-553652223: ffff888094eb2620 [ 992.191281][T22784] 553652224-116820934655: 0000000000000000 [ 992.202064][T22784] 116820934656-116825128959: ffff888094eb2700 [ 992.216257][T22784] 116825128960-93824997462015: 0000000000000000 [ 992.223176][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 992.230287][T22784] 93824997601280-140647092711423: 0000000000000000 [ 992.237167][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 992.244241][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 992.304309][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 992.311934][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 992.318904][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 992.325948][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 992.332977][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 992.339983][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 992.346952][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 992.354169][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 992.361231][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 992.368208][T22784] 140647114899456-140647114903551: 0000000000000000 [ 992.375216][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 992.382250][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 992.389277][T22784] 140647115304960-140647115325439: 0000000000000000 [ 992.396237][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 992.403444][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 992.455097][T22784] 140647127171072-140647128055807: 0000000000000000 [ 992.462650][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 992.470098][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 992.477140][T22784] 140647128190976-140732348923903: 0000000000000000 [ 992.484473][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 992.491812][T22784] 140732349059072-140732349100031: 0000000000000000 [ 992.498792][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 992.505982][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 992.517663][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 992.526002][T22784] Pass: 20644968 Run:20645087 [ 992.530915][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 992.540847][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 992.550925][T22784] Call Trace: [ 992.554225][T22784] [ 992.557164][T22784] dump_stack_lvl+0xd1/0x138 [ 992.561771][T22784] mt_find.cold+0x8b/0x90 [ 992.566142][T22784] ? mas_find+0x1d0/0x1d0 [ 992.570550][T22784] find_vma+0x10c/0x1b0 [ 992.574732][T22784] ? can_vma_merge_before+0x390/0x390 [ 992.580132][T22784] ? walk_page_test+0x78/0x180 [ 992.584935][T22784] walk_page_range+0x2b1/0x4a0 [ 992.589731][T22784] ? __walk_page_range+0x780/0x780 [ 992.594888][T22784] mlock_fixup+0x650/0x810 [ 992.599349][T22784] apply_vma_lock_flags+0x23d/0x350 [ 992.604585][T22784] ? mlock_fixup+0x810/0x810 [ 992.609219][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 992.615143][T22784] do_mlock+0x25a/0x6d0 [ 992.619344][T22784] ? folio_evictable+0x270/0x270 [ 992.624367][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 992.630292][T22784] __x64_sys_mlock+0x59/0x80 [ 992.634899][T22784] do_syscall_64+0x39/0xb0 [ 992.639347][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 992.645262][T22784] RIP: 0033:0x7feaf548c0c9 [ 992.649690][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 992.669494][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 992.677924][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 992.685910][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 992.693899][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 992.701880][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.709870][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 14:32:57 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x8911, &(0x7f0000000280)={0x7, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) 14:32:57 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x5, 0x0, 0x0, 0xc, 0x6000000}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000500)=""/255, 0x2b, 0xff, 0x1}, 0x20) 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) 14:32:57 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000500)={@link_local, @random="7c813c3820e5", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @remote}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}, 0x0) [ 992.717874][T22784] 14:32:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50010}) 14:32:57 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @local, 0x19}], 0x1c) 14:32:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0401273, 0x0) 14:32:57 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) 14:32:57 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) [ 992.751740][ T1203] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.758110][ T1203] ieee802154 phy1 wpan1: encryption failed: -22 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) 14:32:57 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x81a0ae8c, 0x0) 14:32:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000000)={'macvlan0\x00'}) [ 992.839335][T22784] index not increased! 20ffc000 <= 20ffc000 [ 992.850138][T22784] BUG at mt_find:6473 (1) [ 992.854517][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:32:57 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="04"]) 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f000001"], 0x0) [ 992.956914][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 993.019717][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:32:57 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x40046602, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) [ 993.068878][T22784] 0-536866815: 0000000000000000 [ 993.074525][T22784] 536866816-536870911: ffff888094eb2460 [ 993.080830][T22784] 536870912-553631743: ffff888094eb2540 [ 993.086902][T22784] 553631744-553644031: 0000000000000000 [ 993.093945][T22784] 553644032-553631743: ffff888076c687e0 [ 993.100768][T22784] 553631744-553648127: ffff888076c689a0 [ 993.106845][T22784] 553648128-553652223: ffff888094eb2620 [ 993.113541][T22784] 553652224-116820934655: 0000000000000000 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) [ 993.122278][T22784] 116820934656-116825128959: ffff888094eb2700 [ 993.128888][T22784] 116825128960-93824997462015: 0000000000000000 [ 993.136344][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 993.143460][T22784] 93824997601280-140647092711423: 0000000000000000 [ 993.158842][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:32:57 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) [ 993.166164][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d 14:32:57 executing program 3: syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x24001) 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) 14:32:57 executing program 1: setuid(0xee00) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 14:32:57 executing program 3: setuid(0xee00) socket$inet(0x2, 0xa, 0x0) 14:32:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x5452, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0}) [ 993.305939][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 993.364071][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 993.377527][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 993.398214][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 993.405640][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:32:57 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0xc, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1c) 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25"], 0x0) 14:32:57 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 14:32:57 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0xc018ae85, &(0x7f0000000000)) [ 993.422576][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 993.429809][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 993.438673][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 993.448114][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 993.455244][T22784] 140647114899456-140647114903551: 0000000000000000 14:32:57 executing program 1: mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 993.479085][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 993.486086][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:32:57 executing program 3: setuid(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dvmrp0\x00'}) 14:32:57 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) [ 993.524911][T22784] 140647115304960-140647115325439: 0000000000000000 [ 993.545384][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 993.560953][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 993.616642][T22784] 140647127171072-140647128055807: 0000000000000000 14:32:57 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x4140aecd, 0x0) [ 993.624568][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 993.632063][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 993.639367][T22784] 140647128190976-140732348923903: 0000000000000000 [ 993.648000][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 993.655297][T22784] 140732349059072-140732349100031: 0000000000000000 14:32:57 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:32:57 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed0000000000000000"], 0x0) [ 993.686971][T22784] 140732349100032-140732349116415: ffff88807b4c5000 14:32:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c04, 0x0) [ 993.737965][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 14:32:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed0000000000000000"], 0x0) [ 993.804830][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 993.824123][T22784] Pass: 20660091 Run:20660211 [ 993.830224][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 993.840261][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 993.850340][T22784] Call Trace: [ 993.853635][T22784] [ 993.856579][T22784] dump_stack_lvl+0xd1/0x138 [ 993.861219][T22784] mt_find.cold+0x8b/0x90 [ 993.865588][T22784] ? mas_find+0x1d0/0x1d0 [ 993.869968][T22784] find_vma+0x10c/0x1b0 [ 993.874146][T22784] ? can_vma_merge_before+0x390/0x390 [ 993.879543][T22784] ? walk_page_test+0x78/0x180 [ 993.884336][T22784] walk_page_range+0x2b1/0x4a0 [ 993.889130][T22784] ? __walk_page_range+0x780/0x780 [ 993.894285][T22784] mlock_fixup+0x650/0x810 [ 993.898744][T22784] apply_vma_lock_flags+0x23d/0x350 [ 993.904105][T22784] ? mlock_fixup+0x810/0x810 [ 993.908765][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 993.914709][T22784] do_mlock+0x25a/0x6d0 [ 993.918912][T22784] ? folio_evictable+0x270/0x270 [ 993.923899][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 993.929825][T22784] __x64_sys_mlock+0x59/0x80 [ 993.934440][T22784] do_syscall_64+0x39/0xb0 [ 993.938895][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 993.944835][T22784] RIP: 0033:0x7feaf548c0c9 [ 993.949275][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 993.968911][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 993.977354][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 993.985348][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 993.993338][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 14:32:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1260, 0x1ffff000) 14:32:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed0000000000000000"], 0x0) [ 994.001325][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.009310][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 994.017317][T22784] [ 994.089525][T22784] index not increased! 20ffc000 <= 20ffc000 [ 994.095677][T22784] BUG at mt_find:6473 (1) [ 994.100266][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 994.108871][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 994.161978][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 994.210846][T22784] 0-536866815: 0000000000000000 [ 994.216240][T22784] 536866816-536870911: ffff888094eb2460 [ 994.240298][T22784] 536870912-553631743: ffff888094eb2540 [ 994.246275][T22784] 553631744-553644031: 0000000000000000 [ 994.272317][T22784] 553644032-553631743: ffff888076c687e0 [ 994.278295][T22784] 553631744-553648127: ffff888076c689a0 [ 994.303839][T22784] 553648128-553652223: ffff888094eb2620 [ 994.309942][T22784] 553652224-116820934655: 0000000000000000 [ 994.316128][T22784] 116820934656-116825128959: ffff888094eb2700 [ 994.324611][T22784] 116825128960-93824997462015: 0000000000000000 [ 994.332592][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 994.339920][T22784] 93824997601280-140647092711423: 0000000000000000 [ 994.346814][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:32:58 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14}) 14:32:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x89a2, &(0x7f0000000000)={'macvlan0\x00'}) 14:32:58 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x8004ae98, 0x0) 14:32:58 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) 14:32:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed00"/50], 0x0) 14:32:58 executing program 1: setuid(0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f00000001c0)) [ 994.353851][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 994.412659][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 994.419747][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 994.426714][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 994.434028][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 994.446508][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:32:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000000)={'macvlan0\x00'}) 14:32:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1265, 0x0) [ 994.470945][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 994.508010][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 14:32:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed00"/50], 0x0) [ 994.516197][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 994.526057][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 994.533681][T22784] 140647114899456-140647114903551: 0000000000000000 [ 994.566614][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 994.579478][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 994.586641][T22784] 140647115304960-140647115325439: 0000000000000000 [ 994.609166][T22784] 140647115325440-140647127171071: ffff88802218f000 14:32:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8934, 0x0) 14:32:58 executing program 2: mount$9p_fd(0x0, &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) [ 994.627593][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:32:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed00"/50], 0x0) [ 994.711128][T22784] 140647127171072-140647128055807: 0000000000000000 [ 994.718150][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 994.725399][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 994.750135][T22784] 140647128190976-140732348923903: 0000000000000000 [ 994.808132][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 994.819550][T22784] 140732349059072-140732349100031: 0000000000000000 [ 994.864833][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 994.874176][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 994.883428][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 994.891428][T22784] Pass: 20668969 Run:20669090 [ 994.896147][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 994.906069][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 994.916147][T22784] Call Trace: [ 994.919438][T22784] [ 994.922384][T22784] dump_stack_lvl+0xd1/0x138 [ 994.927010][T22784] mt_find.cold+0x8b/0x90 [ 994.931399][T22784] ? mas_find+0x1d0/0x1d0 [ 994.935779][T22784] find_vma+0x10c/0x1b0 [ 994.939957][T22784] ? can_vma_merge_before+0x390/0x390 [ 994.945361][T22784] ? walk_page_test+0x78/0x180 [ 994.950158][T22784] walk_page_range+0x2b1/0x4a0 [ 994.954965][T22784] ? __walk_page_range+0x780/0x780 [ 994.960124][T22784] mlock_fixup+0x650/0x810 [ 994.964586][T22784] apply_vma_lock_flags+0x23d/0x350 [ 994.969823][T22784] ? mlock_fixup+0x810/0x810 [ 994.974464][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 994.980398][T22784] do_mlock+0x25a/0x6d0 [ 994.984592][T22784] ? folio_evictable+0x270/0x270 [ 994.989576][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 994.995502][T22784] __x64_sys_mlock+0x59/0x80 [ 995.000109][T22784] do_syscall_64+0x39/0xb0 [ 995.004557][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 995.010476][T22784] RIP: 0033:0x7feaf548c0c9 [ 995.014907][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 995.034531][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 995.042961][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 995.050945][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 995.058926][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 995.066911][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.074892][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 995.082901][T22784] [ 995.091689][T22784] index not increased! 20ffc000 <= 20ffc000 [ 995.097721][T22784] BUG at mt_find:6473 (1) [ 995.103026][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:32:59 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x248}]}) 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f00"], 0x0) 14:32:59 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) 14:32:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x6, 0x0, 0x0) 14:32:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c02, 0x0) 14:32:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4004ae99, &(0x7f0000000000)) 14:32:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1260, 0x0) [ 995.111743][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f00"], 0x0) 14:32:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8947, 0x0) [ 995.188719][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:32:59 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000100)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 995.290079][T22784] 0-536866815: 0000000000000000 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f00"], 0x0) [ 995.379190][T22784] 536866816-536870911: ffff888094eb2460 [ 995.387695][T22784] 536870912-553631743: ffff888094eb2540 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f0000"], 0x0) [ 995.423922][T22784] 553631744-553644031: 0000000000000000 [ 995.489285][T22784] 553644032-553631743: ffff888076c687e0 [ 995.496141][T22784] 553631744-553648127: ffff888076c689a0 [ 995.519559][T22784] 553648128-553652223: ffff888094eb2620 [ 995.526888][T22784] 553652224-116820934655: 0000000000000000 [ 995.533303][T22784] 116820934656-116825128959: ffff888094eb2700 [ 995.540110][T22784] 116825128960-93824997462015: 0000000000000000 [ 995.546744][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 995.553824][T22784] 93824997601280-140647092711423: 0000000000000000 [ 995.561012][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:32:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000180)) 14:32:59 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8931, &(0x7f0000000000)={'macvlan0\x00'}) 14:32:59 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x80046601, 0x0) 14:32:59 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f0000"], 0x0) 14:32:59 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) [ 995.568057][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 995.633339][T22784] 140647092715520-140647101104127: ffff888094eb29a0 14:32:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa980000f24c86dd6055b8290006334afecc3eb7ca42dd93c576e925ae25ed000000000000000000000000007f0000"], 0x0) 14:32:59 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008aec1, 0x0) 14:32:59 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0xae80, &(0x7f0000000000)) [ 995.644370][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 995.681789][T22784] 140647103201280-140647105298431: ffff888094eb2b60 14:33:00 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffeff}, 0x8) [ 995.730714][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:33:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, 0x0) 14:33:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x1260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 14:33:00 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) [ 995.832813][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 995.841237][T22784] 140647109492736-140647113687039: ffff888094eb2e00 14:33:00 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 995.885214][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 14:33:00 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x9) [ 995.943265][T22784] 140647113834496-140647114563583: ffff888029235c40 14:33:00 executing program 4: socket$inet6_sctp(0xa, 0x0, 0x84) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x0, 0x44030, 0xffffffffffffffff, 0x0) 14:33:00 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) 14:33:00 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x4008ae90, 0x0) [ 995.985587][T22784] 140647114563584-140647114899455: ffff888029235ee0 14:33:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c03, 0x0) 14:33:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x3, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1c) 14:33:00 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14:33:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8948, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8992, &(0x7f0000000000)={'macvlan0\x00'}) [ 996.135486][T22784] 140647114899456-140647114903551: 0000000000000000 [ 996.188495][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 996.196490][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 996.205946][T22784] 140647115304960-140647115325439: 0000000000000000 [ 996.213451][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:00 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) [ 996.221009][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 996.272605][T22784] 140647127171072-140647128055807: 0000000000000000 [ 996.280239][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 996.296875][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 996.309619][T22784] 140647128190976-140732348923903: 0000000000000000 [ 996.329147][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 996.336170][T22784] 140732349059072-140732349100031: 0000000000000000 14:33:00 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r0, 0x4138ae84, 0x0) 14:33:00 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 996.349473][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 996.375374][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 14:33:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000000)={'macvlan0\x00'}) [ 996.433482][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 996.537658][T22784] Pass: 20703460 Run:20703582 [ 996.568194][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 996.578171][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 996.588273][T22784] Call Trace: [ 996.591586][T22784] [ 996.594820][T22784] dump_stack_lvl+0xd1/0x138 [ 996.599472][T22784] mt_find.cold+0x8b/0x90 [ 996.603858][T22784] ? mas_find+0x1d0/0x1d0 [ 996.608253][T22784] find_vma+0x10c/0x1b0 [ 996.612454][T22784] ? can_vma_merge_before+0x390/0x390 [ 996.617881][T22784] ? walk_page_test+0x78/0x180 [ 996.622708][T22784] walk_page_range+0x2b1/0x4a0 [ 996.627530][T22784] ? __walk_page_range+0x780/0x780 [ 996.632708][T22784] mlock_fixup+0x650/0x810 [ 996.637176][T22784] apply_vma_lock_flags+0x23d/0x350 [ 996.642521][T22784] ? mlock_fixup+0x810/0x810 [ 996.647185][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 996.653144][T22784] do_mlock+0x25a/0x6d0 [ 996.657359][T22784] ? folio_evictable+0x270/0x270 [ 996.662365][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 996.668312][T22784] __x64_sys_mlock+0x59/0x80 [ 996.672941][T22784] do_syscall_64+0x39/0xb0 [ 996.677411][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 996.683342][T22784] RIP: 0033:0x7feaf548c0c9 [ 996.687781][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 996.707418][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 14:33:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x9, 0x0, 0x0) 14:33:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x301, 0x0) 14:33:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:01 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r0, 0x4138ae84, 0x0) 14:33:01 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8990, 0x0) [ 996.715867][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 996.723874][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 996.731880][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 996.739883][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.747936][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 996.755958][T22784] 14:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101288, 0x0) 14:33:01 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4090ae82, &(0x7f0000000000)) 14:33:01 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r0, 0x4138ae84, 0x0) 14:33:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x402c5839, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:01 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) [ 996.835110][T22784] index not increased! 20ffc000 <= 20ffc000 14:33:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "af9db38a18418adc03a274b30ba679dd713dffa27fd28cb1c439fdfe9e6b7a900af7faa84b5a18df5a8e6ff759a0645c1e40d3cc7fc0b8de7e1be21a862c9f2f"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 14:33:01 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) [ 996.901265][T22784] BUG at mt_find:6473 (1) 14:33:01 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[], 0x0) [ 996.946395][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 996.955191][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:01 executing program 2: syz_emit_ethernet(0x3e, 0x0, 0x0) [ 997.011795][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:01 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) 14:33:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, 0x0) 14:33:01 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000780), 0x1, 0x102402) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002800)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) 14:33:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x4020940d, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0}) 14:33:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000000)={'macvlan0\x00'}) [ 997.081706][T22784] 0-536866815: 0000000000000000 [ 997.087048][T22784] 536866816-536870911: ffff888094eb2460 14:33:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x0, @local}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) 14:33:01 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) [ 997.138670][T22784] 536870912-553631743: ffff888094eb2540 [ 997.167438][T22784] 553631744-553644031: 0000000000000000 [ 997.179670][T22784] 553644032-553631743: ffff888076c687e0 14:33:01 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, 0x0) [ 997.185656][T22784] 553631744-553648127: ffff888076c689a0 [ 997.200042][T22784] 553648128-553652223: ffff888094eb2620 [ 997.206180][T22784] 553652224-116820934655: 0000000000000000 [ 997.230562][T22784] 116820934656-116825128959: ffff888094eb2700 [ 997.237058][T22784] 116825128960-93824997462015: 0000000000000000 14:33:01 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000100)) 14:33:01 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) 14:33:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8905, 0x0) [ 997.280711][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 997.320087][T23429] macvlan0: mtu less than device minimum 14:33:01 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x4020940d, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:01 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) [ 997.350267][T22784] 93824997601280-140647092711423: 0000000000000000 14:33:01 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xb9, &(0x7f0000000100)=""/185, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:01 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x40046602, &(0x7f0000000240)={0x7000000, 0x0, 0x0, 0x0}) 14:33:01 executing program 0: r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4138ae84, 0x0) 14:33:01 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x8140aecc, 0x0) [ 997.425587][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cc, 0x0) 14:33:01 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x801c581f, 0x0) [ 997.472664][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 997.536880][T22784] 140647092715520-140647101104127: ffff888094eb29a0 14:33:01 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 997.652003][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 997.706836][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 997.717513][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 997.739388][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 997.755733][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 997.763039][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 997.770595][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 997.777625][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 997.787074][T22784] 140647114899456-140647114903551: 0000000000000000 14:33:02 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4004ae8b, 0x0) 14:33:02 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x5460, 0x0) 14:33:02 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) 14:33:02 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:02 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4048ae9b, 0x0) 14:33:02 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) ioctl$BLKPG(r0, 0x5452, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0}) [ 997.805972][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 997.824151][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:02 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xaeb7, 0x0) [ 997.859089][T22784] 140647115304960-140647115325439: 0000000000000000 [ 997.866117][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:02 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) 14:33:02 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4048ae9b, &(0x7f0000000000)) 14:33:02 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae08, 0x0) [ 997.973433][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:02 executing program 1: lstat(&(0x7f0000000000)='\x00', 0x0) [ 998.036456][T22784] 140647127171072-140647128055807: 0000000000000000 14:33:02 executing program 0: openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) [ 998.184684][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 998.269429][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 998.302726][T22784] 140647128190976-140732348923903: 0000000000000000 [ 998.327970][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 998.362887][T22784] 140732349059072-140732349100031: 0000000000000000 [ 998.377729][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 998.384979][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 998.392750][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 998.400377][T22784] Pass: 20735102 Run:20735225 [ 998.405172][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 998.415107][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 998.425196][T22784] Call Trace: [ 998.428505][T22784] [ 998.431468][T22784] dump_stack_lvl+0xd1/0x138 [ 998.436130][T22784] mt_find.cold+0x8b/0x90 [ 998.440511][T22784] ? mas_find+0x1d0/0x1d0 [ 998.444903][T22784] find_vma+0x10c/0x1b0 [ 998.449098][T22784] ? can_vma_merge_before+0x390/0x390 [ 998.454508][T22784] ? walk_page_test+0x78/0x180 [ 998.459323][T22784] walk_page_range+0x2b1/0x4a0 [ 998.464141][T22784] ? __walk_page_range+0x780/0x780 [ 998.469325][T22784] mlock_fixup+0x650/0x810 [ 998.473811][T22784] apply_vma_lock_flags+0x23d/0x350 [ 998.479065][T22784] ? mlock_fixup+0x810/0x810 [ 998.483722][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 998.489671][T22784] do_mlock+0x25a/0x6d0 [ 998.493886][T22784] ? folio_evictable+0x270/0x270 [ 998.498888][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 998.504830][T22784] __x64_sys_mlock+0x59/0x80 [ 998.509457][T22784] do_syscall_64+0x39/0xb0 [ 998.513923][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 998.519848][T22784] RIP: 0033:0x7feaf548c0c9 [ 998.524286][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 998.543922][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 998.552362][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 998.560356][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 998.568347][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 998.576340][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 998.584327][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 998.593295][T22784] [ 998.608309][T22784] index not increased! 20ffc000 <= 20ffc000 [ 998.614463][T22784] BUG at mt_find:6473 (1) [ 998.618899][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 998.639112][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 998.689963][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 998.772860][T22784] 0-536866815: 0000000000000000 [ 998.778227][T22784] 536866816-536870911: ffff888094eb2460 [ 998.789204][T22784] 536870912-553631743: ffff888094eb2540 14:33:03 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 14:33:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401070c9, 0x0) 14:33:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101286, 0x0) 14:33:03 executing program 2: setuid(0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 14:33:03 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) 14:33:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c05, 0x0) 14:33:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) [ 998.815277][T22784] 553631744-553644031: 0000000000000000 14:33:03 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4004ae8b, &(0x7f0000000000)) 14:33:03 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x80046601, 0x0) 14:33:03 executing program 1: setuid(0xee00) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 998.925767][T22784] 553644032-553631743: ffff888076c687e0 [ 998.932243][T22784] 553631744-553648127: ffff888076c689a0 [ 998.938305][T22784] 553648128-553652223: ffff888094eb2620 [ 998.945331][T22784] 553652224-116820934655: 0000000000000000 [ 998.952017][T22784] 116820934656-116825128959: ffff888094eb2700 14:33:03 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x801c581f, 0x0) [ 998.989324][T22784] 116825128960-93824997462015: 0000000000000000 14:33:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x42) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) [ 999.034489][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 999.045526][T22784] 93824997601280-140647092711423: 0000000000000000 [ 999.095223][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 999.108628][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 999.167211][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 999.177065][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 999.184184][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 999.191244][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 999.198224][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 999.205371][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 999.212508][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 999.225234][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 999.232513][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 999.239625][T22784] 140647114899456-140647114903551: 0000000000000000 [ 999.246667][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 999.253729][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 999.261303][T22784] 140647115304960-140647115325439: 0000000000000000 [ 999.268290][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 999.279892][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 999.333477][T22784] 140647127171072-140647128055807: 0000000000000000 [ 999.340904][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 999.348023][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 999.363693][T22784] 140647128190976-140732348923903: 0000000000000000 [ 999.389166][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 999.396179][T22784] 140732349059072-140732349100031: 0000000000000000 [ 999.403932][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 999.411237][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 999.418235][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 999.426106][T22784] Pass: 20741261 Run:20741385 [ 999.431046][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 999.440955][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 999.451039][T22784] Call Trace: [ 999.454333][T22784] [ 999.457262][T22784] dump_stack_lvl+0xd1/0x138 [ 999.461881][T22784] mt_find.cold+0x8b/0x90 [ 999.466255][T22784] ? mas_find+0x1d0/0x1d0 [ 999.470625][T22784] find_vma+0x10c/0x1b0 [ 999.474817][T22784] ? can_vma_merge_before+0x390/0x390 [ 999.480242][T22784] ? walk_page_test+0x78/0x180 [ 999.485047][T22784] walk_page_range+0x2b1/0x4a0 [ 999.489838][T22784] ? __walk_page_range+0x780/0x780 [ 999.495019][T22784] mlock_fixup+0x650/0x810 [ 999.499505][T22784] apply_vma_lock_flags+0x23d/0x350 [ 999.504772][T22784] ? mlock_fixup+0x810/0x810 [ 999.509419][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 999.515352][T22784] do_mlock+0x25a/0x6d0 [ 999.519550][T22784] ? folio_evictable+0x270/0x270 [ 999.524539][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 999.530471][T22784] __x64_sys_mlock+0x59/0x80 [ 999.535084][T22784] do_syscall_64+0x39/0xb0 [ 999.539535][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 999.545460][T22784] RIP: 0033:0x7feaf548c0c9 [ 999.549896][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 999.569524][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 999.577966][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 999.585966][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 999.593967][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 999.601960][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.609952][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 999.617975][T22784] [ 999.639201][T22784] index not increased! 20ffc000 <= 20ffc000 [ 999.645252][T22784] BUG at mt_find:6473 (1) [ 999.649801][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 999.658386][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x1263, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 14:33:04 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) 14:33:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES64], 0x40}}, 0x0) 14:33:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8995, 0x0) 14:33:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1277, 0x0) 14:33:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x94, &(0x7f0000000180)={0x0, 0x0, 0x10}}) [ 999.716150][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 999.769123][T22784] 0-536866815: 0000000000000000 [ 999.774486][T22784] 536866816-536870911: ffff888094eb2460 [ 999.781937][T22784] 536870912-553631743: ffff888094eb2540 14:33:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8916, 0x0) 14:33:04 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x80046601, 0x0) 14:33:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x0, @multicast1}], 0x10) 14:33:04 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x5000aea5, 0x0) [ 999.826434][T22784] 553631744-553644031: 0000000000000000 [ 999.874638][T22784] 553644032-553631743: ffff888076c687e0 14:33:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 14:33:04 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x42) [ 999.926837][T22784] 553631744-553648127: ffff888076c689a0 [ 999.934224][T22784] 553648128-553652223: ffff888094eb2620 [ 999.948374][T22784] 553652224-116820934655: 0000000000000000 [ 999.957353][T22784] 116820934656-116825128959: ffff888094eb2700 [ 999.978344][T22784] 116825128960-93824997462015: 0000000000000000 [ 999.992484][T22784] 93824997462016-93824997601279: ffff888094eb27e0 14:33:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) ioctl$BLKPG(r0, 0x5452, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) 14:33:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x890c, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:04 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r1, 0x4138ae84, 0x0) [ 1000.047320][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1000.065119][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:04 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 14:33:04 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)={0x0, 0x6}) 14:33:04 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x40046602, &(0x7f0000000000)) 14:33:04 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x5000aea5, 0x0) [ 1000.108813][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d 14:33:04 executing program 5: setuid(0xee00) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) [ 1000.212854][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1000.222918][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1000.230129][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1000.237289][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1000.244526][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1000.253799][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1000.261075][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1000.268240][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1000.275941][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1000.283242][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1000.290430][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1000.298026][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1000.305228][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1000.312514][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1000.319725][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x10, 0x0, 0x0) [ 1000.417704][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1000.434283][T22784] 140647128055808-140647128059903: ffff888076c68000 14:33:04 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) 14:33:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) 14:33:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x9, 0x0, 0x0) 14:33:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101287, 0x0) [ 1000.508188][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1000.529120][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1000.536136][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 14:33:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000002380), 0x0, 0x40000) read$FUSE(r0, 0x0, 0x0) 14:33:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:04 executing program 5: setuid(0xee00) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 1000.574281][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1000.632719][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1000.642427][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1000.649670][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1000.657297][T22784] Pass: 20753783 Run:20753908 [ 1000.663219][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1000.673161][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 14:33:04 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x7) [ 1000.683266][T22784] Call Trace: [ 1000.686574][T22784] [ 1000.689534][T22784] dump_stack_lvl+0xd1/0x138 [ 1000.694172][T22784] mt_find.cold+0x8b/0x90 [ 1000.698550][T22784] ? mas_find+0x1d0/0x1d0 [ 1000.702935][T22784] find_vma+0x10c/0x1b0 [ 1000.707133][T22784] ? can_vma_merge_before+0x390/0x390 [ 1000.712559][T22784] ? walk_page_test+0x78/0x180 [ 1000.717381][T22784] walk_page_range+0x2b1/0x4a0 [ 1000.722204][T22784] ? __walk_page_range+0x780/0x780 [ 1000.727388][T22784] mlock_fixup+0x650/0x810 14:33:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1278, 0x0) [ 1000.731878][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1000.737142][T22784] ? mlock_fixup+0x810/0x810 [ 1000.741806][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1000.747759][T22784] do_mlock+0x25a/0x6d0 [ 1000.751980][T22784] ? folio_evictable+0x270/0x270 [ 1000.757066][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1000.763022][T22784] __x64_sys_mlock+0x59/0x80 [ 1000.767664][T22784] do_syscall_64+0x39/0xb0 [ 1000.772145][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1000.778071][T22784] RIP: 0033:0x7feaf548c0c9 [ 1000.782506][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1000.802143][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1000.810585][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1000.818594][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 14:33:05 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 14:33:05 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00'}) [ 1000.826595][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1000.834595][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.842591][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1000.850604][T22784] 14:33:05 executing program 4: openat$kvm(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mount$9p_fd(0x20000000, 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 1000.933692][T22784] index not increased! 20ffc000 <= 20ffc000 14:33:05 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) 14:33:05 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) 14:33:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8920, 0x0) 14:33:05 executing program 1: setuid(0xee00) openat$cgroup_root(0xffffff9c, &(0x7f0000002600)='./cgroup.net/syz0\x00', 0x200002, 0x0) 14:33:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401070ca, 0x0) [ 1000.975177][T22784] BUG at mt_find:6473 (1) [ 1000.983627][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:05 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x541b, 0x0) 14:33:05 executing program 5: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x8138ae83, 0x0) 14:33:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0xc018ae85, 0x0) 14:33:05 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(r2, 0x4004ae99, 0x0) [ 1001.062766][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:05 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x17b, 0x0, 0x3}]}) [ 1001.139356][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1001.188690][T22784] 0-536866815: 0000000000000000 [ 1001.194244][T22784] 536866816-536870911: ffff888094eb2460 [ 1001.200322][T22784] 536870912-553631743: ffff888094eb2540 [ 1001.206265][T22784] 553631744-553644031: 0000000000000000 [ 1001.212491][T22784] 553644032-553631743: ffff888076c687e0 [ 1001.218439][T22784] 553631744-553648127: ffff888076c689a0 [ 1001.227036][T22784] 553648128-553652223: ffff888094eb2620 14:33:05 executing program 0: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x4138ae84, 0x0) [ 1001.261603][T22784] 553652224-116820934655: 0000000000000000 [ 1001.267921][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1001.285056][T22784] 116825128960-93824997462015: 0000000000000000 [ 1001.294866][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1001.308534][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1001.316499][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8919, 0x0) [ 1001.324213][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1001.387104][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1001.400813][T22784] 140647101104128-140647103201279: ffff888094eb2a80 14:33:05 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[], 0x0, 0x0, 0x7f}) [ 1001.438087][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1001.446303][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1001.459519][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1001.467683][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1001.475295][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 14:33:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8923, &(0x7f0000000000)={'macvlan0\x00'}) 14:33:05 executing program 3: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)={0x2, 0x0, [{0x4}, {0x2}]}) [ 1001.483138][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1001.493094][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1001.505069][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1001.512370][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1001.519684][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1001.528357][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1001.551254][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:05 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) [ 1001.620238][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:05 executing program 4: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000340)) 14:33:06 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000280)="432c3d731af71c17e7f39d3b26df2489c6e3218f1253aa3f81f04bcb1235cbd9b6324aef00e9561c4d51d3e489e4f383eb53b0089e0bd74eebf9aacd94a6485800ee7124bcd90b29ee46eac8e8dc7be3c7624874d97bec465c6d7a6f8673f9483f089e5b7c7246c856ec628223d8ff32cc1e42802ebbfa5715b5abd76a449cc76efc189d7136cf2c31d684ef", 0x8c) [ 1001.674523][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1001.691662][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1001.698834][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1001.717218][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1001.756611][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1001.773562][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1001.782107][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1001.794326][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1001.802366][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1001.810102][T22784] Pass: 20766460 Run:20766586 [ 1001.814819][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1001.824748][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1001.834828][T22784] Call Trace: [ 1001.838122][T22784] [ 1001.841084][T22784] dump_stack_lvl+0xd1/0x138 [ 1001.845732][T22784] mt_find.cold+0x8b/0x90 [ 1001.850106][T22784] ? mas_find+0x1d0/0x1d0 [ 1001.854486][T22784] find_vma+0x10c/0x1b0 [ 1001.858670][T22784] ? can_vma_merge_before+0x390/0x390 [ 1001.864068][T22784] ? walk_page_test+0x78/0x180 [ 1001.868864][T22784] walk_page_range+0x2b1/0x4a0 [ 1001.873669][T22784] ? __walk_page_range+0x780/0x780 [ 1001.878830][T22784] mlock_fixup+0x650/0x810 [ 1001.883294][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1001.888535][T22784] ? mlock_fixup+0x810/0x810 [ 1001.893171][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1001.899113][T22784] do_mlock+0x25a/0x6d0 [ 1001.903309][T22784] ? folio_evictable+0x270/0x270 [ 1001.908318][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1001.914253][T22784] __x64_sys_mlock+0x59/0x80 [ 1001.918874][T22784] do_syscall_64+0x39/0xb0 [ 1001.923344][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1001.929272][T22784] RIP: 0033:0x7feaf548c0c9 [ 1001.933713][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1001.953349][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1001.961788][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1001.969779][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1001.977767][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1001.985753][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.993739][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1002.001745][T22784] [ 1002.012857][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1002.030501][T22784] BUG at mt_find:6473 (1) [ 1002.034892][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1002.065028][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1002.102600][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1002.179757][T22784] 0-536866815: 0000000000000000 [ 1002.185559][T22784] 536866816-536870911: ffff888094eb2460 [ 1002.192750][T22784] 536870912-553631743: ffff888094eb2540 [ 1002.198833][T22784] 553631744-553644031: 0000000000000000 [ 1002.205528][T22784] 553644032-553631743: ffff888076c687e0 [ 1002.212370][T22784] 553631744-553648127: ffff888076c689a0 [ 1002.218662][T22784] 553648128-553652223: ffff888094eb2620 14:33:06 executing program 5: setuid(0xee00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 14:33:06 executing program 2: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x4040aea0, 0x0) 14:33:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x5411, 0x0) 14:33:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x891f, 0x0) 14:33:06 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x40046602, &(0x7f0000000240)={0x180ed078a2e053e2, 0x0, 0x0, 0x0}) 14:33:06 executing program 3: setuid(0xee00) bpf$MAP_CREATE(0x0, 0x0, 0x0) 14:33:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(r0, 0x10e, 0x4, 0x0, 0x0) [ 1002.224839][T22784] 553652224-116820934655: 0000000000000000 [ 1002.232149][T22784] 116820934656-116825128959: ffff888094eb2700 14:33:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) 14:33:06 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) 14:33:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x300}, 0x0) [ 1002.350195][T22784] 116825128960-93824997462015: 0000000000000000 [ 1002.360561][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1002.367573][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1002.374678][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:06 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) r3 = getuid() r4 = getegid() fchown(0xffffffffffffffff, r3, r4) r5 = getuid() syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x164, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0xfc706f93d3a3f355}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76658c35}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bc87478}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56ecf4a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23dfce24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669acf6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa19df51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ed8e84}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x324d85bc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb70ce7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x472a186a}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f099731}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa24fa46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59a9fc7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f18afc1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r6 = getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000380)={0x1128, 0x11, 0x800, 0x70bd27, 0x25dfdbff, {0xf}, [@typed={0x1004, 0x84, 0x0, 0x0, @binary="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"}, @nested={0xfe, 0x33, 0x0, 0x1, [@generic="49443a6705e995ecc64ee851e7464e30a788d34e129e794fca25c487128243b1f8650e7d6e95af3976a3", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="58788adc4dc46f0619a8ed020d597f43aa07b92433d588fcc0b2e11d60094044e892250d20819bbfbdbc33eae712085c03fc0ac1bba4d1179ff8f47c065a590ad687ee2cd50f2972d10009d5a323de641a83d8fdcd486337c52290047d0de054cd7e946a25d54275124276ad8e776e8e3d545aa9dafce8a48c2c974ba738b6e592c36ac63c83dde1cfa0c704e06c542ff49e2679eecdaa43349b9601ca2e8e893116e300ab755ce23e94acbebf59dd7c346230f468cc22f7", @typed={0x8, 0x88, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x8, 0x0, 0x0, @uid=r5}]}, @typed={0xd, 0x51, 0x0, 0x0, @binary="1a4014484746f88b0f"}, @generic]}, 0x1128}, 0x1, 0x0, 0x0, 0x20000081}, 0x40004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x7c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '&\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000804) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001680), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x18802400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001780)={0x604, r8, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc0}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x55}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x594, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x51e, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x7, 0xf, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@challenge={0x10, 0x1, 0x51}, @dsss={0x3, 0x1, 0xa}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7, 0x80, [@sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4c, 0x7f, [@dsss={0x3, 0x1, 0x64}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x3, 0x0, {0x0, 0x5, 0x0, 0x22a, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x1ff, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x4, 0x0, @device_b, 0xfe2a0000, 0x65, 0xffff}}, @perr={0x84, 0x2, {0xe}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x1000]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x22}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x604}, 0x1, 0x0, 0x0, 0x4000}, 0x45) r10 = socket$unix(0x1, 0x5, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001e80), r7) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001f80)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x48, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001fc0), r7) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002180)={'ip_vti0\x00', &(0x7f0000002080)={'gretap0\x00', 0x0, 0x700, 0x8, 0x3c, 0x33, {{0x34, 0x4, 0x0, 0x37, 0xd0, 0x66, 0x0, 0x1f, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xc1, 0x1, 0x6, [{@multicast1, 0x3}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x2}, @cipso={0x86, 0x31, 0x3, [{0x2, 0x3, "8a"}, {0x2, 0xf, "70623dedce0258e5fcbac78e1f"}, {0x5, 0xa, "59caf463ea01e7a9"}, {0x5, 0xf, "0895c992234d2d1ce76eb92614"}]}, @timestamp_addr={0x44, 0x2c, 0x6, 0x1, 0xa, [{@rand_addr=0x64010102, 0x9}, {@multicast2, 0x52f}, {@broadcast, 0x4d14}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd1}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0x51, 0x1, 0x2, [{@broadcast, 0xd217}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}]}, @noop, @cipso={0x86, 0x17, 0x3, [{0x0, 0xb, "ea8fdfb07b53dcb281"}, {0x2, 0x6, "bffc8602"}]}, @cipso={0x86, 0x17, 0x1, [{0x1, 0xb, "30fc5cace65941f602"}, {0x6, 0x2}, {0x6, 0x4, "c415"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000021c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)={0x174, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe63888665ab53776}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x44055}, 0x4008001) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002400), r0) 14:33:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0}}, 0x0) [ 1002.382121][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d 14:33:06 executing program 2: syz_open_dev$loop(&(0x7f0000004800), 0x0, 0x0) 14:33:06 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) 14:33:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000c00)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9c89, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 14:33:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) 14:33:06 executing program 4: io_setup(0x6eb, &(0x7f0000000a40)=0x0) io_submit(r0, 0x0, 0x0) io_setup(0xff3c, &(0x7f00000001c0)) 14:33:06 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) [ 1002.544707][T22784] 140647092715520-140647101104127: ffff888094eb29a0 14:33:06 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f00000004c0)) 14:33:06 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0x4040ae9e, 0x0) 14:33:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000200), 0x4) 14:33:07 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) 14:33:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r4, r1, 0x0) 14:33:07 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x17b, &(0x7f0000001700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x169, 0x1, 0x1, 0xeb, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x20, {{0x9, 0x24, 0x6, 0x0, 0x0, "c6f22920"}, {0x5, 0x24, 0x0, 0xcd3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xffff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3e, 0x1, 0x6, 0x5, 0x2f}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1, 0x2c0}, @mdlm_detail={0x4c, 0x24, 0x13, 0x40, "8ffaf3da4025973f27dd14986b5780f6f8c10eb9893c998b1dfc11b68ffe9adfe0ac7dc05cfef34085bea193d292be3cfa47d55412b2b22bcd189f6a6ced9c4377bdb2be1a91c506"}, @mdlm_detail={0xbc, 0x24, 0x13, 0x9, "1634212bc174e1b580cf50b9bd0d3484ad50a9348aefa1234e490ead1a1bf1da680b9aa0ce843c8293a301fbaf7331827005d5ede6c8aa95184452d43e7e9c705f5bcf0ac0c0f6aabeb266fc1bf3d89cf738f789799e7f4de2202ad9c92791d79ebdb4c33c58b0a53c105b2f56e788a4388fd62a784e14bd740d30a1ad56868b8509defc68664f3184b61e8dd1d9debe01d37376f9a6eebdce7ba953a137f2fe33760b2eb74ec08dd2c7dd856d0217cf4029286c516efe0a"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xa0, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x7, 0x6c}}}}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x310, 0xff, 0x40, 0x5, 0x40, 0x40}, 0x41, &(0x7f00000018c0)={0x5, 0xf, 0x41, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x3f, 0x20, 0x5fee, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x8, 0xf, 0x2, [0x6000, 0x30]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x9, 0xf000, 0x4, [0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0x74, 0xfc}]}, 0x4, [{0x7f, &(0x7f0000001940)=@string={0x7f, 0x3, "9b404725a2e7776ecfdeb8cbe416dfd70487142033145f9d3bea10f352b6570f6177de954ee47581888002b687803ddbc9dfe389c13f123dea978a6662f47b4203643ac642396284182cf9ce91ca695fed1184ebfad9028657b5bf63d276d58133226fdd82dce7baef6f2ce10bfab6185523c0a45dcf6937e951196cc7"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x422}}, {0xdf, &(0x7f0000001a00)=@string={0xdf, 0x3, "2da924f8288e9d0871bb35e1301f4e54ebc16da705fbca5239f100af0e3d1f420d839a3db820ed759f6d8f0cab46eb800ef9ecd5cb387e2b2b545afce6a7b0b7a173ae6038d3caeb50344096b3dd3db4fb43501cfb783e6ad5bedccbddbb5c505ba83d66de571366189d989dd840d50d32dd5a2ad0588159c3a5e2b3947fa3cf413b364e866e6aedd5dad16467d9fc40a42b320b37697121273b075a6f9dc46ca436c7b33924b1c6c388b00ecd6420d3ee547df1e652e80b375c699ab8c147c21285b3e33d782331702596a59c2cc575b06db2cf7bb95c639146e55a13"}}, {0xa7, &(0x7f0000001b00)=@string={0xa7, 0x3, "2bf2a923bd6d39f405cab16a20ac9e982761463be89836f5f364c5f0af8ad95c22f090cfaac12a36b36ebdada8141a4d30d4752c18c6d7d40170ceecc6e3ba9b77424aa24ae8c61395b5bd3c5b2be5573b8be4098cf9f13357d7b37381ef15b0d6d7c0128fc1dc6b2439f1b3e228dc1b3d9e48bebb85e58d5fd2a1a80d8129cd909798bb819a900018df7da7a70b2d2c7ecf974d1c541655e77066b6421baccf4634b1f37a"}}]}) 14:33:07 executing program 5: signalfd(0xffffffffffffffff, &(0x7f00000008c0), 0x8) 14:33:07 executing program 3: socketpair(0x2, 0x2, 0x0, &(0x7f00000008c0)) [ 1002.786087][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1002.809247][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1002.816394][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1002.823992][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1002.834628][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1002.842553][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1002.849956][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1002.870451][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1002.880663][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1002.888003][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1002.895914][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1002.903683][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1002.911450][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:07 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000001700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xcd3}, {0xd}, [@mdlm_detail={0x4}]}}}]}}]}}, 0x0) [ 1002.920928][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1002.976241][T22784] 140647127171072-140647128055807: 0000000000000000 14:33:07 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000dc0)) [ 1002.983825][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1002.991514][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1002.998693][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1003.006427][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1003.013961][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1003.021616][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1003.028877][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 14:33:07 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)={&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) [ 1003.037922][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1003.067894][T22784] Pass: 20780481 Run:20780608 [ 1003.080231][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1003.090180][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1003.100275][T22784] Call Trace: [ 1003.103586][T22784] [ 1003.106577][T22784] dump_stack_lvl+0xd1/0x138 [ 1003.111227][T22784] mt_find.cold+0x8b/0x90 [ 1003.115627][T22784] ? mas_find+0x1d0/0x1d0 [ 1003.120029][T22784] find_vma+0x10c/0x1b0 [ 1003.124233][T22784] ? can_vma_merge_before+0x390/0x390 [ 1003.129657][T22784] ? walk_page_test+0x78/0x180 [ 1003.134462][T22784] walk_page_range+0x2b1/0x4a0 [ 1003.139249][T22784] ? __walk_page_range+0x780/0x780 [ 1003.144430][T22784] mlock_fixup+0x650/0x810 [ 1003.148896][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1003.154128][T22784] ? mlock_fixup+0x810/0x810 [ 1003.158744][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1003.164667][T22784] do_mlock+0x25a/0x6d0 [ 1003.168885][T22784] ? folio_evictable+0x270/0x270 [ 1003.173894][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1003.179845][T22784] __x64_sys_mlock+0x59/0x80 [ 1003.184461][T22784] do_syscall_64+0x39/0xb0 [ 1003.188985][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1003.194924][T22784] RIP: 0033:0x7feaf548c0c9 [ 1003.199378][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1003.219028][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1003.227500][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 14:33:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001680), r0) 14:33:07 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 14:33:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x10e, 0x0, 0x0, 0x59) [ 1003.235511][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1003.243523][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1003.251536][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.259545][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1003.267576][T22784] [ 1003.276547][ T5883] usb 1-1: new high-speed USB device number 20 using dummy_hcd 14:33:07 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000080)={{r0}, "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"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001080)=0x2, 0x2) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000010c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000001100)={0x10, 0x0, "385287c755a828a7363ada6bfb046cf2"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x7c, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e20fdba2eeb9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2e64de0500ca"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9974f5e43c9"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = dup2(r0, r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0xaa7e526c0f430ac3}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r3, 0xc0c, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9274e99763a5"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000893}, 0x4000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000013c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000023c0)={r5, 0x0, "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", "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"}) syz_clone(0x40060100, &(0x7f0000003400)="3e94f877e21cdff1996e65ecbde257e52a738e79a426353462f99159fb73908c724feabf8d8f244e40e1dadcf19e0e6aaf80a12b0872b58939930f01bbf0007c4bbcca0c0541924f9d9db6c8", 0x4c, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)="6c732e59587180007857019dc9c6f10380e0434402ddd68062d7e19511ce9689f9f3f06e7f2e774ef755c082b80a4a8d9b5efdcfc0c001fe928f4115bbe92974121a9f5dd98f638e9d110c78dc5903ab3eb8ba5a4a8ca1001e8768b0a173f93f1ec44e1cfe829b2db194d20d9c6380dba41f685819ac8d9d15ca601d8061c9222ddcef20dc3f6f4cde7cc23c98e202df1a6fbb4ce2958b12a1c1f7d689c0410b3ad8467831e7b7897e9d998ab7693fb1d9e38a9859bfa9e06fc6862c38453e0ad73b974261a79440ce74f7b681e5b31a8bdd76a6ed6ee9908362cbd2") r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003dc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x68, r6, 0x102, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r7, &(0x7f0000004000)={&(0x7f0000003f00)={0x2c, 0x5, 0x0, 0x3c}, 0x10, &(0x7f0000003fc0)=[{&(0x7f0000003f40)="9fd4d763fe8302c1e04bd3eae8f838f7fd75305acd7b97ba77ab195112656e8c7b8b6c703dca42f8fdfd211e79c4e65b0d6004b01b39c7e6e7580ffe3b2667834fb30a8bf35a1193c3abef07396e96491a616371da", 0x55}], 0x1, 0x0, 0x0, 0x4000001}, 0x20004014) r8 = socket(0x1f, 0x1, 0x7) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000004080), r4) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x1c, r9, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004240)={'tunl0\x00', &(0x7f00000041c0)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x48000000, 0x6, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x66, 0x0, 0xff, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0xd, [{@broadcast, 0xd39}, {@private=0xa010102, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}]}, @end, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000004300)={'sit0\x00', &(0x7f0000004280)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x9, 0x3, {{0xd, 0x4, 0x3, 0x18, 0x34, 0x67, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @rr={0x7, 0x13, 0xfc, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @cipso={0x86, 0x9, 0x3, [{0x1, 0x3, ' '}]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000004500)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004340)={0x164, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000004600)={&(0x7f0000004540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000045c0)={&(0x7f0000004580)={0x28, r3, 0x600, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x64}}}}, ["", "", ""]}, 0x28}}, 0x810) r12 = syz_open_dev$loop(&(0x7f0000004800), 0x8, 0x4a040) ioctl$LOOP_SET_FD(r12, 0x4c00, r8) [ 1003.307960][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1003.320448][T22784] BUG at mt_find:6473 (1) [ 1003.326179][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r4, r1, 0x0) 14:33:07 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x64, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "c6f2"}, {0x5, 0x24, 0x0, 0xcd3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0xffff}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x0, 0x0, 0x6, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xa0, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x7, 0x6c}}}}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x310, 0xff, 0x40, 0x5, 0x40}, 0x36, &(0x7f00000018c0)={0x5, 0xf, 0x36, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x8, 0xf, 0x0, [0x0, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x0, 0xf000, 0x4, [0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1f, 0x0, 0xfc}]}, 0x2, [{0x7f, &(0x7f0000001940)=@string={0x7f, 0x3, "9b404725a2e7776ecfdeb8cbe416dfd70487142033145f9d3bea10f352b6570f6177de954ee47581888002b687803ddbc9dfe389c13f123dea978a6662f47b4203643ac642396284182cf9ce91ca695fed1184ebfad9028657b5bf63d276d58133226fdd82dce7baef6f2ce10bfab6185523c0a45dcf6937e951196cc7"}}, {0x0, 0x0}]}) [ 1003.343084][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1003.411585][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1003.479094][ T5203] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1003.500391][T22784] 0-536866815: 0000000000000000 [ 1003.509908][T22784] 536866816-536870911: ffff888094eb2460 [ 1003.522817][T22784] 536870912-553631743: ffff888094eb2540 [ 1003.531645][T22784] 553631744-553644031: 0000000000000000 [ 1003.544350][T22784] 553644032-553631743: ffff888076c687e0 [ 1003.577838][T22784] 553631744-553648127: ffff888076c689a0 [ 1003.589210][T22784] 553648128-553652223: ffff888094eb2620 [ 1003.595179][T22784] 553652224-116820934655: 0000000000000000 [ 1003.601513][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1003.608325][T22784] 116825128960-93824997462015: 0000000000000000 [ 1003.615087][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1003.622079][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 1003.627893][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1003.637895][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1003.645199][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1003.713776][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1003.721819][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1003.752324][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1003.759431][ T5176] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1003.769280][ T5203] usb 2-1: Using ep0 maxpacket: 32 [ 1003.774930][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1003.782719][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1003.799002][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1003.809865][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1003.816853][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1003.839314][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1003.846355][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1003.855612][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1003.863471][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1003.870876][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1003.879248][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1003.894594][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1003.914884][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1003.915761][ T5203] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1003.965200][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1004.008666][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1004.017038][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1004.019292][ T5176] usb 5-1: Using ep0 maxpacket: 32 [ 1004.029961][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1004.037094][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1004.052706][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1004.060559][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1004.069930][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1004.076911][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1004.084615][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.093685][ T5883] usb 1-1: Product: ꤭踨࢝뭱ἰ呎쇫ꝭſt勊꼀㴎䈟茍㶚₸痭涟ಏ䚫胫癩헬㣋⭾含ﱚ꟦랰玡悮팸㑐陀됽䏻᱐磻樾뻕쯜믝停ꡛ昽埞易鴘鶘䃘෕⩚壐妁ꗃ돢羔쾣㭁丶溆擑䃼⮤ଲ椷ⅱ㬧娇鵯泄㚤돇␹욱裃ະ操팠哮勦௨尷驩솸쉇蔒砽ㄣ╰ꖖⲜ病涰쾲륻捜䚑嫥 [ 1004.126819][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1004.134614][T22784] Pass: 20784806 Run:20784934 [ 1004.139801][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1004.149269][ T5176] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.149714][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1004.167754][ T5176] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1004.170603][T22784] Call Trace: [ 1004.170615][T22784] [ 1004.170628][T22784] dump_stack_lvl+0xd1/0x138 [ 1004.170674][T22784] mt_find.cold+0x8b/0x90 [ 1004.170716][T22784] ? mas_find+0x1d0/0x1d0 [ 1004.196415][ T5176] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1004.200010][T22784] find_vma+0x10c/0x1b0 [ 1004.200046][T22784] ? can_vma_merge_before+0x390/0x390 [ 1004.200082][T22784] ? walk_page_test+0x78/0x180 [ 1004.200124][T22784] walk_page_range+0x2b1/0x4a0 [ 1004.200168][T22784] ? __walk_page_range+0x780/0x780 [ 1004.200226][T22784] mlock_fixup+0x650/0x810 [ 1004.200288][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1004.246956][T22784] ? mlock_fixup+0x810/0x810 [ 1004.251604][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1004.257536][T22784] do_mlock+0x25a/0x6d0 [ 1004.261731][T22784] ? folio_evictable+0x270/0x270 [ 1004.266807][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1004.272733][T22784] __x64_sys_mlock+0x59/0x80 [ 1004.277346][T22784] do_syscall_64+0x39/0xb0 [ 1004.281797][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1004.287716][T22784] RIP: 0033:0x7feaf548c0c9 [ 1004.292151][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1004.311787][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1004.320225][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1004.328218][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1004.336204][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1004.344191][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.352180][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1004.360190][T22784] [ 1004.369215][ T5203] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1004.379432][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1004.383482][ T5883] usb 1-1: Manufacturer: Т [ 1004.385346][T22784] BUG at mt_find:6473 (1) [ 1004.385366][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1004.385391][T22784] 0-18446744073709551615: [ 1004.392327][ T5203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.395662][T22784] node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 [ 1004.410695][ T5883] usb 1-1: SerialNumber: ⎩涽쨅檱갠颞愧㭆飨擳誯峙쾐솪㘪溳궽ᒨ䴚퐰Ⱶ옘퓗瀁鮺䉷ꉊᏆ떕㲽⭛埥謻৤歷㏱흗玳뀕ퟖዀ솏毜㤤돱⣢ᯜ鸽빈薻跥퉟ꢡ脍촩鞐뮘骁Ᵹ஧Ⱝ콾䶗吜唖烧뙦ᭂ쾬㑆 [ 1004.415860][T22784] contents: [ 1004.431001][ T5203] usb 2-1: Product: syz [ 1004.449638][T22784] 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1004.484951][ T5203] usb 2-1: Manufacturer: syz [ 1004.493013][T23752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1004.495706][ T5203] usb 2-1: SerialNumber: syz [ 1004.506341][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1004.522941][T23752] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1004.556117][T22784] 0-536866815: 0000000000000000 [ 1004.572682][T22784] 536866816-536870911: ffff888094eb2460 [ 1004.578695][T22784] 536870912-553631743: ffff888094eb2540 [ 1004.585552][ T5203] usb 2-1: bad CDC descriptors [ 1004.591842][T22784] 553631744-553644031: 0000000000000000 [ 1004.600852][T22784] 553644032-553631743: ffff888076c687e0 [ 1004.607073][T22784] 553631744-553648127: ffff888076c689a0 [ 1004.619095][T22784] 553648128-553652223: ffff888094eb2620 [ 1004.625162][T22784] 553652224-116820934655: 0000000000000000 [ 1004.631608][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1004.638133][T22784] 116825128960-93824997462015: 0000000000000000 [ 1004.644905][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1004.652074][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1004.659109][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1004.666133][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1004.723842][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1004.731003][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1004.738063][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1004.745225][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1004.752346][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1004.759642][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1004.766666][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1004.769460][ T5176] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1004.773737][T22784] 140647113834496-140647114563583: [ 1004.792404][ T5176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.794978][ T4564] usb 2-1: USB disconnect, device number 6 [ 1004.805362][ T5176] usb 5-1: Product: syz [ 1004.813178][T22784] ffff888029235c40 [ 1004.821566][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1004.828768][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1004.840199][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1004.847399][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1004.854411][ T5176] usb 5-1: SerialNumber: syz [ 1004.859975][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1004.867417][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1004.878620][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1004.879493][T23782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1004.930254][T22784] 140647127171072-140647128055807: [ 1004.940059][ T5883] usb 1-1: bad CDC descriptors [ 1004.950307][ T5176] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 1004.958995][T22784] 0000000000000000 [ 1004.962992][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1004.986770][ T5883] usb 1-1: USB disconnect, device number 20 [ 1004.989216][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1005.000325][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1005.007476][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1005.016582][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1005.024022][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1005.031353][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1005.038443][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1005.046060][T22784] Pass: 20784854 Run:20784983 [ 1005.051005][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1005.060937][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1005.071009][T22784] Call Trace: [ 1005.074285][T22784] [ 1005.077221][T22784] dump_stack_lvl+0xd1/0x138 [ 1005.081825][T22784] mt_find.cold+0x8b/0x90 [ 1005.086162][T22784] ? mas_find+0x1d0/0x1d0 [ 1005.090504][T22784] find_vma+0x10c/0x1b0 [ 1005.094666][T22784] ? can_vma_merge_before+0x390/0x390 [ 1005.100041][T22784] ? walk_page_test+0x78/0x180 [ 1005.104817][T22784] walk_page_range+0x2b1/0x4a0 [ 1005.109609][T22784] ? __walk_page_range+0x780/0x780 [ 1005.114796][T22784] mlock_fixup+0x650/0x810 [ 1005.119294][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1005.124536][T22784] ? mlock_fixup+0x810/0x810 [ 1005.129141][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1005.135040][T22784] do_mlock+0x25a/0x6d0 [ 1005.139209][T22784] ? folio_evictable+0x270/0x270 [ 1005.144172][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1005.150088][T22784] __x64_sys_mlock+0x59/0x80 [ 1005.154679][T22784] do_syscall_64+0x39/0xb0 [ 1005.159118][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1005.165051][T22784] RIP: 0033:0x7feaf548c0c9 [ 1005.169493][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1005.189102][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1005.197516][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1005.205482][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1005.213467][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1005.221460][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1005.229428][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1005.237444][T22784] [ 1005.253902][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1005.260574][ T5176] usb 5-1: USB disconnect, device number 13 [ 1005.267951][T22784] BUG at mt_find:6473 (1) [ 1005.276424][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1005.286371][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:09 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000001700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xcd3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6}, [@call_mgmt={0x5}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xa0}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) 14:33:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xbc963a23e54480d5}, 0x14}}, 0x0) 14:33:09 executing program 2: syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) 14:33:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000004800), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 14:33:09 executing program 3: bpf$OBJ_GET_PROG(0x8, &(0x7f00000000c0)={0x0, 0x0, 0xcd92160331bf3838}, 0x10) [ 1005.324916][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:09 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:33:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) 14:33:09 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x68}, 0x48) [ 1005.434411][T22784] 0-536866815: 0000000000000000 14:33:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(r0, 0x10e, 0x0, 0x0, 0x4) [ 1005.485607][T22784] 536866816-536870911: ffff888094eb2460 14:33:09 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001700)={0x0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001c00)) 14:33:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, 0x0, 0x0) [ 1005.537130][T22784] 536870912-553631743: ffff888094eb2540 [ 1005.579291][T22784] 553631744-553644031: 0000000000000000 [ 1005.607111][T22784] 553644032-553631743: ffff888076c687e0 [ 1005.644672][T22784] 553631744-553648127: ffff888076c689a0 [ 1005.669190][T22784] 553648128-553652223: ffff888094eb2620 [ 1005.678816][T22784] 553652224-116820934655: 0000000000000000 [ 1005.693976][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1005.701194][T22784] 116825128960-93824997462015: 0000000000000000 [ 1005.714502][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1005.727659][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1005.734920][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:10 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) [ 1005.742574][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1005.799209][ T5203] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1005.806933][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1005.829349][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1005.836371][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1005.865641][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1005.882486][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1005.899267][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1005.906265][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1005.922968][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1005.938378][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1005.957104][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1005.976599][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1005.985956][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1006.002945][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1006.015731][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1006.027418][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1006.081510][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1006.088506][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1006.096259][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1006.103435][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1006.110633][ T5203] usb 1-1: Using ep0 maxpacket: 32 [ 1006.115945][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1006.123316][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1006.130814][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1006.138556][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1006.155548][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1006.166472][T22784] Pass: 20789892 Run:20790022 [ 1006.178410][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1006.188432][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1006.198513][T22784] Call Trace: [ 1006.201818][T22784] [ 1006.204774][T22784] dump_stack_lvl+0xd1/0x138 [ 1006.209420][T22784] mt_find.cold+0x8b/0x90 [ 1006.213802][T22784] ? mas_find+0x1d0/0x1d0 [ 1006.218189][T22784] find_vma+0x10c/0x1b0 [ 1006.222382][T22784] ? can_vma_merge_before+0x390/0x390 [ 1006.227797][T22784] ? walk_page_test+0x78/0x180 [ 1006.232607][T22784] walk_page_range+0x2b1/0x4a0 [ 1006.237427][T22784] ? __walk_page_range+0x780/0x780 [ 1006.242617][T22784] mlock_fixup+0x650/0x810 [ 1006.247105][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1006.252359][T22784] ? mlock_fixup+0x810/0x810 [ 1006.257015][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1006.262962][T22784] do_mlock+0x25a/0x6d0 [ 1006.267178][T22784] ? folio_evictable+0x270/0x270 [ 1006.272183][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1006.278126][T22784] __x64_sys_mlock+0x59/0x80 [ 1006.282750][T22784] do_syscall_64+0x39/0xb0 [ 1006.287219][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1006.293156][T22784] RIP: 0033:0x7feaf548c0c9 [ 1006.297605][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1006.317254][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1006.325792][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1006.333795][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1006.341797][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1006.349810][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.357807][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1006.365831][T22784] [ 1006.376780][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1006.382760][T22784] BUG at mt_find:6473 (1) [ 1006.387115][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1006.396369][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1006.433935][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1006.483437][ T5203] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1006.497172][T22784] 0-536866815: 0000000000000000 [ 1006.503427][T22784] 536866816-536870911: ffff888094eb2460 [ 1006.511835][T22784] 536870912-553631743: ffff888094eb2540 [ 1006.517782][T22784] 553631744-553644031: 0000000000000000 [ 1006.525205][T22784] 553644032-553631743: ffff888076c687e0 [ 1006.531656][T22784] 553631744-553648127: ffff888076c689a0 [ 1006.537614][T22784] 553648128-553652223: ffff888094eb2620 [ 1006.544401][T22784] 553652224-116820934655: 0000000000000000 [ 1006.551234][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1006.557703][T22784] 116825128960-93824997462015: 0000000000000000 [ 1006.564750][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1006.572052][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1006.579228][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1006.586220][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1006.646271][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1006.655577][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1006.663276][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1006.670698][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1006.677684][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1006.685386][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1006.692659][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1006.700130][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1006.707113][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1006.714453][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1006.721945][ T5203] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1006.731187][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1006.738174][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1006.745965][ T5203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.755744][ T5203] usb 1-1: Product: syz [ 1006.760261][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1006.767252][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1006.774822][ T5203] usb 1-1: Manufacturer: syz [ 1006.780066][ T5203] usb 1-1: SerialNumber: syz [ 1006.790938][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1006.841612][T23799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1006.848883][T23799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1006.857462][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1006.865834][ T5203] usb 1-1: bad CDC descriptors [ 1006.873916][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1006.881506][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1006.888501][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1006.896348][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1006.905857][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1006.913200][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1006.920480][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1006.927472][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1006.935816][T22784] Pass: 20789892 Run:20790023 [ 1006.940818][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1006.950747][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1006.960836][T22784] Call Trace: [ 1006.964148][T22784] [ 1006.967109][T22784] dump_stack_lvl+0xd1/0x138 [ 1006.971761][T22784] mt_find.cold+0x8b/0x90 [ 1006.976322][T22784] ? mas_find+0x1d0/0x1d0 [ 1006.980717][T22784] find_vma+0x10c/0x1b0 [ 1006.984912][T22784] ? can_vma_merge_before+0x390/0x390 [ 1006.990330][T22784] ? walk_page_test+0x78/0x180 [ 1006.995148][T22784] walk_page_range+0x2b1/0x4a0 [ 1006.999964][T22784] ? __walk_page_range+0x780/0x780 [ 1007.005141][T22784] mlock_fixup+0x650/0x810 [ 1007.009611][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1007.014860][T22784] ? mlock_fixup+0x810/0x810 [ 1007.019502][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1007.025450][T22784] do_mlock+0x25a/0x6d0 [ 1007.029666][T22784] ? folio_evictable+0x270/0x270 [ 1007.034671][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1007.040615][T22784] __x64_sys_mlock+0x59/0x80 [ 1007.045231][T22784] do_syscall_64+0x39/0xb0 [ 1007.049684][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1007.055606][T22784] RIP: 0033:0x7feaf548c0c9 [ 1007.060041][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1007.079675][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1007.088110][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1007.096101][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1007.104091][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1007.112086][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.120248][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1007.128261][T22784] [ 1007.145746][ T5176] usb 1-1: USB disconnect, device number 21 [ 1007.162856][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1007.176239][T22784] BUG at mt_find:6473 (1) [ 1007.181221][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1007.190092][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1007.228704][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1007.283589][T22784] 0-536866815: 0000000000000000 [ 1007.289021][T22784] 536866816-536870911: ffff888094eb2460 [ 1007.295050][T22784] 536870912-553631743: ffff888094eb2540 [ 1007.301131][T22784] 553631744-553644031: 0000000000000000 [ 1007.307152][T22784] 553644032-553631743: ffff888076c687e0 [ 1007.313741][T22784] 553631744-553648127: ffff888076c689a0 [ 1007.319843][T22784] 553648128-553652223: ffff888094eb2620 [ 1007.325865][T22784] 553652224-116820934655: 0000000000000000 [ 1007.332410][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1007.339028][T22784] 116825128960-93824997462015: 0000000000000000 [ 1007.345756][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1007.352723][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1007.359996][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1007.368532][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1007.427574][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1007.435010][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1007.442347][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1007.449720][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1007.456793][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1007.464229][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1007.483631][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1007.491124][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1007.498200][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1007.505654][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1007.513011][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1007.520339][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1007.528151][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1007.537936][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1007.545376][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1007.616355][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1007.631199][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1007.648083][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1007.658421][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1007.677539][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1007.687468][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1007.704260][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1007.719221][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 14:33:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 14:33:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003bc0)={0x1, &(0x7f0000003b80)=[{0x5}]}) 14:33:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(r0, 0x10e, 0xa, 0x0, 0x0) 14:33:12 executing program 2: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) 14:33:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x40, 0x7800, 0x6, 0xf4, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x81, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @noop, @rr={0x7, 0x1b, 0x0, [@rand_addr=0x64010100, @broadcast, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @cipso={0x86, 0x6}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x7, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:33:12 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x40086602, &(0x7f0000000040)) [ 1007.726485][T22784] 140732349124608-18446744073709551615: 0000000000000000 14:33:12 executing program 4: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000010c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) 14:33:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002540)={&(0x7f0000002440), 0xc, &(0x7f0000002500)={0x0}}, 0x0) 14:33:12 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) [ 1007.787486][T22784] Pass: 20792021 Run:20792153 14:33:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) [ 1007.826128][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1007.836109][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1007.846203][T22784] Call Trace: [ 1007.849544][T22784] [ 1007.852509][T22784] dump_stack_lvl+0xd1/0x138 [ 1007.857155][T22784] mt_find.cold+0x8b/0x90 [ 1007.861545][T22784] ? mas_find+0x1d0/0x1d0 [ 1007.865944][T22784] find_vma+0x10c/0x1b0 [ 1007.870148][T22784] ? can_vma_merge_before+0x390/0x390 14:33:12 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 14:33:12 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 1007.875570][T22784] ? walk_page_test+0x78/0x180 [ 1007.880435][T22784] walk_page_range+0x2b1/0x4a0 [ 1007.885268][T22784] ? __walk_page_range+0x780/0x780 [ 1007.890459][T22784] mlock_fixup+0x650/0x810 [ 1007.894953][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1007.900216][T22784] ? mlock_fixup+0x810/0x810 [ 1007.904882][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1007.910841][T22784] do_mlock+0x25a/0x6d0 [ 1007.915067][T22784] ? folio_evictable+0x270/0x270 [ 1007.920081][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 14:33:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00') [ 1007.926041][T22784] __x64_sys_mlock+0x59/0x80 [ 1007.930674][T22784] do_syscall_64+0x39/0xb0 [ 1007.935151][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1007.941091][T22784] RIP: 0033:0x7feaf548c0c9 [ 1007.945549][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1007.965205][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 14:33:12 executing program 4: io_setup(0x6eb, &(0x7f0000000a40)=0x0) io_setup(0x8e00, &(0x7f0000000140)) io_submit(r0, 0x0, 0x0) io_setup(0xff3c, &(0x7f00000001c0)) 14:33:12 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) writev(0xffffffffffffffff, &(0x7f00000041c0)=[{&(0x7f0000001040)="99d53930fa23b90e8731ba1659d4262fade0b1a5949452ef2a61eef081c583ff8039a9b3b8a1160ef6874689b4d573662e1250e4b3", 0x35}], 0x1) syz_open_dev$vcsn(&(0x7f0000000700), 0x8, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000400)=@nfc_llcp, &(0x7f00000004c0)=0x80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @remote, @initdev}, &(0x7f0000000680)=0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000780)={@mcast2, @private0, @loopback, 0x0, 0x96a0, 0x40, 0x0, 0x1, 0x800088}) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000740)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x13, 0xf}}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 14:33:12 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="747275737465642e6367726f35702e70726f6373001b3e9394144d37cbe253d8dc9c35a96b1679c3e43da8ea7f922bd9fa6c923e405491786ad1f76602191557d357908eeb770ab736d0c1fb274876c792acc16190f017ffb7afd373b5fcf5b2139020125e894356cd4d66d6d1a9b25cf23ee64090aa4894296a8637a2c16a132bdb8249a37e"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x73, 0x2, {{0x0, 0x3}, 0x3}}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18010000001000caa8e96c53f3003760b828bc697d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) io_submit(0x0, 0x3, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x8}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000000340), 0x0, 0x2, 0x0, 0x3}]) 14:33:12 executing program 2: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000080)={{r0}, "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"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001080)=0x2, 0x2) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000010c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000001100)={0x10, 0x0, "385287c755a828a7363ada6bfb046cf2"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x7c, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e20fdba2eeb9"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2e64de0500ca"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e9974f5e43c9"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = dup2(r0, r1) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0xaa7e526c0f430ac3}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r3, 0xc0c, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9274e99763a5"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000893}, 0x4000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000013c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000023c0)={r5, 0x0, "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", "dcef3849bfccf57e38c861a469bf07b4de0ab8aa62ef8e3338ee1c4e70be47cb6a95d2ba2b91417c8727e643e1378ace95569cd995d47f03536e6f1be4ae28d41add960c762092cf3dd30356bbb50137c0c7010a67ef6565e027e48fefa64faa22fe680ce73797ce0ab9e82f711ca209109cda1f2a96fecd8d9fe4cf02011b813318ad2194a5f0652c9471a7630fb489c8424f617ea1abfd59a250bd20dc61822e639bc23ffa3210f621ea28a3078c698bfd2b0a9479eccb0833baee4add36487600f8b4140188d10049714f6357d0519624c4471273d70d345e644f60fa76142a9ecb66f4a16fc3ff2622bf05bd04d31b4e87ef2d2a8e4123bf963a0653d0458dca475879a5e7100a8c7f37881841a3ebb1073c648bbbd3d69269e4b3c7ca3be17ddd2b41587533b16a4decce2e76820dc0b66b705002da6a223df946b8fcf2d2175da06cd098058358d1f50fe460b57a08e3add0ac29c5da2aa0f1734f488c16cec3f5e3c2d71b207ebcc4926e45f6bc827e027066e4b171d91065fdbcf7a1f66c8917e16b9a06dcb3ad906b2814038305380495c2cd030309de5d6641860373cbae10175c469d80b91238e158c2a49526b51fb8d47664bcfcfbd8fecda3313513aea7f4b314d1362c1429a7f724f67d699c016fd87afaf7e22775317d8481a73b0089ea7ae4104987baaa997d855ccc6d47cca249943677fa57016c3d81764921dbe3c7b5787e5b34ca6a4a96ff4f3dbee1b2c2727a8836d864d708fa84c1dc00ff15462ce15c6536471fc154c6b11a321f6635927ac7b454e8deb75c2a0ba13208a34fde46da588e05f79e8ceb7a1cde859fe9b01c384c0ca143684b613da5b352a379c52b618e3ccf0ab17b032696cf7925e572f60f093ccc2c82da39af8b8e3caa94b2e26cd8581cf29c888a8cf793461eec616eee744bcf913f94fc2ee01911ae2428910ad606609912677946ca74d515007cc226c5654902de3102e4a2fe329c5750a2811ea42b6cf5a1d7b4ce1033d83df380a2711afb162bc379570e2a8b31a7603da78f68898b85e6064dc4f79c7e2a96773db29a45da87fbffb4c0683086c7d45a8a576223fa08f8a60d74752c705cb48180b11623154881df75503673f6b44a447bd2a727c72ed84c1ae5a04712881d3a16bbca86a81a3768f14fe5981408a5567aeed713ee9cbc2f455a292135cdde206a9aefc90c4b6ed179446337ff44d1c127c5cc432a5ca9ef4deeacefb62e359801f4f72082d17bb6e4a474fbba7d5ba6a77a57299b5bf85d477042faadfa978d4d8e155262aa987b5ca45433b2ef8466f2474641df76a04a7737c4c6e15a4eee6c3577f8d4e85af390158d6ab9d8d897e2a48129dc702427bf672100a3033c01145a2e092828ec42cd2158271544d8f95d551eab673f3fc6fc5d472f21f3746340b06dc5f0cc0be979197207b4db7134f8f6c5d22733499f95da7587e85b3e391687533a21c8ac2adc21221d21237185b7adc640ca0d6c775cdfec37e3ce2f453b5df91d5944b25af456e52a328c6c2d849e76751f259f94345f96b23a5e9cdbcd7445d9802c1e327967350ce9eb465c7c9e645914a34abe0f382516f972bf5af8ff2aa34b24e06acb4deec236e31092fe383b16e1d7972cd016c4da314df7235bfc6335e1f88504fe7979e54a8c4172e5db940df0ef9612973b2af31d630cbdb2fee88aa92ad7ddef2a896740a785b07ca80481aa50eb818a5f8fb2502ccee8a11f71aeacb6aad3b24da4cb9556e6a8d96c7720a5b1b379396067771376b3c76da925b0eafb3c6ea7166ff5544a847e3a471106d8584652b3eeef8808319d98f95d40c7b158352e42930d12df39fec057bbb2c02fc39f61f9ec54fb5b14a413f6d2a9dc6b8e86c486876a1ede440bd6d5a4e784a23f4b001febf26454c804aae01ee450fc1a2453549d8f1d790fb8273330983fe279d32ba6ee94a5699e6dc70e93c17aa29583c00e45ac1ccb44b63b2c9f27f1d12471fb4f6c95014a541d274dc9bee330193f887cb6afd8e3d6a47211321052d29d27cb5e289bafb328acab0cd4a5a0585fc01056fb722938ee2434837f4213e6521924cc9c1a4096754087a574c887522606d025fe5a4a2fabd27562f8480d09a513f144f54751c62ce33336efbedacb3e2c0f1e8e941a6698dca50eb4ea04268a46b3a66bdd5150a239f1b3b13fe6ee334cd6674158a860e1c8803d7b871c38d57ff4956394b0161b3a121b86c4dbe81c056d835213693f340d0169157d111cab548321cdb68c1252a84c87426ad751ad29c51992f3a73fc6fcfca1a5f10b8445baba2dca247879b849cfae866ab9088ea4af4cc90bb5c9da232575d4d48c870e0de09ffb7d8feafa89f29826bd8136847f65513596c78db781a1c5c33edd09d0ad74e71368ea367fb171e7560b907ef0cfa0339435859afa85294a712eb943a21dd0497c116c9bf7481d33ad228e38c7bce572bb5e5023a6073fbfe08baa5eea52d7e7ead98b9827cf2d72c52e29058faa126bbddb91dd089ec80ecafcaec96250c34b4882b17e73568fa4f73e942efe6735de2fd31ef8d653b599b833ea36dab4d635f7f3a8d42ec96a9fae2934d2e2a932423a2f2906fcc4147e92a76a8c9c963fcdebc927dff3fb7bab8ec6670c581afc9990c30ad697d1e2939849422f97ffdcb3081afbd8dd5ef65ae16ca263b973fc4d3bdd04b17778a18a6146997ca7f09e9ba0c567c96eee1af71eb1401a0dd393670a195cd3f5d05f977fab5fc082849e504499eb90926262c0aa143bf82d2302117731e2f9efa7e5a17f96ed0a511b768fc73a9e2308c193bd0cebd04ec7622b16f598ddb0523275bd5b9ff4b2a9c30c5207bca9a441ce55087dc4bcc39e72cf8d96c2bc623c9ae05f821800c62d5a093a076c8eba8ab4ab9db46b540d8a73a7bebe72baa0a3a7d90ee70a25e6482334d1f86f6993395df82a614085103caadad590412354a6a42b62e7bc32d9e5d4ed278a8cf556ea2ffa033c6d73a8b9acb4ce62052fbfbc980a309592edf2520cc06877e213ad0f888494d37f38757b6e671d0cb07bdca15d9b71e2fda478e3ae095fe1ecf320eb8993274f3c2fb6821473f0af0a059bd76f5730752fceeb6f91f4611e962cae7b4257a10157fc0cea479d3043ecd8b18d8f0307b1b59980b3e851cd36efaa9a43be556c0c399f7caf0068409a7c0379472e3768919872df5ba70227938483d73a44cb9b7adcd579320e1441e9cf4a6126e39319475bcd8c71125ae3f580f93c13ae81376b1396f196cd8e9d708c07893fb4fe1dcc6daef72a5bbc24d02a0eb2e9c0db87317543eca32e95ef304993109b781dd9b50c9f6f631392c4af1cd94b23d416f19111c2c283f83faa021c6afdf4b33ec5ffea37d5f97cf7fd501383a3154b3d016e29c1eb5a88eaf03b95dbea01c5213dc7bdb5122a51a45f11b585a9a60bfd4a9a16d0872115f1448f0bf2efe4ff0825cfbac9cb4cc1e25eb9d6eaf897531be5f6dc3c26066b2a8524286dc3805ed5f0eb4386940cc6fba64b3fc4b51083eae574541952f4af358caa3aa02212e449b7b3a6b6466c4d9c0906024671676225561ad1b380b2ef0e0c41ef5879a799db4b46d99d58fed05f59dbd460ddc388a33d2e8254fbb07423d214d87ae9e4f95001ce591ee80d0c5c55d70eb00f4bd3710b089dbc765a5671b1bdaddb60e55e7d36262627ecb0b0809cacd9edd5def1819a9d71d03de232a128876c7e16e60434990a92d7ef1d8c33471791d6f4b2a050f23054f8c149a03bb56f0ab4274aef5a240c94100a0e8e5ae360a4291448f9ef837d4dcef1bd042735a135092c4ed26ee506cdefb65b0f3d7bd08461dd1fde0344934262827700904463e996a691a183b078e4cf8f32c6d3a26738d67d4b05f2a96f23b9010374e40856c61c6513abf5cce218cdfd01fe0f17789e5a8caca60b98f3e35c385bdf3d4c130b9d1de1bf929a85e8bd2211a7502ca36d9ed3bbff3bdda243e5879f9c01a246b386ed6cc69055f3c70307e3014159c1bf72bda73a655c3a6dd6cde9754df7d2db88f73e823c02a47b7d181d5c7d0536408516a5b0faf713fc9f59fbc5f2696cf63a14b8720ac9f56bfd414f3d1597a881a992c4673c9faca0846ebdab2aa3d31e1a16a8b0bd1d5fdf4b231c05c40ce07dbd9de725778b9a4f81b338a37e8a2df4b5c48c65d3a58f1cbd31054fc9d6517b802d0065c400f6c98f73ae9bb940973a8255905da4032fca185bff6ffee058e78cacf2cfa3f2da3acf29181db70f374223d7436d42ba672436e453a7d4f6bddc70c27111f58fe2b39fee12f2429e226b8e3e8cb4ccda53bcaea8fa3e3ef723fd043570fca48977c20fc38e3c2c755510301e3291f0272128d8f24e9b424de20a69967156ab04aa0d1af8b6198eec9462e185a1f0f11802f1b4431a857f53f9184def5963d856d457fc2f072c69bff58eb92db081fb41d0b0559e2a5a1ecd3ecdd3fe9d5cb0394c4966aeb673102a6f236a8d8c14690af9ca89917b190001b2832e65e91abbc6ba1c55a6798eb782babbdea2fc645c9eb2c23c3164b8402a641ac993b60eff71165f5aa064a7785142d091663234fece92ceb8acffe1e2d0d16d2f34f5e04fd457278b61fc3a246deb0c0ed79c4cf4af86eb44deb7720117b360566bd133f0c0073516f4e97bdc752bc708bf95dff6fc5cd269fbfd506d13238348ad1d8ff85f1db53f26a98a82a2e0b9a496d6f3ad1d6e4652418a62de94ad2b8e7c23243a604ada2adb6732a39914ff707d4266238e1d770a1cf6c530068befee8d2bad89e4fb5e290f2358d2925f97352faeecfe5e3f917a0ed758590c2c9362742ceb5f9e84b637f53a2cfd6481c5ba40c42db2a3014f514aaff7cdd1e9e1e011c7f170a478d0987207c811d2dd3a7b6ce7251d5f4137347202f793edc23fd18452f65b6f9b511b37f65622ad209f2f8205c1d7f5dc14a1a9dd793e21d2eb6355ce6ed4ab6f163d75572985b5eeec84d8e5b3feafb3a34aa866c14705eba8aaf6fc13d88eff079e7d8235fd2e0b6825e3d0a4d87fdcc5661c44b2512ef0acf5092459dfedc5ec451896b790054ea5d9d80bc192282935113e96a76bdb8a6d65966679e688583d706a5f417116d7d003d1e966dfa18581bf7d823b29617584c2e18f37f60642bd661d0e39645372192d7a41f788dca1aa07244e614ff59064cca62b537676204e55094a03cdae1c5db295051d1380c75da986907c7adf6feb5c2c9670315cb11b4807633ee46134ca678202b80a73952c13b2f8861c0bea2a2ad5d0bf7cf1b73e673b9f6bb6887c7c6c82064e382c1ff0f046911523617af49dccdfb5fa233f42c2571deea3ad443c79ef693878ce76f8a8b88f582b37"}) syz_clone(0x40060100, &(0x7f0000003400), 0x0, &(0x7f0000003480), &(0x7f00000034c0), 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x68, r6, 0x102, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) socket$xdp(0x2c, 0x3, 0x0) socket(0x1f, 0x1, 0x7) syz_genetlink_get_family_id$fou(&(0x7f0000004080), r4) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000004500)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000044c0)={&(0x7f0000004340)={0x164, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x5) 14:33:12 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x17b, &(0x7f0000001700)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x169, 0x1, 0x1, 0xeb, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "c6f22920"}, {0x5, 0x24, 0x0, 0xcd3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xffff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3e, 0x1, 0x6, 0x5, 0x2f}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x1, 0x2c0}, @mdlm_detail={0x4c, 0x24, 0x13, 0x40, "8ffaf3da4025973f27dd14986b5780f6f8c10eb9893c998b1dfc11b68ffe9adfe0ac7dc05cfef34085bea193d292be3cfa47d55412b2b22bcd189f6a6ced9c4377bdb2be1a91c506"}, @mdlm_detail={0xbc, 0x24, 0x13, 0x9, "1634212bc174e1b580cf50b9bd0d3484ad50a9348aefa1234e490ead1a1bf1da680b9aa0ce843c8293a301fbaf7331827005d5ede6c8aa95184452d43e7e9c705f5bcf0ac0c0f6aabeb266fc1bf3d89cf738f789799e7f4de2202ad9c92791d79ebdb4c33c58b0a53c105b2f56e788a4388fd62a784e14bd740d30a1ad56868b8509defc68664f3184b61e8dd1d9debe01d37376f9a6eebdce7ba953a137f2fe33760b2eb74ec08dd2c7dd856d0217cf4029286c516efe0a"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xa0, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x7, 0x6c}}}}}]}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x310, 0xff, 0x40, 0x5, 0x40, 0x40}, 0x41, &(0x7f00000018c0)={0x5, 0xf, 0x41, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x3f, 0x20, 0x5fee, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x8, 0xf, 0x2, [0x6000, 0x30]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x9, 0xf000, 0x4, [0x0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1f, 0x74, 0xfc}]}, 0x4, [{0x7f, &(0x7f0000001940)=@string={0x7f, 0x3, "9b404725a2e7776ecfdeb8cbe416dfd70487142033145f9d3bea10f352b6570f6177de954ee47581888002b687803ddbc9dfe389c13f123dea978a6662f47b4203643ac642396284182cf9ce91ca695fed1184ebfad9028657b5bf63d276d58133226fdd82dce7baef6f2ce10bfab6185523c0a45dcf6937e951196cc7"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x422}}, {0xdf, &(0x7f0000001a00)=@string={0xdf, 0x3, "2da924f8288e9d0871bb35e1301f4e54ebc16da705fbca5239f100af0e3d1f420d839a3db820ed759f6d8f0cab46eb800ef9ecd5cb387e2b2b545afce6a7b0b7a173ae6038d3caeb50344096b3dd3db4fb43501cfb783e6ad5bedccbddbb5c505ba83d66de571366189d989dd840d50d32dd5a2ad0588159c3a5e2b3947fa3cf413b364e866e6aedd5dad16467d9fc40a42b320b37697121273b075a6f9dc46ca436c7b33924b1c6c388b00ecd6420d3ee547df1e652e80b375c699ab8c147c21285b3e33d782331702596a59c2cc575b06db2cf7bb95c639146e55a13"}}, {0xa7, &(0x7f0000001b00)=@string={0xa7, 0x3, "2bf2a923bd6d39f405cab16a20ac9e982761463be89836f5f364c5f0af8ad95c22f090cfaac12a36b36ebdada8141a4d30d4752c18c6d7d40170ceecc6e3ba9b77424aa24ae8c61395b5bd3c5b2be5573b8be4098cf9f13357d7b37381ef15b0d6d7c0128fc1dc6b2439f1b3e228dc1b3d9e48bebb85e58d5fd2a1a80d8129cd909798bb819a900018df7da7a70b2d2c7ecf974d1c541655e77066b6421baccf4634b1f37a"}}]}) [ 1007.973669][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1007.981682][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1007.989700][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1007.997712][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1008.005729][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1008.013774][T22784] 14:33:12 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004c80)={0x0}, 0x10) [ 1008.052493][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1008.070875][T22784] BUG at mt_find:6473 (1) [ 1008.090004][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1008.139609][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_REASON={0x4}]}, 0x1c}}, 0x0) [ 1008.255785][T23849] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1008.306558][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1008.350121][T23858] netlink: 'syz-executor.1': attribute type 18 has an invalid length. 14:33:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) [ 1008.535842][T22784] 0-536866815: 0000000000000000 [ 1008.553797][T22784] 536866816-536870911: ffff888094eb2460 14:33:12 executing program 4: syz_clone(0x40060100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1008.589093][T22784] 536870912-553631743: [ 1008.589112][ T5883] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1008.589123][T22784] ffff888094eb2540 14:33:12 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x40086602, &(0x7f0000000080)={@host}) 14:33:13 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 1008.709090][T22784] 553631744-553644031: 0000000000000000 [ 1008.749418][T22784] 553644032-553631743: ffff888076c687e0 [ 1008.761091][T22784] 553631744-553648127: ffff888076c689a0 [ 1008.767056][T22784] 553648128-553652223: ffff888094eb2620 14:33:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(r0, 0x10e, 0xb, 0x0, 0x0) [ 1008.859163][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 1008.874483][T22784] 553652224-116820934655: 0000000000000000 [ 1008.892501][T22784] 116820934656-116825128959: ffff888094eb2700 14:33:13 executing program 1: syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000010280)='./bus\x00', 0x10, &(0x7f0000007f80)=ANY=[], 0x1, 0x7e64, &(0x7f0000000100)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000008200)='./bus\x00', 0x103002, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x2007ffb) fallocate(r0, 0x8, 0x0, 0x8000) [ 1008.938044][T22784] 116825128960-93824997462015: 0000000000000000 [ 1008.998826][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1009.009311][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1009.016500][ T5883] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1009.043179][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1009.069751][ T5883] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1009.081293][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1009.104980][ T5883] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1009.219298][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1009.226337][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1009.296978][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1009.336787][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1009.375888][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1009.383180][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.399634][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.407673][ T5883] usb 6-1: Product: ꤭踨࢝뭱ἰ呎쇫ꝭſt勊꼀㴎䈟茍㶚₸痭涟ಏ䚫胫癩헬㣋⭾含ﱚ꟦랰玡悮팸㑐陀됽䏻᱐磻樾뻕쯜믝停ꡛ昽埞易鴘鶘䃘෕⩚壐妁ꗃ돢羔쾣㭁丶溆擑䃼⮤ଲ椷ⅱ㬧娇鵯泄㚤돇␹욱裃ະ操팠哮勦௨尷驩솸쉇蔒砽ㄣ╰ꖖⲜ病涰쾲륻捜䚑嫥 [ 1009.453589][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1009.468480][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1009.483431][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1009.499214][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1009.513054][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1009.524996][ T5883] usb 6-1: Manufacturer: Т [ 1009.534185][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1009.542447][ T5883] usb 6-1: SerialNumber: ⎩涽쨅檱갠颞愧㭆飨擳誯峙쾐솪㘪溳궽ᒨ䴚퐰Ⱶ옘퓗瀁鮺䉷ꉊᏆ떕㲽⭛埥謻৤歷㏱흗玳뀕ퟖዀ솏毜㤤돱⣢ᯜ鸽빈薻跥퉟ꢡ脍촩鞐뮘骁Ᵹ஧Ⱝ콾䶗吜唖烧뙦ᭂ쾬㑆 [ 1009.575835][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:13 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) writev(0xffffffffffffffff, &(0x7f00000041c0)=[{&(0x7f0000001040)="99d53930fa23b90e8731ba1659d4262fade0b1a5949452ef2a61eef081c583ff8039a9b3b8a1160ef6874689b4d573662e1250e4b3", 0x35}], 0x1) syz_open_dev$vcsn(&(0x7f0000000700), 0x8, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000400)=@nfc_llcp, &(0x7f00000004c0)=0x80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @remote, @initdev}, &(0x7f0000000680)=0xc) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000780)={@mcast2, @private0, @loopback, 0x0, 0x96a0, 0x40, 0x0, 0x1, 0x800088}) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000740)={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x13, 0xf}}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) [ 1009.591667][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1009.610402][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1009.646708][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1009.716451][T23876] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1009.795237][T23851] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.837556][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1009.856780][T23851] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1009.879143][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1009.906712][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1009.932661][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1009.952519][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1009.969200][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1009.987587][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1010.010881][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1010.043094][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1010.065376][T22784] Pass: 20813398 Run:20813531 [ 1010.080838][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1010.090791][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1010.100875][T22784] Call Trace: [ 1010.104178][T22784] [ 1010.107142][T22784] dump_stack_lvl+0xd1/0x138 [ 1010.111788][T22784] mt_find.cold+0x8b/0x90 [ 1010.116166][T22784] ? mas_find+0x1d0/0x1d0 [ 1010.120555][T22784] find_vma+0x10c/0x1b0 [ 1010.124756][T22784] ? can_vma_merge_before+0x390/0x390 [ 1010.130182][T22784] ? walk_page_test+0x78/0x180 [ 1010.135004][T22784] walk_page_range+0x2b1/0x4a0 [ 1010.139826][T22784] ? __walk_page_range+0x780/0x780 [ 1010.145011][T22784] mlock_fixup+0x650/0x810 [ 1010.149493][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1010.154744][T22784] ? mlock_fixup+0x810/0x810 [ 1010.159402][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1010.165349][T22784] do_mlock+0x25a/0x6d0 [ 1010.169570][T22784] ? folio_evictable+0x270/0x270 [ 1010.174574][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1010.180514][T22784] __x64_sys_mlock+0x59/0x80 [ 1010.185140][T22784] do_syscall_64+0x39/0xb0 [ 1010.189614][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1010.190307][ T5883] usb 6-1: bad CDC descriptors [ 1010.195527][T22784] RIP: 0033:0x7feaf548c0c9 [ 1010.195554][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1010.195583][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1010.232839][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1010.240847][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1010.248292][ T5883] usb 6-1: USB disconnect, device number 14 [ 1010.248833][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1010.262729][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.270739][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1010.278769][T22784] [ 1010.901863][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1010.927279][T22784] BUG at mt_find:6473 (1) [ 1010.942311][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1010.988011][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1011.016630][T23872] loop1: detected capacity change from 0 to 63271 [ 1011.080464][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1011.108997][T23872] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(605) [ 1011.212694][T23872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1011.270273][T23872] F2FS-fs (loop1): invalid crc value [ 1011.294931][T22784] 0-536866815: 0000000000000000 [ 1011.313322][T23872] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1011.319304][T22784] 536866816-536870911: ffff888094eb2460 [ 1011.341826][T22784] 536870912-553631743: ffff888094eb2540 [ 1011.373360][T22784] 553631744-553644031: 0000000000000000 [ 1011.401207][T22784] 553644032-553631743: ffff888076c687e0 [ 1011.425253][T22784] 553631744-553648127: ffff888076c689a0 [ 1011.445053][T22784] 553648128-553652223: ffff888094eb2620 [ 1011.469493][T22784] 553652224-116820934655: 0000000000000000 14:33:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x6fe44da629969272, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000041) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x80000041) 14:33:15 executing program 2: io_setup(0x8001, &(0x7f0000000000)) io_setup(0xff, &(0x7f00000009c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_setup(0x233, &(0x7f0000000bc0)=0x0) io_destroy(r1) 14:33:15 executing program 5: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) 14:33:15 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000001700)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0xeb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x20, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xffff}, [@mdlm_detail={0x4}]}}}]}}]}}, 0x0) [ 1011.489069][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1011.511848][T23872] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1011.513288][T22784] 116825128960-93824997462015: [ 1011.518908][T23872] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 1011.564154][T22784] 0000000000000000 [ 1011.601335][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1011.653321][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1011.660538][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:16 executing program 5: io_setup(0x6eb, &(0x7f0000000a40)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="a6", 0x1}]) [ 1011.668182][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1011.726266][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1011.734444][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1011.743429][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1011.769926][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1011.782254][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1011.789470][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1011.806019][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 14:33:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) [ 1011.815288][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1011.835834][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1011.861409][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1011.873329][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1011.881350][ T5883] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1011.910988][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1011.938847][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1011.959550][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1011.986153][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1012.104549][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1012.119750][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1012.149157][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1012.169319][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 1012.181592][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1012.209414][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1012.299119][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1012.299740][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1012.313898][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1012.401989][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1012.429482][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1012.436939][T22784] Pass: 20818901 Run:20819035 [ 1012.468142][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1012.478109][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1012.488192][T22784] Call Trace: [ 1012.491515][T22784] [ 1012.494473][T22784] dump_stack_lvl+0xd1/0x138 [ 1012.499115][T22784] mt_find.cold+0x8b/0x90 [ 1012.503490][T22784] ? mas_find+0x1d0/0x1d0 [ 1012.507876][T22784] find_vma+0x10c/0x1b0 [ 1012.512071][T22784] ? can_vma_merge_before+0x390/0x390 [ 1012.517480][T22784] ? walk_page_test+0x78/0x180 [ 1012.522293][T22784] walk_page_range+0x2b1/0x4a0 [ 1012.527109][T22784] ? __walk_page_range+0x780/0x780 [ 1012.532275][T22784] mlock_fixup+0x650/0x810 [ 1012.536740][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1012.541974][T22784] ? mlock_fixup+0x810/0x810 [ 1012.546613][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1012.552542][T22784] do_mlock+0x25a/0x6d0 [ 1012.556743][T22784] ? folio_evictable+0x270/0x270 [ 1012.561729][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1012.567655][T22784] __x64_sys_mlock+0x59/0x80 [ 1012.572262][T22784] do_syscall_64+0x39/0xb0 [ 1012.576711][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1012.582631][T22784] RIP: 0033:0x7feaf548c0c9 [ 1012.587061][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1012.606683][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1012.615121][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1012.623105][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1012.631089][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1012.639072][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.647053][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1012.655061][T22784] [ 1012.690413][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.709331][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.717371][ T5883] usb 4-1: Product: syz [ 1012.748451][ T5883] usb 4-1: Manufacturer: syz [ 1012.758998][ T5883] usb 4-1: SerialNumber: syz [ 1013.109962][ T5883] usb 4-1: bad CDC descriptors [ 1013.124487][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1013.135315][ T5883] usb 4-1: USB disconnect, device number 17 [ 1013.144024][T22784] BUG at mt_find:6473 (1) [ 1013.158475][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1013.177175][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1013.220202][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1013.319835][T22784] 0-536866815: 0000000000000000 [ 1013.325129][T22784] 536866816-536870911: ffff888094eb2460 [ 1013.338993][T22784] 536870912-553631743: ffff888094eb2540 [ 1013.344949][T22784] 553631744-553644031: 0000000000000000 [ 1013.369196][T22784] 553644032-553631743: ffff888076c687e0 [ 1013.375166][T22784] 553631744-553648127: ffff888076c689a0 [ 1013.391365][T22784] 553648128-553652223: ffff888094eb2620 [ 1013.397327][T22784] 553652224-116820934655: 0000000000000000 [ 1013.419599][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1013.426093][T22784] 116825128960-93824997462015: 0000000000000000 [ 1013.448992][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1013.455819][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1013.478998][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1013.486002][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1013.555127][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1013.562346][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1013.585237][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1013.595149][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1013.615842][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1013.628609][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1013.646117][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1013.656743][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1013.673814][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1013.685243][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1013.697884][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1013.729020][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1013.736031][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1013.753607][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1013.767000][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1013.831256][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1013.838272][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1013.855230][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1013.865102][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1013.881075][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1013.888080][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1013.908810][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1013.928688][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1013.937292][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1013.956157][T22784] Pass: 20819381 Run:20819516 [ 1013.961052][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1013.970978][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1013.981055][T22784] Call Trace: [ 1013.984352][T22784] [ 1013.987308][T22784] dump_stack_lvl+0xd1/0x138 [ 1013.991946][T22784] mt_find.cold+0x8b/0x90 [ 1013.996322][T22784] ? mas_find+0x1d0/0x1d0 [ 1014.000707][T22784] find_vma+0x10c/0x1b0 [ 1014.004895][T22784] ? can_vma_merge_before+0x390/0x390 [ 1014.010302][T22784] ? walk_page_test+0x78/0x180 [ 1014.015108][T22784] walk_page_range+0x2b1/0x4a0 [ 1014.019927][T22784] ? __walk_page_range+0x780/0x780 [ 1014.025105][T22784] mlock_fixup+0x650/0x810 [ 1014.029589][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1014.034839][T22784] ? mlock_fixup+0x810/0x810 [ 1014.039488][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1014.045426][T22784] do_mlock+0x25a/0x6d0 [ 1014.049635][T22784] ? folio_evictable+0x270/0x270 [ 1014.054632][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1014.060567][T22784] __x64_sys_mlock+0x59/0x80 [ 1014.065192][T22784] do_syscall_64+0x39/0xb0 [ 1014.069664][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1014.075596][T22784] RIP: 0033:0x7feaf548c0c9 [ 1014.080041][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1014.099677][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1014.108122][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1014.116123][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1014.124125][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1014.132125][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.140124][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1014.148154][T22784] [ 1014.197671][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1014.207918][T22784] BUG at mt_find:6473 (1) [ 1014.217845][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1014.239338][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1014.288724][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:18 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001540), 0x40b02, 0x0) syz_clone(0x600c0000, &(0x7f0000001740), 0x0, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)="4003678ec2f5eff99e039a55875049372d4f482eacfd3f8734b6716886eea936bc04fbedc926d477333b8b5c26") 14:33:18 executing program 2: syz_usb_connect$uac1(0x0, 0xf0, &(0x7f0000001680)=ANY=[@ANYBLOB="12010002000000406b1d01014000010203010902de000301"], 0x0) 14:33:18 executing program 5: io_setup(0x6eb, &(0x7f0000000a40)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="a6", 0x1}]) 14:33:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in=@local}}, 0xe8) 14:33:18 executing program 1: syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x0) 14:33:18 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) 14:33:18 executing program 0: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10b9fe, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa003}, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r0, 0x0, 0x8080fffffffe) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r4 = dup(r3) ftruncate(r0, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) [ 1014.352116][T22784] 0-536866815: 0000000000000000 [ 1014.357396][T22784] 536866816-536870911: ffff888094eb2460 [ 1014.369998][T22784] 536870912-553631743: ffff888094eb2540 [ 1014.375956][T22784] 553631744-553644031: 0000000000000000 14:33:18 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 14:33:18 executing program 3: openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x101001, 0x0) [ 1014.461733][T22784] 553644032-553631743: ffff888076c687e0 14:33:18 executing program 1: openat$hwrng(0xffffff9c, &(0x7f0000000380), 0x10802, 0x0) [ 1014.509602][T22784] 553631744-553648127: ffff888076c689a0 [ 1014.544444][T22784] 553648128-553652223: ffff888094eb2620 14:33:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000500)) [ 1014.584360][T22784] 553652224-116820934655: 0000000000000000 14:33:18 executing program 5: io_setup(0x6eb, &(0x7f0000000a40)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="a6", 0x1}]) [ 1014.615311][ T27] audit: type=1804 audit(1673361198.874:75): pid=23917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3556165082/syzkaller.DtCuFU/1103/bus" dev="sda1" ino=1166 res=1 errno=0 [ 1014.645916][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1014.689486][T22784] 116825128960-93824997462015: 0000000000000000 [ 1014.696162][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1014.709272][ T5180] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1014.726391][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1014.734133][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1014.742602][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1014.804681][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1014.813791][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1014.821349][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1014.828472][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1014.836120][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1014.844011][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1014.856998][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1014.864446][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1014.871858][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1014.879314][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1014.886429][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1014.899827][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1014.917005][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1014.925469][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1014.933847][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:19 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001540), 0x40b02, 0x0) syz_clone(0x600c0000, &(0x7f0000001740), 0x0, &(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)="4003678ec2f5eff99e039a55875049372d4f482eacfd3f8734b6716886eea936bc04fbedc926d477333b8b5c26") [ 1014.987580][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1015.006779][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1015.014288][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1015.028933][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1015.036561][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1015.066195][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1015.076060][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1015.089177][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1015.096206][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1015.104294][T22784] Pass: 20825540 Run:20825676 [ 1015.109647][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1015.119583][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1015.129670][T22784] Call Trace: [ 1015.132972][T22784] [ 1015.135922][T22784] dump_stack_lvl+0xd1/0x138 [ 1015.140568][T22784] mt_find.cold+0x8b/0x90 [ 1015.144949][T22784] ? mas_find+0x1d0/0x1d0 [ 1015.149338][T22784] find_vma+0x10c/0x1b0 [ 1015.153529][T22784] ? can_vma_merge_before+0x390/0x390 [ 1015.158939][T22784] ? walk_page_test+0x78/0x180 [ 1015.163747][T22784] walk_page_range+0x2b1/0x4a0 [ 1015.168548][T22784] ? __walk_page_range+0x780/0x780 [ 1015.173708][T22784] mlock_fixup+0x650/0x810 [ 1015.178169][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1015.183406][T22784] ? mlock_fixup+0x810/0x810 [ 1015.188040][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1015.193966][T22784] do_mlock+0x25a/0x6d0 [ 1015.198155][T22784] ? folio_evictable+0x270/0x270 [ 1015.203135][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1015.209091][T22784] __x64_sys_mlock+0x59/0x80 [ 1015.213696][T22784] do_syscall_64+0x39/0xb0 [ 1015.218144][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1015.224061][T22784] RIP: 0033:0x7feaf548c0c9 [ 1015.228488][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1015.248118][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1015.256558][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1015.264547][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1015.272534][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1015.280518][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.288499][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1015.296504][T22784] [ 1015.303447][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1015.309726][T22784] BUG at mt_find:6473 (1) [ 1015.314256][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1015.324324][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1015.364553][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1015.378259][ T5180] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.415599][T22784] 0-536866815: 0000000000000000 [ 1015.428627][T22784] 536866816-536870911: ffff888094eb2460 [ 1015.435018][T22784] 536870912-553631743: ffff888094eb2540 [ 1015.441345][T22784] 553631744-553644031: 0000000000000000 [ 1015.447457][T22784] 553644032-553631743: ffff888076c687e0 [ 1015.455979][T22784] 553631744-553648127: ffff888076c689a0 [ 1015.458611][ T5180] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1015.462282][T22784] 553648128-553652223: ffff888094eb2620 [ 1015.477685][T22784] 553652224-116820934655: 0000000000000000 [ 1015.484071][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1015.490758][T22784] 116825128960-93824997462015: 0000000000000000 [ 1015.497493][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1015.504633][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1015.511725][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1015.518828][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1015.578388][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1015.585735][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1015.602412][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1015.615008][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1015.622159][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1015.639105][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1015.646124][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1015.653818][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1015.661774][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1015.668753][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1015.675987][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1015.683203][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1015.690955][ T5180] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.694363][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1015.700350][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.714990][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1015.715648][ T5180] usb 3-1: Product: syz [ 1015.725190][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 [ 1015.726590][ T5180] usb 3-1: Manufacturer: syz [ 1015.726615][ T5180] usb 3-1: SerialNumber: syz [ 1015.767488][T22784] ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1015.799631][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1015.806625][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1015.814140][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1015.831694][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1015.838766][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1015.850279][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1015.857268][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1015.864892][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1015.874335][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1015.881865][T22784] Pass: 20825614 Run:20825751 [ 1015.886616][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1015.896504][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1015.906559][T22784] Call Trace: [ 1015.909847][T22784] [ 1015.912800][T22784] dump_stack_lvl+0xd1/0x138 [ 1015.917459][T22784] mt_find.cold+0x8b/0x90 [ 1015.921803][T22784] ? mas_find+0x1d0/0x1d0 [ 1015.926154][T22784] find_vma+0x10c/0x1b0 [ 1015.930327][T22784] ? can_vma_merge_before+0x390/0x390 [ 1015.935732][T22784] ? walk_page_test+0x78/0x180 [ 1015.940522][T22784] walk_page_range+0x2b1/0x4a0 [ 1015.945319][T22784] ? __walk_page_range+0x780/0x780 [ 1015.950468][T22784] mlock_fixup+0x650/0x810 [ 1015.954952][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1015.960201][T22784] ? mlock_fixup+0x810/0x810 [ 1015.964859][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1015.970810][T22784] do_mlock+0x25a/0x6d0 [ 1015.975019][T22784] ? folio_evictable+0x270/0x270 [ 1015.980019][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1015.985949][T22784] __x64_sys_mlock+0x59/0x80 [ 1015.990546][T22784] do_syscall_64+0x39/0xb0 [ 1015.995009][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1016.000941][T22784] RIP: 0033:0x7feaf548c0c9 [ 1016.005373][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1016.024983][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1016.033408][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1016.041410][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1016.049414][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1016.057400][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.065363][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1016.073369][T22784] [ 1016.080479][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1016.086520][T22784] BUG at mt_find:6473 (1) [ 1016.091051][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1016.099503][ T5883] usb 3-1: USB disconnect, device number 16 [ 1016.105570][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1016.147936][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1016.197465][T22784] 0-536866815: 0000000000000000 [ 1016.202954][T22784] 536866816-536870911: ffff888094eb2460 [ 1016.208887][T22784] 536870912-553631743: ffff888094eb2540 [ 1016.215127][T22784] 553631744-553644031: 0000000000000000 [ 1016.221207][T22784] 553644032-553631743: ffff888076c687e0 [ 1016.227133][T22784] 553631744-553648127: ffff888076c689a0 [ 1016.233155][T22784] 553648128-553652223: ffff888094eb2620 [ 1016.239147][T22784] 553652224-116820934655: 0000000000000000 [ 1016.245409][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1016.253682][T22784] 116825128960-93824997462015: 0000000000000000 [ 1016.260424][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1016.267223][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1016.276097][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1016.283211][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1016.340742][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1016.347748][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1016.354990][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1016.362059][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1016.379013][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1016.386012][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1016.409088][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1016.417051][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1016.428773][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1016.436934][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1016.456620][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1016.468084][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1016.478415][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1016.485576][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1016.492716][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1016.589213][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1016.597430][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1016.612378][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1016.625626][T22784] 140647128190976-140732348923903: 0000000000000000 14:33:20 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:20 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) 14:33:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @multicast}, 0x10) 14:33:20 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 14:33:20 executing program 5: io_setup(0x6eb, &(0x7f0000000a40)=0x0) r1 = socket$pptp(0x18, 0x1, 0x2) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="a6", 0x1}]) 14:33:20 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000480)=@newtclass={0x434, 0x28, 0x1, 0x0, 0x0, {}, [@tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404}]}}]}, 0x434}}, 0x0) recvmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000002f80)=[{0x0}, {&(0x7f0000002c80)=""/254, 0xfe}, {&(0x7f0000002d80)=""/224, 0xe0}], 0x3, &(0x7f0000002fc0)=""/186, 0xba}}, {{&(0x7f0000003080)=@rc, 0x80, 0x0}}], 0x2, 0x2060, &(0x7f0000004880)={0x0, 0x989680}) [ 1016.635752][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 14:33:20 executing program 4: timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) futex(&(0x7f00000000c0)=0x1, 0xb, 0x1, &(0x7f0000000140)={r1}, &(0x7f0000000200), 0x0) 14:33:20 executing program 1: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x80600, 0x0) ioctl$RTC_AIE_OFF(r0, 0x5450) [ 1016.692071][T22784] 140732349059072-140732349100031: 0000000000000000 14:33:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000f40)={0x0, 0x1, 0x6, @broadcast}, 0x10) [ 1016.752042][T22784] 140732349100032-140732349116415: ffff88807b4c5000 14:33:21 executing program 2: r0 = openat$cuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000004880)={0x10, 0x0, r1}, 0x10) 14:33:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) [ 1016.803113][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 14:33:21 executing program 3: r0 = openat$autofs(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 14:33:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000001400)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) [ 1016.860396][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1016.893983][T22784] Pass: 20839171 Run:20839309 [ 1016.924492][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1016.934460][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1016.944558][T22784] Call Trace: [ 1016.947865][T22784] [ 1016.950825][T22784] dump_stack_lvl+0xd1/0x138 [ 1016.955474][T22784] mt_find.cold+0x8b/0x90 [ 1016.959867][T22784] ? mas_find+0x1d0/0x1d0 [ 1016.964265][T22784] find_vma+0x10c/0x1b0 [ 1016.968461][T22784] ? can_vma_merge_before+0x390/0x390 [ 1016.973888][T22784] ? walk_page_test+0x78/0x180 [ 1016.978703][T22784] walk_page_range+0x2b1/0x4a0 [ 1016.983532][T22784] ? __walk_page_range+0x780/0x780 [ 1016.988715][T22784] mlock_fixup+0x650/0x810 [ 1016.993208][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1016.998479][T22784] ? mlock_fixup+0x810/0x810 [ 1017.003144][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1017.009099][T22784] do_mlock+0x25a/0x6d0 [ 1017.013317][T22784] ? folio_evictable+0x270/0x270 [ 1017.018325][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1017.024277][T22784] __x64_sys_mlock+0x59/0x80 [ 1017.028913][T22784] do_syscall_64+0x39/0xb0 [ 1017.033385][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1017.039321][T22784] RIP: 0033:0x7feaf548c0c9 [ 1017.043776][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1017.063425][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 14:33:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a5"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000440)) [ 1017.071894][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1017.079901][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1017.087901][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1017.095907][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.103917][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1017.111949][T22784] 14:33:21 executing program 1: r0 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 1017.179131][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1017.185460][T22784] BUG at mt_find:6473 (1) [ 1017.191054][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:21 executing program 2: r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0xc0189436) 14:33:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000440)) [ 1017.202530][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1017.355517][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1017.414875][T22784] 0-536866815: 0000000000000000 [ 1017.421449][T22784] 536866816-536870911: ffff888094eb2460 [ 1017.427439][T22784] 536870912-553631743: ffff888094eb2540 [ 1017.433732][T22784] 553631744-553644031: 0000000000000000 [ 1017.439778][T22784] 553644032-553631743: ffff888076c687e0 [ 1017.445750][T22784] 553631744-553648127: ffff888076c689a0 [ 1017.451783][T22784] 553648128-553652223: ffff888094eb2620 [ 1017.457754][T22784] 553652224-116820934655: 0000000000000000 [ 1017.464364][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1017.471561][T22784] 116825128960-93824997462015: 0000000000000000 [ 1017.478231][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1017.485153][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1017.492324][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1017.499411][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1017.585114][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1017.596788][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1017.614431][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1017.625916][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:33:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[], 0x1, 0x78d, &(0x7f0000001740)="$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") 14:33:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x4, &(0x7f0000000580)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0xa}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x9b, &(0x7f0000000640)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:21 executing program 5: openat$cuse(0xffffff9c, &(0x7f0000000740), 0x2, 0x0) 14:33:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000003c0)=""/90, 0x0, 0x5a}, 0x20) 14:33:21 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000001880), 0x0, 0x0) 14:33:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000010c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002", @ANYRES32, @ANYBLOB="cc"], 0x5c}}, 0x0) 14:33:21 executing program 1: sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x40000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x9}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 1017.644095][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:33:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f00000000c0)=""/245, 0x26, 0xf5, 0x1}, 0x20) 14:33:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) [ 1017.687538][T23977] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1017.709241][T22784] 140647109492736-140647113687039: ffff888094eb2e00 14:33:22 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000003a00)=@base={0x0, 0x0, 0x0, 0x0, 0x744}, 0x48) 14:33:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x3, 0x3f}, 0x48) 14:33:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) [ 1017.783319][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1017.817772][T22784] 140647113834496-140647114563583: ffff888029235c40 14:33:22 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 14:33:22 executing program 1: io_setup(0xf8, &(0x7f00000012c0)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500), 0x8}) 14:33:22 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x0, 0x0, &(0x7f00000000c0)) [ 1017.879279][T22784] 140647114563584-140647114899455: ffff888029235ee0 14:33:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 1017.942283][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1017.985807][T24002] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1018.017530][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1018.042649][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1018.054252][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1018.067231][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1018.085278][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1018.157365][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1018.166182][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1018.181636][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1018.194394][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1018.208648][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1018.227334][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1018.235718][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1018.251153][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1018.258151][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1018.284281][T22784] Pass: 20861789 Run:20861928 [ 1018.289179][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1018.299105][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1018.309186][T22784] Call Trace: [ 1018.312485][T22784] [ 1018.315437][T22784] dump_stack_lvl+0xd1/0x138 [ 1018.320075][T22784] mt_find.cold+0x8b/0x90 [ 1018.324459][T22784] ? mas_find+0x1d0/0x1d0 [ 1018.328848][T22784] find_vma+0x10c/0x1b0 [ 1018.333046][T22784] ? can_vma_merge_before+0x390/0x390 [ 1018.338459][T22784] ? walk_page_test+0x78/0x180 [ 1018.343271][T22784] walk_page_range+0x2b1/0x4a0 [ 1018.348078][T22784] ? __walk_page_range+0x780/0x780 [ 1018.353256][T22784] mlock_fixup+0x650/0x810 [ 1018.357742][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1018.362994][T22784] ? mlock_fixup+0x810/0x810 [ 1018.367649][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1018.373592][T22784] do_mlock+0x25a/0x6d0 [ 1018.377807][T22784] ? folio_evictable+0x270/0x270 [ 1018.382813][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1018.388755][T22784] __x64_sys_mlock+0x59/0x80 [ 1018.393379][T22784] do_syscall_64+0x39/0xb0 [ 1018.397840][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1018.403774][T22784] RIP: 0033:0x7feaf548c0c9 [ 1018.408215][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1018.427872][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1018.436331][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1018.444340][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1018.452344][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1018.460344][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.468341][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1018.476365][T22784] [ 1018.484188][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1018.490195][T22784] BUG at mt_find:6473 (1) [ 1018.494549][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:22 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x8a181, 0x0) 14:33:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x0) 14:33:22 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 14:33:22 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/60, 0x3c}], 0x3, &(0x7f0000001740)=[{&(0x7f0000000540)=""/152, 0x98}, {&(0x7f0000001640)=""/197, 0xc5}], 0x2, 0x0) 14:33:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:33:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000003a00)=@base={0x0, 0x0, 0x0, 0x0, 0x744, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 14:33:22 executing program 3: setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2, 0x0, 0x0, 'rr\x00'}, 0x2c) socketpair(0x28, 0x0, 0x9, &(0x7f0000000a80)) 14:33:22 executing program 2: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1018.503090][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:22 executing program 4: clock_getres(0x0, &(0x7f0000003a80)) 14:33:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) 14:33:22 executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 14:33:22 executing program 0: syz_clone(0x30000600, 0x0, 0x0, 0x0, 0x0, 0x0) 14:33:23 executing program 3: io_setup(0xf8, &(0x7f00000012c0)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) [ 1018.666775][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:23 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x699030b7b6bccf75) 14:33:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000003a00)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 14:33:23 executing program 1: socketpair(0x28, 0x0, 0x0, &(0x7f0000000400)) 14:33:23 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) 14:33:23 executing program 0: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000300)) [ 1018.790131][T22784] 0-536866815: 0000000000000000 14:33:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x80}}, 0x1c}}, 0x0) 14:33:23 executing program 4: bpf$PROG_LOAD(0xb, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:23 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) [ 1018.844848][T22784] 536866816-536870911: ffff888094eb2460 14:33:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1, &(0x7f0000000680)=@raw=[@func], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x8e, &(0x7f0000000740)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:23 executing program 3: bpf$PROG_LOAD(0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1018.908516][T22784] 536870912-553631743: ffff888094eb2540 14:33:23 executing program 1: syz_clone(0x48000000, &(0x7f0000000000)="09c72b1b898eadc0963cc44c30a8d5217b7275fef866425927b45558e283c06cee2592d0b93532ab7fa5cf3e9a10b57974e5c2ae23a446d3ac8a62f891388d51af0b00b247495fc3c904a957d9009868c237e53b6391cf5b55c875ffe75baa04469809dbf6801d0ec8a9f22fe2e9023e61b24f3a5210711fc7e0a7303323", 0x7e, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="2bf74f191c28834cf75746f3e979c5153362c3d99628059eb2bd7c513aa406c3a5c38549edc431524bbe9b5ec9c7c68726e8e170d1faa46395ad4e05ffa2a7dfad78eb00707b5fd6e6ab16944a477694b0bbd90df760aa12661a8dd886b84b3bc052c81deee03727200b3acbb240bb") sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x9effffff00000000}, 0x300}, 0x0) 14:33:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1400}, 0x0) 14:33:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'macvtap0\x00', {0x2, 0x0, @dev}}) 14:33:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000a80)={0x8, 'vlan0\x00', {'bridge_slave_1\x00'}}) [ 1018.959105][T22784] 553631744-553644031: 0000000000000000 14:33:23 executing program 3: syz_clone(0x48000000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="2bf74f191c28834cf75746f3e979c5153362c3d99628059eb2bd7c513aa406c3a5c38549ed") 14:33:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROGET(r0, 0x80041285, &(0x7f0000000000)) 14:33:23 executing program 2: unshare(0x40000200) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x80000001) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8000000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f310008000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b00000000000000000000000400000058fabb8400a800d0000000000000040000000000000000000000000000000000002800434c4153534946000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0003ff300002000000000006047c030000000000000000000000000041"], 0x60}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x218}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x8, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 14:33:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x60842, 0x0) fallocate(r2, 0x20, 0x0, 0xa16) [ 1019.089639][T22784] 553644032-553631743: ffff888076c687e0 [ 1019.095626][T22784] 553631744-553648127: ffff888076c689a0 14:33:23 executing program 0: bpf$PROG_LOAD(0x1b, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1019.168360][T22784] 553648128-553652223: ffff888094eb2620 [ 1019.220241][T22784] 553652224-116820934655: 0000000000000000 [ 1019.247949][T22784] 116820934656-116825128959: ffff888094eb2700 14:33:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 14:33:23 executing program 0: syz_io_uring_setup(0x38d, &(0x7f0000000100)={0x0, 0x1804, 0x8}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000500)) [ 1019.276942][T22784] 116825128960-93824997462015: 0000000000000000 [ 1019.305484][T22784] 93824997462016-93824997601279: ffff888094eb27e0 14:33:23 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a, 0x0, 0x53}) [ 1019.374132][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1019.398755][T24079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1019.410194][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1019.531535][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1019.715861][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1019.732045][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1019.742481][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1019.763550][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:33:24 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @local}, 0xc) 14:33:24 executing program 0: r0 = memfd_secret(0x0) timerfd_gettime(r0, 0x0) 14:33:24 executing program 5: r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x2, 0x4, 0x1000}, {0x2, 0x9, 0x1800}, {0x2, 0x401, 0x800}, {0x1, 0x200, 0x1800}, {0x0, 0x2, 0x1800}, {0x3, 0x3ff, 0x1000}, {0x0, 0x9, 0x800}], 0x7, &(0x7f0000000340)={0x77359400}) [ 1019.789394][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1019.796416][T22784] 140647109492736-140647113687039: ffff888094eb2e00 14:33:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioprio_get$pid(0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1a, 0x0, 0x53}) [ 1019.841621][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1019.924083][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1019.990838][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1020.009108][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1020.016117][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1020.078076][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1020.086325][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1020.149298][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1020.167502][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1020.264347][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1020.284932][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1020.299151][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1020.313030][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1020.331897][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1020.346833][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1020.364418][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1020.384144][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1020.399167][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1020.414734][T22784] Pass: 20908218 Run:20908358 [ 1020.425212][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1020.435193][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1020.445283][T22784] Call Trace: [ 1020.448592][T22784] [ 1020.451549][T22784] dump_stack_lvl+0xd1/0x138 [ 1020.456194][T22784] mt_find.cold+0x8b/0x90 [ 1020.460580][T22784] ? mas_find+0x1d0/0x1d0 [ 1020.464975][T22784] find_vma+0x10c/0x1b0 [ 1020.469167][T22784] ? can_vma_merge_before+0x390/0x390 [ 1020.474592][T22784] ? walk_page_test+0x78/0x180 [ 1020.479405][T22784] walk_page_range+0x2b1/0x4a0 [ 1020.484208][T22784] ? __walk_page_range+0x780/0x780 [ 1020.489371][T22784] mlock_fixup+0x650/0x810 [ 1020.493834][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1020.499072][T22784] ? mlock_fixup+0x810/0x810 [ 1020.503704][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1020.509632][T22784] do_mlock+0x25a/0x6d0 [ 1020.513826][T22784] ? folio_evictable+0x270/0x270 [ 1020.518804][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1020.524737][T22784] __x64_sys_mlock+0x59/0x80 [ 1020.529350][T22784] do_syscall_64+0x39/0xb0 [ 1020.533815][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1020.539734][T22784] RIP: 0033:0x7feaf548c0c9 [ 1020.544160][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1020.563785][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1020.572216][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1020.580206][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1020.588193][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1020.596177][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1020.604157][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1020.612164][T22784] [ 1020.623410][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1020.639536][T22784] BUG at mt_find:6473 (1) [ 1020.652661][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1020.691296][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1020.792426][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1020.926488][T22784] 0-536866815: 0000000000000000 [ 1020.938639][T22784] 536866816-536870911: ffff888094eb2460 [ 1020.951630][T22784] 536870912-553631743: ffff888094eb2540 [ 1020.974897][T22784] 553631744-553644031: 0000000000000000 [ 1020.992743][T22784] 553644032-553631743: ffff888076c687e0 [ 1021.015842][T22784] 553631744-553648127: ffff888076c689a0 [ 1021.059160][T22784] 553648128-553652223: ffff888094eb2620 [ 1021.065144][T22784] 553652224-116820934655: 0000000000000000 [ 1021.090798][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1021.097298][T22784] 116825128960-93824997462015: 0000000000000000 [ 1021.149274][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1021.156115][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1021.208355][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1021.238382][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1021.397550][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1021.418938][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1021.426268][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1021.434041][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1021.441395][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1021.448382][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1021.455776][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1021.463119][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1021.470513][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1021.477529][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1021.484974][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1021.496558][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1021.503919][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1021.513420][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1021.520745][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1021.571251][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1021.578243][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1021.585740][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1021.593049][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1021.600850][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1021.607851][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1021.615275][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1021.624726][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1021.639236][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1021.646832][T22784] Pass: 20913271 Run:20913412 [ 1021.679027][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1021.688987][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1021.699078][T22784] Call Trace: [ 1021.702384][T22784] [ 1021.705343][T22784] dump_stack_lvl+0xd1/0x138 [ 1021.710009][T22784] mt_find.cold+0x8b/0x90 [ 1021.714396][T22784] ? mas_find+0x1d0/0x1d0 [ 1021.718789][T22784] find_vma+0x10c/0x1b0 [ 1021.722994][T22784] ? can_vma_merge_before+0x390/0x390 [ 1021.728420][T22784] ? walk_page_test+0x78/0x180 [ 1021.733238][T22784] walk_page_range+0x2b1/0x4a0 [ 1021.738057][T22784] ? __walk_page_range+0x780/0x780 [ 1021.743244][T22784] mlock_fixup+0x650/0x810 [ 1021.747716][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1021.752960][T22784] ? mlock_fixup+0x810/0x810 [ 1021.757606][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1021.763544][T22784] do_mlock+0x25a/0x6d0 [ 1021.767753][T22784] ? folio_evictable+0x270/0x270 [ 1021.772740][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1021.778664][T22784] __x64_sys_mlock+0x59/0x80 [ 1021.783274][T22784] do_syscall_64+0x39/0xb0 [ 1021.787725][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1021.793644][T22784] RIP: 0033:0x7feaf548c0c9 [ 1021.798080][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1021.817727][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1021.826170][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1021.834157][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1021.842146][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1021.850130][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.858114][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1021.866120][T22784] [ 1022.300955][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1022.339094][T22784] BUG at mt_find:6473 (1) [ 1022.343485][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1022.389021][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1022.477362][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1022.544223][T22784] 0-536866815: 0000000000000000 [ 1022.554318][T22784] 536866816-536870911: ffff888094eb2460 [ 1022.568870][T22784] 536870912-553631743: ffff888094eb2540 [ 1022.581069][T22784] 553631744-553644031: 0000000000000000 [ 1022.587049][T22784] 553644032-553631743: ffff888076c687e0 [ 1022.617971][T22784] 553631744-553648127: ffff888076c689a0 [ 1022.649209][T22784] 553648128-553652223: ffff888094eb2620 [ 1022.655191][T22784] 553652224-116820934655: 0000000000000000 [ 1022.688999][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1022.695549][T22784] 116825128960-93824997462015: 0000000000000000 [ 1022.730847][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1022.737703][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1022.781066][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1022.788110][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1022.919087][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1022.926117][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1022.959001][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1022.966016][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1022.989024][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1022.996036][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1023.019033][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1023.026059][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1023.049005][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1023.056039][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1023.081190][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1023.088205][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1023.128702][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1023.136245][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1023.154855][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1023.224348][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1023.259023][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1023.266029][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1023.289027][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1023.296029][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1023.321261][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1023.328274][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1023.359127][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1023.366136][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1023.394974][T22784] Pass: 20918228 Run:20918370 [ 1023.419106][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1023.429072][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1023.439156][T22784] Call Trace: [ 1023.442456][T22784] [ 1023.445411][T22784] dump_stack_lvl+0xd1/0x138 [ 1023.450050][T22784] mt_find.cold+0x8b/0x90 [ 1023.454430][T22784] ? mas_find+0x1d0/0x1d0 [ 1023.458811][T22784] find_vma+0x10c/0x1b0 [ 1023.462999][T22784] ? can_vma_merge_before+0x390/0x390 [ 1023.468411][T22784] ? walk_page_test+0x78/0x180 [ 1023.473216][T22784] walk_page_range+0x2b1/0x4a0 [ 1023.478022][T22784] ? __walk_page_range+0x780/0x780 [ 1023.483191][T22784] mlock_fixup+0x650/0x810 [ 1023.487655][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1023.492888][T22784] ? mlock_fixup+0x810/0x810 [ 1023.497531][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1023.503456][T22784] do_mlock+0x25a/0x6d0 [ 1023.507649][T22784] ? folio_evictable+0x270/0x270 [ 1023.512629][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1023.518552][T22784] __x64_sys_mlock+0x59/0x80 [ 1023.523159][T22784] do_syscall_64+0x39/0xb0 [ 1023.527607][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1023.533531][T22784] RIP: 0033:0x7feaf548c0c9 [ 1023.537960][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1023.557587][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1023.566019][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1023.574005][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1023.581988][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1023.589971][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1023.597952][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1023.605962][T22784] [ 1023.766084][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1023.772152][T22784] BUG at mt_find:6473 (1) [ 1023.776502][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1023.819186][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1023.872943][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1023.939266][T22784] 0-536866815: 0000000000000000 [ 1023.944541][T22784] 536866816-536870911: ffff888094eb2460 [ 1023.971363][T22784] 536870912-553631743: ffff888094eb2540 [ 1023.977328][T22784] 553631744-553644031: 0000000000000000 [ 1023.999043][T22784] 553644032-553631743: ffff888076c687e0 [ 1024.005002][T22784] 553631744-553648127: ffff888076c689a0 [ 1024.018996][T22784] 553648128-553652223: ffff888094eb2620 [ 1024.024939][T22784] 553652224-116820934655: 0000000000000000 [ 1024.049085][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1024.057104][T22784] 116825128960-93824997462015: 0000000000000000 [ 1024.079004][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1024.085848][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1024.119257][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1024.126277][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1024.249004][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1024.256034][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1024.279068][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1024.286076][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1024.329116][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1024.336129][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1024.363566][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1024.381211][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1024.388217][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1024.439017][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1024.446023][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1024.476811][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1024.519016][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1024.526027][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1024.547775][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1024.711413][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1024.718434][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1024.749097][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1024.759863][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1024.766856][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1024.784518][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1024.795780][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1024.821198][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1024.828204][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1024.879291][T22784] Pass: 20918229 Run:20918372 [ 1024.884087][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1024.894006][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1024.904084][T22784] Call Trace: [ 1024.907383][T22784] [ 1024.910358][T22784] dump_stack_lvl+0xd1/0x138 [ 1024.915006][T22784] mt_find.cold+0x8b/0x90 [ 1024.919387][T22784] ? mas_find+0x1d0/0x1d0 [ 1024.923778][T22784] find_vma+0x10c/0x1b0 [ 1024.927967][T22784] ? can_vma_merge_before+0x390/0x390 [ 1024.933375][T22784] ? walk_page_test+0x78/0x180 [ 1024.938187][T22784] walk_page_range+0x2b1/0x4a0 [ 1024.943010][T22784] ? __walk_page_range+0x780/0x780 [ 1024.948190][T22784] mlock_fixup+0x650/0x810 [ 1024.952670][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1024.957929][T22784] ? mlock_fixup+0x810/0x810 [ 1024.962592][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1024.968539][T22784] do_mlock+0x25a/0x6d0 [ 1024.972750][T22784] ? folio_evictable+0x270/0x270 [ 1024.977752][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1024.983693][T22784] __x64_sys_mlock+0x59/0x80 [ 1024.988311][T22784] do_syscall_64+0x39/0xb0 [ 1024.992772][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1024.998693][T22784] RIP: 0033:0x7feaf548c0c9 [ 1025.003125][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1025.022765][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1025.031216][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1025.039211][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1025.047196][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1025.055202][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.063187][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1025.071205][T22784] 14:33:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/36, 0x24}, {0x0}, {&(0x7f0000000080)=""/173, 0xad}], 0x3}}], 0x1, 0x22, 0x0) 14:33:29 executing program 5: r0 = gettid() rt_sigqueueinfo(r0, 0x17, &(0x7f0000000000)) [ 1025.118643][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1025.124682][T22784] BUG at mt_find:6473 (1) [ 1025.139050][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1025.147710][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1025.211550][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1025.307905][T22784] 0-536866815: 0000000000000000 [ 1025.335503][T22784] 536866816-536870911: ffff888094eb2460 [ 1025.348715][T22784] 536870912-553631743: ffff888094eb2540 [ 1025.357853][T22784] 553631744-553644031: 0000000000000000 [ 1025.371328][T22784] 553644032-553631743: ffff888076c687e0 [ 1025.377417][T22784] 553631744-553648127: ffff888076c689a0 14:33:29 executing program 2: unshare(0x40000200) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x80000001) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8000000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f310008000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b00000000000000000000000400000058fabb8400a800d0000000000000040000000000000000000000000000000000002800434c4153534946000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0f000000000000000060000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0003ff300002000000000006047c030000000000000000000000000041"], 0x60}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x218}, 0x1c) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x8, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 14:33:29 executing program 0: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x30000e06) 14:33:29 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x8912, &(0x7f0000000240)={0xfdfdffff, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}}) 14:33:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 14:33:29 executing program 5: syz_clone(0x48000000, &(0x7f0000000000)="09c72b1b898eadc0963cc44c30a8d5217b7275fef866425927b45558e283c06cee2592d0b93532ab7fa5cf3e9a10b57974e5c2ae23a446d3ac8a62f891388d51af0b00b247495fc3c904a957d9009868c237e53b6391cf5b55c875ffe75baa04469809dbf6801d0ec8a9f22fe2e9023e61b24f3a5210711fc7e0a73033233cb5eb92", 0x82, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)="2bf74f191c28834cf75746f3e979c5153362c3d99628059eb2bd7c513aa406c3a5c38549edc431524bbe9b5ec9c7c68726e8e170d1faa46395ad4e05ffa2a7dfad78eb00707b5fd6e6ab16944a477694b0bbd90df760aa12661a8dd886b84b3bc052c81deee03727200b3acbb240bbee1d9fce") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x9effffff00000000}, 0x300}, 0x0) [ 1025.383824][T22784] 553648128-553652223: ffff888094eb2620 [ 1025.391131][T22784] 553652224-116820934655: 0000000000000000 [ 1025.397410][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1025.405648][T22784] 116825128960-93824997462015: 0000000000000000 [ 1025.415084][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1025.422822][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1025.430162][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:29 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x89f0, 0x0) 14:33:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x2}}, 0x67, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x40000, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8f, "2184c1bda9ef0c6eeac20d0d98d6fce6465864d5b79a631e91237aca7da8ca7ca0ed68b9a282c357f0e490c5c309a0206446f5a52f77f873c8e0aa05f4b8b7633e556259b46c880a88aed246bbe4bf45b9fe04cfe1e669cb2d7700bd23e180f242832854d462026bc87ef35092578f5ca4d4e489f5ce649634f6803ef1ebfebff8f871450b23a4e0898a79d5c667e1"}, &(0x7f0000000180)=0xb3) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1}, 0x8) 14:33:29 executing program 1: bpf$PROG_LOAD(0x1d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1025.468460][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d 14:33:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x2}}, 0x67, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x40000, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8f, "2184c1bda9ef0c6eeac20d0d98d6fce6465864d5b79a631e91237aca7da8ca7ca0ed68b9a282c357f0e490c5c309a0206446f5a52f77f873c8e0aa05f4b8b7633e556259b46c880a88aed246bbe4bf45b9fe04cfe1e669cb2d7700bd23e180f242832854d462026bc87ef35092578f5ca4d4e489f5ce649634f6803ef1ebfebff8f871450b23a4e0898a79d5c667e1"}, &(0x7f0000000180)=0xb3) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1}, 0x8) 14:33:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300ea810a"], 0x3c}}, 0x0) [ 1025.651985][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1025.705126][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1025.724896][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1025.746103][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1025.776482][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1025.791044][T24125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1025.817598][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1025.829258][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1025.841117][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1025.866444][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1025.903957][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1025.918043][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1025.931271][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1025.944055][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1025.958099][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:30 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000080)) 14:33:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_idx]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1025.972415][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1026.090015][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1026.101718][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1026.131221][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1026.153398][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1026.169337][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1026.179142][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1026.196293][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1026.214274][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1026.239205][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1026.269478][T22784] Pass: 20949945 Run:20950089 [ 1026.279101][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1026.289051][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1026.299133][T22784] Call Trace: [ 1026.302432][T22784] [ 1026.305383][T22784] dump_stack_lvl+0xd1/0x138 [ 1026.310027][T22784] mt_find.cold+0x8b/0x90 [ 1026.314404][T22784] ? mas_find+0x1d0/0x1d0 [ 1026.318788][T22784] find_vma+0x10c/0x1b0 [ 1026.322981][T22784] ? can_vma_merge_before+0x390/0x390 [ 1026.328395][T22784] ? walk_page_test+0x78/0x180 [ 1026.333206][T22784] walk_page_range+0x2b1/0x4a0 [ 1026.338021][T22784] ? __walk_page_range+0x780/0x780 [ 1026.343197][T22784] mlock_fixup+0x650/0x810 [ 1026.347675][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1026.352932][T22784] ? mlock_fixup+0x810/0x810 [ 1026.357585][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1026.363535][T22784] do_mlock+0x25a/0x6d0 [ 1026.367755][T22784] ? folio_evictable+0x270/0x270 [ 1026.372754][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1026.378696][T22784] __x64_sys_mlock+0x59/0x80 [ 1026.383319][T22784] do_syscall_64+0x39/0xb0 [ 1026.387787][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1026.393723][T22784] RIP: 0033:0x7feaf548c0c9 [ 1026.398165][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1026.417807][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1026.426266][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1026.434268][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1026.442266][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1026.450277][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.458273][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1026.466307][T22784] [ 1026.560309][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1026.566302][T22784] BUG at mt_find:6473 (1) [ 1026.599280][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1026.653191][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1026.707996][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1026.905706][T22784] 0-536866815: 0000000000000000 [ 1026.919160][T22784] 536866816-536870911: ffff888094eb2460 [ 1026.925605][T22784] 536870912-553631743: ffff888094eb2540 [ 1026.936852][T22784] 553631744-553644031: 0000000000000000 [ 1026.943148][T22784] 553644032-553631743: ffff888076c687e0 [ 1026.959115][T22784] 553631744-553648127: ffff888076c689a0 [ 1026.965077][T22784] 553648128-553652223: ffff888094eb2620 [ 1026.974976][T22784] 553652224-116820934655: 0000000000000000 [ 1026.981457][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1026.987914][T22784] 116825128960-93824997462015: 0000000000000000 [ 1027.025597][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1027.039251][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1027.053500][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1027.081470][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1027.175042][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1027.219053][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1027.226076][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1027.305849][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1027.319077][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1027.326165][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1027.359294][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1027.389325][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1027.401458][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1027.424661][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1027.459146][T22784] 140647114903552-140647115268095: ffff88807687fee0 14:33:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x48) 14:33:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x2}}, 0x67, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x40000, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8f, "2184c1bda9ef0c6eeac20d0d98d6fce6465864d5b79a631e91237aca7da8ca7ca0ed68b9a282c357f0e490c5c309a0206446f5a52f77f873c8e0aa05f4b8b7633e556259b46c880a88aed246bbe4bf45b9fe04cfe1e669cb2d7700bd23e180f242832854d462026bc87ef35092578f5ca4d4e489f5ce649634f6803ef1ebfebff8f871450b23a4e0898a79d5c667e1"}, &(0x7f0000000180)=0xb3) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1}, 0x8) 14:33:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, 0x67, 0x0, 0x0, 0x0, 0x6c}) 14:33:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002b40)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004bc0)={{0x0, 0x0, 0x80}, "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", "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"}) [ 1027.487133][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1027.526691][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1027.566438][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1027.597343][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1027.651872][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1027.658868][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1027.666195][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1027.673285][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1027.680801][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1027.687782][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1027.694845][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1027.701929][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1027.708929][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1027.716412][T22784] Pass: 20953878 Run:20954023 [ 1027.721223][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1027.731156][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1027.741228][T22784] Call Trace: [ 1027.744521][T22784] [ 1027.747462][T22784] dump_stack_lvl+0xd1/0x138 [ 1027.752090][T22784] mt_find.cold+0x8b/0x90 [ 1027.756453][T22784] ? mas_find+0x1d0/0x1d0 [ 1027.760822][T22784] find_vma+0x10c/0x1b0 [ 1027.765005][T22784] ? can_vma_merge_before+0x390/0x390 [ 1027.770403][T22784] ? walk_page_test+0x78/0x180 [ 1027.775202][T22784] walk_page_range+0x2b1/0x4a0 [ 1027.780002][T22784] ? __walk_page_range+0x780/0x780 [ 1027.785156][T22784] mlock_fixup+0x650/0x810 [ 1027.789617][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1027.794852][T22784] ? mlock_fixup+0x810/0x810 [ 1027.799484][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1027.805495][T22784] do_mlock+0x25a/0x6d0 [ 1027.809696][T22784] ? folio_evictable+0x270/0x270 [ 1027.814677][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1027.820601][T22784] __x64_sys_mlock+0x59/0x80 [ 1027.825211][T22784] do_syscall_64+0x39/0xb0 [ 1027.829665][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1027.835583][T22784] RIP: 0033:0x7feaf548c0c9 [ 1027.840022][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1027.859648][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1027.868078][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1027.876064][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1027.884047][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1027.892032][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.900016][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1027.908064][T22784] [ 1027.942799][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1027.964626][T22784] BUG at mt_find:6473 (1) [ 1027.971199][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1027.980062][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1028.024849][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1028.075023][T22784] 0-536866815: 0000000000000000 [ 1028.089288][T22784] 536866816-536870911: ffff888094eb2460 [ 1028.095236][T22784] 536870912-553631743: ffff888094eb2540 [ 1028.115622][T22784] 553631744-553644031: 0000000000000000 [ 1028.131341][T22784] 553644032-553631743: ffff888076c687e0 [ 1028.137300][T22784] 553631744-553648127: ffff888076c689a0 [ 1028.156518][T22784] 553648128-553652223: ffff888094eb2620 [ 1028.167244][T22784] 553652224-116820934655: 0000000000000000 [ 1028.187885][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1028.204731][T22784] 116825128960-93824997462015: 0000000000000000 [ 1028.259706][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1028.266548][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1028.279210][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1028.296694][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1028.369051][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1028.376146][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1028.391774][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1028.398851][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1028.411583][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1028.418654][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1028.425893][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1028.433070][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1028.441343][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1028.455039][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1028.476301][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1028.490143][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1028.504964][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1028.520148][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1028.535087][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1028.649120][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1028.656252][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1028.665526][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1028.673205][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1028.680604][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1028.687676][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1028.695150][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1028.707107][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1028.721752][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1028.737385][T22784] Pass: 20954524 Run:20954670 [ 1028.748279][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1028.758221][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1028.768305][T22784] Call Trace: [ 1028.771606][T22784] [ 1028.774558][T22784] dump_stack_lvl+0xd1/0x138 [ 1028.779196][T22784] mt_find.cold+0x8b/0x90 [ 1028.783579][T22784] ? mas_find+0x1d0/0x1d0 [ 1028.787961][T22784] find_vma+0x10c/0x1b0 [ 1028.792148][T22784] ? can_vma_merge_before+0x390/0x390 [ 1028.797565][T22784] ? walk_page_test+0x78/0x180 [ 1028.802374][T22784] walk_page_range+0x2b1/0x4a0 [ 1028.807184][T22784] ? __walk_page_range+0x780/0x780 [ 1028.812367][T22784] mlock_fixup+0x650/0x810 [ 1028.816842][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1028.822090][T22784] ? mlock_fixup+0x810/0x810 [ 1028.826727][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1028.832657][T22784] do_mlock+0x25a/0x6d0 [ 1028.836849][T22784] ? folio_evictable+0x270/0x270 [ 1028.841827][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1028.847747][T22784] __x64_sys_mlock+0x59/0x80 [ 1028.852351][T22784] do_syscall_64+0x39/0xb0 [ 1028.856796][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1028.862711][T22784] RIP: 0033:0x7feaf548c0c9 [ 1028.867140][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1028.886770][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1028.895205][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1028.903194][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1028.911203][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1028.919212][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.927227][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1028.935248][T22784] [ 1029.139046][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1029.145004][T22784] BUG at mt_find:6473 (1) [ 1029.175899][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1029.199018][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1029.253603][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1029.334753][T22784] 0-536866815: 0000000000000000 [ 1029.340147][T22784] 536866816-536870911: ffff888094eb2460 [ 1029.346085][T22784] 536870912-553631743: ffff888094eb2540 [ 1029.352506][T22784] 553631744-553644031: 0000000000000000 [ 1029.358441][T22784] 553644032-553631743: ffff888076c687e0 [ 1029.364501][T22784] 553631744-553648127: ffff888076c689a0 [ 1029.382945][T22784] 553648128-553652223: ffff888094eb2620 [ 1029.388906][T22784] 553652224-116820934655: 0000000000000000 [ 1029.413970][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1029.420667][T22784] 116825128960-93824997462015: 0000000000000000 [ 1029.427298][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1029.434200][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1029.441219][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1029.448200][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1029.508580][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1029.529081][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1029.536087][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1029.544199][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1029.551577][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1029.558558][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1029.565988][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1029.573319][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1029.580613][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1029.588042][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1029.595447][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1029.602674][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1029.609984][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1029.616964][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1029.624359][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1029.677076][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1029.685064][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1029.692955][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1029.700302][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1029.707279][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1029.715091][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1029.722435][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1029.729689][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1029.736699][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1029.744971][T22784] Pass: 20954527 Run:20954674 [ 1029.750017][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1029.759961][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1029.770041][T22784] Call Trace: [ 1029.773341][T22784] [ 1029.776296][T22784] dump_stack_lvl+0xd1/0x138 [ 1029.780937][T22784] mt_find.cold+0x8b/0x90 [ 1029.785313][T22784] ? mas_find+0x1d0/0x1d0 [ 1029.789699][T22784] find_vma+0x10c/0x1b0 [ 1029.793899][T22784] ? can_vma_merge_before+0x390/0x390 [ 1029.799312][T22784] ? walk_page_test+0x78/0x180 [ 1029.804122][T22784] walk_page_range+0x2b1/0x4a0 [ 1029.808943][T22784] ? __walk_page_range+0x780/0x780 [ 1029.814111][T22784] mlock_fixup+0x650/0x810 [ 1029.818578][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1029.823817][T22784] ? mlock_fixup+0x810/0x810 [ 1029.828455][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1029.834380][T22784] do_mlock+0x25a/0x6d0 [ 1029.838573][T22784] ? folio_evictable+0x270/0x270 [ 1029.843557][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1029.849481][T22784] __x64_sys_mlock+0x59/0x80 [ 1029.854088][T22784] do_syscall_64+0x39/0xb0 [ 1029.858536][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1029.864450][T22784] RIP: 0033:0x7feaf548c0c9 [ 1029.868879][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1029.888502][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1029.896936][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1029.904923][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1029.912910][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1029.920896][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.928882][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1029.936903][T22784] [ 1029.959061][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1029.965000][T22784] BUG at mt_find:6473 (1) [ 1029.969856][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1029.978305][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1030.016948][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1030.071514][T22784] 0-536866815: 0000000000000000 [ 1030.076778][T22784] 536866816-536870911: ffff888094eb2460 [ 1030.084567][T22784] 536870912-553631743: ffff888094eb2540 [ 1030.099462][T22784] 553631744-553644031: 0000000000000000 [ 1030.108870][T22784] 553644032-553631743: ffff888076c687e0 [ 1030.114906][T22784] 553631744-553648127: ffff888076c689a0 [ 1030.121080][T22784] 553648128-553652223: ffff888094eb2620 [ 1030.127012][T22784] 553652224-116820934655: 0000000000000000 [ 1030.133317][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1030.143946][T22784] 116825128960-93824997462015: 0000000000000000 [ 1030.150658][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1030.157455][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1030.164428][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1030.171453][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1030.231221][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1030.238224][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1030.246090][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1030.253390][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1030.262917][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1030.270495][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1030.277477][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1030.287492][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1030.305891][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1030.321548][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1030.328542][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1030.345460][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1030.361726][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1030.368716][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1030.399046][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1030.513569][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1030.520840][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1030.531462][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1030.538460][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1030.545535][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1030.552882][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1030.559934][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1030.566907][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1030.573952][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1030.588492][T22784] Pass: 20954527 Run:20954675 [ 1030.619000][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1030.628957][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1030.639032][T22784] Call Trace: [ 1030.642332][T22784] [ 1030.645272][T22784] dump_stack_lvl+0xd1/0x138 [ 1030.649893][T22784] mt_find.cold+0x8b/0x90 [ 1030.654251][T22784] ? mas_find+0x1d0/0x1d0 [ 1030.658611][T22784] find_vma+0x10c/0x1b0 [ 1030.662784][T22784] ? can_vma_merge_before+0x390/0x390 [ 1030.668173][T22784] ? walk_page_test+0x78/0x180 [ 1030.672968][T22784] walk_page_range+0x2b1/0x4a0 [ 1030.677759][T22784] ? __walk_page_range+0x780/0x780 [ 1030.682910][T22784] mlock_fixup+0x650/0x810 [ 1030.687363][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1030.692589][T22784] ? mlock_fixup+0x810/0x810 [ 1030.697215][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1030.703139][T22784] do_mlock+0x25a/0x6d0 [ 1030.707323][T22784] ? folio_evictable+0x270/0x270 [ 1030.712295][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1030.718212][T22784] __x64_sys_mlock+0x59/0x80 [ 1030.722815][T22784] do_syscall_64+0x39/0xb0 [ 1030.727256][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1030.733166][T22784] RIP: 0033:0x7feaf548c0c9 [ 1030.737591][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1030.757210][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1030.765640][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1030.773630][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1030.781612][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1030.789940][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.797932][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1030.805935][T22784] [ 1030.819905][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1030.839027][T22784] BUG at mt_find:6473 (1) [ 1030.843406][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1030.866249][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1030.913284][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x31}]}, 0x10) 14:33:35 executing program 3: syz_clone(0x48000000, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 14:33:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x2}}, 0x67, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x40000, 0x2}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0x8f, "2184c1bda9ef0c6eeac20d0d98d6fce6465864d5b79a631e91237aca7da8ca7ca0ed68b9a282c357f0e490c5c309a0206446f5a52f77f873c8e0aa05f4b8b7633e556259b46c880a88aed246bbe4bf45b9fe04cfe1e669cb2d7700bd23e180f242832854d462026bc87ef35092578f5ca4d4e489f5ce649634f6803ef1ebfebff8f871450b23a4e0898a79d5c667e1"}, &(0x7f0000000180)=0xb3) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @multicast1}, 0x8) 14:33:35 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x5450) 14:33:35 executing program 2: symlinkat(0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') 14:33:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x1, 0x0, 0x98, &(0x7f0000000080)={0x0, 0x0, 0x6}}) [ 1030.971177][T22784] 0-536866815: 0000000000000000 [ 1030.976454][T22784] 536866816-536870911: ffff888094eb2460 14:33:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x0) 14:33:35 executing program 0: socket$inet(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000003500)=[{{&(0x7f0000002940)={0x2, 0x0, @private}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002980)="17", 0x1}, {0x0}], 0x2, &(0x7f0000002b40)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x38}}], 0x1, 0x0) 14:33:35 executing program 2: syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000c40)='./file0\x00', 0x80001c, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0xc00, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) 14:33:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000044c0)={0x2020}, 0x2020) [ 1031.066235][T22784] 536870912-553631743: ffff888094eb2540 14:33:35 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000740), 0x4) [ 1031.123689][T22784] 553631744-553644031: 0000000000000000 [ 1031.163450][T22784] 553644032-553631743: ffff888076c687e0 14:33:35 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002400)) 14:33:35 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4040840) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20008010) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x40, 0x10, 0x0, 0x1990d40, {{0x12, 0x4, 0x0, 0x24, 0x48, 0x65, 0x0, 0x0, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x4, [0x0, 0x9, 0x0, 0xffff, 0x1, 0x0, 0x0]}, @lsrr={0x83, 0x13, 0x23, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @rand_addr=0x64010102]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300), 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x134, r0, 0x11, 0x70bd25, 0x0, {}, [@HEADER={0x4}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x134}}, 0x4004810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan4\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x2c, 0x0, 0xa21, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008004) [ 1031.226655][T22784] 553631744-553648127: ffff888076c689a0 [ 1031.259467][T22784] 553648128-553652223: ffff888094eb2620 [ 1031.313871][T22784] 553652224-116820934655: 0000000000000000 [ 1031.359955][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1031.413790][T22784] 116825128960-93824997462015: 0000000000000000 [ 1031.442292][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1031.470822][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1031.478034][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1031.498208][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1031.588678][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1031.603393][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1031.616992][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1031.628902][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1031.649028][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1031.663619][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1031.676622][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1031.690492][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1031.697619][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1031.716074][T22784] 140647114899456-140647114903551: 0000000000000000 14:33:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 14:33:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000001200)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xe8c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xe78, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x7}}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0xe4d, 0x6, "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"}]}]}]}, 0xec4}}, 0x0) 14:33:36 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x6}}) 14:33:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000001200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 14:33:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x2b) getpid() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000002c0)="f029910b0000000f01c4f001341ff30fc731d8e6b8d404401d0f23d00f21f8353000000e0f23f80f01cb0f01c2c74424000b000000c744240200800000c7442406000000000f0114248fea80120102000000", 0x52}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:36 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0) [ 1031.740372][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1031.747394][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:36 executing program 1: fanotify_mark(0xffffffffffffffff, 0x0, 0xbd90fd3d1c706586, 0xffffffffffffffff, 0x0) 14:33:36 executing program 4: pselect6(0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x6]}, 0x8}) 14:33:36 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x10) 14:33:36 executing program 2: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x88000, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) [ 1031.852194][T22784] 140647115304960-140647115325439: 0000000000000000 14:33:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x14}, 0x14}}, 0x0) 14:33:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) [ 1031.929112][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:36 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/bus/event_source', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) 14:33:36 executing program 4: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 14:33:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000001140)={0xa, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) [ 1031.953434][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:36 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000002dc0)) [ 1032.131630][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1032.166624][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1032.175554][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1032.189201][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1032.248049][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1032.269733][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1032.289605][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1032.309047][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1032.329344][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1032.350007][T22784] Pass: 20992420 Run:20992569 [ 1032.354825][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1032.364750][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1032.374820][T22784] Call Trace: [ 1032.378114][T22784] [ 1032.381057][T22784] dump_stack_lvl+0xd1/0x138 [ 1032.385681][T22784] mt_find.cold+0x8b/0x90 [ 1032.390040][T22784] ? mas_find+0x1d0/0x1d0 [ 1032.394405][T22784] find_vma+0x10c/0x1b0 [ 1032.398581][T22784] ? can_vma_merge_before+0x390/0x390 [ 1032.403974][T22784] ? walk_page_test+0x78/0x180 [ 1032.408765][T22784] walk_page_range+0x2b1/0x4a0 [ 1032.413559][T22784] ? __walk_page_range+0x780/0x780 [ 1032.418714][T22784] mlock_fixup+0x650/0x810 [ 1032.423172][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1032.428405][T22784] ? mlock_fixup+0x810/0x810 [ 1032.433040][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1032.438973][T22784] do_mlock+0x25a/0x6d0 [ 1032.443171][T22784] ? folio_evictable+0x270/0x270 [ 1032.448149][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1032.454070][T22784] __x64_sys_mlock+0x59/0x80 [ 1032.458676][T22784] do_syscall_64+0x39/0xb0 [ 1032.463126][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1032.469051][T22784] RIP: 0033:0x7feaf548c0c9 [ 1032.473482][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1032.493104][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1032.501536][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1032.509520][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1032.517503][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1032.525490][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.533471][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1032.541474][T22784] [ 1032.599128][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1032.605174][T22784] BUG at mt_find:6473 (1) [ 1032.619112][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1032.639068][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1032.739029][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1032.889036][T22784] 0-536866815: 0000000000000000 [ 1032.894316][T22784] 536866816-536870911: ffff888094eb2460 [ 1032.939061][T22784] 536870912-553631743: ffff888094eb2540 [ 1032.949327][T22784] 553631744-553644031: 0000000000000000 [ 1032.969070][T22784] 553644032-553631743: ffff888076c687e0 14:33:37 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, 0x0) 14:33:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000001140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}}], 0x1, 0x0) 14:33:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000140)="d4", 0x1}], 0x2}}], 0x2, 0x2004c844) 14:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @private}, {0x0, @random="8414642bde5a"}, 0x2a, {0x2, 0x0, @loopback}, 'ipvlan1\x00'}) 14:33:37 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001a80), 0x4000, 0x0) 14:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)) 14:33:37 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fd"}]}}, &(0x7f0000000400)=""/197, 0x2a, 0xc5, 0x1}, 0x20) [ 1032.990960][T22784] 553631744-553648127: ffff888076c689a0 14:33:37 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0xbb0b}, 0x4) 14:33:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) 14:33:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) [ 1033.052861][T22784] 553648128-553652223: ffff888094eb2620 [ 1033.058843][T22784] 553652224-116820934655: 0000000000000000 14:33:37 executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x402402, 0x0) 14:33:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0) [ 1033.153189][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1033.215454][T22784] 116825128960-93824997462015: 0000000000000000 14:33:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x14}, 0x14}}, 0x0) 14:33:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 14:33:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x0, 0x0, 0x98, &(0x7f0000000100)}) 14:33:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 14:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="1133", 0x2}, {0x0}, {&(0x7f00000001c0)='[', 0x1}], 0x3}}], 0x2, 0x2004c844) 14:33:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/notes', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, 0x0) [ 1033.268616][T22784] 93824997462016-93824997601279: ffff888094eb27e0 14:33:37 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0x0, 0x0, 0x18}, 0xc) 14:33:37 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x8}]}) 14:33:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003c80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001300)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x0) [ 1033.351273][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1033.358210][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:37 executing program 4: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xffff0000) 14:33:37 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/smsc75xx', 0x0, 0x0) 14:33:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1414bbac1e000101000000040000ac"], 0x20) [ 1033.432079][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1033.589071][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1033.641523][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1033.656663][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1033.669141][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:33:37 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_blk', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)) 14:33:37 executing program 2: r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f00000000c0)) 14:33:37 executing program 0: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x7, &(0x7f0000000500)=[{0x4, 0x6}, {0x2, 0x1, 0x0, 0x48}, {0x0, 0x0, 0x40}, {0x0, 0x2, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0xe9}, {}]}) 14:33:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x3, &(0x7f00000018c0)=@framed, &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x10}, 0x80) 14:33:37 executing program 1: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{0x4, 0x6, 0x8}, {0x2, 0x0, 0x5, 0x48}, {}]}) 14:33:37 executing program 4: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x3, &(0x7f0000000500)=[{}, {0x2, 0x0, 0x0, 0x48}, {}]}) [ 1033.689296][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:33:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x0, {}, 'veth1\x00'}) 14:33:38 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}, 0x38) 14:33:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f0000000580)) 14:33:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) [ 1033.711477][T22784] 140647109492736-140647113687039: ffff888094eb2e00 14:33:38 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) [ 1033.817687][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 14:33:38 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000180)) [ 1033.875093][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1033.935495][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1033.998400][T22784] 140647114899456-140647114903551: 0000000000000000 14:33:38 executing program 5: r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(r0, 0x0, &(0x7f0000000100)) 14:33:38 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xc}]}}, &(0x7f0000000100)=""/158, 0x26, 0x9e, 0x1}, 0x20) 14:33:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f00000001c0)) 14:33:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) 14:33:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000480)='r', 0x1}], 0x3}}], 0x1, 0x0) 14:33:38 executing program 3: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/module/bridge', 0x1414c0, 0x0) 14:33:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) 14:33:38 executing program 4: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/bus/event_source', 0x40000, 0x0) 14:33:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002640)=[{{&(0x7f0000001140)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4) 14:33:38 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) [ 1034.087457][T22784] 140647114903552-140647115268095: ffff88807687fee0 14:33:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) 14:33:38 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1034.201975][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:38 executing program 5: futex(&(0x7f0000000000), 0x8, 0x0, &(0x7f0000000040), 0x0, 0x0) 14:33:38 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000540)={0x3}) 14:33:38 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000540)={0x3, 0x0, 0x800}) 14:33:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @multicast1}, 0x10) [ 1034.259117][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1034.334700][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}], 0x20}}], 0x1, 0x0) 14:33:38 executing program 4: syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14, &(0x7f00000001c0)={[{@adinicb}, {@uid}, {@dmode={'dmode', 0x3d, 0x80000000000}}, {@undelete}]}, 0x1, 0x4b5, &(0x7f0000000580)="$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") 14:33:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000004, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 14:33:38 executing program 2: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0xfd, 0x1}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x5, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x4}, {0x2, 0x0, 0x5, 0x48}, {}, {0x8, 0x7, 0x0, 0x6}, {}]}) [ 1034.371734][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 14:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}], 0x20}}], 0x1, 0x0) 14:33:38 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)) [ 1034.431707][T22784] 140647127171072-140647128055807: 0000000000000000 14:33:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002e80)={0x14}, 0x14}}, 0x0) 14:33:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$netlink(r0, 0x0, &(0x7f00000001c0)) 14:33:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@empty, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@loopback}}, 0xe8) 14:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}], 0x20}}], 0x1, 0x0) 14:33:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x0, @broadcast}}) 14:33:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x0, 0x0, 0x0, &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1034.554774][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1034.566155][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1034.579544][T22784] 140647128190976-140732348923903: 0000000000000000 14:33:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001800)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private}, 0x10, 0x0, 0x0, &(0x7f0000001780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}], 0x20}}], 0x1, 0x0) 14:33:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) 14:33:38 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x204002, 0x0) [ 1034.627496][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 14:33:38 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) [ 1034.676766][T22784] 140732349059072-140732349100031: 0000000000000000 14:33:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)}, 0x80) 14:33:39 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002040)={0x0, 0x0, 0x7c6dab3783b44db6}, 0xc) [ 1034.725027][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1034.749818][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1034.756933][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1034.764847][T22784] Pass: 21026768 Run:21026918 [ 1034.772337][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1034.782277][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1034.792361][T22784] Call Trace: [ 1034.795674][T22784] [ 1034.798634][T22784] dump_stack_lvl+0xd1/0x138 [ 1034.803275][T22784] mt_find.cold+0x8b/0x90 [ 1034.807661][T22784] ? mas_find+0x1d0/0x1d0 [ 1034.812058][T22784] find_vma+0x10c/0x1b0 [ 1034.816262][T22784] ? can_vma_merge_before+0x390/0x390 [ 1034.821686][T22784] ? walk_page_test+0x78/0x180 [ 1034.826506][T22784] walk_page_range+0x2b1/0x4a0 [ 1034.831320][T22784] ? __walk_page_range+0x780/0x780 [ 1034.836499][T22784] mlock_fixup+0x650/0x810 [ 1034.840982][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1034.846240][T22784] ? mlock_fixup+0x810/0x810 [ 1034.850904][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1034.856848][T22784] do_mlock+0x25a/0x6d0 [ 1034.861064][T22784] ? folio_evictable+0x270/0x270 [ 1034.866069][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1034.872015][T22784] __x64_sys_mlock+0x59/0x80 [ 1034.876641][T22784] do_syscall_64+0x39/0xb0 [ 1034.881113][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1034.887049][T22784] RIP: 0033:0x7feaf548c0c9 [ 1034.891497][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1034.911150][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1034.919612][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1034.927630][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1034.935644][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1034.943660][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.951661][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1034.959689][T22784] 14:33:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0xd0}]}) 14:33:39 executing program 1: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0xffffffffffffffff}) [ 1034.983103][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1035.012912][T22784] BUG at mt_find:6473 (1) 14:33:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000003c0)={0x2, 0x4e21, @dev}, 0x10, 0x0}}], 0x1, 0x0) 14:33:39 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/block/loop0', 0x200040, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 14:33:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{}]}) [ 1035.045978][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7}, 0x48) [ 1035.088892][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1035.138034][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003c80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001300)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) [ 1035.226802][T22784] 0-536866815: 0000000000000000 [ 1035.248447][T22784] 536866816-536870911: ffff888094eb2460 14:33:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = dup(r0) sendmmsg(r1, 0x0, 0x0, 0x0) 14:33:39 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000280)={{0x1}}) 14:33:39 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_blk', 0x4000, 0x0) 14:33:39 executing program 5: clock_nanosleep(0x3, 0x0, &(0x7f0000000000), 0x0) 14:33:39 executing program 0: r0 = socket(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000300), 0xc) 14:33:39 executing program 3: socketpair(0x23, 0x0, 0x40, 0x0) 14:33:39 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965240450c3e61887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000003280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1035.315900][T22784] 536870912-553631743: ffff888094eb2540 14:33:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x80004525, 0x0) 14:33:39 executing program 2: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x7}) [ 1035.385388][T22784] 553631744-553644031: 0000000000000000 14:33:39 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000003c0)) 14:33:39 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000d24000/0x14000)=nil, &(0x7f0000eaa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000fb5000/0x1000)=nil, &(0x7f0000d84000/0x4000)=nil, 0x0}, 0x68) 14:33:39 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000008940)=[{{&(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000001900)=[{0x0}, {0x0}, {&(0x7f0000001540)='W', 0x1}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 14:33:39 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_pktinfo(r0, 0x0, 0x22, &(0x7f0000000080)={0x0, @local, @empty}, 0xc) [ 1035.436827][T22784] 553644032-553631743: ffff888076c687e0 [ 1035.464423][T22784] 553631744-553648127: ffff888076c689a0 14:33:39 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x31, &(0x7f0000000080)={r1, @local, @empty}, 0xc) 14:33:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/218, &(0x7f0000000100)=0xda) [ 1035.517184][T22784] 553648128-553652223: ffff888094eb2620 [ 1035.541741][T22784] 553652224-116820934655: 0000000000000000 [ 1035.569090][T22784] 116820934656-116825128959: ffff888094eb2700 14:33:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, 0x0, 0x5}) 14:33:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0) 14:33:39 executing program 4: syz_clone(0x10140000, &(0x7f0000000000)='%', 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 1035.609564][T22784] 116825128960-93824997462015: 0000000000000000 [ 1035.640396][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1035.694222][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1035.723018][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1035.739379][ T5180] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1035.759608][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1035.837445][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1035.856037][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1035.866779][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1035.889352][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1035.896365][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1035.913366][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1035.925050][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1035.939309][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1035.949450][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1035.956458][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1035.978695][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1035.995874][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1036.006021][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1036.022382][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1036.044029][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1036.107196][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1036.116186][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1036.136083][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1036.148389][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1036.165769][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1036.173301][ T5180] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1036.189032][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1036.196026][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1036.209320][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.237254][ T5180] usb 2-1: config 0 descriptor?? [ 1036.242979][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1036.263608][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1036.278375][T22784] Pass: 21046521 Run:21046672 [ 1036.286682][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1036.296633][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1036.306729][T22784] Call Trace: [ 1036.310033][T22784] [ 1036.312992][T22784] dump_stack_lvl+0xd1/0x138 [ 1036.317640][T22784] mt_find.cold+0x8b/0x90 [ 1036.322027][T22784] ? mas_find+0x1d0/0x1d0 [ 1036.326421][T22784] find_vma+0x10c/0x1b0 [ 1036.330618][T22784] ? can_vma_merge_before+0x390/0x390 [ 1036.336035][T22784] ? walk_page_test+0x78/0x180 [ 1036.340855][T22784] walk_page_range+0x2b1/0x4a0 [ 1036.345676][T22784] ? __walk_page_range+0x780/0x780 [ 1036.350864][T22784] mlock_fixup+0x650/0x810 [ 1036.355346][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1036.360604][T22784] ? mlock_fixup+0x810/0x810 [ 1036.365260][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1036.371207][T22784] do_mlock+0x25a/0x6d0 [ 1036.375420][T22784] ? folio_evictable+0x270/0x270 [ 1036.380425][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1036.386368][T22784] __x64_sys_mlock+0x59/0x80 [ 1036.391000][T22784] do_syscall_64+0x39/0xb0 [ 1036.395471][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1036.401407][T22784] RIP: 0033:0x7feaf548c0c9 [ 1036.405857][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1036.425511][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1036.433974][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1036.441982][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1036.449989][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1036.457994][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.465997][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1036.474034][T22784] [ 1036.491342][ T5180] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1036.512599][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1036.518558][T22784] BUG at mt_find:6473 (1) [ 1036.528525][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1036.547057][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1036.599889][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1036.658028][T22784] 0-536866815: 0000000000000000 [ 1036.663400][T22784] 536866816-536870911: ffff888094eb2460 [ 1036.680723][T22784] 536870912-553631743: ffff888094eb2540 [ 1036.686685][T22784] 553631744-553644031: 0000000000000000 [ 1036.704414][T22784] 553644032-553631743: ffff888076c687e0 [ 1036.715631][T22784] 553631744-553648127: ffff888076c689a0 [ 1036.727421][T22784] 553648128-553652223: ffff888094eb2620 [ 1036.737738][T22784] 553652224-116820934655: 0000000000000000 [ 1036.753077][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1036.769123][T22784] 116825128960-93824997462015: 0000000000000000 [ 1036.775778][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1036.791954][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1036.798878][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1036.816025][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1036.887639][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1036.897618][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1036.919316][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1036.926351][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1036.944953][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1036.954934][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1036.973989][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1036.985329][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1037.007103][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1037.017082][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1037.034199][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1037.045553][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1037.058476][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1037.078711][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1037.087387][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1037.154118][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1037.169978][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1037.177159][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1037.204273][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1037.215819][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1037.228910][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1037.236267][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1037.253624][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1037.268853][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1037.295157][T22784] Pass: 21052362 Run:21052514 [ 1037.300183][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1037.310128][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1037.320215][T22784] Call Trace: [ 1037.323526][T22784] [ 1037.326486][T22784] dump_stack_lvl+0xd1/0x138 [ 1037.331135][T22784] mt_find.cold+0x8b/0x90 [ 1037.335523][T22784] ? mas_find+0x1d0/0x1d0 [ 1037.339912][T22784] find_vma+0x10c/0x1b0 [ 1037.344103][T22784] ? can_vma_merge_before+0x390/0x390 [ 1037.349523][T22784] ? walk_page_test+0x78/0x180 [ 1037.354335][T22784] walk_page_range+0x2b1/0x4a0 [ 1037.359145][T22784] ? __walk_page_range+0x780/0x780 [ 1037.364319][T22784] mlock_fixup+0x650/0x810 [ 1037.368826][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1037.374080][T22784] ? mlock_fixup+0x810/0x810 [ 1037.378736][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1037.384682][T22784] do_mlock+0x25a/0x6d0 [ 1037.388892][T22784] ? folio_evictable+0x270/0x270 [ 1037.393893][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1037.399836][T22784] __x64_sys_mlock+0x59/0x80 [ 1037.404461][T22784] do_syscall_64+0x39/0xb0 [ 1037.408929][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1037.414862][T22784] RIP: 0033:0x7feaf548c0c9 [ 1037.419314][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1037.438960][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1037.447420][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1037.455426][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1037.463431][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1037.471436][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.479437][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1037.487464][T22784] [ 1037.510455][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1037.516415][T22784] BUG at mt_find:6473 (1) [ 1037.520905][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1037.529449][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1037.572686][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1037.654516][T22784] 0-536866815: 0000000000000000 [ 1037.669368][T22784] 536866816-536870911: ffff888094eb2460 [ 1037.679085][T22784] 536870912-553631743: ffff888094eb2540 [ 1037.685042][T22784] 553631744-553644031: 0000000000000000 [ 1037.691076][T22784] 553644032-553631743: ffff888076c687e0 [ 1037.697008][T22784] 553631744-553648127: ffff888076c689a0 [ 1037.703025][T22784] 553648128-553652223: ffff888094eb2620 [ 1037.710393][T22784] 553652224-116820934655: 0000000000000000 [ 1037.716606][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1037.724102][T22784] 116825128960-93824997462015: 0000000000000000 [ 1037.733189][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1037.741028][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1037.747944][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1037.755360][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1037.811744][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1037.818754][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1037.826043][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1037.833316][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1037.842716][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1037.849970][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1037.856947][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1037.864437][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1037.883146][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1037.895993][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1037.907402][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1037.924556][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1037.937187][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1037.948675][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1037.969198][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1038.033134][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1038.048777][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1038.057427][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1038.076584][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1038.088752][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1038.102431][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1038.113182][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1038.120487][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1038.127612][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1038.135547][T22784] Pass: 21052673 Run:21052826 [ 1038.141213][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1038.151143][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1038.161219][T22784] Call Trace: [ 1038.164518][T22784] [ 1038.167458][T22784] dump_stack_lvl+0xd1/0x138 [ 1038.172057][T22784] mt_find.cold+0x8b/0x90 [ 1038.176395][T22784] ? mas_find+0x1d0/0x1d0 [ 1038.180758][T22784] find_vma+0x10c/0x1b0 [ 1038.184957][T22784] ? can_vma_merge_before+0x390/0x390 [ 1038.190385][T22784] ? walk_page_test+0x78/0x180 [ 1038.195191][T22784] walk_page_range+0x2b1/0x4a0 [ 1038.200005][T22784] ? __walk_page_range+0x780/0x780 [ 1038.205190][T22784] mlock_fixup+0x650/0x810 [ 1038.209684][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1038.214927][T22784] ? mlock_fixup+0x810/0x810 [ 1038.219555][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1038.225496][T22784] do_mlock+0x25a/0x6d0 [ 1038.229684][T22784] ? folio_evictable+0x270/0x270 [ 1038.234673][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1038.240683][T22784] __x64_sys_mlock+0x59/0x80 [ 1038.245302][T22784] do_syscall_64+0x39/0xb0 [ 1038.249755][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1038.255676][T22784] RIP: 0033:0x7feaf548c0c9 [ 1038.260108][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1038.279741][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1038.288182][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1038.296173][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1038.304160][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1038.312146][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.320126][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1038.328130][T22784] [ 1038.335148][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1038.341534][T22784] BUG at mt_find:6473 (1) [ 1038.345894][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1038.354660][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1038.392030][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1038.441834][T22784] 0-536866815: 0000000000000000 [ 1038.447156][T22784] 536866816-536870911: ffff888094eb2460 [ 1038.455881][T22784] 536870912-553631743: ffff888094eb2540 [ 1038.461914][T22784] 553631744-553644031: 0000000000000000 [ 1038.467843][T22784] 553644032-553631743: ffff888076c687e0 [ 1038.473856][T22784] 553631744-553648127: ffff888076c689a0 [ 1038.479839][T22784] 553648128-553652223: ffff888094eb2620 [ 1038.485773][T22784] 553652224-116820934655: 0000000000000000 [ 1038.492049][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1038.499654][T22784] 116825128960-93824997462015: 0000000000000000 [ 1038.506294][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1038.513498][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1038.520489][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1038.527537][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1038.584978][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1038.592110][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1038.600067][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1038.607038][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1038.614091][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1038.621101][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1038.628044][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1038.635068][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1038.642189][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1038.649273][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1038.656236][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1038.663349][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1038.670666][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1038.677646][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1038.684992][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1038.737291][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1038.749111][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1038.756256][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1038.765021][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1038.772315][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1038.779473][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1038.786719][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1038.793736][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1038.801474][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1038.808895][T22784] Pass: 21052673 Run:21052827 [ 1038.813660][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1038.823592][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1038.833656][T22784] Call Trace: [ 1038.836934][T22784] [ 1038.839863][T22784] dump_stack_lvl+0xd1/0x138 [ 1038.844460][T22784] mt_find.cold+0x8b/0x90 [ 1038.848795][T22784] ? mas_find+0x1d0/0x1d0 [ 1038.853135][T22784] find_vma+0x10c/0x1b0 [ 1038.857287][T22784] ? can_vma_merge_before+0x390/0x390 [ 1038.862658][T22784] ? walk_page_test+0x78/0x180 [ 1038.867423][T22784] walk_page_range+0x2b1/0x4a0 [ 1038.872212][T22784] ? __walk_page_range+0x780/0x780 [ 1038.877383][T22784] mlock_fixup+0x650/0x810 [ 1038.881845][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1038.887426][T22784] ? mlock_fixup+0x810/0x810 [ 1038.892070][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1038.898015][T22784] do_mlock+0x25a/0x6d0 [ 1038.902227][T22784] ? folio_evictable+0x270/0x270 [ 1038.907222][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1038.913171][T22784] __x64_sys_mlock+0x59/0x80 [ 1038.917810][T22784] do_syscall_64+0x39/0xb0 [ 1038.922292][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1038.928234][T22784] RIP: 0033:0x7feaf548c0c9 [ 1038.932673][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1038.952305][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1038.960753][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1038.968754][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1038.976752][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1038.984748][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.992736][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1039.000743][T22784] [ 1039.011648][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1039.017596][T22784] BUG at mt_find:6473 (1) [ 1039.022436][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1039.031225][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1039.068608][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1039.123640][T22784] 0-536866815: 0000000000000000 [ 1039.129101][T22784] 536866816-536870911: ffff888094eb2460 [ 1039.135041][T22784] 536870912-553631743: ffff888094eb2540 [ 1039.141098][T22784] 553631744-553644031: 0000000000000000 [ 1039.147023][T22784] 553644032-553631743: ffff888076c687e0 [ 1039.153064][T22784] 553631744-553648127: ffff888076c689a0 [ 1039.159090][T22784] 553648128-553652223: ffff888094eb2620 [ 1039.165023][T22784] 553652224-116820934655: 0000000000000000 [ 1039.171279][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1039.177715][T22784] 116825128960-93824997462015: 0000000000000000 [ 1039.184407][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1039.191265][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1039.198139][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1039.205170][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1039.264178][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1039.271279][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1039.278272][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1039.285887][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1039.295244][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1039.302546][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1039.310214][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1039.318204][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1039.325521][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1039.332644][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1039.339817][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1039.346791][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1039.353783][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1039.361026][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1039.368010][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1039.420325][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1039.427340][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1039.434426][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1039.441443][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1039.448420][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1039.455516][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1039.462559][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1039.469612][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1039.476575][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1039.484041][T22784] Pass: 21052673 Run:21052828 [ 1039.500322][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1039.510268][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1039.520355][T22784] Call Trace: [ 1039.523664][T22784] [ 1039.526602][T22784] dump_stack_lvl+0xd1/0x138 [ 1039.531204][T22784] mt_find.cold+0x8b/0x90 [ 1039.535536][T22784] ? mas_find+0x1d0/0x1d0 [ 1039.539872][T22784] find_vma+0x10c/0x1b0 [ 1039.544024][T22784] ? can_vma_merge_before+0x390/0x390 [ 1039.549395][T22784] ? walk_page_test+0x78/0x180 [ 1039.554157][T22784] walk_page_range+0x2b1/0x4a0 [ 1039.558920][T22784] ? __walk_page_range+0x780/0x780 [ 1039.564073][T22784] mlock_fixup+0x650/0x810 [ 1039.568537][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1039.573781][T22784] ? mlock_fixup+0x810/0x810 [ 1039.578415][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1039.584341][T22784] do_mlock+0x25a/0x6d0 [ 1039.588532][T22784] ? folio_evictable+0x270/0x270 [ 1039.593512][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1039.599433][T22784] __x64_sys_mlock+0x59/0x80 [ 1039.604042][T22784] do_syscall_64+0x39/0xb0 [ 1039.608490][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1039.614408][T22784] RIP: 0033:0x7feaf548c0c9 [ 1039.618837][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1039.638467][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1039.646901][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1039.654886][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1039.662869][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1039.670853][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1039.678834][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1039.686839][T22784] [ 1039.691022][ T5180] gspca_sonixj: reg_w1 err -71 [ 1039.695374][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1039.701122][ T5180] sonixj: probe of 2-1:0.0 failed with error -71 [ 1039.701752][T22784] BUG at mt_find:6473 (1) [ 1039.713806][ T5180] usb 2-1: USB disconnect, device number 7 [ 1039.720776][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1039.741388][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1039.779264][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1039.831404][T22784] 0-536866815: 0000000000000000 [ 1039.836853][T22784] 536866816-536870911: ffff888094eb2460 [ 1039.845452][T22784] 536870912-553631743: ffff888094eb2540 [ 1039.851570][T22784] 553631744-553644031: 0000000000000000 [ 1039.857495][T22784] 553644032-553631743: ffff888076c687e0 [ 1039.863466][T22784] 553631744-553648127: ffff888076c689a0 [ 1039.869555][T22784] 553648128-553652223: ffff888094eb2620 [ 1039.875491][T22784] 553652224-116820934655: 0000000000000000 [ 1039.881954][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1039.888406][T22784] 116825128960-93824997462015: 0000000000000000 [ 1039.895112][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1039.902002][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1039.908906][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1039.916056][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1039.974243][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1039.981317][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1039.988277][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1039.995525][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1040.007779][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1040.014986][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1040.027321][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1040.037646][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1040.044711][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1040.051761][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1040.058727][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1040.065717][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1040.072712][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1040.081912][T22784] 140647115325440-140647127171071: ffff88802218f000 14:33:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059965240450c3e61887c000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000003280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) [ 1040.088894][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1040.146071][T22784] 140647127171072-140647128055807: 0000000000000000 14:33:44 executing program 5: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_pktinfo(r0, 0x0, 0x28, 0x0, 0x0) 14:33:44 executing program 3: syz_clone(0x40008000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 14:33:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000100)) 14:33:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2d, 0x0, &(0x7f00000001c0)) 14:33:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002840)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'macsec0\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) [ 1040.153220][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1040.160354][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1040.193667][T24414] x_tables: duplicate underflow at hook 3 14:33:44 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 14:33:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 14:33:44 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_rm_watch(r0, 0x0) [ 1040.216261][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1040.244120][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 14:33:44 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) 14:33:44 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000004140), 0x0, 0x0) 14:33:44 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001c80), 0x2, 0x0) [ 1040.291549][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1040.350374][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1040.382171][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1040.410101][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1040.435140][T22784] Pass: 21058201 Run:21058357 [ 1040.454277][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1040.464234][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1040.474321][T22784] Call Trace: [ 1040.477623][T22784] [ 1040.480580][T22784] dump_stack_lvl+0xd1/0x138 [ 1040.485220][T22784] mt_find.cold+0x8b/0x90 [ 1040.489600][T22784] ? mas_find+0x1d0/0x1d0 [ 1040.493984][T22784] find_vma+0x10c/0x1b0 [ 1040.498187][T22784] ? can_vma_merge_before+0x390/0x390 [ 1040.503604][T22784] ? walk_page_test+0x78/0x180 [ 1040.508415][T22784] walk_page_range+0x2b1/0x4a0 [ 1040.513226][T22784] ? __walk_page_range+0x780/0x780 [ 1040.518389][T22784] mlock_fixup+0x650/0x810 [ 1040.522849][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1040.528084][T22784] ? mlock_fixup+0x810/0x810 [ 1040.532716][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1040.538642][T22784] do_mlock+0x25a/0x6d0 [ 1040.542835][T22784] ? folio_evictable+0x270/0x270 [ 1040.547818][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1040.553768][T22784] __x64_sys_mlock+0x59/0x80 [ 1040.558376][T22784] do_syscall_64+0x39/0xb0 [ 1040.562827][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1040.569180][T22784] RIP: 0033:0x7feaf548c0c9 [ 1040.573608][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1040.593235][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1040.601665][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1040.609648][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1040.617632][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1040.625613][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1040.633597][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1040.641602][T22784] [ 1040.653580][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1040.660858][T22784] BUG at mt_find:6473 (1) [ 1040.665405][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1040.674949][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1040.716811][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1040.769016][ T5180] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1040.776998][T22784] 0-536866815: 0000000000000000 [ 1040.782503][T22784] 536866816-536870911: ffff888094eb2460 [ 1040.788486][T22784] 536870912-553631743: ffff888094eb2540 [ 1040.794824][T22784] 553631744-553644031: 0000000000000000 [ 1040.801671][T22784] 553644032-553631743: ffff888076c687e0 [ 1040.807615][T22784] 553631744-553648127: ffff888076c689a0 [ 1040.813976][T22784] 553648128-553652223: ffff888094eb2620 [ 1040.820182][T22784] 553652224-116820934655: 0000000000000000 [ 1040.826392][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1040.833476][T22784] 116825128960-93824997462015: 0000000000000000 [ 1040.840407][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1040.847219][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1040.855425][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1040.862476][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1040.919112][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1040.926238][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1040.933812][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1040.945273][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1040.953220][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1040.960799][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1040.967880][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1040.975260][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1040.984764][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1040.992177][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1040.999508][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1041.006600][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1041.014244][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1041.022750][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1041.030594][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1041.082373][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1041.089501][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1041.096491][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1041.103596][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1041.110715][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1041.117701][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1041.124850][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1041.129195][ T5180] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=7c.88 [ 1041.133190][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1041.149070][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.150244][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1041.166867][T22784] Pass: 21058285 Run:21058442 [ 1041.171062][ T5180] usb 2-1: config 0 descriptor?? [ 1041.174569][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1041.186364][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1041.196423][T22784] Call Trace: [ 1041.199714][T22784] [ 1041.202654][T22784] dump_stack_lvl+0xd1/0x138 [ 1041.207281][T22784] mt_find.cold+0x8b/0x90 [ 1041.211644][T22784] ? mas_find+0x1d0/0x1d0 [ 1041.216015][T22784] find_vma+0x10c/0x1b0 [ 1041.220189][T22784] ? can_vma_merge_before+0x390/0x390 [ 1041.225591][T22784] ? walk_page_test+0x78/0x180 [ 1041.230383][T22784] walk_page_range+0x2b1/0x4a0 [ 1041.235175][T22784] ? __walk_page_range+0x780/0x780 [ 1041.240332][T22784] mlock_fixup+0x650/0x810 [ 1041.244789][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1041.250020][T22784] ? mlock_fixup+0x810/0x810 [ 1041.254652][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1041.260582][T22784] do_mlock+0x25a/0x6d0 [ 1041.264772][T22784] ? folio_evictable+0x270/0x270 [ 1041.269754][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1041.275677][T22784] __x64_sys_mlock+0x59/0x80 [ 1041.280281][T22784] do_syscall_64+0x39/0xb0 [ 1041.284726][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1041.290642][T22784] RIP: 0033:0x7feaf548c0c9 [ 1041.295071][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1041.314695][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1041.323127][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1041.331110][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1041.339095][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1041.347076][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1041.355059][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1041.363060][T22784] [ 1041.380321][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1041.386374][T22784] BUG at mt_find:6473 (1) [ 1041.391747][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1041.400508][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1041.401321][ T5180] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1041.445125][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1041.494211][T22784] 0-536866815: 0000000000000000 [ 1041.503323][T22784] 536866816-536870911: ffff888094eb2460 [ 1041.509764][T22784] 536870912-553631743: ffff888094eb2540 [ 1041.515751][T22784] 553631744-553644031: 0000000000000000 [ 1041.521795][T22784] 553644032-553631743: ffff888076c687e0 [ 1041.527777][T22784] 553631744-553648127: ffff888076c689a0 [ 1041.533811][T22784] 553648128-553652223: ffff888094eb2620 [ 1041.539869][T22784] 553652224-116820934655: 0000000000000000 [ 1041.546129][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1041.552712][T22784] 116825128960-93824997462015: 0000000000000000 [ 1041.559548][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1041.567328][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1041.574344][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1041.581488][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1041.643100][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1041.650256][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1041.657434][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1041.665187][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1041.673899][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1041.681014][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1041.688032][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1041.695151][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1041.702263][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1041.709407][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1041.716503][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1041.723610][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1041.730792][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1041.737874][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1041.745002][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1041.798722][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1041.805920][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1041.813104][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1041.820255][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1041.827339][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1041.834442][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1041.841497][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1041.848459][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1041.855499][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1041.862968][T22784] Pass: 21058309 Run:21058467 [ 1041.867652][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1041.877553][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1041.887638][T22784] Call Trace: [ 1041.890941][T22784] [ 1041.893897][T22784] dump_stack_lvl+0xd1/0x138 [ 1041.898541][T22784] mt_find.cold+0x8b/0x90 [ 1041.902929][T22784] ? mas_find+0x1d0/0x1d0 [ 1041.907321][T22784] find_vma+0x10c/0x1b0 [ 1041.911517][T22784] ? can_vma_merge_before+0x390/0x390 [ 1041.916936][T22784] ? walk_page_test+0x78/0x180 [ 1041.921756][T22784] walk_page_range+0x2b1/0x4a0 [ 1041.926582][T22784] ? __walk_page_range+0x780/0x780 [ 1041.931763][T22784] mlock_fixup+0x650/0x810 [ 1041.936247][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1041.941502][T22784] ? mlock_fixup+0x810/0x810 [ 1041.946154][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1041.952085][T22784] do_mlock+0x25a/0x6d0 [ 1041.956281][T22784] ? folio_evictable+0x270/0x270 [ 1041.961264][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1041.967191][T22784] __x64_sys_mlock+0x59/0x80 [ 1041.971802][T22784] do_syscall_64+0x39/0xb0 [ 1041.976272][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1041.982190][T22784] RIP: 0033:0x7feaf548c0c9 [ 1041.986620][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1042.006246][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1042.014678][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1042.022661][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1042.030647][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1042.038631][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.046613][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1042.054617][T22784] [ 1042.086168][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1042.092322][T22784] BUG at mt_find:6473 (1) [ 1042.096718][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1042.105956][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1042.143757][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1042.195285][T22784] 0-536866815: 0000000000000000 [ 1042.200908][T22784] 536866816-536870911: ffff888094eb2460 [ 1042.207022][T22784] 536870912-553631743: ffff888094eb2540 [ 1042.213399][T22784] 553631744-553644031: 0000000000000000 [ 1042.219648][T22784] 553644032-553631743: ffff888076c687e0 [ 1042.225585][T22784] 553631744-553648127: ffff888076c689a0 [ 1042.231963][T22784] 553648128-553652223: ffff888094eb2620 [ 1042.237905][T22784] 553652224-116820934655: 0000000000000000 [ 1042.244480][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1042.251224][T22784] 116825128960-93824997462015: 0000000000000000 [ 1042.257857][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1042.265009][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1042.272199][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1042.279474][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1042.338292][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1042.346140][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1042.354446][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1042.361723][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1042.368704][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1042.376082][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1042.383349][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1042.391517][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1042.398504][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1042.405869][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1042.413284][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1042.420629][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1042.427698][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1042.435420][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1042.444974][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1042.496007][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1042.512408][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1042.527412][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1042.542496][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1042.560505][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1042.575327][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1042.586251][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1042.601214][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1042.608215][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1042.615739][T22784] Pass: 21058312 Run:21058471 [ 1042.626099][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1042.636039][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1042.646122][T22784] Call Trace: [ 1042.649428][T22784] [ 1042.652384][T22784] dump_stack_lvl+0xd1/0x138 [ 1042.657029][T22784] mt_find.cold+0x8b/0x90 [ 1042.661407][T22784] ? mas_find+0x1d0/0x1d0 [ 1042.665785][T22784] find_vma+0x10c/0x1b0 [ 1042.669965][T22784] ? can_vma_merge_before+0x390/0x390 [ 1042.675364][T22784] ? walk_page_test+0x78/0x180 [ 1042.680156][T22784] walk_page_range+0x2b1/0x4a0 [ 1042.684949][T22784] ? __walk_page_range+0x780/0x780 [ 1042.690106][T22784] mlock_fixup+0x650/0x810 [ 1042.694569][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1042.699807][T22784] ? mlock_fixup+0x810/0x810 [ 1042.704443][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1042.710370][T22784] do_mlock+0x25a/0x6d0 [ 1042.714585][T22784] ? folio_evictable+0x270/0x270 [ 1042.719593][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1042.725533][T22784] __x64_sys_mlock+0x59/0x80 [ 1042.730146][T22784] do_syscall_64+0x39/0xb0 [ 1042.734612][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1042.740537][T22784] RIP: 0033:0x7feaf548c0c9 [ 1042.744979][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1042.764620][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1042.773060][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1042.781046][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1042.789030][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1042.797015][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.805014][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1042.813036][T22784] [ 1042.823699][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1042.830204][T22784] BUG at mt_find:6473 (1) [ 1042.834765][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1042.843804][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1042.881272][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1042.933971][T22784] 0-536866815: 0000000000000000 [ 1042.949025][T22784] 536866816-536870911: ffff888094eb2460 [ 1042.954980][T22784] 536870912-553631743: ffff888094eb2540 [ 1042.970975][T22784] 553631744-553644031: 0000000000000000 [ 1042.976927][T22784] 553644032-553631743: ffff888076c687e0 [ 1042.992736][T22784] 553631744-553648127: ffff888076c689a0 [ 1043.000905][T22784] 553648128-553652223: ffff888094eb2620 [ 1043.006853][T22784] 553652224-116820934655: 0000000000000000 [ 1043.013214][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1043.019752][T22784] 116825128960-93824997462015: 0000000000000000 [ 1043.026377][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1043.033846][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1043.043185][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1043.050492][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1043.107111][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1043.124065][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1043.135459][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1043.148155][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1043.171114][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1043.178116][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1043.193636][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1043.206457][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1043.219093][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1043.226180][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1043.233779][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1043.241126][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1043.248190][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1043.255639][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1043.263014][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1043.318703][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1043.336196][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1043.346597][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1043.360216][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1043.368174][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1043.382457][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1043.397440][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1043.413724][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1043.428832][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1043.442508][T22784] Pass: 21058313 Run:21058473 [ 1043.447307][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1043.457227][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1043.467312][T22784] Call Trace: [ 1043.470612][T22784] [ 1043.473564][T22784] dump_stack_lvl+0xd1/0x138 [ 1043.478204][T22784] mt_find.cold+0x8b/0x90 [ 1043.482588][T22784] ? mas_find+0x1d0/0x1d0 [ 1043.486972][T22784] find_vma+0x10c/0x1b0 [ 1043.491162][T22784] ? can_vma_merge_before+0x390/0x390 [ 1043.496573][T22784] ? walk_page_test+0x78/0x180 [ 1043.501379][T22784] walk_page_range+0x2b1/0x4a0 [ 1043.506189][T22784] ? __walk_page_range+0x780/0x780 [ 1043.511375][T22784] mlock_fixup+0x650/0x810 [ 1043.515850][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1043.521099][T22784] ? mlock_fixup+0x810/0x810 [ 1043.525754][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1043.531693][T22784] do_mlock+0x25a/0x6d0 [ 1043.535886][T22784] ? folio_evictable+0x270/0x270 [ 1043.540879][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1043.546803][T22784] __x64_sys_mlock+0x59/0x80 [ 1043.551411][T22784] do_syscall_64+0x39/0xb0 [ 1043.555859][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1043.561775][T22784] RIP: 0033:0x7feaf548c0c9 [ 1043.566204][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1043.585835][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1043.594271][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1043.602261][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1043.610250][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1043.618242][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.626235][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1043.634244][T22784] [ 1043.653115][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1043.664202][T22784] BUG at mt_find:6473 (1) [ 1043.668571][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1043.686780][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1043.736187][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1043.797440][T22784] 0-536866815: 0000000000000000 [ 1043.802844][T22784] 536866816-536870911: ffff888094eb2460 [ 1043.808779][T22784] 536870912-553631743: ffff888094eb2540 [ 1043.819561][T22784] 553631744-553644031: 0000000000000000 [ 1043.825517][T22784] 553644032-553631743: ffff888076c687e0 [ 1043.831548][T22784] 553631744-553648127: ffff888076c689a0 [ 1043.837477][T22784] 553648128-553652223: ffff888094eb2620 [ 1043.843472][T22784] 553652224-116820934655: 0000000000000000 [ 1043.849870][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1043.856407][T22784] 116825128960-93824997462015: 0000000000000000 [ 1043.863179][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1043.870596][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1043.877580][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1043.884752][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1043.943486][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1043.951373][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1043.958469][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1043.965883][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1043.973184][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1043.980458][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1043.987808][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1043.995022][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1044.002194][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1044.010016][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1044.017137][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1044.024916][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1044.032711][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1044.039871][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1044.046836][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1044.098140][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1044.105169][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1044.112845][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1044.119980][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1044.128513][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1044.135611][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1044.142636][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1044.149669][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1044.156629][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1044.164083][T22784] Pass: 21058315 Run:21058476 [ 1044.168767][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1044.178652][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1044.188706][T22784] Call Trace: [ 1044.191992][T22784] [ 1044.194947][T22784] dump_stack_lvl+0xd1/0x138 [ 1044.199586][T22784] mt_find.cold+0x8b/0x90 [ 1044.203981][T22784] ? mas_find+0x1d0/0x1d0 [ 1044.208350][T22784] find_vma+0x10c/0x1b0 [ 1044.212527][T22784] ? can_vma_merge_before+0x390/0x390 [ 1044.217926][T22784] ? walk_page_test+0x78/0x180 [ 1044.222719][T22784] walk_page_range+0x2b1/0x4a0 [ 1044.227512][T22784] ? __walk_page_range+0x780/0x780 [ 1044.232667][T22784] mlock_fixup+0x650/0x810 [ 1044.237126][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1044.242357][T22784] ? mlock_fixup+0x810/0x810 [ 1044.247027][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1044.252954][T22784] do_mlock+0x25a/0x6d0 [ 1044.257141][T22784] ? folio_evictable+0x270/0x270 [ 1044.262121][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1044.268044][T22784] __x64_sys_mlock+0x59/0x80 [ 1044.272650][T22784] do_syscall_64+0x39/0xb0 [ 1044.277098][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1044.283015][T22784] RIP: 0033:0x7feaf548c0c9 [ 1044.287442][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1044.307065][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1044.315497][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1044.323481][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1044.331464][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1044.339448][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.347430][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1044.355432][T22784] [ 1044.367414][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1044.373416][T22784] BUG at mt_find:6473 (1) [ 1044.377776][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1044.386883][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1044.424197][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1044.476749][T22784] 0-536866815: 0000000000000000 [ 1044.482667][T22784] 536866816-536870911: ffff888094eb2460 [ 1044.488595][T22784] 536870912-553631743: ffff888094eb2540 [ 1044.494765][T22784] 553631744-553644031: 0000000000000000 [ 1044.500982][T22784] 553644032-553631743: ffff888076c687e0 [ 1044.506915][T22784] 553631744-553648127: ffff888076c689a0 [ 1044.513240][T22784] 553648128-553652223: ffff888094eb2620 [ 1044.519456][T22784] 553652224-116820934655: 0000000000000000 [ 1044.525644][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1044.532474][T22784] 116825128960-93824997462015: 0000000000000000 [ 1044.540282][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1044.547086][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1044.554391][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1044.561647][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1044.629096][ T5180] gspca_sonixj: reg_w1 err -71 [ 1044.633964][ T5180] sonixj: probe of 2-1:0.0 failed with error -71 [ 1044.634959][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1044.652792][ T5180] usb 2-1: USB disconnect, device number 8 [ 1044.656062][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1044.656096][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1044.685781][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1044.693415][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1044.701418][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1044.708487][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1044.715749][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1044.729297][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1044.736409][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1044.745646][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1044.752819][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1044.759975][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1044.767019][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1044.774095][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1044.826412][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1044.833813][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1044.840961][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1044.849112][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1044.856089][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1044.863119][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1044.870336][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1044.877301][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1044.884319][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1044.891764][T22784] Pass: 21058541 Run:21058703 [ 1044.896457][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1044.906360][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1044.916448][T22784] Call Trace: [ 1044.919756][T22784] [ 1044.922711][T22784] dump_stack_lvl+0xd1/0x138 [ 1044.927344][T22784] mt_find.cold+0x8b/0x90 [ 1044.931702][T22784] ? mas_find+0x1d0/0x1d0 [ 1044.936073][T22784] find_vma+0x10c/0x1b0 [ 1044.940245][T22784] ? can_vma_merge_before+0x390/0x390 [ 1044.945663][T22784] ? walk_page_test+0x78/0x180 [ 1044.950483][T22784] walk_page_range+0x2b1/0x4a0 [ 1044.955288][T22784] ? __walk_page_range+0x780/0x780 [ 1044.960446][T22784] mlock_fixup+0x650/0x810 [ 1044.964909][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1044.970146][T22784] ? mlock_fixup+0x810/0x810 [ 1044.974786][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1044.980726][T22784] do_mlock+0x25a/0x6d0 [ 1044.984930][T22784] ? folio_evictable+0x270/0x270 [ 1044.990005][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1044.995940][T22784] __x64_sys_mlock+0x59/0x80 [ 1045.000558][T22784] do_syscall_64+0x39/0xb0 [ 1045.005011][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1045.010931][T22784] RIP: 0033:0x7feaf548c0c9 [ 1045.015362][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1045.035005][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1045.043466][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1045.051468][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1045.059462][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1045.067453][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.075439][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1045.083446][T22784] [ 1045.094835][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1045.100854][T22784] BUG at mt_find:6473 (1) [ 1045.105219][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1045.113871][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:49 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 14:33:49 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000380)={0xf, 0x8}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) 14:33:49 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 14:33:49 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 14:33:49 executing program 5: syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0xeb1, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x0, 0x100000065e8}) 14:33:49 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/libceph', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='\x9a$-/%}{,-%!:\xb8*\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) [ 1045.153115][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1045.205985][T22784] 0-536866815: 0000000000000000 [ 1045.211619][T22784] 536866816-536870911: ffff888094eb2460 [ 1045.217571][T22784] 536870912-553631743: ffff888094eb2540 14:33:49 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) 14:33:49 executing program 2: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001100), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000001140)='reno\x00', 0x5) 14:33:49 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x400040, 0x0) 14:33:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ff9000/0x3000)=nil, 0x930, 0x0, 0x12, r0, 0x0) [ 1045.300321][T22784] 553631744-553644031: 0000000000000000 14:33:49 executing program 0: mremap(&(0x7f0000fed000/0x13000)=nil, 0x1300a, 0x4000, 0x0, &(0x7f0000fed000/0x4000)=nil) sched_rr_get_interval(0x0, &(0x7f0000000000)) 14:33:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x7, 0x0, 0x9}, 0x48) 14:33:49 executing program 3: mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000fed000/0x4000)=nil) [ 1045.344196][T22784] 553644032-553631743: ffff888076c687e0 14:33:49 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x0) 14:33:49 executing program 1: ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) [ 1045.389736][T22784] 553631744-553648127: ffff888076c689a0 14:33:49 executing program 0: ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x9, 0x701000) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x6, 0x0, &(0x7f0000000080)="b162ed29bebe"}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000140)=""/78) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x100, 0x200) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000200)=[0x8001, 0xe7c]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000023c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) [ 1045.439119][T22784] 553648128-553652223: ffff888094eb2620 [ 1045.499210][T22784] 553652224-116820934655: 0000000000000000 [ 1045.505446][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1045.524476][T22784] 116825128960-93824997462015: 0000000000000000 [ 1045.534125][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1045.541390][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1045.548383][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1045.573608][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1045.639610][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1045.646637][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1045.667888][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1045.677177][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1045.684563][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1045.691830][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1045.698811][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1045.705867][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1045.722440][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1045.729549][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1045.736534][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1045.743637][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1045.750688][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1045.757670][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1045.767723][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1045.833053][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1045.848999][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1045.856010][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1045.875044][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1045.886261][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1045.898780][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1045.910070][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1045.917071][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1045.924417][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1045.932102][T22784] Pass: 21069594 Run:21069757 [ 1045.936814][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1045.946747][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1045.956837][T22784] Call Trace: [ 1045.960145][T22784] [ 1045.963103][T22784] dump_stack_lvl+0xd1/0x138 [ 1045.967759][T22784] mt_find.cold+0x8b/0x90 [ 1045.972148][T22784] ? mas_find+0x1d0/0x1d0 [ 1045.976539][T22784] find_vma+0x10c/0x1b0 [ 1045.980743][T22784] ? can_vma_merge_before+0x390/0x390 [ 1045.986164][T22784] ? walk_page_test+0x78/0x180 [ 1045.990978][T22784] walk_page_range+0x2b1/0x4a0 [ 1045.995791][T22784] ? __walk_page_range+0x780/0x780 [ 1046.000977][T22784] mlock_fixup+0x650/0x810 [ 1046.005467][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1046.010732][T22784] ? mlock_fixup+0x810/0x810 [ 1046.015392][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1046.021345][T22784] do_mlock+0x25a/0x6d0 [ 1046.025570][T22784] ? folio_evictable+0x270/0x270 [ 1046.030591][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1046.036543][T22784] __x64_sys_mlock+0x59/0x80 [ 1046.041178][T22784] do_syscall_64+0x39/0xb0 [ 1046.045654][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1046.051597][T22784] RIP: 0033:0x7feaf548c0c9 [ 1046.056050][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1046.075700][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1046.084165][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1046.092180][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1046.100188][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1046.108189][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.116196][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1046.124228][T22784] [ 1046.133004][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1046.139167][T22784] BUG at mt_find:6473 (1) [ 1046.143602][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1046.152239][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1046.191957][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1046.244421][T22784] 0-536866815: 0000000000000000 [ 1046.250086][T22784] 536866816-536870911: ffff888094eb2460 [ 1046.256155][T22784] 536870912-553631743: ffff888094eb2540 [ 1046.262621][T22784] 553631744-553644031: 0000000000000000 [ 1046.268689][T22784] 553644032-553631743: ffff888076c687e0 [ 1046.276661][T22784] 553631744-553648127: ffff888076c689a0 [ 1046.283022][T22784] 553648128-553652223: ffff888094eb2620 [ 1046.289317][T22784] 553652224-116820934655: 0000000000000000 [ 1046.295649][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1046.302621][T22784] 116825128960-93824997462015: 0000000000000000 [ 1046.329042][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1046.336270][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1046.358067][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1046.375461][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1046.451461][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1046.458710][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1046.465888][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1046.472980][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1046.480648][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1046.488617][T22784] 140647109492736-140647113687039: ffff888094eb2e00 14:33:50 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:33:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x4f, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 14:33:50 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5452, &(0x7f00000001c0)) 14:33:50 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000040)=@raw=[@map_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 14:33:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000023c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002780)={0x68, 0x0, &(0x7f0000002600)=[@dead_binder_done, @clear_death, @release, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000026c0)="f4"}) 14:33:50 executing program 0: mremap(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x4000, 0x0, &(0x7f0000fed000/0x4000)=nil) munlock(&(0x7f0000ff3000/0x1000)=nil, 0x1000) 14:33:50 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x841c0, 0x0) [ 1046.495959][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1046.503181][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1046.510342][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1046.517778][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1046.534460][T22784] 140647114903552-140647115268095: ffff88807687fee0 14:33:50 executing program 4: pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getpeername$unix(r0, 0x0, 0x0) 14:33:50 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0xffffffffffffffff) 14:33:50 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_io_uring_setup(0xb4, &(0x7f00000004c0), &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 14:33:50 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x7, 0x1, 0x2, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x58}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x9, 0x0, 0x5, 0xff}, 0x4b, &(0x7f0000000080)={0x5, 0xf, 0x4b, 0x2, [@generic={0x43, 0x10, 0xa, "60f4ce517583b344e15f72c11d4bf9f7c5d59281945b117eb9f7d4d19c5a53b45445f80bb1967a1eec7cfc7713103603392ebd86925f7e03f90df52bfb56f07d"}, @ptm_cap={0x3}]}, 0x2, [{0x15, &(0x7f0000000100)=@string={0x15, 0x3, "87a12fc93820dd276a33dd08c1e2353a91b9c7"}}, {0x58, &(0x7f0000000140)=@string={0x58, 0x3, "385a15d56df2111bdd0e5a9effe04c49bf0ebdf56f0d59cc81e4304e23fecba3a14e9867b50f40b27d349046256fe52f587a57f9145e195ef4eace22b28dbc25d1fa217acd3e23362ad371bedb8854b7ed0527681225"}}]}) [ 1046.587478][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK]}, 0x34}}, 0x0) [ 1046.639408][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1046.692207][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1046.722980][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1046.733627][T24491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1046.790554][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1046.797601][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1046.805555][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1046.812624][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1046.819679][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1046.826663][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1046.835379][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1046.845230][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1046.863267][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1046.888040][T22784] Pass: 21076813 Run:21076977 [ 1046.915727][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1046.925695][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1046.935786][T22784] Call Trace: [ 1046.939089][T22784] [ 1046.942045][T22784] dump_stack_lvl+0xd1/0x138 [ 1046.946690][T22784] mt_find.cold+0x8b/0x90 [ 1046.951073][T22784] ? mas_find+0x1d0/0x1d0 [ 1046.955475][T22784] find_vma+0x10c/0x1b0 [ 1046.959674][T22784] ? can_vma_merge_before+0x390/0x390 [ 1046.965097][T22784] ? walk_page_test+0x78/0x180 [ 1046.969910][T22784] walk_page_range+0x2b1/0x4a0 [ 1046.974709][T22784] ? __walk_page_range+0x780/0x780 [ 1046.979872][T22784] mlock_fixup+0x650/0x810 [ 1046.984333][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1046.989568][T22784] ? mlock_fixup+0x810/0x810 [ 1046.994211][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1047.000155][T22784] do_mlock+0x25a/0x6d0 [ 1047.004351][T22784] ? folio_evictable+0x270/0x270 [ 1047.009332][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1047.015255][T22784] __x64_sys_mlock+0x59/0x80 [ 1047.019864][T22784] do_syscall_64+0x39/0xb0 [ 1047.024330][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1047.030272][T22784] RIP: 0033:0x7feaf548c0c9 [ 1047.034713][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1047.054430][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1047.062864][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1047.070848][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1047.078832][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1047.086816][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.094796][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1047.102798][T22784] [ 1047.106659][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1047.119926][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1047.125875][T22784] BUG at mt_find:6473 (1) [ 1047.133125][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x1d}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x8ab68ba297fb8a85}, 0xc) 14:33:51 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xeab3af92203e574d, 0x0) syz_io_uring_setup(0x633b, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 14:33:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x1c}, [@call={0x26, 0x0, 0x0, 0x80ffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:51 executing program 4: io_setup(0x101, &(0x7f0000000000)) io_setup(0x8, &(0x7f0000000300)) io_setup(0x2, &(0x7f0000000100)) [ 1047.142015][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x5c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @dev, {[@noop, @cipso={0x86, 0x3c, 0x0, [{0x0, 0x4, "86ca"}, {0x0, 0x3, 'y'}, {0x0, 0x12, "e1273f68ffa8f0c0695e0f970e80cca2"}, {0x0, 0x11, "f3f8d9f56ca0fd3e740b50826c9daa"}, {0x0, 0x8, "ef8be0c7289e"}, {0x0, 0x4, "ba17"}]}]}}}}}}}, 0x0) 14:33:51 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x1c}, [@call={0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000806070200000000000000000a000007050001000700"], 0x70}}, 0x0) [ 1047.202721][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0xb, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 14:33:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000001090102"], 0x64}}, 0x0) [ 1047.274282][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1047.284297][T24506] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1047.346196][T24511] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1047.361323][T22784] 0-536866815: 0000000000000000 [ 1047.366763][T22784] 536866816-536870911: ffff888094eb2460 [ 1047.383464][T22784] 536870912-553631743: ffff888094eb2540 [ 1047.397387][T22784] 553631744-553644031: 0000000000000000 [ 1047.405151][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1047.412155][T22784] 553644032-553631743: ffff888076c687e0 [ 1047.418148][T22784] 553631744-553648127: ffff888076c689a0 [ 1047.424651][T22784] 553648128-553652223: ffff888094eb2620 [ 1047.430829][T22784] 553652224-116820934655: 0000000000000000 [ 1047.437087][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1047.444055][T22784] 116825128960-93824997462015: 0000000000000000 [ 1047.450920][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1047.457770][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1047.465092][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1047.474517][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1047.531025][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1047.538087][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1047.545886][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1047.553248][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1047.561373][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1047.568354][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1047.579199][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1047.586272][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1047.597992][ T7] usb 2-1: config 1 interface 0 altsetting 249 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1047.599051][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1047.614646][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1047.616081][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1047.629720][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1047.636751][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1047.643808][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1047.650880][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1047.657947][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1047.708000][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1047.720196][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1047.727186][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1047.734574][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1047.742241][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1047.749897][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1047.756885][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1047.764244][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1047.771755][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1047.779433][T22784] Pass: 21081990 Run:21082155 [ 1047.784141][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1047.794062][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1047.804121][T22784] Call Trace: [ 1047.807405][T22784] [ 1047.810344][T22784] dump_stack_lvl+0xd1/0x138 [ 1047.814978][T22784] mt_find.cold+0x8b/0x90 [ 1047.819340][T22784] ? mas_find+0x1d0/0x1d0 [ 1047.823741][T22784] find_vma+0x10c/0x1b0 [ 1047.827920][T22784] ? can_vma_merge_before+0x390/0x390 [ 1047.833318][T22784] ? walk_page_test+0x78/0x180 [ 1047.838111][T22784] walk_page_range+0x2b1/0x4a0 [ 1047.842904][T22784] ? __walk_page_range+0x780/0x780 [ 1047.848059][T22784] mlock_fixup+0x650/0x810 [ 1047.852516][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1047.857749][T22784] ? mlock_fixup+0x810/0x810 [ 1047.862384][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1047.868310][T22784] do_mlock+0x25a/0x6d0 [ 1047.872499][T22784] ? folio_evictable+0x270/0x270 [ 1047.877479][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1047.883403][T22784] __x64_sys_mlock+0x59/0x80 [ 1047.888011][T22784] do_syscall_64+0x39/0xb0 [ 1047.892457][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1047.898371][T22784] RIP: 0033:0x7feaf548c0c9 [ 1047.902797][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1047.922435][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1047.930878][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1047.938874][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1047.946864][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1047.954850][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.962837][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1047.970842][T22784] [ 1047.989113][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1047.995060][T22784] BUG at mt_find:6473 (1) [ 1047.999547][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1048.008090][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1048.045495][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1048.049319][ T7] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1048.095927][T22784] 0-536866815: [ 1048.103204][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.104645][T22784] 0000000000000000 [ 1048.107345][ T7] usb 2-1: Product: syz [ 1048.125768][T22784] 536866816-536870911: ffff888094eb2460 [ 1048.130619][ T7] usb 2-1: Manufacturer: 娸픕ᬑໝ鹚䥌຿൯챙丰︣ꏋ亡枘ྵ뉀㑽䚐漥⿥穘綾帔帙⋎趲▼𣏕稡㻍㘣팪빱裛띔׭栧┒ [ 1048.131903][T22784] 536870912-553631743: ffff888094eb2540 [ 1048.153498][T22784] 553631744-553644031: 0000000000000000 [ 1048.156370][ T7] usb 2-1: SerialNumber: syz [ 1048.159535][T22784] 553644032-553631743: ffff888076c687e0 [ 1048.159566][T22784] 553631744-553648127: ffff888076c689a0 [ 1048.159591][T22784] 553648128-553652223: ffff888094eb2620 [ 1048.182027][T22784] 553652224-116820934655: 0000000000000000 [ 1048.188225][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1048.195226][T22784] 116825128960-93824997462015: 0000000000000000 [ 1048.203149][T24488] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1048.211158][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1048.217930][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1048.227510][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1048.234987][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1048.297805][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1048.305101][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1048.312405][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1048.319714][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1048.327706][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1048.335059][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1048.342317][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1048.349660][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1048.356629][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1048.363861][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1048.371161][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1048.378130][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1048.385318][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1048.392571][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1048.401910][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1048.457162][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1048.465026][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1048.472400][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1048.479785][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1048.486780][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1048.501679][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1048.508679][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1048.515920][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1048.523075][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1048.531888][T22784] Pass: 21082014 Run:21082180 [ 1048.536589][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1048.546475][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1048.556525][T22784] Call Trace: [ 1048.559813][T22784] [ 1048.562774][T22784] dump_stack_lvl+0xd1/0x138 [ 1048.567420][T22784] mt_find.cold+0x8b/0x90 [ 1048.571775][T22784] ? mas_find+0x1d0/0x1d0 [ 1048.576162][T22784] find_vma+0x10c/0x1b0 [ 1048.578285][ T7] usb 2-1: USB disconnect, device number 9 [ 1048.580329][T22784] ? can_vma_merge_before+0x390/0x390 [ 1048.580374][T22784] ? walk_page_test+0x78/0x180 [ 1048.580415][T22784] walk_page_range+0x2b1/0x4a0 [ 1048.580459][T22784] ? __walk_page_range+0x780/0x780 [ 1048.580517][T22784] mlock_fixup+0x650/0x810 [ 1048.610773][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1048.616034][T22784] ? mlock_fixup+0x810/0x810 [ 1048.620705][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1048.626643][T22784] do_mlock+0x25a/0x6d0 [ 1048.630844][T22784] ? folio_evictable+0x270/0x270 [ 1048.635835][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1048.641763][T22784] __x64_sys_mlock+0x59/0x80 [ 1048.646378][T22784] do_syscall_64+0x39/0xb0 [ 1048.650830][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1048.656750][T22784] RIP: 0033:0x7feaf548c0c9 [ 1048.661180][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1048.680805][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1048.689238][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1048.697221][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1048.705208][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1048.713195][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.721182][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1048.729186][T22784] [ 1048.735576][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1048.741705][T22784] BUG at mt_find:6473 (1) [ 1048.746169][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1048.755001][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1048.792162][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1048.843820][T22784] 0-536866815: 0000000000000000 [ 1048.849425][T22784] 536866816-536870911: ffff888094eb2460 [ 1048.855470][T22784] 536870912-553631743: ffff888094eb2540 [ 1048.861657][T22784] 553631744-553644031: 0000000000000000 [ 1048.867598][T22784] 553644032-553631743: ffff888076c687e0 [ 1048.873665][T22784] 553631744-553648127: ffff888076c689a0 [ 1048.879648][T22784] 553648128-553652223: ffff888094eb2620 [ 1048.885542][T22784] 553652224-116820934655: 0000000000000000 [ 1048.891807][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1048.898265][T22784] 116825128960-93824997462015: 0000000000000000 [ 1048.905581][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1048.912518][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1048.919519][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1048.926490][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1048.985543][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1048.998313][T22784] 140647101104128-140647103201279: ffff888094eb2a80 14:33:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x1c}, [@call={0x4, 0x0, 0x0, 0x80ffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000001c00)={0xe0c, 0x1, 0x5, 0x0, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "d87f05a6909581f05736dcc05c2b8e27906041e658dcd763c1b108fb6db1739f", "725a4b426dd543a75ca9ca53f48b7e49c2fa119c33c7eeca51612a01d0bb3b63"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "42e3932d47bade5636e979ef56a1dff830d73f426bcb61f7d65a05052e37c6b2", "409c09206aac6b8f7a884cd1a6bfdd5912ef2a5e67e1b4c78fcff7e447783626"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "4e569001ae59f3fb174f181f8cb3db3e6a7f3f74b54ba1261c7592ef329786af", "80fd847c2717d2292734b252930a63bcb38165f19122d251540a68680f63d7d7"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "30c81e1e0e9a67772f037f3df8343059cf267ec0d3f00bbbbee9c38f18c707f5", "07b0b04a12c7279683e9ca2545c0ae2e55894d9016f98f9b2ca20941266ae34b"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', "753dfbfc9ba951825431ed4095561b1f15a74b331ac6f7c814fc08fd493c03d8", "90325e513503b0db15b4504fd78d3dda77c9ea75abc40b9eaae51c857f162444"}}}, {{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "a46dce939f9b189a91b17a68ae922c22c5be2112f475395032478ae2a4697a5f", "526d57bb5bc0eacb22a471a6c85940094b1e0e3b29ce85e94845260b38b5b4ef"}}}]}, 0xe0c}}, 0x0) 14:33:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, &(0x7f0000000100)) 14:33:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x0) 14:33:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x0, 0x4, 0x201}, 0x14}}, 0x0) 14:33:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x26}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 1049.005348][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1049.012395][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1049.019465][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1049.026430][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1049.033451][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1049.045695][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1049.052812][T22784] 140647114563584-140647114899455: ffff888029235ee0 14:33:53 executing program 4: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0xa725}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) 14:33:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:33:53 executing program 0: r0 = syz_io_uring_setup(0x25, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) io_uring_enter(r0, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) 14:33:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc) [ 1049.098570][T22784] 140647114899456-140647114903551: 0000000000000000 14:33:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x56}, [@call={0x25}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) [ 1049.146346][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1049.185346][T22784] 140647115268096-140647115304959: ffff88807a3a2380 14:33:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x20000106, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {}, ["", ""]}, 0x14}}, 0x0) 14:33:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan0\x00'}) 14:33:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x8, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) [ 1049.278609][T22784] 140647115304960-140647115325439: 0000000000000000 14:33:53 executing program 0: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000180)=0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x1a, 0x0, @thr={&(0x7f00000003c0)="d9fea99bf0cfaa05135d43981b6ec4bfde9061186140a461f667a0b8ac4a7888ac743a2cceb164b1be94d4a7343fa33270cd08718a2cb58afdbbd5c217d6e88f95a7047b27e9fdfa3be88b21fc5e602bd5216bacdf70f481aa3af429ee32bb279010e2b660272763dbf402606a499c794da2192ccf2af496d0b2ddc3e48d9e9b807f0c8a72f86f675b6bcc", &(0x7f0000000580)="a54946f5bf7c08dad160d8c015877ff923c04a9d2a9392c20f15e4d916d0ffae7502c335c4e0e768193e6b61ea2f8f6092231ffb989365892c3eac262b9ee319ee9c4ca0c1dabaf3d31d73ffdd7a6e714e0e28b933862656b703327df5ccba7e638c86e4ae7fd0711ab580e9a7de474714c3f09061683707d641222bf196ebcf42b6315a345bf3163500cedf0164872b804cbdeaca3cd236b7de8f8abce7e89089a7f02373ee53191d35afb2538ef56fd95c90fd84a1945b651300ba3c0f0a4ff964bdc9bcab486ed3e1adff8d5144967f0894b445c17127475ac4873b9959b54f97964bf0fd"}}, &(0x7f00000004c0)=0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}}, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000740)={{r4, r5+60000000}, {r6, r7+10000000}}, &(0x7f0000000780)) timer_settime(r0, 0x0, &(0x7f00000007c0), &(0x7f0000000680)) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:33:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:53 executing program 3: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x204894, &(0x7f0000000180)=ANY=[], 0x1, 0x4c3, &(0x7f0000000f00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) [ 1049.321914][T24545] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1049.361568][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1049.389220][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1049.489346][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1049.496655][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1049.507537][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1049.543052][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1049.560839][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1049.598446][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1049.615389][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1049.622526][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1049.630787][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1049.638194][T22784] Pass: 21092309 Run:21092476 [ 1049.645148][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1049.655075][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1049.665135][T22784] Call Trace: [ 1049.668427][T22784] [ 1049.671357][T22784] dump_stack_lvl+0xd1/0x138 [ 1049.675956][T22784] mt_find.cold+0x8b/0x90 [ 1049.680289][T22784] ? mas_find+0x1d0/0x1d0 [ 1049.684626][T22784] find_vma+0x10c/0x1b0 [ 1049.688777][T22784] ? can_vma_merge_before+0x390/0x390 [ 1049.694148][T22784] ? walk_page_test+0x78/0x180 [ 1049.698911][T22784] walk_page_range+0x2b1/0x4a0 [ 1049.703697][T22784] ? __walk_page_range+0x780/0x780 [ 1049.708873][T22784] mlock_fixup+0x650/0x810 [ 1049.713364][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1049.718596][T22784] ? mlock_fixup+0x810/0x810 [ 1049.723200][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1049.729128][T22784] do_mlock+0x25a/0x6d0 [ 1049.733306][T22784] ? folio_evictable+0x270/0x270 [ 1049.738288][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1049.744182][T22784] __x64_sys_mlock+0x59/0x80 [ 1049.748781][T22784] do_syscall_64+0x39/0xb0 [ 1049.753241][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1049.759167][T22784] RIP: 0033:0x7feaf548c0c9 [ 1049.763588][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1049.783192][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1049.791603][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1049.799580][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1049.807580][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1049.815565][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.823530][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1049.831527][T22784] [ 1049.838570][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1049.844679][T22784] BUG at mt_find:6473 (1) [ 1049.849190][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1049.857727][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1049.896395][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1049.946553][T22784] 0-536866815: 0000000000000000 [ 1049.952019][T22784] 536866816-536870911: ffff888094eb2460 [ 1049.958042][T22784] 536870912-553631743: ffff888094eb2540 [ 1049.965679][T22784] 553631744-553644031: 0000000000000000 [ 1049.971843][T22784] 553644032-553631743: ffff888076c687e0 [ 1049.977875][T22784] 553631744-553648127: ffff888076c689a0 [ 1049.983975][T22784] 553648128-553652223: ffff888094eb2620 [ 1049.990050][T22784] 553652224-116820934655: 0000000000000000 14:33:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x65}, [@call={0x15}], {0x95, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc) 14:33:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x65}, [@call={0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 14:33:54 executing program 0: ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x7}, 0x48) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x3c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = signalfd(r0, &(0x7f0000001640)={[0x7]}, 0x8) sendmsg$nl_route(r6, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)=@ipmr_newroute={0x3c, 0x18, 0xf08, 0x70bd25, 0x25dfdbfd, {0x80, 0x80, 0x80, 0x6, 0xfd, 0x3, 0xfd, 0x6, 0xc00}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_PRIORITY={0x8, 0x6, 0x2}, @RTA_DPORT={0x6, 0x1d, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000780)) [ 1049.996293][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1050.002854][T22784] 116825128960-93824997462015: 0000000000000000 [ 1050.009653][T22784] 93824997462016-93824997601279: ffff888094eb27e0 14:33:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000001040101000000000000000002000000300001"], 0x44}}, 0x0) 14:33:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x4, &(0x7f0000000180), 0x4) [ 1050.053637][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1050.077099][T22784] 140647092711424-140647092715519: ffff888094eb28c0 14:33:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000010401"], 0x44}}, 0x0) 14:33:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r5, r6) 14:33:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:54 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x4, &(0x7f0000000180)=0x19, 0x4) 14:33:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22044040, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002009}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x0) 14:33:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x19, 0x4) [ 1050.209043][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1050.211593][T24577] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 14:33:54 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:54 executing program 2: io_setup(0x101, &(0x7f0000000000)=0x0) io_setup(0x8, &(0x7f0000000300)) io_setup(0x2, &(0x7f0000000100)) io_destroy(r0) io_setup(0x7, &(0x7f0000000040)) 14:33:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x7}, 0x0) [ 1050.353840][T22784] 140647092715520-140647101104127: ffff888094eb29a0 14:33:54 executing program 4: io_setup(0x101, &(0x7f0000000000)=0x0) io_setup(0x8, &(0x7f0000000300)) io_destroy(r0) [ 1050.401187][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1050.410327][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1050.433539][T22784] 140647105298432-140647107395583: ffff888094eb2c40 14:33:54 executing program 0: syz_open_dev$evdev(&(0x7f0000000000), 0x8001, 0x3) 14:33:54 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket(0xb, 0x6, 0xc0) recvmsg$unix(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x9, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x40010001) ppoll(&(0x7f0000000040)=[{r2, 0xa0}, {r1, 0xa725}], 0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0xff, 0x0, &(0x7f0000000140), 0x0) recvmsg$unix(r0, &(0x7f00000037c0)={&(0x7f0000001680), 0x6e, &(0x7f0000003700)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x3, &(0x7f0000003740)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}, 0x100) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="e3fc5eac968b5d632e644174475a55122902ed5fab59ff88470ba9523f4186c2ab5cab76420e0e476024cc201121b5701e6e71fa33070d24c69ac9c1997d52bd4164b49ab3c653b656f0f1f4ac2cbd6c73fc059c93fa306b7fd48cbf2f0771e22bc7b6954406b85687e8822a048d6e36013e3fa314650d2d9326d9639aa2f06fd589006c913c9a30fe0e0b8259444bad80a2207530a92945", 0x98}, {0x0}, {&(0x7f0000000380)="7480da182de404c8c52678ba9afc75da91f6ac396b6445990618bb0eee0247c79e89c554e545168ad4f294ad09573e2c4162a47346ef1cf9e9554b13a96972900e7516a25d2b8d51c67e8da8ce58f54e636a7a385c4b5e9518b108d9f2b06a3ce8ba3bf4a41734ead7073b4f44ee94044bdb4cca5068542456bd57ab026c3794ce547093b60d8618ec1d04d7b8a16663827a37ebebc89a72d299aa448337e7befddd33eee346ffbcac0f158c7fd879d7c67ea5089d26332c47f6dc77205b5181c30c46ddc43d7440b1ae0bcf495a46994a7ef257a0123ca4", 0xd8}, {&(0x7f0000000480)="4e54898bfc977befc9fcc9de8b997f88334d25ae51b09ab858a232824c52ae5c9d2d2c0b9286d19562580a83b46992071a7e31b9984cbcdb302a57e7f228707f7742e2071f2dd03732fc17c1f1104927c9564e2613e7b0ab7ac404b4888408f9a1d1d0f208eedae0f7308853d0949c1c9ec900596484baa2d40ed12893ee5979be144d2d810d9371ec1b8713152b5cb7c12f7a99ed67ec47aa2ba655748dec6c497dd8146e67e67d3d3a26f15491e8f9", 0xb0}, {&(0x7f0000000540)="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", 0xffe}], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 14:33:54 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) [ 1050.476730][T22784] 140647107395584-140647109492735: ffff888094eb2d20 14:33:54 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="700000000806070200000000000000000a0000070a00010007"], 0x70}}, 0x0) 14:33:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000480)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x0, @multicast2}], 0x20) [ 1050.526346][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1050.563217][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1050.592789][T22784] 140647113834496-140647114563583: ffff888029235c40 14:33:54 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 5: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1050.642750][T24613] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 14:33:54 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:33:54 executing program 2: syz_mount_image$fuse(&(0x7f000000a140), &(0x7f000000a180)='./file0\x00', 0x0, &(0x7f000000e280)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@appraise}]}}, 0x0, 0x0, 0x0) [ 1050.686511][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1050.697585][T24613] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1050.720267][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1050.738487][T24613] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1050.754768][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1050.775056][T24627] fuse: Bad value for 'fd' 14:33:55 executing program 0: setitimer(0x2, &(0x7f00000021c0)={{}, {0x0, 0x2710}}, 0x0) 14:33:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) [ 1050.784398][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1050.869088][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1050.889763][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1050.906107][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1050.975542][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1050.983781][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1050.994021][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1051.001510][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1051.008497][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1051.016784][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1051.024101][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1051.031377][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1051.038356][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1051.046175][T22784] Pass: 21109772 Run:21109940 [ 1051.051672][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1051.061614][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1051.071697][T22784] Call Trace: [ 1051.075003][T22784] [ 1051.077957][T22784] dump_stack_lvl+0xd1/0x138 [ 1051.082598][T22784] mt_find.cold+0x8b/0x90 [ 1051.086976][T22784] ? mas_find+0x1d0/0x1d0 [ 1051.091361][T22784] find_vma+0x10c/0x1b0 [ 1051.095559][T22784] ? can_vma_merge_before+0x390/0x390 [ 1051.100971][T22784] ? walk_page_test+0x78/0x180 [ 1051.105781][T22784] walk_page_range+0x2b1/0x4a0 [ 1051.110594][T22784] ? __walk_page_range+0x780/0x780 [ 1051.115774][T22784] mlock_fixup+0x650/0x810 [ 1051.120240][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1051.125480][T22784] ? mlock_fixup+0x810/0x810 [ 1051.130123][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1051.136051][T22784] do_mlock+0x25a/0x6d0 [ 1051.140242][T22784] ? folio_evictable+0x270/0x270 [ 1051.145224][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1051.151147][T22784] __x64_sys_mlock+0x59/0x80 [ 1051.155758][T22784] do_syscall_64+0x39/0xb0 [ 1051.160210][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1051.166132][T22784] RIP: 0033:0x7feaf548c0c9 [ 1051.170565][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1051.190191][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1051.198630][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1051.206615][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1051.214605][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1051.222588][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.230570][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1051.238575][T22784] [ 1051.245713][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1051.251721][T22784] BUG at mt_find:6473 (1) [ 1051.256075][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1051.264617][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1051.303182][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1051.354496][T22784] 0-536866815: 0000000000000000 [ 1051.360106][T22784] 536866816-536870911: ffff888094eb2460 [ 1051.366138][T22784] 536870912-553631743: ffff888094eb2540 [ 1051.372167][T22784] 553631744-553644031: 0000000000000000 [ 1051.378104][T22784] 553644032-553631743: ffff888076c687e0 [ 1051.384092][T22784] 553631744-553648127: ffff888076c689a0 [ 1051.390488][T22784] 553648128-553652223: ffff888094eb2620 [ 1051.397843][T22784] 553652224-116820934655: 0000000000000000 [ 1051.404266][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1051.411026][T22784] 116825128960-93824997462015: 0000000000000000 [ 1051.417908][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1051.424856][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1051.431838][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1051.438817][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1051.496866][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1051.514651][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1051.526365][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1051.543613][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1051.554855][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1051.567507][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1051.578750][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1051.595547][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1051.609698][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1051.616695][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1051.623784][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1051.631149][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1051.638134][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1051.645218][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1051.652334][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1051.704682][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1051.724071][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1051.739107][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1051.746114][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1051.762361][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1051.775007][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1051.786301][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1051.799082][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1051.807562][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1051.825588][T22784] Pass: 21111326 Run:21111495 [ 1051.835866][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1051.845814][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1051.855894][T22784] Call Trace: [ 1051.859192][T22784] [ 1051.862146][T22784] dump_stack_lvl+0xd1/0x138 [ 1051.866786][T22784] mt_find.cold+0x8b/0x90 [ 1051.871164][T22784] ? mas_find+0x1d0/0x1d0 [ 1051.875552][T22784] find_vma+0x10c/0x1b0 [ 1051.879741][T22784] ? can_vma_merge_before+0x390/0x390 [ 1051.885152][T22784] ? walk_page_test+0x78/0x180 [ 1051.889963][T22784] walk_page_range+0x2b1/0x4a0 [ 1051.894771][T22784] ? __walk_page_range+0x780/0x780 [ 1051.899943][T22784] mlock_fixup+0x650/0x810 [ 1051.904424][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1051.909675][T22784] ? mlock_fixup+0x810/0x810 [ 1051.914338][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1051.920287][T22784] do_mlock+0x25a/0x6d0 [ 1051.924502][T22784] ? folio_evictable+0x270/0x270 14:33:56 executing program 3: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000002080)) 14:33:56 executing program 5: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) 14:33:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) 14:33:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 14:33:56 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3b) [ 1051.929512][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1051.935455][T22784] __x64_sys_mlock+0x59/0x80 [ 1051.940081][T22784] do_syscall_64+0x39/0xb0 [ 1051.944552][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1051.950496][T22784] RIP: 0033:0x7feaf548c0c9 [ 1051.954950][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 14:33:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 14:33:56 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8912, &(0x7f0000000c40)) [ 1051.974602][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1051.983060][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1051.991067][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1051.999068][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1052.007061][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.015052][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1052.023072][T22784] 14:33:56 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x93, 0x33, 0x3b, 0x0, 0x2537, 0x1068, 0x3882, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa3, 0x90, 0x3}}]}}]}}, 0x0) 14:33:56 executing program 3: socket$inet6(0xa, 0x5, 0x80000000) 14:33:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write(r0, &(0x7f0000000000)="99", 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)) 14:33:56 executing program 5: writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) [ 1052.088595][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1052.095567][T22784] BUG at mt_find:6473 (1) [ 1052.100112][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="15"], 0x34}}, 0x0) 14:33:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) [ 1052.108577][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000500)=0xfffffffffffffd8f) 14:33:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1262, 0x0) 14:33:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 14:33:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000001080), &(0x7f00000010c0)={0x1f}, 0x0, 0x0, 0x0) 14:33:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x1600bd7e, 0x0, &(0x7f00000000c0)) 14:33:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) [ 1052.301068][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1052.473085][T22784] 0-536866815: 0000000000000000 [ 1052.478329][T22784] 536866816-536870911: ffff888094eb2460 [ 1052.487047][T22784] 536870912-553631743: ffff888094eb2540 [ 1052.496137][T22784] 553631744-553644031: 0000000000000000 [ 1052.502197][T22784] 553644032-553631743: ffff888076c687e0 [ 1052.508138][T22784] 553631744-553648127: ffff888076c689a0 [ 1052.516377][T22784] 553648128-553652223: ffff888094eb2620 [ 1052.523250][ T5176] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1052.531731][T22784] 553652224-116820934655: 0000000000000000 [ 1052.537934][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1052.544513][T22784] 116825128960-93824997462015: 0000000000000000 [ 1052.551229][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1052.558003][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1052.565157][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1052.572245][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1052.630977][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1052.637983][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1052.645072][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1052.652095][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1052.659227][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1052.666205][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1052.673410][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1052.680509][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1052.687475][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1052.694489][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1052.701500][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1052.708437][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1052.715821][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1052.722861][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1052.731383][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1052.783610][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1052.790689][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1052.797676][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1052.804904][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1052.812020][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1052.819077][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1052.826057][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1052.834298][ T5176] usb 1-1: Using ep0 maxpacket: 8 [ 1052.840361][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1052.847341][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1052.854793][T22784] Pass: 21120629 Run:21120799 [ 1052.859715][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1052.869614][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1052.879683][T22784] Call Trace: [ 1052.882955][T22784] [ 1052.885879][T22784] dump_stack_lvl+0xd1/0x138 [ 1052.890479][T22784] mt_find.cold+0x8b/0x90 [ 1052.894841][T22784] ? mas_find+0x1d0/0x1d0 [ 1052.899177][T22784] find_vma+0x10c/0x1b0 [ 1052.903326][T22784] ? can_vma_merge_before+0x390/0x390 [ 1052.908722][T22784] ? walk_page_test+0x78/0x180 [ 1052.913495][T22784] walk_page_range+0x2b1/0x4a0 [ 1052.918271][T22784] ? __walk_page_range+0x780/0x780 [ 1052.923517][T22784] mlock_fixup+0x650/0x810 [ 1052.928004][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1052.933264][T22784] ? mlock_fixup+0x810/0x810 [ 1052.937869][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1052.943776][T22784] do_mlock+0x25a/0x6d0 [ 1052.947955][T22784] ? folio_evictable+0x270/0x270 [ 1052.952909][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1052.958805][T22784] __x64_sys_mlock+0x59/0x80 [ 1052.963399][T22784] do_syscall_64+0x39/0xb0 [ 1052.967859][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1052.973804][T22784] RIP: 0033:0x7feaf548c0c9 [ 1052.978247][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1052.997873][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1053.006307][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1053.014291][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1053.022278][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1053.030265][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.038252][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1053.046259][T22784] [ 1053.053402][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1053.066225][T22784] BUG at mt_find:6473 (1) [ 1053.070844][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1053.084757][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1053.127111][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1053.188678][T22784] 0-536866815: 0000000000000000 [ 1053.194909][ T5176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.205893][T22784] 536866816-536870911: ffff888094eb2460 [ 1053.211913][T22784] 536870912-553631743: ffff888094eb2540 [ 1053.217834][T22784] 553631744-553644031: 0000000000000000 [ 1053.223816][ T5176] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.233683][ T5176] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1053.244853][T22784] 553644032-553631743: ffff888076c687e0 [ 1053.250910][T22784] 553631744-553648127: ffff888076c689a0 [ 1053.256866][T22784] 553648128-553652223: ffff888094eb2620 [ 1053.262902][ T5176] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1053.272747][T22784] 553652224-116820934655: 0000000000000000 [ 1053.278931][T22784] 116820934656-116825128959: [ 1053.279132][ T5176] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1053.293921][T22784] ffff888094eb2700 [ 1053.297640][T22784] 116825128960-93824997462015: 0000000000000000 [ 1053.304358][ T5176] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1053.314139][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1053.321050][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1053.327951][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1053.337167][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1053.394075][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1053.401163][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1053.408134][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1053.415468][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1053.422509][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1053.429755][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1053.436719][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1053.447545][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1053.454998][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1053.462006][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1053.470278][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1053.477357][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1053.484584][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1053.491848][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1053.498788][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1053.552936][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1053.560357][ T5176] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1053.569058][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1053.569619][ T5176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.576409][T22784] 140647128059904-140647128190975: [ 1053.584503][ T5176] usb 1-1: Product: syz [ 1053.584527][ T5176] usb 1-1: Manufacturer: syz [ 1053.584554][ T5176] usb 1-1: SerialNumber: syz [ 1053.603719][T22784] ffff888076c680e0 [ 1053.607453][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1053.614522][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1053.621555][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1053.628519][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1053.635778][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1053.642929][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1053.652266][T22784] Pass: 21120629 Run:21120800 [ 1053.657013][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1053.666921][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1053.676994][T22784] Call Trace: [ 1053.680281][T22784] [ 1053.683236][T22784] dump_stack_lvl+0xd1/0x138 [ 1053.687884][T22784] mt_find.cold+0x8b/0x90 [ 1053.692220][T22784] ? mas_find+0x1d0/0x1d0 [ 1053.696561][T22784] find_vma+0x10c/0x1b0 [ 1053.700732][T22784] ? can_vma_merge_before+0x390/0x390 [ 1053.706135][T22784] ? walk_page_test+0x78/0x180 [ 1053.710931][T22784] walk_page_range+0x2b1/0x4a0 [ 1053.715699][T22784] ? __walk_page_range+0x780/0x780 [ 1053.720851][T22784] mlock_fixup+0x650/0x810 [ 1053.725336][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1053.730587][T22784] ? mlock_fixup+0x810/0x810 [ 1053.735223][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1053.741146][T22784] do_mlock+0x25a/0x6d0 [ 1053.745393][T22784] ? folio_evictable+0x270/0x270 [ 1053.750402][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1053.756341][T22784] __x64_sys_mlock+0x59/0x80 [ 1053.760950][T22784] do_syscall_64+0x39/0xb0 [ 1053.765418][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1053.771357][T22784] RIP: 0033:0x7feaf548c0c9 [ 1053.775790][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1053.795401][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1053.803828][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1053.811870][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1053.819852][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1053.827848][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.835830][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1053.838511][T24656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.843830][T22784] [ 1053.846716][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1053.862081][T22784] BUG at mt_find:6473 (1) [ 1053.866438][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1053.875053][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1053.891611][T24656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.912142][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1053.959279][ T5176] cdc_ncm 1-1:1.0: bind() failure [ 1053.979064][T22784] 0-536866815: 0000000000000000 [ 1053.981451][ T5176] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1053.984303][T22784] 536866816-536870911: ffff888094eb2460 [ 1053.984334][T22784] 536870912-553631743: ffff888094eb2540 [ 1053.991843][ T5176] cdc_ncm 1-1:1.1: bind() failure [ 1054.005152][T22784] 553631744-553644031: 0000000000000000 [ 1054.022296][ T5176] usb 1-1: USB disconnect, device number 22 [ 1054.023330][T22784] 553644032-553631743: ffff888076c687e0 [ 1054.038454][T22784] 553631744-553648127: ffff888076c689a0 [ 1054.050264][T22784] 553648128-553652223: ffff888094eb2620 [ 1054.056211][T22784] 553652224-116820934655: 0000000000000000 [ 1054.062812][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1054.069681][T22784] 116825128960-93824997462015: 0000000000000000 [ 1054.076361][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1054.083416][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1054.090658][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1054.097730][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1054.155088][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1054.163516][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1054.171234][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1054.178269][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1054.185508][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1054.194028][ T1203] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.199389][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1054.200353][ T1203] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.207212][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1054.230486][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1054.237539][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1054.245028][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1054.252963][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1054.263649][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1054.271669][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1054.278652][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1054.285700][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1054.335628][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1054.342683][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1054.349754][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1054.356736][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1054.363770][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1054.374467][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1054.381665][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1054.388626][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1054.395642][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1054.403160][T22784] Pass: 21120653 Run:21120825 [ 1054.407847][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1054.417733][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1054.427782][T22784] Call Trace: [ 1054.431059][T22784] [ 1054.433984][T22784] dump_stack_lvl+0xd1/0x138 [ 1054.438589][T22784] mt_find.cold+0x8b/0x90 14:33:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) 14:33:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) 14:33:58 executing program 3: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-\'^#\x00') 14:33:58 executing program 5: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:58 executing program 2: io_setup(0x10000, &(0x7f0000000180)) io_setup(0x2, &(0x7f0000000040)) 14:33:58 executing program 4: socketpair(0xa, 0x3, 0xff, &(0x7f0000000040)) [ 1054.442921][T22784] ? mas_find+0x1d0/0x1d0 [ 1054.447260][T22784] find_vma+0x10c/0x1b0 [ 1054.451413][T22784] ? can_vma_merge_before+0x390/0x390 [ 1054.456782][T22784] ? walk_page_test+0x78/0x180 [ 1054.461563][T22784] walk_page_range+0x2b1/0x4a0 [ 1054.466377][T22784] ? __walk_page_range+0x780/0x780 [ 1054.471552][T22784] mlock_fixup+0x650/0x810 [ 1054.476043][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1054.481306][T22784] ? mlock_fixup+0x810/0x810 [ 1054.485949][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1054.491884][T22784] do_mlock+0x25a/0x6d0 [ 1054.496080][T22784] ? folio_evictable+0x270/0x270 [ 1054.501063][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1054.506988][T22784] __x64_sys_mlock+0x59/0x80 [ 1054.511603][T22784] do_syscall_64+0x39/0xb0 [ 1054.516053][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1054.521971][T22784] RIP: 0033:0x7feaf548c0c9 [ 1054.526405][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1054.546029][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1054.554460][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1054.562444][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1054.570428][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1054.578409][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.586394][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1054.594401][T22784] 14:33:58 executing program 4: socketpair(0xa, 0x3, 0xff, &(0x7f0000000040)) 14:33:58 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pselect6(0x40, &(0x7f0000001080), &(0x7f00000010c0)={0x1f}, 0x0, 0x0, 0x0) 14:33:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3e0, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 14:33:59 executing program 0: r0 = socket(0xa, 0x3, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xb, 0x0, 0x0) [ 1054.679053][T22784] index not increased! 20ffc000 <= 20ffc000 14:33:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3e0, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 14:33:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 14:33:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x2}, 0x48) 14:33:59 executing program 3: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) capset(0x0, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000580)={0x9}, &(0x7f00000005c0)={0x6, 0x4000000000, 0x0, 0x3, 0x8, 0x7}, 0x0, &(0x7f0000000640)={0x0, 0x3938700}, &(0x7f00000006c0)={&(0x7f0000000680)={[0x12a9]}, 0x8}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0}) 14:33:59 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000002280)='./binderfs/binder0\x00', 0x0, 0x0) [ 1054.804958][T22784] BUG at mt_find:6473 (1) 14:33:59 executing program 5: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:33:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3e0, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff, 0x0, 0x72}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) [ 1054.838230][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:33:59 executing program 2: capset(&(0x7f0000000800)={0x20071026}, 0x0) [ 1054.875384][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:33:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x9c4a62e34f547be3}, 0x14}}, 0x0) 14:33:59 executing program 0: pselect6(0x40, &(0x7f0000000ac0), 0x0, &(0x7f0000000b40)={0x8}, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={[0xfffffffffffffff8]}, 0x8}) [ 1054.923269][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:33:59 executing program 4: syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:33:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {0xff0f000000000000}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 14:33:59 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) [ 1055.005893][T24708] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 14:33:59 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000580), 0x0, &(0x7f0000000600)={0x9}, &(0x7f0000000640)={0x0, 0x3938700}, 0x0) 14:33:59 executing program 5: r0 = syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) [ 1055.160438][T22784] 0-536866815: 0000000000000000 [ 1055.167071][T22784] 536866816-536870911: ffff888094eb2460 [ 1055.177088][T22784] 536870912-553631743: ffff888094eb2540 [ 1055.189559][T22784] 553631744-553644031: 0000000000000000 [ 1055.195684][T22784] 553644032-553631743: ffff888076c687e0 [ 1055.204489][T22784] 553631744-553648127: ffff888076c689a0 [ 1055.217769][T22784] 553648128-553652223: ffff888094eb2620 [ 1055.225922][T22784] 553652224-116820934655: 0000000000000000 [ 1055.239231][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1055.245800][T22784] 116825128960-93824997462015: 0000000000000000 [ 1055.252589][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1055.260201][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1055.267136][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1055.274247][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1055.330863][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1055.337957][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1055.345254][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1055.353380][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1055.360644][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1055.367678][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1055.374945][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1055.382302][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1055.390718][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1055.397752][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1055.405355][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1055.412517][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1055.419630][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1055.426659][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1055.433757][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1055.485379][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1055.495936][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1055.503330][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1055.510639][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1055.517679][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1055.525165][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1055.532728][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1055.540044][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1055.547076][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1055.554982][T22784] Pass: 21131962 Run:21132135 [ 1055.560050][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1055.569977][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1055.580046][T22784] Call Trace: [ 1055.583323][T22784] [ 1055.586248][T22784] dump_stack_lvl+0xd1/0x138 [ 1055.590871][T22784] mt_find.cold+0x8b/0x90 [ 1055.595212][T22784] ? mas_find+0x1d0/0x1d0 [ 1055.599550][T22784] find_vma+0x10c/0x1b0 [ 1055.603704][T22784] ? can_vma_merge_before+0x390/0x390 [ 1055.609073][T22784] ? walk_page_test+0x78/0x180 [ 1055.613838][T22784] walk_page_range+0x2b1/0x4a0 [ 1055.618606][T22784] ? __walk_page_range+0x780/0x780 [ 1055.623758][T22784] mlock_fixup+0x650/0x810 [ 1055.628242][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1055.633504][T22784] ? mlock_fixup+0x810/0x810 [ 1055.638120][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1055.644017][T22784] do_mlock+0x25a/0x6d0 [ 1055.648179][T22784] ? folio_evictable+0x270/0x270 [ 1055.653124][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1055.659033][T22784] __x64_sys_mlock+0x59/0x80 [ 1055.663619][T22784] do_syscall_64+0x39/0xb0 [ 1055.668040][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1055.673956][T22784] RIP: 0033:0x7feaf548c0c9 [ 1055.678405][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1055.698045][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1055.706459][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 14:34:00 executing program 3: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000006c0), &(0x7f0000000700)={'enc=', 'pkcs1', ' hash=', {'sha224-avx\x00'}}, 0x0, 0x0) 14:34:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {0xff0f000000000000}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 14:34:00 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f00000006c0), 0x40400, 0x0) 14:34:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 14:34:00 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:34:00 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1055.714428][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1055.722408][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1055.730421][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.738432][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1055.746449][T22784] 14:34:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000bc0), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x2201, 0x0) 14:34:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x4b8, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {0xff0f000000000000}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 14:34:00 executing program 4: openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x242, 0x0) 14:34:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}, 0x300}, 0x0) 14:34:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/258, 0x102}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) move_pages(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000336000/0x1000)=nil], &(0x7f000026bfec), &(0x7f0000000140)=[0x0], 0x0) [ 1055.849113][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1055.866885][T22784] BUG at mt_find:6473 (1) 14:34:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r1}}, 0x18) [ 1055.904018][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e 14:34:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10}}) [ 1055.946841][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 14:34:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:00 executing program 0: setregid(0xee01, 0xee00) setregid(0xee00, 0x0) [ 1055.994411][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c 14:34:00 executing program 3: setregid(0xee01, 0xee00) setregid(0xee01, 0xee00) [ 1056.069892][ T5203] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1056.095052][T22784] 0-536866815: 0000000000000000 [ 1056.121341][T22784] 536866816-536870911: ffff888094eb2460 [ 1056.131519][T22784] 536870912-553631743: ffff888094eb2540 [ 1056.149131][T22784] 553631744-553644031: 0000000000000000 [ 1056.186892][T22784] 553644032-553631743: ffff888076c687e0 [ 1056.193472][T22784] 553631744-553648127: ffff888076c689a0 [ 1056.200937][T22784] 553648128-553652223: ffff888094eb2620 [ 1056.207062][T22784] 553652224-116820934655: 0000000000000000 [ 1056.213873][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1056.220855][T22784] 116825128960-93824997462015: 0000000000000000 [ 1056.227542][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1056.234514][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1056.241542][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1056.248502][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1056.316004][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1056.323068][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1056.330135][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1056.337102][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1056.344115][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1056.351115][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1056.358058][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1056.359182][ T5203] usb 3-1: Using ep0 maxpacket: 32 [ 1056.365095][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1056.377139][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1056.384193][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1056.391197][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1056.398155][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1056.405201][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1056.415012][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1056.422095][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1056.472156][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1056.479403][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1056.486393][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1056.493675][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1056.500864][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1056.507955][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1056.516863][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1056.525250][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1056.533061][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1056.539270][ T5203] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1056.540696][T22784] Pass: 21139843 Run:21140017 [ 1056.550959][ T5203] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1056.554076][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1056.570577][ T5203] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1056.573834][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1056.573854][T22784] Call Trace: [ 1056.573863][T22784] [ 1056.573875][T22784] dump_stack_lvl+0xd1/0x138 [ 1056.603532][T22784] mt_find.cold+0x8b/0x90 [ 1056.607871][T22784] ? mas_find+0x1d0/0x1d0 [ 1056.612230][T22784] find_vma+0x10c/0x1b0 [ 1056.616409][T22784] ? can_vma_merge_before+0x390/0x390 [ 1056.621810][T22784] ? walk_page_test+0x78/0x180 [ 1056.626609][T22784] walk_page_range+0x2b1/0x4a0 [ 1056.631405][T22784] ? __walk_page_range+0x780/0x780 [ 1056.636564][T22784] mlock_fixup+0x650/0x810 [ 1056.641020][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1056.646253][T22784] ? mlock_fixup+0x810/0x810 [ 1056.650886][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1056.656810][T22784] do_mlock+0x25a/0x6d0 [ 1056.661003][T22784] ? folio_evictable+0x270/0x270 [ 1056.665980][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1056.671902][T22784] __x64_sys_mlock+0x59/0x80 [ 1056.676507][T22784] do_syscall_64+0x39/0xb0 [ 1056.680956][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1056.686869][T22784] RIP: 0033:0x7feaf548c0c9 [ 1056.691297][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1056.710918][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1056.719352][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1056.727336][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1056.735317][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1056.743298][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.751294][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1056.759306][T22784] [ 1056.769311][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1056.775251][T22784] BUG at mt_find:6473 (1) [ 1056.782703][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1056.791490][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1056.829393][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1056.881073][T22784] 0-536866815: 0000000000000000 [ 1056.886333][T22784] 536866816-536870911: ffff888094eb2460 [ 1056.892404][T22784] 536870912-553631743: ffff888094eb2540 [ 1056.898476][T22784] 553631744-553644031: 0000000000000000 [ 1056.904693][T22784] 553644032-553631743: ffff888076c687e0 [ 1056.911122][T22784] 553631744-553648127: ffff888076c689a0 [ 1056.917050][T22784] 553648128-553652223: ffff888094eb2620 [ 1056.923072][T22784] 553652224-116820934655: 0000000000000000 [ 1056.930002][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1056.936458][T22784] 116825128960-93824997462015: 0000000000000000 [ 1056.943145][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1056.950217][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1056.957092][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1056.964075][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1057.019641][ T5203] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.029427][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1057.036426][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1057.043574][ T5203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.051669][ T5203] usb 3-1: Product: syz [ 1057.055707][T22784] 140647103201280-140647105298431: [ 1057.055834][ T5203] usb 3-1: Manufacturer: syz [ 1057.055859][ T5203] usb 3-1: SerialNumber: syz [ 1057.062061][T22784] ffff888094eb2b60 [ 1057.077989][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1057.085127][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1057.093142][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1057.100717][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1057.107691][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1057.115643][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1057.123380][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1057.132200][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1057.139322][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1057.146305][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1057.153514][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1057.160596][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1057.211987][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1057.219042][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1057.226020][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1057.234399][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1057.241457][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1057.248419][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1057.255454][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1057.262449][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1057.269581][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1057.277010][T22784] Pass: 21139843 Run:21140018 [ 1057.281899][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1057.291809][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1057.301854][T22784] Call Trace: [ 1057.305123][T22784] [ 1057.308047][T22784] dump_stack_lvl+0xd1/0x138 [ 1057.312642][T22784] mt_find.cold+0x8b/0x90 [ 1057.316972][T22784] ? mas_find+0x1d0/0x1d0 [ 1057.321307][T22784] find_vma+0x10c/0x1b0 [ 1057.325464][T22784] ? can_vma_merge_before+0x390/0x390 [ 1057.330833][T22784] ? walk_page_test+0x78/0x180 [ 1057.335600][T22784] walk_page_range+0x2b1/0x4a0 [ 1057.340391][T22784] ? __walk_page_range+0x780/0x780 [ 1057.345561][T22784] mlock_fixup+0x650/0x810 [ 1057.350026][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1057.355262][T22784] ? mlock_fixup+0x810/0x810 [ 1057.359903][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1057.365832][T22784] do_mlock+0x25a/0x6d0 [ 1057.370024][T22784] ? folio_evictable+0x270/0x270 [ 1057.375003][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1057.380924][T22784] __x64_sys_mlock+0x59/0x80 [ 1057.385530][T22784] do_syscall_64+0x39/0xb0 [ 1057.389977][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1057.395911][T22784] RIP: 0033:0x7feaf548c0c9 [ 1057.400348][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1057.419972][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1057.428407][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1057.436390][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1057.444372][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1057.452372][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.460357][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1057.468361][T22784] [ 1057.489270][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1057.495214][T22784] BUG at mt_find:6473 (1) [ 1057.499996][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1057.508440][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1057.545897][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1057.597337][T22784] 0-536866815: 0000000000000000 [ 1057.603610][T22784] 536866816-536870911: ffff888094eb2460 [ 1057.609980][ T5203] usb 3-1: 0:2 : does not exist [ 1057.616085][T22784] 536870912-553631743: ffff888094eb2540 [ 1057.626211][T22784] 553631744-553644031: 0000000000000000 [ 1057.631680][ T5203] usb 3-1: USB disconnect, device number 17 [ 1057.640243][T22784] 553644032-553631743: ffff888076c687e0 [ 1057.659580][T22784] 553631744-553648127: ffff888076c689a0 [ 1057.660261][T24408] udevd[24408]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1057.668465][T22784] 553648128-553652223: ffff888094eb2620 [ 1057.704793][T22784] 553652224-116820934655: 0000000000000000 [ 1057.712042][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1057.718562][T22784] 116825128960-93824997462015: 0000000000000000 [ 1057.726245][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1057.733593][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1057.741138][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1057.748340][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1057.806632][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1057.814785][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1057.823151][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1057.830543][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1057.837567][T22784] 140647107395584-140647109492735: ffff888094eb2d20 [ 1057.844983][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1057.852546][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1057.859896][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1057.866922][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1057.874132][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1057.881376][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1057.888389][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1057.895585][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1057.903768][T22784] 140647115325440-140647127171071: ffff88802218f000 14:34:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x1}, 0x67) 14:34:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) 14:34:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:02 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}, 0x0) 14:34:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$unix(r0, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e) 14:34:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) [ 1057.911118][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1057.964909][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1057.972491][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1057.980376][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1057.987510][T22784] 140647128190976-140732348923903: 0000000000000000 14:34:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:02 executing program 4: r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 1058.019042][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1058.029531][ T28] INFO: task syz-executor.5:22782 blocked for more than 143 seconds. [ 1058.037662][ T28] Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1058.046975][T22784] 140732349059072-140732349100031: 0000000000000000 14:34:02 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001400)='.pending_reads\x00', 0x286c2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0xa0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000380)) [ 1058.064656][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 14:34:02 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001400)='.pending_reads\x00', 0x286c2, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) [ 1058.092785][ T28] task:syz-executor.5 state:D stack:28256 pid:22782 ppid:5124 flags:0x00000004 [ 1058.114768][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1058.119267][ T28] Call Trace: [ 1058.135766][ T28] [ 1058.144595][ T28] __schedule+0x25d0/0x5a70 14:34:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)='0', 0x1}], 0x1) [ 1058.166265][ T28] ? io_schedule_timeout+0x150/0x150 [ 1058.181120][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 1058.184307][T22784] 140732349116416-140732349124607: [ 1058.194088][ T28] schedule+0xde/0x1b0 [ 1058.207430][T22784] ffff88807b4c5ee0 14:34:02 executing program 2: r0 = epoll_create1(0x0) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) [ 1058.221519][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1058.230878][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 1058.242741][T22784] Pass: 21144795 Run:21144971 [ 1058.253925][ T28] ? down_write+0x220/0x220 [ 1058.267586][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1058.270426][ T28] ? lock_release+0x810/0x810 [ 1058.277512][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1058.277532][T22784] Call Trace: [ 1058.277542][T22784] [ 1058.277553][T22784] dump_stack_lvl+0xd1/0x138 [ 1058.303145][T22784] mt_find.cold+0x8b/0x90 [ 1058.303906][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1058.307512][T22784] ? mas_find+0x1d0/0x1d0 [ 1058.307568][T22784] find_vma+0x10c/0x1b0 [ 1058.321336][T22784] ? can_vma_merge_before+0x390/0x390 [ 1058.326740][T22784] ? walk_page_test+0x78/0x180 [ 1058.331543][T22784] walk_page_range+0x2b1/0x4a0 [ 1058.336340][T22784] ? __walk_page_range+0x780/0x780 [ 1058.341498][T22784] mlock_fixup+0x650/0x810 [ 1058.345954][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1058.351191][T22784] ? mlock_fixup+0x810/0x810 [ 1058.355841][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1058.361770][T22784] do_mlock+0x25a/0x6d0 [ 1058.365966][T22784] ? folio_evictable+0x270/0x270 [ 1058.370944][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1058.376863][T22784] __x64_sys_mlock+0x59/0x80 [ 1058.381471][T22784] do_syscall_64+0x39/0xb0 [ 1058.385916][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1058.391833][T22784] RIP: 0033:0x7feaf548c0c9 [ 1058.396259][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1058.415881][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1058.424316][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1058.432300][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1058.440280][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1058.448263][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.456245][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1058.464260][T22784] 14:34:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x72}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) [ 1058.473974][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1058.481069][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1058.486831][ T28] ? lock_acquire+0x32/0xc0 [ 1058.492293][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1058.497771][ T28] down_read+0xe6/0x450 [ 1058.502370][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1058.527201][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 1058.534648][ T28] do_user_addr_fault+0xa51/0x1210 [ 1058.540189][T22784] BUG at mt_find:6473 (1) [ 1058.544786][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1058.550806][ T28] exc_page_fault+0x98/0x170 [ 1058.555669][ T28] asm_exc_page_fault+0x26/0x30 [ 1058.572992][ T28] RIP: 0033:0x7feaf54276c6 [ 1058.583568][ T28] RSP: 002b:00007ffecdac6688 EFLAGS: 00010287 [ 1058.602355][ T28] RAX: 0000001b33123000 RBX: 00007feaf55ac018 RCX: 0000001b33120000 [ 1058.611285][ T28] RDX: 0000001b33123004 RSI: 0000001b33122e50 RDI: 00000000b7af1b16 [ 1058.619770][ T28] RBP: 00000000b7af1b16 R08: 0000001b33520000 R09: 00000000b7af1b1a [ 1058.626690][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1058.628481][ T28] R10: 00007ffecdad3090 R11: 000000000002b9ca R12: 00007feaf55a0000 [ 1058.644519][T24790] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1058.645485][T22784] 0-18446744073709551615: [ 1058.672614][T24791] xt_hashlimit: overflow, try lower: 0/0 [ 1058.684361][ T28] R13: 0000000000000001 R14: 00000000000021cd R15: ffffffff89b6def5 [ 1058.693195][ T28] ? mas_wr_modify+0x3d5/0x16d0 [ 1058.697391][T22784] node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 [ 1058.698100][ T28] [ 1058.698153][ T28] [ 1058.698153][ T28] Showing all threads with locks held in the system: [ 1058.698167][ T28] task:rcu_tasks_kthre state:I stack:29040 pid:12 ppid:2 flags:0x00004000 [ 1058.734451][T24790] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1058.743444][ T28] Call Trace: [ 1058.746759][ T28] [ 1058.747451][T22784] contents: [ 1058.749868][ T28] __schedule+0x25d0/0x5a70 [ 1058.749906][ T28] ? lock_chain_count+0x20/0x20 [ 1058.749949][ T28] ? find_held_lock+0x2d/0x110 [ 1058.759327][T22784] 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1058.807579][ T28] ? io_schedule_timeout+0x150/0x150 [ 1058.813431][ T28] ? mark_held_locks+0x9f/0xe0 [ 1058.818584][ T28] schedule+0xde/0x1b0 [ 1058.822769][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 1058.826945][T22784] 0-140647092715519: [ 1058.827652][ T28] rcu_tasks_kthread+0x77/0xa0 [ 1058.827686][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 1058.843212][ T28] kthread+0x2e8/0x3a0 [ 1058.847170][T22784] node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 [ 1058.847385][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1058.847427][ T28] ret_from_fork+0x1f/0x30 [ 1058.885267][T22784] contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1058.891333][T24796] xt_hashlimit: overflow, try lower: 0/0 [ 1058.939061][ T28] [ 1058.942131][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1058.947443][ T28] #0: ffffffff8c793470 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xcd0 [ 1058.967283][T22784] 0-536866815: 0000000000000000 [ 1058.976942][ T28] task:rcu_tasks_trace state:I stack:29208 pid:13 ppid:2 flags:0x00004000 [ 1058.977202][T22784] 536866816-536870911: [ 1058.997224][ T28] Call Trace: [ 1058.999834][T22784] ffff888094eb2460 [ 1059.010258][T22784] 536870912-553631743: ffff888094eb2540 [ 1059.016518][T22784] 553631744-553644031: 0000000000000000 [ 1059.017628][ T28] [ 1059.023196][T22784] 553644032-553631743: [ 1059.025578][ T28] __schedule+0x25d0/0x5a70 [ 1059.025614][ T28] ? lock_chain_count+0x20/0x20 [ 1059.025662][ T28] ? find_held_lock+0x2d/0x110 [ 1059.030848][T22784] ffff888076c687e0 [ 1059.045839][ T28] ? io_schedule_timeout+0x150/0x150 [ 1059.054136][T22784] 553631744-553648127: ffff888076c689a0 [ 1059.070446][T22784] 553648128-553652223: ffff888094eb2620 [ 1059.077072][T22784] 553652224-116820934655: 0000000000000000 [ 1059.084390][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1059.090587][ T28] ? mark_held_locks+0x9f/0xe0 [ 1059.091529][T22784] 116825128960-93824997462015: [ 1059.095660][ T28] schedule+0xde/0x1b0 [ 1059.101331][T22784] 0000000000000000 [ 1059.109331][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1059.112497][ T28] rcu_tasks_one_gp+0x484/0xcd0 [ 1059.116320][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1059.126107][ T28] rcu_tasks_kthread+0x77/0xa0 [ 1059.128578][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1059.136936][ T28] ? synchronize_rcu_tasks_trace+0x70/0x70 [ 1059.141257][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1059.151006][ T28] kthread+0x2e8/0x3a0 [ 1059.208819][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1059.216347][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1059.216612][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1059.223867][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1059.236576][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1059.240286][ T28] ret_from_fork+0x1f/0x30 [ 1059.244303][T22784] 140647107395584-140647109492735: [ 1059.247961][ T28] [ 1059.247976][ T28] 1 lock held by rcu_tasks_trace/13: [ 1059.247994][ T28] #0: ffffffff8c793170 (rcu_tasks_trace.tasks_gp_mutex [ 1059.254106][T22784] ffff888094eb2d20 [ 1059.267350][ T28] ){+.+.}-{3:3} [ 1059.271051][T22784] 140647109492736-140647113687039: [ 1059.272893][ T28] , at: rcu_tasks_one_gp+0x31/0xcd0 [ 1059.272946][ T28] task:kworker/1:2 state:D stack:22656 pid:1731 ppid:2 flags:0x00004000 14:34:02 executing program 2: r0 = fsopen(&(0x7f0000000000)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 14:34:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:03 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x8001, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) 14:34:03 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000093333b4037256810000000000301090212"], 0x0) 14:34:03 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, 0x0, 0x0) 14:34:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) [ 1059.276529][T22784] ffff888094eb2e00 [ 1059.291839][ T28] Workqueue: usb_hub_wq hub_event [ 1059.297219][ T1731] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1059.305529][ T28] [ 1059.319167][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1059.326165][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1059.339026][ T28] Call Trace: [ 1059.342363][ T28] [ 1059.345329][ T28] __schedule+0x25d0/0x5a70 [ 1059.359045][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1059.366054][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1059.375164][ T28] ? psi_task_switch+0x2de/0x950 [ 1059.389031][ T28] ? find_held_lock+0x2d/0x110 [ 1059.393874][ T28] ? __schedule+0x2548/0x5a70 [ 1059.398587][ T28] ? lock_downgrade+0x6e0/0x6e0 [ 1059.409017][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1059.416009][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1059.429039][ T28] ? __schedule+0x25d0/0x5a70 [ 1059.429289][T22784] 140647115304960-140647115325439: [ 1059.433761][ T28] ? mark_held_locks+0x9f/0xe0 [ 1059.433802][ T28] ? find_held_lock+0x2d/0x110 [ 1059.455636][T22784] 0000000000000000 [ 1059.457782][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 1059.464794][ T28] ? io_schedule_timeout+0x150/0x150 [ 1059.464993][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1059.481087][ T28] ? mark_held_locks+0x9f/0xe0 [ 1059.492267][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1059.495953][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1059.572593][ T28] ? __schedule+0x25d0/0x5a70 [ 1059.577452][ T28] ? mark_held_locks+0x9f/0xe0 [ 1059.593565][ T28] ? usb_start_wait_urb+0x144/0x4b0 [ 1059.604522][ T28] ? usb_api_blocking_completion+0xa0/0xa0 [ 1059.614273][ T28] ? memset+0x24/0x50 [ 1059.614343][T22784] 140647127171072-140647128055807: [ 1059.618407][ T28] ? usb_control_msg+0x320/0x4a0 [ 1059.623045][T22784] 0000000000000000 [ 1059.631512][ T28] ? usb_start_wait_urb+0x4b0/0x4b0 [ 1059.639440][ T28] ? mark_held_locks+0x9f/0xe0 [ 1059.639521][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1059.649970][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.659183][ T28] ? usb_new_device+0x56a/0x7b0 [ 1059.664810][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1059.669231][ T28] ? wait_for_completion_io_timeout+0x20/0x20 [ 1059.678733][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1059.682718][ T28] ? hub_disconnect+0x510/0x510 [ 1059.700616][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1059.703532][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1059.724061][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1059.729081][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1059.741765][ T1731] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.743994][ T28] ? hub_event+0x2d75/0x4840 [ 1059.752333][ T1731] usb 4-1: config 0 has no interfaces? [ 1059.762456][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1059.765266][ T28] ? hub_port_debounce+0x3b0/0x3b0 [ 1059.769476][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1059.769512][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1059.769540][T22784] Pass: 21148776 Run:21148953 [ 1059.769555][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1059.777752][ T28] ? lock_release+0x810/0x810 [ 1059.781576][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1059.781595][T22784] Call Trace: [ 1059.781605][T22784] [ 1059.781616][T22784] dump_stack_lvl+0xd1/0x138 [ 1059.781659][T22784] mt_find.cold+0x8b/0x90 [ 1059.781703][T22784] ? mas_find+0x1d0/0x1d0 [ 1059.781754][T22784] find_vma+0x10c/0x1b0 [ 1059.781791][T22784] ? can_vma_merge_before+0x390/0x390 [ 1059.781826][T22784] ? walk_page_test+0x78/0x180 [ 1059.802033][ T28] ? process_one_work+0x8a1/0x1750 [ 1059.803714][T22784] walk_page_range+0x2b1/0x4a0 [ 1059.803763][T22784] ? __walk_page_range+0x780/0x780 [ 1059.808486][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1059.818473][T22784] mlock_fixup+0x650/0x810 [ 1059.818530][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1059.818577][T22784] ? mlock_fixup+0x810/0x810 [ 1059.818634][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1059.818682][T22784] do_mlock+0x25a/0x6d0 [ 1059.818730][T22784] ? folio_evictable+0x270/0x270 [ 1059.833056][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 1059.833829][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1059.838253][ T28] ? process_one_work+0x9bf/0x1750 [ 1059.842308][T22784] __x64_sys_mlock+0x59/0x80 [ 1059.842338][T22784] do_syscall_64+0x39/0xb0 [ 1059.842382][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1059.842418][T22784] RIP: 0033:0x7feaf548c0c9 [ 1059.842442][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1059.842471][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1059.842499][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1059.856969][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1059.857711][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1059.862614][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1059.867551][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1059.867573][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.867592][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1059.882517][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1059.882725][T22784] [ 1059.887444][ T28] ? lock_acquire+0x32/0xc0 [ 1060.009252][ T1731] usb 4-1: New USB device found, idVendor=2537, idProduct=1068, bcdDevice= 0.00 [ 1060.027309][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1060.046313][ T1731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.055754][ T1731] usb 4-1: SerialNumber: syz [ 1060.063776][T22784] BUG at mt_find:6473 (1) [ 1060.068151][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1060.070053][ T1731] usb 4-1: config 0 descriptor?? [ 1060.086484][T22784] 0-18446744073709551615: node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 contents: 93708172333056 20480 18446603341360427008 0 0 0 0 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1060.141405][T22784] 0-140647092715519: node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 contents: 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1060.199001][T22784] 0-536866815: 0000000000000000 [ 1060.219091][T22784] 536866816-536870911: ffff888094eb2460 [ 1060.225066][T22784] 536870912-553631743: ffff888094eb2540 [ 1060.236939][ T28] ? schedule+0xde/0x1b0 [ 1060.241024][T22784] 553631744-553644031: 0000000000000000 [ 1060.247059][ T28] ? worker_thread+0x160/0x1090 [ 1060.247137][T22784] 553644032-553631743: [ 1060.259078][ T28] ? process_one_work+0x1750/0x1750 [ 1060.268842][ T28] ? kthread+0x2e8/0x3a0 [ 1060.279015][T22784] ffff888076c687e0 [ 1060.282775][T22784] 553631744-553648127: ffff888076c689a0 [ 1060.288711][T22784] 553648128-553652223: ffff888094eb2620 [ 1060.301748][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1060.306444][T22784] 553652224-116820934655: 0000000000000000 [ 1060.314408][ T28] ? ret_from_fork+0x1f/0x30 [ 1060.324866][ T28] [ 1060.328093][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1060.331497][ T28] no locks held by kworker/1:2/1731. [ 1060.335912][T22784] 116825128960-93824997462015: 0000000000000000 [ 1060.348915][ T28] task:getty state:S stack:23336 pid:4758 ppid:1 flags:0x00000000 [ 1060.369036][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1060.384075][ T28] Call Trace: [ 1060.388440][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1060.392505][ T28] [ 1060.395433][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1060.409800][ T28] __schedule+0x25d0/0x5a70 [ 1060.417046][T22784] 140647092715520-140647127171071: node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1060.424977][ T28] ? __flush_work+0x8b8/0xb60 [ 1060.477292][ T5882] usb 4-1: USB disconnect, device number 18 [ 1060.487297][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1060.496064][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1060.513736][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1060.527718][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1060.535256][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1060.541800][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 1060.542975][T22784] 140647107395584-140647109492735: [ 1060.547028][ T28] ? io_schedule_timeout+0x150/0x150 [ 1060.547081][ T28] schedule+0xde/0x1b0 [ 1060.558170][T22784] ffff888094eb2d20 [ 1060.562575][ T28] schedule_timeout+0x1e1/0x2a0 [ 1060.571061][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 1060.572531][T22784] 140647109492736-140647113687039: [ 1060.576290][ T28] ? __up_read+0x192/0x720 [ 1060.576334][ T28] ? down_read+0x19c/0x450 [ 1060.592144][ T28] ? up_write+0x520/0x520 [ 1060.596544][ T28] wait_woken+0x197/0x200 [ 1060.601222][T22784] ffff888094eb2e00 [ 1060.605198][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1060.615728][ T28] n_tty_read+0x1055/0x13e0 [ 1060.621227][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1060.628316][ T28] ? n_tty_receive_buf_closing+0x5b0/0x5b0 [ 1060.634613][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1060.636775][ T28] ? __init_waitqueue_head+0x150/0x150 [ 1060.641910][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1060.648603][ T28] tty_read+0x30e/0x5a0 [ 1060.654698][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1060.665991][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1060.667356][ T28] ? do_SAK+0x70/0x70 [ 1060.673360][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1060.677667][ T28] ? fsnotify_perm.part.0+0x221/0x610 [ 1060.684766][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1060.697040][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1060.700544][ T28] ? apparmor_file_permission+0x272/0x4e0 [ 1060.750696][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1060.761060][ T28] ? security_file_permission+0xaf/0xd0 [ 1060.766893][ T28] vfs_read+0x681/0x930 [ 1060.771271][ T28] ? kernel_read+0x1c0/0x1c0 [ 1060.773741][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1060.776065][ T28] ? __fget_light+0x20a/0x270 [ 1060.776108][ T28] ksys_read+0x12b/0x250 [ 1060.790471][T22784] 140647128059904-140647128190975: [ 1060.792194][ T28] ? vfs_write+0xe10/0xe10 [ 1060.793339][T22784] ffff888076c680e0 [ 1060.797851][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1060.810686][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1060.814125][ T28] do_syscall_64+0x39/0xb0 [ 1060.825992][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1060.829147][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1060.833106][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1060.846406][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1060.846806][ T28] RIP: 0033:0x7f6b752f38fe [ 1060.856147][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1060.865391][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1060.872954][T22784] Pass: 21148798 Run:21148976 [ 1060.877991][ T28] RSP: 002b:00007ffd603b0d88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.886100][T22784] CPU: 0 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1060.886567][ T28] RAX: ffffffffffffffda RBX: 0000559198686910 RCX: 00007f6b752f38fe [ 1060.896299][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1060.896317][T22784] Call Trace: [ 1060.896327][T22784] [ 1060.896339][T22784] dump_stack_lvl+0xd1/0x138 [ 1060.904371][ T28] RDX: 0000000000000001 RSI: 00007ffd603b0da0 RDI: 0000000000000000 [ 1060.914359][T22784] mt_find.cold+0x8b/0x90 [ 1060.914411][T22784] ? mas_find+0x1d0/0x1d0 [ 1060.914460][T22784] find_vma+0x10c/0x1b0 [ 1060.917790][ T28] RBP: 0000559198686970 R08: 0000000000000007 R09: 0000559198687cd0 [ 1060.920649][T22784] ? can_vma_merge_before+0x390/0x390 [ 1060.920688][T22784] ? walk_page_test+0x78/0x180 [ 1060.920730][T22784] walk_page_range+0x2b1/0x4a0 [ 1060.920768][T22784] ? __walk_page_range+0x780/0x780 [ 1060.920826][T22784] mlock_fixup+0x650/0x810 [ 1060.920883][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1060.925625][ T28] R10: 0000000000000063 R11: 0000000000000246 R12: 00005591986869ac [ 1060.933441][T22784] ? mlock_fixup+0x810/0x810 [ 1060.933501][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1060.933545][T22784] do_mlock+0x25a/0x6d0 [ 1060.933591][T22784] ? folio_evictable+0x270/0x270 [ 1060.933646][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1060.933685][T22784] __x64_sys_mlock+0x59/0x80 [ 1060.940629][ T28] R13: 00007ffd603b0da0 R14: 0000000000000000 R15: 00005591986869ac [ 1060.942321][T22784] do_syscall_64+0x39/0xb0 [ 1060.946554][ T28] [ 1060.954447][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1060.954485][T22784] RIP: 0033:0x7feaf548c0c9 [ 1060.954509][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1060.968330][ T28] 2 locks held by getty/4758: [ 1060.969389][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1060.969420][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1060.969440][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1060.969457][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1060.969474][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.969490][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1060.969533][T22784] [ 1061.027767][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1061.037208][ T28] #0: [ 1061.046040][T22784] BUG at mt_find:6473 (1) [ 1061.052011][ T28] ffff88802795f098 [ 1061.083917][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1061.090306][ T28] (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 1061.090368][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 1061.090470][ T28] task:kworker/1:12 state:D stack:23704 pid:5883 ppid:2 flags:0x00004000 [ 1061.090514][ T28] Workqueue: rcu_gp wait_rcu_exp_gp [ 1061.114273][T22784] 0-18446744073709551615: [ 1061.114569][ T28] [ 1061.132544][T22784] node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 [ 1061.134569][ T28] Call Trace: [ 1061.134581][ T28] [ 1061.134599][ T28] __schedule+0x25d0/0x5a70 [ 1061.141846][T22784] contents: [ 1061.144602][ T28] ? mark_held_locks+0x9f/0xe0 [ 1061.161499][T22784] 93708172333056 [ 1061.169995][ T28] ? find_held_lock+0x2d/0x110 [ 1061.186692][T22784] 20480 [ 1061.188272][ T28] ? io_schedule_timeout+0x150/0x150 [ 1061.193188][T22784] 18446603341360427008 [ 1061.198181][ T28] ? mark_held_locks+0x9f/0xe0 [ 1061.211064][T22784] 0 [ 1061.212294][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1061.212338][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1061.217129][T22784] 0 [ 1061.221041][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 1061.253802][T22784] 0 [ 1061.258104][ T28] schedule+0xde/0x1b0 [ 1061.261713][T22784] 0 [ 1061.264593][ T28] schedule_timeout+0x14e/0x2a0 [ 1061.268308][T22784] 0 [ 1061.270333][ T28] ? usleep_range_state+0x1b0/0x1b0 [ 1061.275004][T22784] 0 [ 1061.277580][ T28] ? __next_timer_interrupt+0x2a0/0x2a0 [ 1061.285792][T22784] 0 [ 1061.288119][ T28] ? nh_res_bucket_migrate.cold+0x15/0x1b [ 1061.297416][T22784] | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1061.307705][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 1061.330176][T22784] 0-140647092715519: [ 1061.335800][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1061.342208][T22784] node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 [ 1061.346102][ T28] rcu_exp_wait_wake+0x2ab/0x1220 [ 1061.349291][T22784] contents: [ 1061.353910][ T28] ? rcu_exp_handler+0x390/0x390 [ 1061.367175][T22784] 0000000000000000 536866815 ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1061.369357][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1061.413569][ T28] ? rcu_gp_kthread+0x360/0x360 [ 1061.418477][ T28] ? sync_rcu_exp_select_cpus+0x3de/0xab0 [ 1061.424311][ T28] process_one_work+0x9bf/0x1750 [ 1061.429591][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1061.435422][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1061.441117][T22784] 0-536866815: 0000000000000000 [ 1061.446364][T22784] 536866816-536870911: ffff888094eb2460 [ 1061.447244][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1061.452525][T22784] 536870912-553631743: ffff888094eb2540 [ 1061.463544][T22784] 553631744-553644031: 0000000000000000 [ 1061.466614][ T28] ? lock_acquire+0x32/0xc0 [ 1061.469587][T22784] 553644032-553631743: ffff888076c687e0 [ 1061.475530][ T28] ? worker_thread+0x16d/0x1090 [ 1061.482521][T22784] 553631744-553648127: ffff888076c689a0 [ 1061.491391][T22784] 553648128-553652223: ffff888094eb2620 [ 1061.494650][ T28] worker_thread+0x669/0x1090 [ 1061.497381][T22784] 553652224-116820934655: 0000000000000000 [ 1061.504602][ T28] ? process_one_work+0x1750/0x1750 [ 1061.508713][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1061.522261][T22784] 116825128960-93824997462015: 0000000000000000 [ 1061.524757][ T28] kthread+0x2e8/0x3a0 [ 1061.528877][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1061.540521][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1061.546030][T22784] 93824997601280-140647092711423: 0000000000000000 [ 1061.553400][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1061.555604][ T28] ret_from_fork+0x1f/0x30 [ 1061.560841][T22784] 140647092715520-140647127171071: [ 1061.564890][ T28] [ 1061.564904][ T28] 2 locks held by kworker/1:12/5883: [ 1061.570693][T22784] node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e contents: ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1061.582073][ T28] #0: [ 1061.634959][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1061.645889][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1061.650188][ T28] ffff888012472538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x86d/0x1750 [ 1061.654711][T22784] 140647103201280-140647105298431: [ 1061.663120][ T28] #1: ffffc9000b5b7da8 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x8a1/0x1750 [ 1061.680249][ T28] task:kworker/u4:8 state:R running task stack:24480 pid:6282 ppid:2 flags:0x00004000 [ 1061.680623][T22784] ffff888094eb2b60 [ 1061.694975][ T28] Workqueue: 0x0 (events_unbound) [ 1061.700340][ T28] Call Trace: [ 1061.700401][T22784] 140647105298432-140647107395583: [ 1061.703621][ T28] [ 1061.703640][ T28] __schedule+0x25d0/0x5a70 [ 1061.717070][ T28] ? find_held_lock+0x2d/0x110 [ 1061.717128][T22784] ffff888094eb2c40 [ 1061.722183][ T28] ? io_schedule_timeout+0x150/0x150 [ 1061.725943][T22784] 140647107395584-140647109492735: [ 1061.731160][ T28] ? worker_thread+0x15b/0x1090 [ 1061.738021][T22784] ffff888094eb2d20 [ 1061.743138][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1061.752288][T22784] 140647109492736-140647113687039: ffff888094eb2e00 [ 1061.752847][ T28] schedule+0xde/0x1b0 [ 1061.764354][ T28] worker_thread+0x160/0x1090 [ 1061.765880][T22784] 140647113687040-140647113834495: ffff888094eb2ee0 [ 1061.769342][ T28] ? __kthread_parkme+0x163/0x220 [ 1061.776205][T22784] 140647113834496-140647114563583: ffff888029235c40 [ 1061.788335][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1061.789117][ T28] ? process_one_work+0x1750/0x1750 [ 1061.795366][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1061.807735][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1061.814772][T22784] 140647115268096-140647115304959: ffff88807a3a2380 [ 1061.822130][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1061.824251][ T28] kthread+0x2e8/0x3a0 [ 1061.829142][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1061.829172][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1061.844133][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1061.894042][T22784] 140647127171072-140647128055807: 0000000000000000 [ 1061.900890][ T28] ret_from_fork+0x1f/0x30 [ 1061.904745][T22784] 140647128055808-140647128059903: [ 1061.908781][ T28] [ 1061.908796][ T28] no locks held by kworker/u4:8/6282. [ 1061.914769][T22784] ffff888076c68000 [ 1061.927033][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1061.927786][ T28] task:syz-executor.5 state:D [ 1061.934475][T22784] 140647128190976-140732348923903: [ 1061.935464][ T28] stack:28256 pid:22782 ppid:5124 flags:0x00000004 [ 1061.949323][T22784] 0000000000000000 [ 1061.954515][ T28] Call Trace: [ 1061.959347][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1061.959806][ T28] [ 1061.959826][ T28] __schedule+0x25d0/0x5a70 [ 1061.966732][T22784] 140732349059072-140732349100031: [ 1061.969792][ T28] ? io_schedule_timeout+0x150/0x150 [ 1061.982627][T22784] 0000000000000000 [ 1061.985179][ T28] ? rwsem_down_read_slowpath+0x29f/0xb20 [ 1061.988886][T22784] 140732349100032-140732349116415: [ 1061.994717][ T28] schedule+0xde/0x1b0 [ 1061.994752][ T28] rwsem_down_read_slowpath+0x5a7/0xb20 [ 1062.011473][T22784] ffff88807b4c5000 [ 1062.012555][ T28] ? down_write+0x220/0x220 [ 1062.015212][T22784] 140732349116416-140732349124607: [ 1062.019788][ T28] ? lock_release+0x810/0x810 [ 1062.019822][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1062.019859][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1062.019895][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1062.039027][T22784] ffff88807b4c5ee0 [ 1062.041589][ T28] ? lock_acquire+0x32/0xc0 [ 1062.046703][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1062.046738][T22784] Pass: 21148830 Run:21149009 [ 1062.046755][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1062.046787][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1062.046805][T22784] Call Trace: [ 1062.046813][T22784] [ 1062.046824][T22784] dump_stack_lvl+0xd1/0x138 [ 1062.046870][T22784] mt_find.cold+0x8b/0x90 [ 1062.046914][T22784] ? mas_find+0x1d0/0x1d0 [ 1062.046967][T22784] find_vma+0x10c/0x1b0 [ 1062.046999][T22784] ? can_vma_merge_before+0x390/0x390 [ 1062.047037][T22784] ? walk_page_test+0x78/0x180 [ 1062.047079][T22784] walk_page_range+0x2b1/0x4a0 [ 1062.047122][T22784] ? __walk_page_range+0x780/0x780 [ 1062.047184][T22784] mlock_fixup+0x650/0x810 [ 1062.047241][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1062.047290][T22784] ? mlock_fixup+0x810/0x810 [ 1062.052848][ T28] ? do_user_addr_fault+0xa51/0x1210 [ 1062.055493][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1062.062931][ T28] down_read+0xe6/0x450 [ 1062.067490][T22784] do_mlock+0x25a/0x6d0 [ 1062.077421][ T28] ? rwsem_down_read_slowpath+0xb20/0xb20 [ 1062.087484][T22784] ? folio_evictable+0x270/0x270 [ 1062.087548][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1062.090915][ T28] do_user_addr_fault+0xa51/0x1210 [ 1062.093736][T22784] __x64_sys_mlock+0x59/0x80 [ 1062.098303][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1062.102610][T22784] do_syscall_64+0x39/0xb0 [ 1062.102666][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1062.102700][T22784] RIP: 0033:0x7feaf548c0c9 [ 1062.107498][ T28] exc_page_fault+0x98/0x170 [ 1062.111143][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1062.111171][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1062.111200][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1062.111219][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1062.111238][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1062.111257][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.111277][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1062.111317][T22784] [ 1062.142086][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1062.155863][ T28] asm_exc_page_fault+0x26/0x30 [ 1062.165239][T22784] BUG at mt_find:6473 (1) [ 1062.166320][ T28] RIP: 0033:0x7feaf54276c6 [ 1062.176752][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1062.182952][ T28] RSP: 002b:00007ffecdac6688 EFLAGS: 00010287 [ 1062.187698][T22784] 0-18446744073709551615: [ 1062.192776][ T28] [ 1062.201138][T22784] node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 [ 1062.203175][ T28] RAX: 0000001b33123000 RBX: 00007feaf55ac018 RCX: 0000001b33120000 [ 1062.208456][T22784] contents: 93708172333056 [ 1062.213209][ T28] RDX: 0000001b33123004 RSI: 0000001b33122e50 RDI: 00000000b7af1b16 [ 1062.225992][T22784] 20480 [ 1062.237717][ T28] RBP: 00000000b7af1b16 R08: 0000001b33520000 R09: 00000000b7af1b1a [ 1062.259006][T22784] 18446603341360427008 [ 1062.265601][ T28] R10: 00007ffecdad3090 R11: 000000000002b9ca R12: 00007feaf55a0000 [ 1062.281218][T22784] 0 [ 1062.288414][ T28] R13: 0000000000000001 R14: 00000000000021cd R15: ffffffff89b6def5 [ 1062.296445][T22784] 0 [ 1062.301333][ T28] ? mas_wr_modify+0x3d5/0x16d0 [ 1062.307820][T22784] 0 [ 1062.310122][ T28] [ 1062.318185][T22784] 0 [ 1062.324650][ T28] 1 lock held by syz-executor.5/22782: [ 1062.337501][T22784] 0 [ 1062.339131][ T28] #0: [ 1062.348281][T22784] 0 [ 1062.353182][ T28] ffff888075ab4098 [ 1062.393062][T22784] 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 [ 1062.397911][ T28] ( [ 1062.414090][T22784] 0000000000000000 0 [ 1062.414333][ T28] &mm->mmap_lock [ 1062.416759][T22784] 0000000000000000 0 [ 1062.419690][ T28] ){++++}-{3:3} [ 1062.428994][T22784] 0000000000000000 0 [ 1062.440109][ T28] , at: do_user_addr_fault+0xa51/0x1210 [ 1062.445546][T22784] 0000000000000000 0 [ 1062.446273][ T28] task:syz-executor.5 state:R [ 1062.456538][T22784] 0000000000000000 0 [ 1062.458780][ T28] running task [ 1062.465305][T22784] 0000000000000000 [ 1062.467186][ T28] stack:27224 pid:22784 ppid:5124 flags:0x0000400e [ 1062.477385][T22784] 0-140647092715519: [ 1062.479906][ T28] Call Trace: [ 1062.483673][T22784] node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 [ 1062.487279][ T28] [ 1062.487299][ T28] ? devkmsg_read+0x730/0x730 [ 1062.504790][T22784] contents: [ 1062.512049][ T28] ? console_flush_all+0x547/0x6e0 [ 1062.524803][T22784] 0000000000000000 536866815 [ 1062.526208][ T28] ? console_unlock+0xb8/0x1f0 [ 1062.536146][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 1062.541794][ T28] ? preempt_schedule_common+0x45/0xc0 [ 1062.547297][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 1062.551324][T22784] ffff888094eb2460 536870911 ffff888094eb2540 553631743 0000000000000000 553644031 ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 [ 1062.553032][ T28] ? vprintk+0x84/0xa0 [ 1062.594132][ T28] ? vprintk_emit+0x1e9/0x600 [ 1062.595233][T22784] 000000000000000c [ 1062.605136][T22784] 0-536866815: 0000000000000000 [ 1062.606121][ T28] ? vprintk+0x84/0xa0 [ 1062.610686][T22784] 536866816-536870911: ffff888094eb2460 [ 1062.614521][ T28] ? record_print_text.cold+0x16/0x16 [ 1062.620853][T22784] 536870912-553631743: ffff888094eb2540 [ 1062.632263][T22784] 553631744-553644031: 0000000000000000 [ 1062.636677][ T28] ? _printk+0xbe/0xf1 [ 1062.638179][T22784] 553644032-553631743: [ 1062.642326][ T28] ? record_print_text.cold+0x16/0x16 [ 1062.652248][ T28] ? mt_dump_range+0x62/0x6b [ 1062.657114][ T28] ? mt_dump_entry+0x2d/0xf4 [ 1062.662558][T22784] ffff888076c687e0 [ 1062.662576][T22784] 553631744-553648127: ffff888076c689a0 [ 1062.662606][T22784] 553648128-553652223: ffff888094eb2620 [ 1062.662633][T22784] 553652224-116820934655: 0000000000000000 [ 1062.662660][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1062.662687][T22784] 116825128960-93824997462015: 0000000000000000 [ 1062.662737][T22784] 93824997462016-93824997601279: [ 1062.668026][ T28] ? mt_dump_node+0x3ec/0x927 [ 1062.683231][T22784] ffff888094eb27e0 [ 1062.701482][ T28] ? mt_dump_node+0x851/0x927 [ 1062.703645][T22784] 93824997601280-140647092711423: [ 1062.707871][ T28] ? mt_dump.cold+0xf2/0x115 [ 1062.721095][T22784] 0000000000000000 [ 1062.721960][ T28] ? mt_find.cold+0x48/0x90 [ 1062.726434][T22784] 140647092711424-140647092715519: [ 1062.732318][ T28] ? mas_find+0x1d0/0x1d0 [ 1062.743723][T22784] ffff888094eb28c0 [ 1062.744895][ T28] ? find_vma+0x10c/0x1b0 [ 1062.748585][T22784] 140647092715520-140647127171071: [ 1062.752956][ T28] ? can_vma_merge_before+0x390/0x390 [ 1062.752999][ T28] ? walk_page_test+0x78/0x180 [ 1062.753041][ T28] ? walk_page_range+0x2b1/0x4a0 [ 1062.753083][ T28] ? __walk_page_range+0x780/0x780 [ 1062.753141][ T28] ? mlock_fixup+0x650/0x810 [ 1062.765969][T22784] node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e [ 1062.779110][ T28] ? apply_vma_lock_flags+0x23d/0x350 [ 1062.781590][T22784] contents: [ 1062.784800][ T28] ? mlock_fixup+0x810/0x810 [ 1062.792349][T22784] ffff888094eb29a0 140647101104127 ffff888094eb2a80 140647103201279 ffff888094eb2b60 140647105298431 ffff888094eb2c40 140647107395583 ffff888094eb2d20 140647109492735 ffff888094eb2e00 140647113687039 ffff888094eb2ee0 140647113834495 ffff888029235c40 140647114563583 ffff888029235ee0 140647114899455 0000000000000000 140647114903551 ffff88807687fee0 140647115268095 ffff88807a3a2380 140647115304959 0000000000000000 140647115325439 ffff88802218f000 140647127171071 0000000000000000 0 000000000000000d [ 1062.807011][ T28] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1062.854231][T22784] 140647092715520-140647101104127: ffff888094eb29a0 [ 1062.869175][ T28] ? do_mlock+0x25a/0x6d0 [ 1062.870710][T22784] 140647101104128-140647103201279: ffff888094eb2a80 [ 1062.873816][ T28] ? folio_evictable+0x270/0x270 [ 1062.886404][ T28] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1062.892429][T22784] 140647103201280-140647105298431: ffff888094eb2b60 [ 1062.892619][ T28] ? __x64_sys_mlock+0x59/0x80 [ 1062.904355][ T28] ? do_syscall_64+0x39/0xb0 [ 1062.908480][T22784] 140647105298432-140647107395583: ffff888094eb2c40 [ 1062.909366][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1062.916136][T22784] 140647107395584-140647109492735: [ 1062.922244][ T28] [ 1062.922257][ T28] 3 locks held by syz-executor.5/22784: [ 1062.929097][T22784] ffff888094eb2d20 [ 1062.931227][ T28] task:syz-executor.0 state:D stack:26440 pid:24778 ppid:5111 flags:0x00004004 [ 1062.944077][T22784] 140647109492736-140647113687039: [ 1062.949627][ T28] Call Trace: [ 1062.949720][T22784] ffff888094eb2e00 [ 1062.955176][ T28] [ 1062.955194][ T28] __schedule+0x25d0/0x5a70 [ 1062.958462][T22784] 140647113687040-140647113834495: [ 1062.962655][ T28] ? io_schedule_timeout+0x150/0x150 [ 1062.976734][T22784] ffff888094eb2ee0 [ 1062.984409][ T28] ? mark_held_locks+0x9f/0xe0 [ 1062.988408][T22784] 140647113834496-140647114563583: [ 1062.990880][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 1062.991936][T22784] ffff888029235c40 [ 1062.996459][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 1063.011303][T22784] 140647114563584-140647114899455: ffff888029235ee0 [ 1063.011338][T22784] 140647114899456-140647114903551: 0000000000000000 [ 1063.011365][T22784] 140647114903552-140647115268095: ffff88807687fee0 [ 1063.011393][T22784] 140647115268096-140647115304959: [ 1063.027713][ T28] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 1063.043777][T22784] ffff88807a3a2380 [ 1063.043795][T22784] 140647115304960-140647115325439: 0000000000000000 [ 1063.043822][T22784] 140647115325440-140647127171071: ffff88802218f000 [ 1063.055107][ T28] schedule+0xde/0x1b0 [ 1063.065868][ T28] synchronize_rcu_expedited+0x5e2/0x770 [ 1063.069154][T22784] 140647127171072-18446744073709551615: node ffff888079c0a200 depth 1 type 1 parent ffff88807d730816 contents: 0000000000000000 140647128055807 ffff888076c68000 140647128059903 ffff888076c680e0 140647128190975 0000000000000000 140732348923903 ffff88807b4c50e0 140732349059071 0000000000000000 140732349100031 ffff88807b4c5000 140732349116415 ffff88807b4c5ee0 140732349124607 0000000000000000 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000008 [ 1063.073024][ T28] ? wait_rcu_exp_gp+0x40/0x40 [ 1063.129728][ T28] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 1063.135602][ T28] ? wb_update_bandwidth+0x9a/0xd0 [ 1063.137928][T22784] 140647127171072-140647128055807: [ 1063.141291][ T28] ? rcu_exp_wait_wake+0x1220/0x1220 [ 1063.143411][T22784] 0000000000000000 [ 1063.146881][ T28] ? mark_lock.part.0+0xee/0x1910 [ 1063.161810][T22784] 140647128055808-140647128059903: ffff888076c68000 [ 1063.169150][T22784] 140647128059904-140647128190975: ffff888076c680e0 [ 1063.176720][T22784] 140647128190976-140732348923903: 0000000000000000 [ 1063.179093][ T28] synchronize_rcu+0x302/0x3b0 [ 1063.183769][T22784] 140732348923904-140732349059071: ffff88807b4c50e0 [ 1063.195504][T22784] 140732349059072-140732349100031: 0000000000000000 [ 1063.196917][ T28] ? synchronize_rcu_expedited+0x770/0x770 [ 1063.202560][T22784] 140732349100032-140732349116415: ffff88807b4c5000 [ 1063.202595][T22784] 140732349116416-140732349124607: ffff88807b4c5ee0 [ 1063.217699][ T28] ? find_held_lock+0x2d/0x110 [ 1063.222314][T22784] 140732349124608-18446744073709551615: 0000000000000000 [ 1063.222346][T22784] Pass: 21148885 Run:21149065 [ 1063.227104][ T28] ? rcu_sync_enter+0x146/0x2e0 [ 1063.237026][T22784] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1063.252080][ T28] ? mark_held_locks+0x9f/0xe0 [ 1063.254116][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1063.258867][ T28] ? rwlock_bug.part.0+0x90/0x90 [ 1063.268905][T22784] Call Trace: [ 1063.268916][T22784] [ 1063.268927][T22784] dump_stack_lvl+0xd1/0x138 [ 1063.268969][T22784] mt_find.cold+0x8b/0x90 [ 1063.269011][T22784] ? mas_find+0x1d0/0x1d0 [ 1063.269062][T22784] find_vma+0x10c/0x1b0 [ 1063.269098][T22784] ? can_vma_merge_before+0x390/0x390 [ 1063.269133][T22784] ? walk_page_test+0x78/0x180 [ 1063.269175][T22784] walk_page_range+0x2b1/0x4a0 [ 1063.269219][T22784] ? __walk_page_range+0x780/0x780 [ 1063.286539][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1063.289258][T22784] mlock_fixup+0x650/0x810 [ 1063.289315][T22784] apply_vma_lock_flags+0x23d/0x350 [ 1063.289362][T22784] ? mlock_fixup+0x810/0x810 [ 1063.295498][ T28] rcu_sync_enter+0x14b/0x2e0 [ 1063.297832][T22784] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1063.312320][ T28] ? rcu_sync_enter_start+0x70/0x70 [ 1063.312674][T22784] do_mlock+0x25a/0x6d0 [ 1063.317761][ T28] ? ext4_ind_migrate+0x23b/0x860 [ 1063.322946][T22784] ? folio_evictable+0x270/0x270 [ 1063.323000][T22784] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1063.323041][T22784] __x64_sys_mlock+0x59/0x80 [ 1063.323070][T22784] do_syscall_64+0x39/0xb0 [ 1063.337543][ T28] ? rcu_read_lock_sched_held+0x3e/0x70 [ 1063.341930][T22784] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1063.341969][T22784] RIP: 0033:0x7feaf548c0c9 [ 1063.341993][T22784] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1063.348079][ T28] percpu_down_write+0x68/0x390 [ 1063.353038][T22784] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1063.353068][T22784] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1063.353092][T22784] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1063.353111][T22784] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1063.353129][T22784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.353148][T22784] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1063.353190][T22784] [ 1063.362783][T22784] index not increased! 20ffc000 <= 20ffc000 [ 1063.385602][ T28] ? ext4_ind_migrate+0x23b/0x860 [ 1063.402959][T22784] BUG at mt_find:6473 (1) [ 1063.427546][ T28] ext4_ind_migrate+0x23b/0x860 [ 1063.431918][T22784] maple_tree(ffff888075ab3f00) flags 309, height 2 root ffff88807d73081e [ 1063.440489][ T28] ? __ext4_journal_stop+0x10b/0x1f0 [ 1063.448993][T22784] 0-18446744073709551615: [ 1063.456134][ T28] ext4_fileattr_set+0x1582/0x1a50 [ 1063.473590][T22784] node ffff88807d730800 depth 0 type 3 parent ffff888075ab3f01 [ 1063.476638][ T28] ? ext4_fileattr_get+0x280/0x280 [ 1063.488612][T22784] contents: [ 1063.496380][ T28] ? lock_acquire+0x32/0xc0 [ 1063.532248][T22784] 93708172333056 20480 18446603341360427008 0 0 0 [ 1063.547498][ T28] ? down_write+0x157/0x220 [ 1063.552415][T22784] 0 [ 1063.554699][ T28] ? memset+0x24/0x50 [ 1063.565409][T22784] 0 0 0 | 02 02| ffff88807938bc0c 140647092715519 ffff88807938be0c 140647127171071 ffff888079c0a20c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1063.565663][ T28] ? fileattr_fill_flags+0x27f/0x320 [ 1063.600516][ T28] vfs_fileattr_set+0x7ff/0xc40 [ 1063.605434][ T28] ? ioctl_file_clone+0x100/0x100 [ 1063.606656][T22784] 0-140647092715519: [ 1063.610914][ T28] ? memset+0x24/0x50 [ 1063.611856][T22784] node ffff88807938bc00 depth 1 type 1 parent ffff88807d730806 [ 1063.615102][ T28] do_vfs_ioctl+0xf8d/0x15b0 [ 1063.619123][T22784] contents: 0000000000000000 536866815 ffff888094eb2460 536870911 [ 1063.626978][ T28] ? vfs_fileattr_set+0xc40/0xc40 [ 1063.639028][T22784] ffff888094eb2540 553631743 [ 1063.640235][ T28] ? trace_lock_acquire+0x1f1/0x290 [ 1063.644383][T22784] 0000000000000000 553644031 [ 1063.649288][ T28] ? do_one_initcall+0x600/0x7d0 [ 1063.664881][ T28] ? receive_fd+0x110/0x110 [ 1063.669597][T22784] ffff888076c687e0 553631743 ffff888076c689a0 553648127 ffff888094eb2620 553652223 0000000000000000 116820934655 ffff888094eb2700 116825128959 0000000000000000 93824997462015 ffff888094eb27e0 93824997601279 [ 1063.669717][ T28] ? __fget_files+0x26a/0x480 [ 1063.696815][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1063.700020][T22784] 0000000000000000 140647092711423 ffff888094eb28c0 140647092715519 0000000000000000 0 0000000000000000 0 000000000000000c [ 1063.703426][ T28] __x64_sys_ioctl+0x10c/0x210 [ 1063.729109][T22784] 0-536866815: 0000000000000000 [ 1063.730526][ T28] do_syscall_64+0x39/0xb0 [ 1063.734347][T22784] 536866816-536870911: [ 1063.738753][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1063.738793][ T28] RIP: 0033:0x7fa9cd48c0c9 [ 1063.751347][T22784] ffff888094eb2460 [ 1063.754937][ T28] RSP: 002b:00007fa9cbffe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.757567][T22784] 536870912-553631743: [ 1063.766173][ T28] RAX: ffffffffffffffda RBX: 00007fa9cd5abf80 RCX: 00007fa9cd48c0c9 [ 1063.772323][T22784] ffff888094eb2540 [ 1063.779021][ T28] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000003 [ 1063.793000][T22784] 553631744-553644031: 0000000000000000 [ 1063.796383][ T28] RBP: 00007fa9cd4e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1063.798930][T22784] 553644032-553631743: ffff888076c687e0 [ 1063.807336][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.822166][T22784] 553631744-553648127: ffff888076c689a0 [ 1063.822918][ T28] R13: 00007fff1e0d742f R14: 00007fa9cbffe300 R15: 0000000000022000 [ 1063.828090][T22784] 553648128-553652223: [ 1063.837690][ T28] [ 1063.845696][T22784] ffff888094eb2620 [ 1063.846449][ T28] 4 locks held by syz-executor.0/24778: [ 1063.854636][T22784] 553652224-116820934655: 0000000000000000 [ 1063.855330][ T28] #0: ffff88807ec6c460 (sb_writers#4){.+.+}-{0:0}, at: do_vfs_ioctl+0xf52/0x15b0 [ 1063.865134][T22784] 116820934656-116825128959: ffff888094eb2700 [ 1063.871397][ T28] #1: [ 1063.877510][T22784] 116825128960-93824997462015: 0000000000000000 [ 1063.880660][ T28] ffff888072dede48 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: vfs_fileattr_set+0x14c/0xc40 [ 1063.896156][T22784] 93824997462016-93824997601279: ffff888094eb27e0 [ 1063.900972][ T28] #2: ffff88807ec6eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ind_migrate+0x23b/0x860 [ 1063.904573][T22784] 93824997601280-140647092711423: [ 1063.915096][ T28] #3: [ 1063.915178][T22784] 0000000000000000 [ 1063.927161][ T28] ffffffff8c79f138 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x400/0x770 [ 1063.928995][T22784] 140647092711424-140647092715519: ffff888094eb28c0 [ 1063.945011][ T28] [ 1063.947371][ T28] ============================================= [ 1063.947371][ T28] [ 1063.956975][ T28] NMI backtrace for cpu 0 [ 1063.961335][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1063.970651][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 14:34:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 14:34:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 14:34:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') writev(r0, 0x0, 0x0) 14:34:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x610, 0x420, 0xb, 0x148, 0x420, 0x148, 0x578, 0x240, 0x240, 0x578, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x3f8, 0x420, 0x0, {0xff0f000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x7fff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'vlan0\x00'}, 0xec010000, 0x138, 0x158, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@multicast2, [], @ipv6=@local, [], @ipv4=@broadcast, [], @ipv4=@remote}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x670) 14:34:08 executing program 4: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x12, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x80) 14:34:08 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000003280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1063.975075][T22784] 140647092715520-140647127171071: [ 1063.980709][ T28] Call Trace: [ 1063.980721][ T28] [ 1063.980731][ T28] dump_stack_lvl+0xd1/0x138 [ 1063.980774][ T28] nmi_cpu_backtrace.cold+0x24/0x18a [ 1063.986131][T22784] node ffff88807938be00 depth 1 type 1 parent ffff88807d73080e [ 1063.989408][ T28] nmi_trigger_cpumask_backtrace+0x32f/0x3c0 [ 1063.989445][ T28] ? lapic_can_unplug_cpu+0x80/0x80 [ 1063.992797][T22784] contents: [ 1063.996930][ T28] watchdog+0xcae/0x1050 [ 1064.002224][T22784] ffff888094eb29a0 140647101104127 [ 1064.009717][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1064.009763][ T28] kthread+0x2e8/0x3a0 [ 1064.009789][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1064.009822][ T28] ret_from_fork+0x1f/0x30 [ 1064.009877][ T28] [ 1064.010782][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1064.048246][T22784] ffff888094eb2a80 140647103201279 [ 1064.050331][ C1] NMI backtrace for cpu 1 [ 1064.050342][ C1] CPU: 1 PID: 22784 Comm: syz-executor.5 Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1064.050364][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1064.050375][ C1] RIP: 0010:enqueue_entity+0xa4e/0x1520 [ 1064.050460][ C1] Code: b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 d9 0a 00 00 83 bb 8c 03 00 00 05 0f 84 06 f8 ff ff e9 2b f8 ff ff <49> 8d be 70 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 1064.050479][ C1] RSP: 0018:ffffc900001e0c00 EFLAGS: 00000046 14:34:08 executing program 2: bpf$BPF_BTF_LOAD(0x9, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 14:34:08 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x4, 0x0, @local, "21ecf82a", @local, "04849ffe"}}}}, 0x0) [ 1064.050495][ C1] RAX: dffffc0000000000 RBX: ffff888078ea5840 RCX: ffffffff8159e087 [ 1064.050508][ C1] RDX: 1ffff1100f1d4b18 RSI: 0000000000000008 RDI: ffff888029673408 [ 1064.050520][ C1] RBP: 0000000000000009 R08: 0000000000000001 R09: ffff8880787b0147 [ 1064.050532][ C1] R10: ffffed100f0f6028 R11: 0000000000000833 R12: 0000000000000000 [ 1064.050544][ C1] R13: ffff888078ea58c0 R14: ffff888029673400 R15: 0000000000100000 [ 1064.050557][ C1] FS: 00007feaf61d4700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1064.050576][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.050590][ C1] CR2: 0000555556a75708 CR3: 00000000266d4000 CR4: 00000000003506e0 [ 1064.050602][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1064.050614][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1064.050627][ C1] Call Trace: [ 1064.050632][ C1] [ 1064.050643][ C1] enqueue_task_fair+0x18c/0xba0 [ 1064.050670][ C1] ? psi_task_change+0x1bf/0x300 [ 1064.050695][ C1] enqueue_task+0xad/0x330 [ 1064.050715][ C1] ttwu_do_activate+0x15c/0x930 14:34:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) 14:34:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1064.050735][ C1] try_to_wake_up+0xcdc/0x1bf0 [ 1064.050758][ C1] ? sched_core_balance+0x15e0/0x15e0 [ 1064.050782][ C1] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 1064.050810][ C1] hrtimer_wakeup+0x47/0x60 [ 1064.050834][ C1] __hrtimer_run_queues+0x600/0xcf0 [ 1064.050866][ C1] ? __remove_hrtimer+0x2a0/0x2a0 [ 1064.050891][ C1] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 1064.050925][ C1] hrtimer_interrupt+0x320/0x790 [ 1064.050957][ C1] __sysvec_apic_timer_interrupt+0x180/0x660 [ 1064.050985][ C1] sysvec_apic_timer_interrupt+0x92/0xc0 [ 1064.051008][ C1] [ 1064.051014][ C1] [ 1064.051020][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.051052][ C1] RIP: 0010:vprintk_emit+0x3fe/0x600 [ 1064.051074][ C1] Code: 32 1b 00 48 85 db 0f 85 da 01 00 00 e8 db 35 1b 00 31 ff 4c 89 f6 e8 a1 32 1b 00 4d 85 f6 74 06 e8 c7 35 1b 00 fb f3 0f 1e fa bd 35 1b 00 45 31 c9 41 b8 01 00 00 00 31 c9 68 fa 87 66 81 ba [ 1064.051093][ C1] RSP: 0018:ffffc9000528f7c0 EFLAGS: 00000246 [ 1064.051108][ C1] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9000d88d000 [ 1064.051120][ C1] RDX: 0000000000040000 RSI: ffffffff816687f9 RDI: 0000000000000007 [ 1064.051133][ C1] RBP: ffffc9000528f7f8 R08: 0000000000000007 R09: 0000000000000000 [ 1064.051146][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000021 [ 1064.051158][ C1] R13: ffff888017610000 R14: 0000000000000200 R15: ffffc9000528f848 [ 1064.051175][ C1] ? vprintk_emit+0x3f9/0x600 [ 1064.051199][ C1] vprintk+0x84/0xa0 [ 1064.051219][ C1] _printk+0xbe/0xf1 [ 1064.051242][ C1] ? record_print_text.cold+0x16/0x16 [ 1064.051272][ C1] mt_dump_node+0x1db/0x927 [ 1064.051304][ C1] mt_dump_node+0x851/0x927 [ 1064.051334][ C1] mt_dump.cold+0xf2/0x115 [ 1064.051359][ C1] mt_find.cold+0x48/0x90 [ 1064.051384][ C1] ? mas_find+0x1d0/0x1d0 [ 1064.051410][ C1] find_vma+0x10c/0x1b0 [ 1064.051429][ C1] ? can_vma_merge_before+0x390/0x390 [ 1064.051450][ C1] ? walk_page_test+0x78/0x180 [ 1064.051473][ C1] walk_page_range+0x2b1/0x4a0 [ 1064.051498][ C1] ? __walk_page_range+0x780/0x780 [ 1064.051528][ C1] mlock_fixup+0x650/0x810 [ 1064.051559][ C1] apply_vma_lock_flags+0x23d/0x350 [ 1064.051590][ C1] ? mlock_fixup+0x810/0x810 [ 1064.051622][ C1] ? __ia32_sys_get_robust_list+0x400/0x400 [ 1064.051649][ C1] do_mlock+0x25a/0x6d0 [ 1064.051678][ C1] ? folio_evictable+0x270/0x270 [ 1064.051709][ C1] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1064.051734][ C1] __x64_sys_mlock+0x59/0x80 [ 1064.051751][ C1] do_syscall_64+0x39/0xb0 [ 1064.051779][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1064.051801][ C1] RIP: 0033:0x7feaf548c0c9 [ 1064.051816][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1064.051832][ C1] RSP: 002b:00007feaf61d4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 1064.051850][ C1] RAX: ffffffffffffffda RBX: 00007feaf55abf80 RCX: 00007feaf548c0c9 [ 1064.051863][ C1] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 1064.051874][ C1] RBP: 00007feaf54e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1064.051886][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.051896][ C1] R13: 00007ffecdac66bf R14: 00007feaf61d4300 R15: 0000000000022000 [ 1064.051915][ C1] [ 1064.080947][T24806] xt_hashlimit: overflow, try lower: 0/0 [ 1064.277985][T22784] ffff888094eb2b60 140647105298431 [ 1064.330655][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1064.330673][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.2.0-rc3-next-20230110-syzkaller #0 [ 1064.330702][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1064.330717][ T28] Call Trace: [ 1064.330725][ T28] [ 1064.330735][ T28] dump_stack_lvl+0xd1/0x138 [ 1064.330778][ T28] panic+0x2cc/0x626 [ 1064.330841][ T28] ? panic_print_sys_info.part.0+0x112/0x112 [ 1064.330884][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 1064.330928][ T28] ? watchdog.cold+0x130/0x158 [ 1064.330974][ T28] watchdog.cold+0x141/0x158 [ 1064.331012][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 1064.331058][ T28] kthread+0x2e8/0x3a0 [ 1064.331084][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 1064.331117][ T28] ret_from_fork+0x1f/0x30 [ 1064.331167][ T28] [ 1064.338543][ T28] Kernel Offset: disabled [ 1064.658225][ T28] Rebooting in 86400 seconds..