DUID 00:04:ab:21:30:2a:f6:ad:63:06:1d:ce:9a:68:94:64:4e:95 forked to background, child pid 4664 [ 21.240045][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.248578][ T4665] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts. syzkaller login: [ 37.701532][ T4989] cgroup: Unknown subsys name 'net' [ 37.830464][ T4989] cgroup: Unknown subsys name 'rlimit' [ 37.938742][ T4991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.946725][ T4991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.954030][ T4991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.962025][ T4991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.969600][ T4991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.977056][ T4991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 38.030280][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.042076][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.057424][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.065233][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program [ 38.105041][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor588' [ 38.132614][ T5001] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 38.199502][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.211582][ T5004] loop0: detected capacity change from 0 to 256 [ 38.250635][ T5010] loop0: detected capacity change from 0 to 256 executing program [ 38.317910][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.330837][ T5013] loop0: detected capacity change from 0 to 256 executing program executing program [ 38.412906][ T5019] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 38.457361][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.468288][ T5022] loop0: detected capacity change from 0 to 256 [ 38.474760][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.523723][ T5031] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 38.567011][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.602896][ T5040] loop0: detected capacity change from 0 to 256 executing program executing program [ 38.629958][ T5043] loop0: detected capacity change from 0 to 256 executing program [ 38.682530][ T5049] loop0: detected capacity change from 0 to 256 [ 38.744649][ T5052] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 38.838362][ T5061] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 38.917468][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.929677][ T5064] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 39.053899][ T5088] loop0: detected capacity change from 0 to 256 executing program executing program [ 39.117176][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.128268][ T5091] loop0: detected capacity change from 0 to 256 [ 39.134661][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.144496][ T4993] Buffer I/O error on dev loop0, logical block 0, async page read executing program executing program [ 39.161713][ T5094] loop0: detected capacity change from 0 to 256 [ 39.187429][ T5097] loop0: detected capacity change from 0 to 256 executing program [ 39.257003][ T5103] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 39.307260][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.348799][ T5112] loop0: detected capacity change from 0 to 256 executing program [ 39.397510][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.409619][ T5115] loop0: detected capacity change from 0 to 256 executing program executing program [ 39.489826][ T5121] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program executing program [ 39.632166][ T5139] loop0: detected capacity change from 0 to 256 [ 39.677152][ T5145] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 39.750855][ T5148] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 39.854711][ T5163] loop0: detected capacity change from 0 to 256 executing program [ 39.897373][ T5169] loop0: detected capacity change from 0 to 256 executing program executing program [ 39.939164][ T5172] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 40.042385][ T5187] loop0: detected capacity change from 0 to 256 [ 40.056762][ T4991] Bluetooth: hci0: command 0x0409 tx timeout [ 40.070179][ T5190] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 40.093780][ T5193] loop0: detected capacity change from 0 to 256 executing program executing program [ 40.147260][ T5202] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 40.265507][ T5220] loop0: detected capacity change from 0 to 256 [ 40.327315][ T5229] loop0: detected capacity change from 0 to 256 executing program executing program [ 40.411692][ T5235] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 40.527522][ T5247] loop0: detected capacity change from 0 to 256 executing program executing program [ 40.619069][ T5262] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 40.701770][ T5268] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 40.761316][ T5277] loop0: detected capacity change from 0 to 256 executing program executing program [ 40.852049][ T5292] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program executing program [ 41.002171][ T5307] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 41.094910][ T5325] loop0: detected capacity change from 0 to 256 [ 41.122524][ T5328] loop0: detected capacity change from 0 to 256 executing program executing program [ 41.204602][ T5334] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 41.305000][ T5343] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 41.439932][ T5358] loop0: detected capacity change from 0 to 256 [ 41.479037][ T5364] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 41.551254][ T5370] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 41.652386][ T5385] loop0: detected capacity change from 0 to 256 executing program executing program [ 41.707905][ T5388] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 41.839936][ T5409] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 41.939753][ T5424] loop0: detected capacity change from 0 to 256 executing program executing program [ 41.993147][ T5430] loop0: detected capacity change from 0 to 256 executing program executing program [ 42.086702][ T5442] loop0: detected capacity change from 0 to 256 executing program [ 42.146490][ T4991] Bluetooth: hci0: command 0x041b tx timeout [ 42.164985][ T5445] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 42.268542][ T5457] loop0: detected capacity change from 0 to 256 executing program [ 42.359646][ T5460] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 42.469239][ T5472] loop0: detected capacity change from 0 to 256 executing program [ 42.522268][ T5481] loop0: detected capacity change from 0 to 256 executing program [ 42.578317][ T5484] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 42.701586][ T5502] loop0: detected capacity change from 0 to 256 [ 42.764834][ T5514] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 42.887743][ T5526] loop0: detected capacity change from 0 to 256 executing program [ 42.962209][ T5535] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program executing program [ 43.109306][ T5553] loop0: detected capacity change from 0 to 256 executing program [ 43.171586][ T5559] loop0: detected capacity change from 0 to 256 [ 43.207675][ T4993] blk_print_req_error: 26 callbacks suppressed executing program executing program executing program [ 43.207688][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 executing program executing program [ 43.287665][ T5577] loop0: detected capacity change from 0 to 256 executing program executing program [ 43.337742][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.364799][ T5583] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 43.472516][ T5595] loop0: detected capacity change from 0 to 256 executing program [ 43.521940][ T5598] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 43.569236][ T5601] loop0: detected capacity change from 0 to 256 [ 43.621848][ T5610] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 43.696838][ T5613] loop0: detected capacity change from 0 to 256 [ 43.727965][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 executing program [ 43.755944][ T5619] loop0: detected capacity change from 0 to 256 executing program [ 43.818579][ T5622] loop0: detected capacity change from 0 to 256 [ 43.850401][ T5625] loop0: detected capacity change from 0 to 256 executing program executing program [ 43.936122][ T5628] loop0: detected capacity change from 0 to 256 [ 43.963320][ T5631] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 44.046752][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 executing program [ 44.113847][ T5646] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 44.205338][ T5652] loop0: detected capacity change from 0 to 256 [ 44.226306][ T4991] Bluetooth: hci0: command 0x040f tx timeout [ 44.232787][ T5655] loop0: detected capacity change from 0 to 256 [ 44.260887][ T5658] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 44.354466][ T5667] loop0: detected capacity change from 0 to 256 executing program executing program [ 44.445038][ T5676] loop0: detected capacity change from 0 to 256 executing program executing program [ 44.506691][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.517981][ T5679] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 44.600027][ T5691] loop0: detected capacity change from 0 to 256 executing program executing program [ 44.678355][ T5706] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 44.746746][ T5709] loop0: detected capacity change from 0 to 256 [ 44.776934][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.789028][ T5712] loop0: detected capacity change from 0 to 256 executing program executing program [ 44.830547][ T5718] loop0: detected capacity change from 0 to 256 [ 44.870202][ T5724] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 44.907062][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.931215][ T5730] loop0: detected capacity change from 0 to 256 executing program [ 44.957696][ T5733] loop0: detected capacity change from 0 to 256 [ 44.997074][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.009577][ T5736] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 45.142945][ T5751] loop0: detected capacity change from 0 to 256 [ 45.169808][ T5754] loop0: detected capacity change from 0 to 256 executing program executing program [ 45.227253][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.238145][ T5757] loop0: detected capacity change from 0 to 256 [ 45.263387][ T5760] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 45.337666][ T5766] loop0: detected capacity change from 0 to 256 [ 45.364472][ T5769] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 45.406777][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.443051][ T5778] loop0: detected capacity change from 0 to 256 [ 45.468809][ T5781] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 45.550181][ T5787] loop0: detected capacity change from 0 to 256 executing program [ 45.627358][ T5802] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program [ 45.782669][ T5820] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 45.873593][ T5829] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 45.954873][ T5838] loop0: detected capacity change from 0 to 256 executing program executing program [ 46.007264][ T5847] loop0: detected capacity change from 0 to 256 [ 46.047732][ T5853] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 46.141244][ T5859] loop0: detected capacity change from 0 to 256 [ 46.181416][ T5865] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 46.262725][ T5871] loop0: detected capacity change from 0 to 256 [ 46.288579][ T5874] loop0: detected capacity change from 0 to 256 [ 46.297268][ T4405] Bluetooth: hci0: command 0x0419 tx timeout executing program executing program [ 46.382356][ T5880] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program executing program executing program [ 46.561097][ T5904] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 46.654775][ T5913] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 46.743057][ T5922] loop0: detected capacity change from 0 to 256 [ 46.769632][ T5925] loop0: detected capacity change from 0 to 256 [ 46.830131][ T5928] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 46.911271][ T5934] loop0: detected capacity change from 0 to 256 executing program [ 46.989134][ T5943] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 47.072117][ T5949] loop0: detected capacity change from 0 to 256 [ 47.100033][ T5952] loop0: detected capacity change from 0 to 256 executing program executing program [ 47.212254][ T5958] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 47.312329][ T5964] loop0: detected capacity change from 0 to 256 executing program executing program [ 47.377548][ T5976] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 47.429936][ T5982] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program executing program [ 47.539365][ T6003] loop0: detected capacity change from 0 to 256 [ 47.568107][ T6006] loop0: detected capacity change from 0 to 256 executing program executing program [ 47.620414][ T6009] loop0: detected capacity change from 0 to 256 [ 47.648889][ T6012] loop0: detected capacity change from 0 to 256 executing program [ 47.699298][ T6015] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 47.786129][ T6024] loop0: detected capacity change from 0 to 256 executing program executing program [ 47.842780][ T6033] loop0: detected capacity change from 0 to 256 executing program [ 47.900624][ T6039] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 47.972437][ T6045] loop0: detected capacity change from 0 to 256 [ 47.997482][ T6048] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 48.050521][ T6054] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 48.103303][ T6063] loop0: detected capacity change from 0 to 256 executing program executing program [ 48.175571][ T6075] loop0: detected capacity change from 0 to 256 [ 48.199807][ T6078] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 48.310110][ T6090] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 48.389860][ T6096] loop0: detected capacity change from 0 to 256 [ 48.440961][ T6105] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 48.497225][ T4993] blk_print_req_error: 17 callbacks suppressed [ 48.497238][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.508167][ T6108] loop0: detected capacity change from 0 to 256 [ 48.519323][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.528507][ T4993] Buffer I/O error on dev loop0, logical block 0, async page read executing program executing program [ 48.579068][ T6117] loop0: detected capacity change from 0 to 256 [ 48.615937][ T6123] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 48.648184][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.657743][ T6126] loop0: detected capacity change from 0 to 256 [ 48.664388][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 48.673650][ T4993] Buffer I/O error on dev loop0, logical block 0, async page read [ 48.711434][ T6135] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program [ 48.797833][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.822467][ T6141] loop0: detected capacity change from 0 to 256 [ 48.860317][ T6147] loop0: detected capacity change from 0 to 256 executing program executing program executing program executing program executing program [ 48.907215][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.918006][ T6150] loop0: detected capacity change from 0 to 256 [ 48.918059][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 48.988817][ T6162] loop0: detected capacity change from 0 to 256 executing program executing program executing program [ 49.057297][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.068487][ T6165] loop0: detected capacity change from 0 to 256 executing program [ 49.104205][ T6171] loop0: detected capacity change from 0 to 256 [ 49.138101][ T4993] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 executing program [ 49.148850][ T6174] loop0: detected capacity change from 0 to 256 executing program executing program [ 49.182367][ T6177] loop0: detected capacity change from 0 to 256 [ 49.225299][ T6183] ffff8880766d5a00[0] 18446612683993053696 > 140007834415103 [ 49.233173][ T6183] WARN at mas_validate_limits:7128 (1) [ 49.238664][ T6183] MAS: tree=ffff8880183a7240 enode=ffff8880766d5a0c [ 49.238679][ T6183] [1] index=1ffff000 last=0 [ 49.249860][ T6183] min=0 max=7f561d3c6fff alloc=0000000000000000, depth=1, flags=0 [ 49.258194][ T6183] Check index & last [ 49.262083][ T6183] maple_tree(ffff8880183a7240) flags 30B, height 2 root ffff8880764af01e [ 49.270748][ T6183] 0-ffffffffffffffff: node ffff8880764af000 depth 0 type 3 parent ffff8880183a7241 contents: 93824445575168 18446603353183293440 0 0 0 0 0 0 0 0 | 01 01| ffff88807282d20c 140007834415103 ffff8880764ae60c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 49.305893][ T6183] 0-7f561d3c6fff: node ffff88807282d200 depth 1 type 1 parent ffff8880764af006 contents: 0000000000000000 1FFFEFFF ffff8880729efb00 1FFFFFFF ffff888077585400 203FFFFF ffff888077585c00 20FFFFFF ffff8880729efe00 21000FFF 0000000000000000 555555BFFFFF ffff8880729ef300 555555C21FFF 0000000000000000 7F5614FC4FFF ffff888077585a00 7F561D3A4FFF ffff888077585700 7F561D3A5FFF ffff888077585e00 7F561D3C5FFF ffff888077585600 7F561D3C6FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 49.352176][ T6183] 0-1fffefff: 0000000000000000 [ 49.357434][ T6183] 1ffff000-1fffffff: ffff8880729efb00 [ 49.363195][ T6183] 20000000-203fffff: ffff888077585400 [ 49.369209][ T6183] 20400000-20ffffff: ffff888077585c00 [ 49.374944][ T6183] 21000000-21000fff: ffff8880729efe00 [ 49.380783][ T6183] 21001000-555555bfffff: 0000000000000000 [ 49.386893][ T6183] 555555c00000-555555c21fff: ffff8880729ef300 [ 49.393322][ T6183] 555555c22000-7f5614fc4fff: 0000000000000000 [ 49.399777][ T6183] 7f5614fc5000-7f561d3a4fff: ffff888077585a00 [ 49.406455][ T6183] 7f561d3a5000-7f561d3a5fff: ffff888077585700 [ 49.412888][ T6183] 7f561d3a6000-7f561d3c5fff: ffff888077585e00 [ 49.419463][ T6183] 7f561d3c6000-7f561d3c6fff: ffff888077585600 [ 49.425906][ T6183] 7f561d3c7000-ffffffffffffffff: node ffff8880764ae600 depth 1 type 1 parent ffff8880764af00e contents: ffff8880729ef600 7F561D3E6FFF ffff888077585f00 7F561D3E7FFF ffff8880729eff00 7F561DBE7FFF ffff88801ba0a500 7F561DBF0FFF ffff88801ba0a600 7F561DC8FFFF ffff88801ba0a300 7F561DCBEFFF ffff88801ba0a200 7F561DCC2FFF ffff88801ba0a400 7F561DCCBFFF ffff88801ba0a000 7F561DCD2FFF 0000000000000000 7FFC0CE4AFFF ffff888077585900 7FFC0CE6BFFF 0000000000000000 7FFC0CFA8FFF ffff888077585500 7FFC0CFACFFF ffff888077585d00 7FFC0CFAEFFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e [ 49.478649][ T6183] 7f561d3c7000-7f561d3e6fff: ffff8880729ef600 [ 49.485077][ T6183] 7f561d3e7000-7f561d3e7fff: ffff888077585f00 [ 49.491538][ T6183] 7f561d3e8000-7f561dbe7fff: ffff8880729eff00 [ 49.497988][ T6183] 7f561dbe8000-7f561dbf0fff: ffff88801ba0a500 [ 49.504401][ T6183] 7f561dbf1000-7f561dc8ffff: ffff88801ba0a600 [ 49.510845][ T6183] 7f561dc90000-7f561dcbefff: ffff88801ba0a300 [ 49.517339][ T6183] 7f561dcbf000-7f561dcc2fff: ffff88801ba0a200 [ 49.523754][ T6183] 7f561dcc3000-7f561dccbfff: ffff88801ba0a400 [ 49.530224][ T6183] 7f561dccc000-7f561dcd2fff: ffff88801ba0a000 [ 49.536777][ T6183] 7f561dcd3000-7ffc0ce4afff: 0000000000000000 [ 49.543214][ T6183] 7ffc0ce4b000-7ffc0ce6bfff: ffff888077585900 [ 49.549652][ T6183] 7ffc0ce6c000-7ffc0cfa8fff: 0000000000000000 [ 49.556091][ T6183] 7ffc0cfa9000-7ffc0cfacfff: ffff888077585500 [ 49.562600][ T6183] 7ffc0cfad000-7ffc0cfaefff: ffff888077585d00 [ 49.569050][ T6183] 7ffc0cfaf000-ffffffffffffffff: 0000000000000000 [ 49.575986][ T6183] Pass: 6380704 Run:6380705 [ 49.580535][ T6183] CPU: 1 PID: 6183 Comm: syz-executor588 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 49.590610][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 49.600653][ T6183] Call Trace: [ 49.603920][ T6183] [ 49.606836][ T6183] dump_stack_lvl+0x136/0x150 [ 49.611506][ T6183] mt_validate+0x19de/0x4370 [ 49.616097][ T6183] ? mas_split.isra.0+0x1810/0x1810 [ 49.621296][ T6183] ? slab_free_freelist_hook+0x8b/0x1c0 [ 49.626833][ T6183] validate_mm+0x9d/0x470 [ 49.631152][ T6183] ? vma_iter_store+0x9a0/0x9a0 [ 49.636004][ T6183] do_vmi_align_munmap+0x1199/0x1680 [ 49.641285][ T6183] ? __split_vma+0x830/0x830 [ 49.645867][ T6183] ? mtree_range_walk+0x63e/0x940 [ 49.650891][ T6183] ? mas_walk+0x5c7/0x7c0 [ 49.655221][ T6183] do_vmi_munmap+0x266/0x430 [ 49.659802][ T6183] __vm_munmap+0x137/0x380 [ 49.664203][ T6183] ? do_vmi_munmap+0x430/0x430 [ 49.668960][ T6183] ? syscall_enter_from_user_mode+0x26/0x80 [ 49.674840][ T6183] __x64_sys_munmap+0x62/0x80 [ 49.679503][ T6183] do_syscall_64+0x39/0xb0 [ 49.683907][ T6183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.689816][ T6183] RIP: 0033:0x7f561dc46287 [ 49.694246][ T6183] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.713842][ T6183] RSP: 002b:00007f561d3e6078 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 49.722243][ T6183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f561dc46287 [ 49.730204][ T6183] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 00007f5614fa5000 [ 49.738170][ T6183] RBP: 00007f5614fa5000 R08: 0000000000000000 R09: 00000000000014ee [ 49.746131][ T6183] R10: 0000000000020000 R11: 0000000000000246 R12: 00007f561d3e66b8 [ 49.754092][ T6183] R13: 00007f561d3e6090 R14: 00007f561d3e60d0 R15: 0000000000022000 [ 49.762062][ T6183] [ 49.765664][ T6183] ffff8880766d5a00[1] 18446744071730568112 > 140007834415103 [ 49.773125][ T6183] WARN at mas_validate_limits:7128 (1) [ 49.778903][ T6183] MAS: tree=ffff8880183a7240 enode=ffff8880766d5a0c [ 49.778919][ T6183] [1] index=1ffff000 last=0 [ 49.790235][ T6183] min=0 max=7f561d3c6fff alloc=0000000000000000, depth=1, flags=0 [ 49.798504][ T6183] Check index & last [ 49.802378][ T6183] maple_tree(ffff8880183a7240) flags 30B, height 2 root ffff8880764af01e [ 49.810819][ T6183] 0-ffffffffffffffff: node ffff8880764af000 depth 0 type 3 parent ffff8880183a7241 contents: 93824445575168 18446603353183293440 0 0 0 0 0 0 0 0 | 01 01| ffff88807282d20c 140007834415103 ffff8880764ae60c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 49.845877][ T6183] 0-7f561d3c6fff: node ffff88807282d200 depth 1 type 1 parent ffff8880764af006 contents: 0000000000000000 1FFFEFFF ffff8880729efb00 1FFFFFFF ffff888077585400 203FFFFF ffff888077585c00 20FFFFFF ffff8880729efe00 21000FFF 0000000000000000 555555BFFFFF ffff8880729ef300 555555C21FFF 0000000000000000 7F5614FC4FFF ffff888077585a00 7F561D3A4FFF ffff888077585700 7F561D3A5FFF ffff888077585e00 7F561D3C5FFF ffff888077585600 7F561D3C6FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 49.892284][ T6183] 0-1fffefff: 0000000000000000 [ 49.897650][ T6183] 1ffff000-1fffffff: ffff8880729efb00 [ 49.903498][ T6183] 20000000-203fffff: ffff888077585400 [ 49.909397][ T6183] 20400000-20ffffff: ffff888077585c00 [ 49.915186][ T6183] 21000000-21000fff: ffff8880729efe00 [ 49.920988][ T6183] 21001000-555555bfffff: 0000000000000000 [ 49.927117][ T6183] 555555c00000-555555c21fff: ffff8880729ef300 [ 49.933547][ T6183] 555555c22000-7f5614fc4fff: 0000000000000000 [ 49.939990][ T6183] 7f5614fc5000-7f561d3a4fff: ffff888077585a00 [ 49.946450][ T6183] 7f561d3a5000-7f561d3a5fff: ffff888077585700 [ 49.952864][ T6183] 7f561d3a6000-7f561d3c5fff: ffff888077585e00 [ 49.959306][ T6183] 7f561d3c6000-7f561d3c6fff: ffff888077585600 [ 49.965848][ T6183] 7f561d3c7000-ffffffffffffffff: node ffff8880764ae600 depth 1 type 1 parent ffff8880764af00e contents: ffff8880729ef600 7F561D3E6FFF ffff888077585f00 7F561D3E7FFF ffff8880729eff00 7F561DBE7FFF ffff88801ba0a500 7F561DBF0FFF ffff88801ba0a600 7F561DC8FFFF ffff88801ba0a300 7F561DCBEFFF ffff88801ba0a200 7F561DCC2FFF ffff88801ba0a400 7F561DCCBFFF ffff88801ba0a000 7F561DCD2FFF 0000000000000000 7FFC0CE4AFFF ffff888077585900 7FFC0CE6BFFF 0000000000000000 7FFC0CFA8FFF ffff888077585500 7FFC0CFACFFF ffff888077585d00 7FFC0CFAEFFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e [ 50.018764][ T6183] 7f561d3c7000-7f561d3e6fff: ffff8880729ef600 [ 50.025236][ T6183] 7f561d3e7000-7f561d3e7fff: ffff888077585f00 [ 50.031706][ T6183] 7f561d3e8000-7f561dbe7fff: ffff8880729eff00 [ 50.038170][ T6183] 7f561dbe8000-7f561dbf0fff: ffff88801ba0a500 [ 50.044587][ T6183] 7f561dbf1000-7f561dc8ffff: ffff88801ba0a600 [ 50.051068][ T6183] 7f561dc90000-7f561dcbefff: ffff88801ba0a300 [ 50.057504][ T6183] 7f561dcbf000-7f561dcc2fff: ffff88801ba0a200 [ 50.063911][ T6183] 7f561dcc3000-7f561dccbfff: ffff88801ba0a400 [ 50.070349][ T6183] 7f561dccc000-7f561dcd2fff: ffff88801ba0a000 [ 50.076820][ T6183] 7f561dcd3000-7ffc0ce4afff: 0000000000000000 [ 50.083522][ T6183] 7ffc0ce4b000-7ffc0ce6bfff: ffff888077585900 [ 50.089999][ T6183] 7ffc0ce6c000-7ffc0cfa8fff: 0000000000000000 [ 50.096459][ T6183] 7ffc0cfa9000-7ffc0cfacfff: ffff888077585500 [ 50.102862][ T6183] 7ffc0cfad000-7ffc0cfaefff: ffff888077585d00 [ 50.109333][ T6183] 7ffc0cfaf000-ffffffffffffffff: 0000000000000000 [ 50.116123][ T6183] Pass: 6380704 Run:6380706 [ 50.120651][ T6183] CPU: 0 PID: 6183 Comm: syz-executor588 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 50.130755][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 50.140817][ T6183] Call Trace: [ 50.144081][ T6183] [ 50.147004][ T6183] dump_stack_lvl+0x136/0x150 [ 50.151686][ T6183] ? mab_shift_right+0x100/0x100 [ 50.156654][ T6183] mt_validate+0x19de/0x4370 [ 50.161332][ T6183] ? mas_split.isra.0+0x1810/0x1810 [ 50.166534][ T6183] ? slab_free_freelist_hook+0x8b/0x1c0 [ 50.172097][ T6183] validate_mm+0x9d/0x470 [ 50.176454][ T6183] ? vma_iter_store+0x9a0/0x9a0 [ 50.181302][ T6183] do_vmi_align_munmap+0x1199/0x1680 [ 50.186597][ T6183] ? __split_vma+0x830/0x830 [ 50.191184][ T6183] ? mtree_range_walk+0x63e/0x940 [ 50.196242][ T6183] ? mas_walk+0x5c7/0x7c0 [ 50.200608][ T6183] do_vmi_munmap+0x266/0x430 [ 50.205243][ T6183] __vm_munmap+0x137/0x380 [ 50.209691][ T6183] ? do_vmi_munmap+0x430/0x430 [ 50.214575][ T6183] ? syscall_enter_from_user_mode+0x26/0x80 [ 50.220467][ T6183] __x64_sys_munmap+0x62/0x80 [ 50.225152][ T6183] do_syscall_64+0x39/0xb0 [ 50.229566][ T6183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.235451][ T6183] RIP: 0033:0x7f561dc46287 [ 50.239861][ T6183] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.259462][ T6183] RSP: 002b:00007f561d3e6078 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 50.267865][ T6183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f561dc46287 [ 50.275831][ T6183] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 00007f5614fa5000 [ 50.283791][ T6183] RBP: 00007f5614fa5000 R08: 0000000000000000 R09: 00000000000014ee [ 50.291768][ T6183] R10: 0000000000020000 R11: 0000000000000246 R12: 00007f561d3e66b8 [ 50.299729][ T6183] R13: 00007f561d3e6090 R14: 00007f561d3e60d0 R15: 0000000000022000 [ 50.307698][ T6183] [ 50.311630][ T6183] ffff8880766d5a00[2] piv 553648127 < prev_piv 18446744071730568112 [ 50.319665][ T6183] WARN at mas_validate_limits:7117 (1) [ 50.325125][ T6183] MAS: tree=ffff8880183a7240 enode=ffff8880766d5a0c [ 50.325136][ T6183] [1] index=1ffff000 last=0 [ 50.336523][ T6183] min=0 max=7f561d3c6fff alloc=0000000000000000, depth=1, flags=0 [ 50.345024][ T6183] Check index & last [ 50.348932][ T6183] maple_tree(ffff8880183a7240) flags 30B, height 2 root ffff8880764af01e [ 50.357375][ T6183] 0-ffffffffffffffff: node ffff8880764af000 depth 0 type 3 parent ffff8880183a7241 contents: 93824445575168 18446603353183293440 0 0 0 0 0 0 0 0 | 01 01| ffff88807282d20c 140007834415103 ffff8880764ae60c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 50.392388][ T6183] 0-7f561d3c6fff: node ffff88807282d200 depth 1 type 1 parent ffff8880764af006 contents: 0000000000000000 1FFFEFFF ffff8880729efb00 1FFFFFFF ffff888077585400 203FFFFF ffff888077585c00 20FFFFFF ffff8880729efe00 21000FFF 0000000000000000 555555BFFFFF ffff8880729ef300 555555C21FFF 0000000000000000 7F5614FC4FFF ffff888077585a00 7F561D3A4FFF ffff888077585700 7F561D3A5FFF ffff888077585e00 7F561D3C5FFF ffff888077585600 7F561D3C6FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 50.438786][ T6183] 0-1fffefff: 0000000000000000 [ 50.443956][ T6183] 1ffff000-1fffffff: ffff8880729efb00 [ 50.449816][ T6183] 20000000-203fffff: ffff888077585400 [ 50.455545][ T6183] 20400000-20ffffff: ffff888077585c00 [ 50.461326][ T6183] 21000000-21000fff: ffff8880729efe00 [ 50.467101][ T6183] 21001000-555555bfffff: 0000000000000000 [ 50.473155][ T6183] 555555c00000-555555c21fff: ffff8880729ef300 [ 50.479613][ T6183] 555555c22000-7f5614fc4fff: 0000000000000000 [ 50.486042][ T6183] 7f5614fc5000-7f561d3a4fff: ffff888077585a00 [ 50.492639][ T6183] 7f561d3a5000-7f561d3a5fff: ffff888077585700 [ 50.499144][ T6183] 7f561d3a6000-7f561d3c5fff: ffff888077585e00 [ 50.505574][ T6183] 7f561d3c6000-7f561d3c6fff: ffff888077585600 [ 50.512017][ T6183] 7f561d3c7000-ffffffffffffffff: node ffff8880764ae600 depth 1 type 1 parent ffff8880764af00e contents: ffff8880729ef600 7F561D3E6FFF ffff888077585f00 7F561D3E7FFF ffff8880729eff00 7F561DBE7FFF ffff88801ba0a500 7F561DBF0FFF ffff88801ba0a600 7F561DC8FFFF ffff88801ba0a300 7F561DCBEFFF ffff88801ba0a200 7F561DCC2FFF ffff88801ba0a400 7F561DCCBFFF ffff88801ba0a000 7F561DCD2FFF 0000000000000000 7FFC0CE4AFFF ffff888077585900 7FFC0CE6BFFF 0000000000000000 7FFC0CFA8FFF ffff888077585500 7FFC0CFACFFF ffff888077585d00 7FFC0CFAEFFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e [ 50.564568][ T6183] 7f561d3c7000-7f561d3e6fff: ffff8880729ef600 [ 50.571046][ T6183] 7f561d3e7000-7f561d3e7fff: ffff888077585f00 [ 50.577532][ T6183] 7f561d3e8000-7f561dbe7fff: ffff8880729eff00 [ 50.583973][ T6183] 7f561dbe8000-7f561dbf0fff: ffff88801ba0a500 [ 50.590451][ T6183] 7f561dbf1000-7f561dc8ffff: ffff88801ba0a600 [ 50.597106][ T6183] 7f561dc90000-7f561dcbefff: ffff88801ba0a300 [ 50.603516][ T6183] 7f561dcbf000-7f561dcc2fff: ffff88801ba0a200 [ 50.610046][ T6183] 7f561dcc3000-7f561dccbfff: ffff88801ba0a400 [ 50.616535][ T6183] 7f561dccc000-7f561dcd2fff: ffff88801ba0a000 [ 50.623031][ T6183] 7f561dcd3000-7ffc0ce4afff: 0000000000000000 [ 50.629482][ T6183] 7ffc0ce4b000-7ffc0ce6bfff: ffff888077585900 [ 50.635918][ T6183] 7ffc0ce6c000-7ffc0cfa8fff: 0000000000000000 [ 50.642372][ T6183] 7ffc0cfa9000-7ffc0cfacfff: ffff888077585500 [ 50.648809][ T6183] 7ffc0cfad000-7ffc0cfaefff: ffff888077585d00 [ 50.655206][ T6183] 7ffc0cfaf000-ffffffffffffffff: 0000000000000000 [ 50.662020][ T6183] Pass: 6380704 Run:6380707 [ 50.666639][ T6183] CPU: 1 PID: 6183 Comm: syz-executor588 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 50.676704][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 50.686774][ T6183] Call Trace: [ 50.690046][ T6183] [ 50.692967][ T6183] dump_stack_lvl+0x136/0x150 [ 50.697638][ T6183] mt_validate+0x1ba9/0x4370 [ 50.702255][ T6183] ? mas_split.isra.0+0x1810/0x1810 [ 50.707454][ T6183] ? slab_free_freelist_hook+0x8b/0x1c0 [ 50.712993][ T6183] validate_mm+0x9d/0x470 [ 50.717313][ T6183] ? vma_iter_store+0x9a0/0x9a0 [ 50.722158][ T6183] do_vmi_align_munmap+0x1199/0x1680 [ 50.727441][ T6183] ? __split_vma+0x830/0x830 [ 50.732040][ T6183] ? mtree_range_walk+0x63e/0x940 [ 50.737079][ T6183] ? mas_walk+0x5c7/0x7c0 [ 50.741414][ T6183] do_vmi_munmap+0x266/0x430 [ 50.745998][ T6183] __vm_munmap+0x137/0x380 [ 50.750409][ T6183] ? do_vmi_munmap+0x430/0x430 [ 50.755169][ T6183] ? syscall_enter_from_user_mode+0x26/0x80 [ 50.761136][ T6183] __x64_sys_munmap+0x62/0x80 [ 50.765807][ T6183] do_syscall_64+0x39/0xb0 [ 50.770247][ T6183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.776138][ T6183] RIP: 0033:0x7f561dc46287 [ 50.780549][ T6183] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.800326][ T6183] RSP: 002b:00007f561d3e6078 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 50.808738][ T6183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f561dc46287 [ 50.816699][ T6183] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 00007f5614fa5000 [ 50.824661][ T6183] RBP: 00007f5614fa5000 R08: 0000000000000000 R09: 00000000000014ee [ 50.832623][ T6183] R10: 0000000000020000 R11: 0000000000000246 R12: 00007f561d3e66b8 [ 50.840583][ T6183] R13: 00007f561d3e6090 R14: 00007f561d3e60d0 R15: 0000000000022000 [ 50.848555][ T6183] [ 50.852061][ T6183] BUG at mas_validate_gaps:7001 (1) [ 50.857361][ T6183] maple_tree(ffff8880183a7240) flags 30B, height 2 root ffff8880764af01e [ 50.865815][ T6183] 0-ffffffffffffffff: node ffff8880764af000 depth 0 type 3 parent ffff8880183a7241 contents: 93824445575168 18446603353183293440 0 0 0 0 0 0 0 0 | 01 01| ffff88807282d20c 140007834415103 ffff8880764ae60c 18446744073709551615 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 50.901034][ T6183] 0-7f561d3c6fff: node ffff88807282d200 depth 1 type 1 parent ffff8880764af006 contents: 0000000000000000 1FFFEFFF ffff8880729efb00 1FFFFFFF ffff888077585400 203FFFFF ffff888077585c00 20FFFFFF ffff8880729efe00 21000FFF 0000000000000000 555555BFFFFF ffff8880729ef300 555555C21FFF 0000000000000000 7F5614FC4FFF ffff888077585a00 7F561D3A4FFF ffff888077585700 7F561D3A5FFF ffff888077585e00 7F561D3C5FFF ffff888077585600 7F561D3C6FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 50.947513][ T6183] 0-1fffefff: 0000000000000000 [ 50.952683][ T6183] 1ffff000-1fffffff: ffff8880729efb00 [ 50.958491][ T6183] 20000000-203fffff: ffff888077585400 [ 50.964229][ T6183] 20400000-20ffffff: ffff888077585c00 [ 50.969981][ T6183] 21000000-21000fff: ffff8880729efe00 [ 50.975716][ T6183] 21001000-555555bfffff: 0000000000000000 [ 50.981846][ T6183] 555555c00000-555555c21fff: ffff8880729ef300 [ 50.988302][ T6183] 555555c22000-7f5614fc4fff: 0000000000000000 [ 50.994767][ T6183] 7f5614fc5000-7f561d3a4fff: ffff888077585a00 [ 51.001246][ T6183] 7f561d3a5000-7f561d3a5fff: ffff888077585700 [ 51.007848][ T6183] 7f561d3a6000-7f561d3c5fff: ffff888077585e00 [ 51.014254][ T6183] 7f561d3c6000-7f561d3c6fff: ffff888077585600 [ 51.020703][ T6183] 7f561d3c7000-ffffffffffffffff: node ffff8880764ae600 depth 1 type 1 parent ffff8880764af00e contents: ffff8880729ef600 7F561D3E6FFF ffff888077585f00 7F561D3E7FFF ffff8880729eff00 7F561DBE7FFF ffff88801ba0a500 7F561DBF0FFF ffff88801ba0a600 7F561DC8FFFF ffff88801ba0a300 7F561DCBEFFF ffff88801ba0a200 7F561DCC2FFF ffff88801ba0a400 7F561DCCBFFF ffff88801ba0a000 7F561DCD2FFF 0000000000000000 7FFC0CE4AFFF ffff888077585900 7FFC0CE6BFFF 0000000000000000 7FFC0CFA8FFF ffff888077585500 7FFC0CFACFFF ffff888077585d00 7FFC0CFAEFFF 0000000000000000 FFFFFFFFFFFFFFFF 000000000000000e [ 51.073287][ T6183] 7f561d3c7000-7f561d3e6fff: ffff8880729ef600 [ 51.079728][ T6183] 7f561d3e7000-7f561d3e7fff: ffff888077585f00 [ 51.086126][ T6183] 7f561d3e8000-7f561dbe7fff: ffff8880729eff00 [ 51.092672][ T6183] 7f561dbe8000-7f561dbf0fff: ffff88801ba0a500 [ 51.099108][ T6183] 7f561dbf1000-7f561dc8ffff: ffff88801ba0a600 [ 51.105524][ T6183] 7f561dc90000-7f561dcbefff: ffff88801ba0a300 [ 51.112257][ T6183] 7f561dcbf000-7f561dcc2fff: ffff88801ba0a200 [ 51.119023][ T6183] 7f561dcc3000-7f561dccbfff: ffff88801ba0a400 [ 51.125580][ T6183] 7f561dccc000-7f561dcd2fff: ffff88801ba0a000 [ 51.132051][ T6183] 7f561dcd3000-7ffc0ce4afff: 0000000000000000 [ 51.138520][ T6183] 7ffc0ce4b000-7ffc0ce6bfff: ffff888077585900 [ 51.144945][ T6183] 7ffc0ce6c000-7ffc0cfa8fff: 0000000000000000 [ 51.151385][ T6183] 7ffc0cfa9000-7ffc0cfacfff: ffff888077585500 [ 51.157828][ T6183] 7ffc0cfad000-7ffc0cfaefff: ffff888077585d00 [ 51.164233][ T6183] 7ffc0cfaf000-ffffffffffffffff: 0000000000000000 [ 51.171019][ T6183] Pass: 6380704 Run:6380708 [ 51.175525][ T6183] CPU: 0 PID: 6183 Comm: syz-executor588 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 51.185569][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 51.195711][ T6183] Call Trace: [ 51.198972][ T6183] [ 51.201899][ T6183] dump_stack_lvl+0x136/0x150 [ 51.206569][ T6183] mt_validate+0x3650/0x4370 [ 51.211175][ T6183] ? mas_split.isra.0+0x1810/0x1810 [ 51.216366][ T6183] ? slab_free_freelist_hook+0x8b/0x1c0 [ 51.221916][ T6183] validate_mm+0x9d/0x470 [ 51.226249][ T6183] ? vma_iter_store+0x9a0/0x9a0 [ 51.231090][ T6183] do_vmi_align_munmap+0x1199/0x1680 [ 51.236362][ T6183] ? __split_vma+0x830/0x830 [ 51.240952][ T6183] ? mtree_range_walk+0x63e/0x940 [ 51.245970][ T6183] ? mas_walk+0x5c7/0x7c0 [ 51.250310][ T6183] do_vmi_munmap+0x266/0x430 [ 51.254889][ T6183] __vm_munmap+0x137/0x380 [ 51.259299][ T6183] ? do_vmi_munmap+0x430/0x430 [ 51.264060][ T6183] ? syscall_enter_from_user_mode+0x26/0x80 [ 51.269962][ T6183] __x64_sys_munmap+0x62/0x80 [ 51.274629][ T6183] do_syscall_64+0x39/0xb0 [ 51.279034][ T6183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.284914][ T6183] RIP: 0033:0x7f561dc46287 [ 51.289312][ T6183] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.308901][ T6183] RSP: 002b:00007f561d3e6078 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 51.317294][ T6183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f561dc46287 [ 51.325244][ T6183] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 00007f5614fa5000 [ 51.333196][ T6183] RBP: 00007f5614fa5000 R08: 0000000000000000 R09: 00000000000014ee [ 51.341148][ T6183] R10: 0000000000020000 R11: 0000000000000246 R12: 00007f561d3e66b8 [ 51.349100][ T6183] R13: 00007f561d3e6090 R14: 00007f561d3e60d0 R15: 0000000000022000 [ 51.357061][ T6183] [ 51.360809][ T6183] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 51.372610][ T6183] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 51.380999][ T6183] CPU: 0 PID: 6183 Comm: syz-executor588 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 51.391123][ T6183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 51.401159][ T6183] RIP: 0010:mt_validate+0x32ac/0x4370 [ 51.406527][ T6183] Code: 89 ee e8 97 18 77 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 1c 77 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc 17 [ 51.426118][ T6183] RSP: 0018:ffffc9000b36f940 EFLAGS: 00010256 [ 51.432165][ T6183] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.440118][ T6183] RDX: dffffc0000000000 RSI: ffffffff8a0db288 RDI: 0000000000000007 [ 51.448072][ T6183] RBP: ffff8880766d5a00 R08: 0000000000000007 R09: 0000000000000000 [ 51.456024][ T6183] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 51.463973][ T6183] R13: ffff8880766d5a00 R14: 0000000000000000 R15: ffff8880729efa01 [ 51.471922][ T6183] FS: 00007f561d3e6700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 51.480829][ T6183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.487389][ T6183] CR2: 000055df77514148 CR3: 0000000020871000 CR4: 0000000000350ef0 [ 51.495339][ T6183] Call Trace: [ 51.498597][ T6183] [ 51.501533][ T6183] ? die_addr+0x3c/0xa0 [ 51.505677][ T6183] ? exc_general_protection+0x129/0x230 [ 51.511228][ T6183] ? asm_exc_general_protection+0x26/0x30 [ 51.516937][ T6183] ? mt_validate+0x3298/0x4370 [ 51.521693][ T6183] ? mt_validate+0x32ac/0x4370 [ 51.526450][ T6183] ? mas_split.isra.0+0x1810/0x1810 [ 51.531649][ T6183] ? slab_free_freelist_hook+0x8b/0x1c0 [ 51.537191][ T6183] validate_mm+0x9d/0x470 [ 51.541502][ T6183] ? vma_iter_store+0x9a0/0x9a0 [ 51.546339][ T6183] do_vmi_align_munmap+0x1199/0x1680 [ 51.551607][ T6183] ? __split_vma+0x830/0x830 [ 51.556197][ T6183] ? mtree_range_walk+0x63e/0x940 [ 51.561251][ T6183] ? mas_walk+0x5c7/0x7c0 [ 51.565565][ T6183] do_vmi_munmap+0x266/0x430 [ 51.570140][ T6183] __vm_munmap+0x137/0x380 [ 51.574535][ T6183] ? do_vmi_munmap+0x430/0x430 [ 51.579308][ T6183] ? syscall_enter_from_user_mode+0x26/0x80 [ 51.585187][ T6183] __x64_sys_munmap+0x62/0x80 [ 51.589867][ T6183] do_syscall_64+0x39/0xb0 [ 51.594269][ T6183] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.600145][ T6183] RIP: 0033:0x7f561dc46287 [ 51.604562][ T6183] Code: 00 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb 85 66 2e 0f 1f 84 00 00 00 00 00 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.624168][ T6183] RSP: 002b:00007f561d3e6078 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 51.632583][ T6183] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f561dc46287 [ 51.640621][ T6183] RDX: 0000000000020000 RSI: 0000000000020000 RDI: 00007f5614fa5000 [ 51.648575][ T6183] RBP: 00007f5614fa5000 R08: 0000000000000000 R09: 00000000000014ee [ 51.656525][ T6183] R10: 0000000000020000 R11: 0000000000000246 R12: 00007f561d3e66b8 [ 51.664486][ T6183] R13: 00007f561d3e6090 R14: 00007f561d3e60d0 R15: 0000000000022000 [ 51.672530][ T6183] [ 51.675528][ T6183] Modules linked in: [ 51.679740][ T6183] ---[ end trace 0000000000000000 ]--- [ 51.685201][ T6183] RIP: 0010:mt_validate+0x32ac/0x4370 [ 51.690603][ T6183] Code: 89 ee e8 97 18 77 f7 49 83 fd 06 0f 84 a6 06 00 00 e8 48 1c 77 f7 49 01 de 48 ba 00 00 00 00 00 fc ff df 4c 89 f0 48 c1 e8 03 <80> 3c 10 00 0f 85 4b 10 00 00 4d 8b 2e 4c 89 ff 4c 89 ee e8 dc 17 [ 51.710233][ T6183] RSP: 0018:ffffc9000b36f940 EFLAGS: 00010256 [ 51.716332][ T6183] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 51.724458][ T6183] RDX: dffffc0000000000 RSI: ffffffff8a0db288 RDI: 0000000000000007 [ 51.732474][ T6183] RBP: ffff8880766d5a00 R08: 0000000000000007 R09: 0000000000000000 [ 51.740461][ T6183] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 51.748452][ T6183] R13: ffff8880766d5a00 R14: 0000000000000000 R15: ffff8880729efa01 [ 51.756440][ T6183] FS: 00007f561d3e6700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 51.765357][ T6183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.772040][ T6183] CR2: 000055df77514148 CR3: 0000000020871000 CR4: 0000000000350ef0 [ 51.780032][ T6183] Kernel panic - not syncing: Fatal exception [ 51.786951][ T6183] Kernel Offset: disabled [ 51.791253][ T6183] Rebooting in 86400 seconds..