program: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) rseq(0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x4003, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() (fail_nth: 1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x4002, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff800ff05a, 0x40, 0xfffe, 0x4, 0x10000009, 0x0, 0x0, 0x2, 0x2}}, 0x50) [ 58.708392][ T5321] FAULT_INJECTION: forcing a failure. [ 58.708392][ T5321] name failslab, interval 1, probability 0, space 0, times 1 [ 58.716939][ T5306] Bluetooth: hci0: command tx timeout [ 58.723931][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 58.723951][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.723957][ T5321] Call Trace: [ 58.723960][ T5321] [ 58.723965][ T5321] dump_stack_lvl+0x241/0x360 [ 58.724056][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.724071][ T5321] ? __pfx__printk+0x10/0x10 [ 58.724085][ T5321] ? __pfx___might_resched+0x10/0x10 [ 58.724098][ T5321] should_fail_ex+0x424/0x570 [ 58.724141][ T5321] should_failslab+0xac/0x100 [ 58.724156][ T5321] kmem_cache_alloc_noprof+0x78/0x390 [ 58.724169][ T5321] ? mas_alloc_nodes+0x25b/0x7e0 [ 58.724209][ T5321] mas_alloc_nodes+0x25b/0x7e0 [ 58.724223][ T5321] mas_preallocate+0x5ea/0x950 [ 58.724240][ T5321] ? __pfx_mas_preallocate+0x10/0x10 [ 58.724258][ T5321] ? __lock_acquire+0xad5/0xd80 [ 58.724273][ T5321] ? __mas_set_range+0x133/0x3c0 [ 58.724288][ T5321] commit_merge+0x467/0x800 [ 58.724302][ T5321] ? __pfx_commit_merge+0x10/0x10 [ 58.724315][ T5321] ? dup_anon_vma+0x76/0x2b0 [ 58.724328][ T5321] vma_merge_existing_range+0x1431/0x1770 [ 58.724343][ T5321] ? vma_merge_existing_range+0x6f1/0x1770 [ 58.724354][ T5321] ? vma_merge_existing_range+0x6f1/0x1770 [ 58.724370][ T5321] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 58.724386][ T5321] vma_modify+0x76/0x390 [ 58.724398][ T5321] vma_modify_flags+0x3a7/0x430 [ 58.724412][ T5321] ? __pfx_vma_modify_flags+0x10/0x10 [ 58.724432][ T5321] mlock_fixup+0x21d/0x350 [ 58.724449][ T5321] apply_mlockall_flags+0x309/0x410 [ 58.724464][ T5321] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 58.724481][ T5321] ? __do_sys_munlockall+0x5a/0x220 [ 58.724500][ T5321] __do_sys_munlockall+0x10a/0x220 [ 58.724515][ T5321] do_syscall_64+0xf3/0x230 [ 58.724527][ T5321] ? clear_bhb_loop+0x45/0xa0 [ 58.724539][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.724550][ T5321] RIP: 0033:0x7ff90898d169 [ 58.724561][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.724570][ T5321] RSP: 002b:00007ff909827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 58.724584][ T5321] RAX: ffffffffffffffda RBX: 00007ff908ba5fa0 RCX: 00007ff90898d169 [ 58.724592][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.724599][ T5321] RBP: 00007ff909827090 R08: 0000000000000000 R09: 0000000000000000 [ 58.724605][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.724611][ T5321] R13: 0000000000000000 R14: 00007ff908ba5fa0 R15: 00007ffc244f4588 [ 58.724625][ T5321] [ 58.724638][ T5321] vmg ffffc9000d4e7c40 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 58.851380][ T5321] vmg ffffc9000d4e7c40 state: mm ffff888012bdd000 pgoff 200000a96 [ 58.851380][ T5321] vmi ffffc9000d4e7de0 [200000130000,200000800000) [ 58.851380][ T5321] prev ffff8880122f1c98 next 0000000000000000 vma ffff8880122f1c98 [ 58.851380][ T5321] start 200000130000 end 200000800000 flags 28100077 [ 58.851380][ T5321] file 0000000000000000 anon_vma ffff888036409aa0 policy 0000000000000000 [ 58.851380][ T5321] uffd_ctx 0000000000000000 [ 58.851380][ T5321] anon_name 0000000000000000 [ 58.851380][ T5321] merge_flags 0 state 0 [ 58.871688][ T5321] vmg ffffc9000d4e7c40 mm: [ 58.873457][ T5321] mm ffff888012bdd000 task_size 140737488351232 [ 58.873457][ T5321] mmap_base 140707583168512 mmap_legacy_base 46925212000256 [ 58.873457][ T5321] pgd ffff8880438be000 mm_users 3 mm_count 2 pgtables_bytes 176128 map_count 37 [ 58.873457][ T5321] hiwater_rss 2a05 hiwater_vm 5977 total_vm 5976 locked_vm 6d0 [ 58.873457][ T5321] pinned_vm 0 data_vm 23c8 exec_vm 1a4 stack_vm 21 [ 58.873457][ T5321] start_code 7ff908848000 end_code 7ff9089e9529 start_data 7ff908b80000 end_data 7ff908b80000 [ 58.873457][ T5321] start_brk 55557786e000 brk 555577890000 start_stack 7ffc244f4df0 [ 58.873457][ T5321] arg_start 7ffc244f6f04 arg_end 7ffc244f6f20 env_start 7ffc244f6f20 env_end 7ffc244f6fea [ 58.873457][ T5321] binfmt ffffffff8eeabbe0 flags 800207fd [ 58.873457][ T5321] ioctx_table 0000000000000000 [ 58.873457][ T5321] owner ffff8880003aa440 exe_file ffff8880427b2540 [ 58.873457][ T5321] notifier_subscriptions 0000000000000000 [ 58.873457][ T5321] numa_next_scan 4294943210 numa_scan_offset 0 numa_scan_seq 1 [ 58.873457][ T5321] tlb_flush_pending 0 [ 58.873457][ T5321] def_flags: 0x0() [ 58.913412][ T5321] vmg ffffc9000d4e7c40 vma: [ 58.915403][ T5321] vma ffff8880122f1c98 start 0000200000130000 end 0000200000800000 mm ffff888012bdd000 [ 58.915403][ T5321] prot 25 anon_vma ffff888036409aa0 vm_ops 0000000000000000 [ 58.915403][ T5321] pgoff 200000a96 file 0000000000000000 private_data 0000000000000000 [ 58.915403][ T5321] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 58.931076][ T5321] vmg ffffc9000d4e7c40 prev: [ 58.933042][ T5321] vma ffff8880122f1c98 start 0000200000130000 end 0000200000800000 mm ffff888012bdd000 [ 58.933042][ T5321] prot 25 anon_vma ffff888036409aa0 vm_ops 0000000000000000 [ 58.933042][ T5321] pgoff 200000a96 file 0000000000000000 private_data 0000000000000000 [ 58.933042][ T5321] flags: 0x28102077(read|write|exec|mayread|maywrite|mayexec|locked|account|softdirty|hugepage) [ 58.949180][ T5321] vmg ffffc9000d4e7c40 next: (NULL) [ 58.951386][ T5321] vmg ffffc9000d4e7c40 vmi: [ 58.953053][ T5321] MAS: tree=ffff888012bdd040 enode=ffff888000cd840c [ 58.953064][ T5321] (ma_active) [ 58.955392][ T5321] Store Type: [ 58.957256][ T5321] node_store [ 58.960100][ T5321] [3/9] index=200000130000 last=2000007fffff [ 58.962468][ T5321] min=0 max=200001000fff alloc=0000000000000000, depth=1, flags=0 [ 58.966712][ T5321] maple_tree(ffff888012bdd040) flags 30B, height 2 root ffff888000e8201e [ 58.970135][ T5321] 0-ffffffffffffffff: node ffff888000e82000 depth 0 type 3 parent ffff888012bdd041 contents: 1ffffffff000 35557686d000 1000 ffff8003dbb09000 0 0 0 0 0 0 | 03 03| ffff888000cd840c 200001000FFF ffff888000cd880c 7FF905DF9FFF ffff888012ba940c 7FF9096DDFFF ffff888012ba980c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 58.985135][ T5321] 0-200001000fff: node ffff888000cd8400 depth 1 type 1 parent ffff888000e82006 contents: 0000000000000000 1FFFFFFFEFFF ffff8880123c46c8 1FFFFFFFFFFF ffff8880122f1aa8 20000012FFFF ffff8880122f1c98 2000007FFFFF ffff8880122f1ba0 20000092FFFF ffff8880122f10f8 200000A92FFF ffff8880122f19b0 200000A95FFF 0000000000000000 200000A96FFF ffff8880122f13e0 200000FFFFFF ffff8880123c4ba0 200001000FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000009 [ 59.004031][ T5321] 0-1fffffffefff: 0000000000000000 [ 59.006615][ T5321] 1ffffffff000-1fffffffffff: ffff8880123c46c8 [ 59.009194][ T5321] 200000000000-20000012ffff: ffff8880122f1aa8 [ 59.011851][ T5321] 200000130000-2000007fffff: ffff8880122f1c98 [ 59.014314][ T5321] 200000800000-20000092ffff: ffff8880122f1ba0 [ 59.018359][ T5321] 200000930000-200000a92fff: ffff8880122f10f8 [ 59.020800][ T5321] 200000a93000-200000a95fff: ffff8880122f19b0 [ 59.023280][ T5321] 200000a96000-200000a96fff: 0000000000000000 [ 59.027168][ T5321] 200000a97000-200000ffffff: ffff8880122f13e0 [ 59.029869][ T5321] 200001000000-200001000fff: ffff8880123c4ba0 [ 59.032374][ T5321] 200001001000-7ff905df9fff: node ffff888000cd8800 depth 1 type 1 parent ffff888000e8200e contents: 0000000000000000 55557786DFFF ffff8880123c44d8 55557788FFFF 0000000000000000 7FF904DF5FFF ffff8880123c48b8 7FF904DF6FFF ffff8880123c4c98 7FF9055F6FFF ffff8880123c4aa8 7FF9055F7FFF ffff8880123c4e88 7FF905DF7FFF ffff8880123c41f0 7FF905DF9FFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000007 [ 59.050078][ T5321] 200001001000-55557786dfff: 0000000000000000 [ 59.052509][ T5321] 55557786e000-55557788ffff: ffff8880123c44d8 [ 59.054882][ T5321] 555577890000-7ff904df5fff: 0000000000000000 [ 59.058651][ T5321] 7ff904df6000-7ff904df6fff: ffff8880123c48b8 [ 59.061263][ T5321] 7ff904df7000-7ff9055f6fff: ffff8880123c4c98 [ 59.063675][ T5321] 7ff9055f7000-7ff9055f7fff: ffff8880123c4aa8 [ 59.067580][ T5321] 7ff9055f8000-7ff905df7fff: ffff8880123c4e88 [ 59.070100][ T5321] 7ff905df8000-7ff905df9fff: ffff8880123c41f0 [ 59.072715][ T5321] 7ff905dfa000-7ff9096ddfff: node ffff888012ba9400 depth 1 type 1 parent ffff888000e82016 contents: ffff8880123c49b0 7FF9065F9FFF ffff888038e7c9b0 7FF9065FBFFF ffff888038e7c7c0 7FF906DFBFFF ffff888038e7caa8 7FF906DFDFFF ffff888038e7c3e0 7FF9075FDFFF ffff888038e7c0f8 7FF9075FEFFF ffff888038e7c5d0 7FF9083FEFFF ffff888038e7cc98 7FF9087FFFFF ffff888038e7ce88 7FF908847FFF ffff888011db40f8 7FF9089E9FFF ffff888011db41f0 7FF908A95FFF ffff888011db4000 7FF908B75FFF ffff888011db42e8 7FF908B7EFFF 0000000000000000 7FF908B7FFFF ffff888011db4aa8 7FF9096DDFFF 000000000000000e [ 59.098988][ T5321] 7ff905dfa000-7ff9065f9fff: ffff8880123c49b0 [ 59.101581][ T5321] 7ff9065fa000-7ff9065fbfff: ffff888038e7c9b0 [ 59.104107][ T5321] 7ff9065fc000-7ff906dfbfff: ffff888038e7c7c0 [ 59.107318][ T5321] 7ff906dfc000-7ff906dfdfff: ffff888038e7caa8 [ 59.110415][ T5321] 7ff906dfe000-7ff9075fdfff: ffff888038e7c3e0 [ 59.113037][ T5321] 7ff9075fe000-7ff9075fefff: ffff888038e7c0f8 [ 59.116634][ T5321] 7ff9075ff000-7ff9083fefff: ffff888038e7c5d0 [ 59.119287][ T5321] 7ff9083ff000-7ff9087fffff: ffff888038e7cc98 [ 59.121999][ T5321] 7ff908800000-7ff908847fff: ffff888038e7ce88 [ 59.124568][ T5321] 7ff908848000-7ff9089e9fff: ffff888011db40f8 [ 59.128129][ T5321] 7ff9089ea000-7ff908a95fff: ffff888011db41f0 [ 59.130714][ T5321] 7ff908a96000-7ff908b75fff: ffff888011db4000 [ 59.133357][ T5321] 7ff908b76000-7ff908b7efff: ffff888011db42e8 [ 59.136937][ T5321] 7ff908b7f000-7ff908b7ffff: 0000000000000000 [ 59.139468][ T5321] 7ff908b80000-7ff9096ddfff: ffff888011db4aa8 [ 59.142016][ T5321] 7ff9096de000-ffffffffffffffff: node ffff888012ba9800 depth 1 type 1 parent ffff888000e8201e contents: 0000000000000000 7FF9097E5FFF ffff8880128c6000 7FF9097E6FFF ffff888011db45d0 7FF909806FFF ffff8880128c62e8 7FF909807FFF ffff888011db4e88 7FF909827FFF ffff888011db47c0 7FF909828FFF ffff888011db49b0 7FF90982CFFF ffff888011db43e0 7FF90982EFFF ffff888011db44d8 7FF909830FFF 0000000000000000 7FFC244D5FFF ffff888011db46c8 7FFC244F6FFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 000000000000000b [ 59.161956][ T5321] 7ff9096de000-7ff9097e5fff: 0000000000000000 [ 59.164486][ T5321] 7ff9097e6000-7ff9097e6fff: ffff8880128c6000 [ 59.168173][ T5321] 7ff9097e7000-7ff909806fff: ffff888011db45d0 [ 59.170791][ T5321] 7ff909807000-7ff909807fff: ffff8880128c62e8 [ 59.173582][ T5321] 7ff909808000-7ff909827fff: ffff888011db4e88 [ 59.177237][ T5321] 7ff909828000-7ff909828fff: ffff888011db47c0 [ 59.179936][ T5321] 7ff909829000-7ff90982cfff: ffff888011db49b0 [ 59.182460][ T5321] 7ff90982d000-7ff90982efff: ffff888011db43e0 [ 59.185222][ T5321] 7ff90982f000-7ff909830fff: ffff888011db44d8 [ 59.188501][ T5321] 7ff909831000-7ffc244d5fff: 0000000000000000 [ 59.191187][ T5321] 7ffc244d6000-7ffc244f6fff: ffff888011db46c8 [ 59.193846][ T5321] 7ffc244f7000-ffffffffffffffff: 0000000000000000 [ 59.197886][ T5321] ------------[ cut here ]------------ [ 59.200147][ T5321] WARNING: CPU: 0 PID: 5321 at mm/vma.c:734 vma_merge_existing_range+0x11ca/0x1770 [ 59.203853][ T5321] Modules linked in: [ 59.205427][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 59.210111][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.214095][ T5321] RIP: 0010:vma_merge_existing_range+0x11ca/0x1770 [ 59.216517][ T5321] Code: 48 c7 c6 a0 24 56 8c e8 04 49 f2 ff 90 0f 0b 90 e9 fd f0 ff ff e8 36 db a6 ff 4c 89 f7 48 c7 c6 20 25 56 8c e8 e7 48 f2 ff 90 <0f> 0b 90 e9 61 f1 ff ff e8 19 db a6 ff e9 7b f2 ff ff e8 0f db a6 [ 59.223832][ T5321] RSP: 0018:ffffc9000d4e7a40 EFLAGS: 00010282 [ 59.226413][ T5321] RAX: ffffffff8c189da5 RBX: 0000200000130000 RCX: ffff88801f97c880 [ 59.229952][ T5321] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 59.233170][ T5321] RBP: ffffc9000d4e7b90 R08: ffffffff8c189ca0 R09: 1ffff92001a9ceb0 [ 59.236632][ T5321] R10: dffffc0000000000 R11: fffff52001a9ceb1 R12: 0000200000800000 [ 59.239846][ T5321] R13: 0000200000130000 R14: ffffc9000d4e7c40 R15: ffff8880122f1c98 [ 59.243050][ T5321] FS: 00007ff9098276c0(0000) GS:ffff88808c60f000(0000) knlGS:0000000000000000 [ 59.246656][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.249343][ T5321] CR2: 000055c0881091d8 CR3: 00000000438be000 CR4: 0000000000352ef0 [ 59.252562][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.255932][ T5321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.259147][ T5321] Call Trace: [ 59.260563][ T5321] [ 59.261795][ T5321] ? __warn+0x165/0x4d0 [ 59.263517][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.266028][ T5321] ? report_bug+0x2b3/0x500 [ 59.267835][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.270142][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.272574][ T5321] ? vma_merge_existing_range+0x11cc/0x1770 [ 59.274945][ T5321] ? handle_bug+0x89/0x170 [ 59.276924][ T5321] ? exc_invalid_op+0x1a/0x50 [ 59.278837][ T5321] ? asm_exc_invalid_op+0x1a/0x20 [ 59.280806][ T5321] ? mt_dump_node+0x1860/0x2290 [ 59.282761][ T5321] ? mt_dump_node+0x1965/0x2290 [ 59.284725][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.287159][ T5321] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 59.289613][ T5321] vma_modify+0x76/0x390 [ 59.291339][ T5321] vma_modify_flags+0x3a7/0x430 [ 59.293265][ T5321] ? __pfx_vma_modify_flags+0x10/0x10 [ 59.295360][ T5321] mlock_fixup+0x21d/0x350 [ 59.297244][ T5321] apply_mlockall_flags+0x309/0x410 [ 59.299282][ T5321] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 59.301544][ T5321] ? __do_sys_munlockall+0x5a/0x220 [ 59.303659][ T5321] __do_sys_munlockall+0x10a/0x220 [ 59.305782][ T5321] do_syscall_64+0xf3/0x230 [ 59.307616][ T5321] ? clear_bhb_loop+0x45/0xa0 [ 59.309371][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.311665][ T5321] RIP: 0033:0x7ff90898d169 [ 59.313451][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.320703][ T5321] RSP: 002b:00007ff909827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 59.324075][ T5321] RAX: ffffffffffffffda RBX: 00007ff908ba5fa0 RCX: 00007ff90898d169 [ 59.327285][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.330458][ T5321] RBP: 00007ff909827090 R08: 0000000000000000 R09: 0000000000000000 [ 59.333725][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.337113][ T5321] R13: 0000000000000000 R14: 00007ff908ba5fa0 R15: 00007ffc244f4588 [ 59.340230][ T5321] [ 59.341523][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.344428][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 59.348901][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.353020][ T5321] Call Trace: [ 59.354318][ T5321] [ 59.355478][ T5321] dump_stack_lvl+0x241/0x360 [ 59.357309][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.359170][ T5321] ? __pfx__printk+0x10/0x10 [ 59.360916][ T5321] ? vscnprintf+0x5d/0x90 [ 59.362499][ T5321] panic+0x349/0x880 [ 59.363947][ T5321] ? __warn+0x174/0x4d0 [ 59.365473][ T5321] ? __pfx_panic+0x10/0x10 [ 59.367107][ T5321] __warn+0x344/0x4d0 [ 59.368607][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.370756][ T5321] report_bug+0x2b3/0x500 [ 59.372411][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.374757][ T5321] ? vma_merge_existing_range+0x11ca/0x1770 [ 59.377032][ T5321] ? vma_merge_existing_range+0x11cc/0x1770 [ 59.379436][ T5321] handle_bug+0x89/0x170 [ 59.381090][ T5321] exc_invalid_op+0x1a/0x50 [ 59.382832][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 59.384670][ T5321] RIP: 0010:vma_merge_existing_range+0x11ca/0x1770 [ 59.387118][ T5321] Code: 48 c7 c6 a0 24 56 8c e8 04 49 f2 ff 90 0f 0b 90 e9 fd f0 ff ff e8 36 db a6 ff 4c 89 f7 48 c7 c6 20 25 56 8c e8 e7 48 f2 ff 90 <0f> 0b 90 e9 61 f1 ff ff e8 19 db a6 ff e9 7b f2 ff ff e8 0f db a6 [ 59.394157][ T5321] RSP: 0018:ffffc9000d4e7a40 EFLAGS: 00010282 [ 59.396478][ T5321] RAX: ffffffff8c189da5 RBX: 0000200000130000 RCX: ffff88801f97c880 [ 59.399498][ T5321] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 59.402502][ T5321] RBP: ffffc9000d4e7b90 R08: ffffffff8c189ca0 R09: 1ffff92001a9ceb0 [ 59.405472][ T5321] R10: dffffc0000000000 R11: fffff52001a9ceb1 R12: 0000200000800000 [ 59.408569][ T5321] R13: 0000200000130000 R14: ffffc9000d4e7c40 R15: ffff8880122f1c98 [ 59.411592][ T5321] ? mt_dump_node+0x1860/0x2290 [ 59.413510][ T5321] ? mt_dump_node+0x1965/0x2290 [ 59.415349][ T5321] ? __pfx_vma_merge_existing_range+0x10/0x10 [ 59.417701][ T5321] vma_modify+0x76/0x390 [ 59.419378][ T5321] vma_modify_flags+0x3a7/0x430 [ 59.421334][ T5321] ? __pfx_vma_modify_flags+0x10/0x10 [ 59.423417][ T5321] mlock_fixup+0x21d/0x350 [ 59.425155][ T5321] apply_mlockall_flags+0x309/0x410 [ 59.427176][ T5321] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 59.429338][ T5321] ? __do_sys_munlockall+0x5a/0x220 [ 59.431315][ T5321] __do_sys_munlockall+0x10a/0x220 [ 59.433296][ T5321] do_syscall_64+0xf3/0x230 [ 59.434999][ T5321] ? clear_bhb_loop+0x45/0xa0 [ 59.436806][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.439034][ T5321] RIP: 0033:0x7ff90898d169 [ 59.440747][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.447959][ T5321] RSP: 002b:00007ff909827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 59.451165][ T5321] RAX: ffffffffffffffda RBX: 00007ff908ba5fa0 RCX: 00007ff90898d169 [ 59.454149][ T5321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.457146][ T5321] RBP: 00007ff909827090 R08: 0000000000000000 R09: 0000000000000000 [ 59.460181][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.463266][ T5321] R13: 0000000000000000 R14: 00007ff908ba5fa0 R15: 00007ffc244f4588 [ 59.466325][ T5321] [ 59.467791][ T5321] Kernel Offset: disabled [ 59.469496][ T5321] Rebooting in 86400 seconds..